# Title: Phishing URL Suricata Ruleset
# Updated: Tue, 13 Sep 2022 00:02:17 +0000
# Expires: 1 day (update frequency)
# Homepage: https://gitlab.com/curben/phishing-filter
# License: https://gitlab.com/curben/phishing-filter#license
# Source: https://www.phishtank.com/ & https://openphish.com/

# Notice: https://curben.gitlab.io/phishing-filter-mirror is moved to https://curben.gitlab.io/malware-filter
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"000-654badbaro-007.b30bebi654as.repl.co"; classtype:attempted-recon; sid:200000001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"000000000000000000zimbra.circulosolidario.sv"; classtype:attempted-recon; sid:200000002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"000update.mytinyhomevillage.org"; classtype:attempted-recon; sid:200000003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"000update1.alsgroup-eg.com"; classtype:attempted-recon; sid:200000004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0049731647300048374001.rf.gd"; classtype:attempted-recon; sid:200000005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"005spk-id-online.de"; classtype:attempted-recon; sid:200000006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"006spk-id-web.de"; classtype:attempted-recon; sid:200000007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"009877898767809999.start.page"; classtype:attempted-recon; sid:200000008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"01-spk-idserv.de"; classtype:attempted-recon; sid:200000009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0150tree.xequcevusy.info"; classtype:attempted-recon; sid:200000010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"02554realestate.com"; classtype:attempted-recon; sid:200000011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"02922923--0928872727.repl.co"; classtype:attempted-recon; sid:200000012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"02922923.0928872727.repl.co"; classtype:attempted-recon; sid:200000013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"02981819.02938882.repl.co"; classtype:attempted-recon; sid:200000014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"02e-br0u.ru.xsph.ru"; classtype:attempted-recon; sid:200000015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0310f955.sibforms.com"; classtype:attempted-recon; sid:200000016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"033spk-id-web.de"; classtype:attempted-recon; sid:200000017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"03829gh.byethost3.com"; classtype:attempted-recon; sid:200000018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"08863299.sso-secure-mail0454etr.pages.dev"; classtype:attempted-recon; sid:200000019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"09-0vnhjew-0rtnbg-09nhws-9r0ng-9wn5rgrg.obs.ap-southeast-3.myhuaweicloud.com"; classtype:attempted-recon; sid:200000020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"09-fdereewdwewweeeeeeeee.ezyro.com"; classtype:attempted-recon; sid:200000021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"09-gje-nrt5-g9jnwr-9gfjn-w9rnjgh-9njet65-ht5.obs.sa-brazil-1.myhuaweicloud.com"; classtype:attempted-recon; sid:200000022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"09188-securepage.000webhostapp.com"; classtype:attempted-recon; sid:200000023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"094890-32839156.rf.gd"; classtype:attempted-recon; sid:200000024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0bs.de"; classtype:attempted-recon; sid:200000025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0cd17624-bbe3-40a0-aa51-48d76113a85a.id.repl.co"; classtype:attempted-recon; sid:200000026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0ffice-word-lcmsinc.myportfolio.com"; classtype:attempted-recon; sid:200000027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0ffice336272-0000-3338.pages.dev"; classtype:attempted-recon; sid:200000028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0g09rebqe8ms76om9oaq8oemd1t066ke0j725els0lpmpclkoh54heg.siasky.net"; classtype:attempted-recon; sid:200000029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0nl1n3-b4nk1ng.tk"; classtype:attempted-recon; sid:200000030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0pensea.com"; classtype:attempted-recon; sid:200000031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0utlook.0ffice.workers.dev"; classtype:attempted-recon; sid:200000032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0web.pages.dev"; classtype:attempted-recon; sid:200000033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"100000254875659853601.ga"; classtype:attempted-recon; sid:200000034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"100000254875659853602.ga"; classtype:attempted-recon; sid:200000035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"100000254875659853604.ga"; classtype:attempted-recon; sid:200000036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1000x.finance"; classtype:attempted-recon; sid:200000037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"103.122.247.138"; classtype:attempted-recon; sid:200000038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"104.129.12.61"; classtype:attempted-recon; sid:200000039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"104.129.205.92.host.secureserver.net"; classtype:attempted-recon; sid:200000040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"104.129.5.48"; classtype:attempted-recon; sid:200000041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"104.168.173.244"; classtype:attempted-recon; sid:200000042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"104.168.173.248"; classtype:attempted-recon; sid:200000043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"10423584007000176.rf.gd"; classtype:attempted-recon; sid:200000044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"104326535054541.rf.gd"; classtype:attempted-recon; sid:200000045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"107.152.110.21"; classtype:attempted-recon; sid:200000046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"10e20o30u37.260mb.net"; classtype:attempted-recon; sid:200000047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1108099700-page.000webhostapp.com"; classtype:attempted-recon; sid:200000048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1111365.net"; classtype:attempted-recon; sid:200000049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1111365585547384.com"; classtype:attempted-recon; sid:200000050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"11126897531859221.web.id"; classtype:attempted-recon; sid:200000051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1112689753185922332.42web.io"; classtype:attempted-recon; sid:200000052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"11126897531859225.web.id"; classtype:attempted-recon; sid:200000053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"114.141.253.232"; classtype:attempted-recon; sid:200000054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"120901805221826-am.web.id"; classtype:attempted-recon; sid:200000055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"122128965729233.rf.gd"; classtype:attempted-recon; sid:200000056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"125498365683135466.epizy.com"; classtype:attempted-recon; sid:200000057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"129.226.210.78"; classtype:attempted-recon; sid:200000058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"12daviplco1223.kaskkoe.repl.co"; classtype:attempted-recon; sid:200000059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"142.11.214.173"; classtype:attempted-recon; sid:200000060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"143li.trk.elasticemail.com"; classtype:attempted-recon; sid:200000061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1446765768230008.rf.gd"; classtype:attempted-recon; sid:200000062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"149.56.117.104"; classtype:attempted-recon; sid:200000063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"14gqb.trk.elasticemail.com"; classtype:attempted-recon; sid:200000064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"14jlr.trk.elasticemail.com"; classtype:attempted-recon; sid:200000065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"151.106.27.230"; classtype:attempted-recon; sid:200000066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"153in.net"; classtype:attempted-recon; sid:200000067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"155.94.133.233"; classtype:attempted-recon; sid:200000068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"156461568462015.co.vu"; classtype:attempted-recon; sid:200000069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15679.cn"; classtype:attempted-recon; sid:200000070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"156la.trk.elasticemail.com"; classtype:attempted-recon; sid:200000071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"158q9.trk.elasticemail.com"; classtype:attempted-recon; sid:200000072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15e92.trk.elasticemail.com"; classtype:attempted-recon; sid:200000073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15eos.trk.elasticemail.com"; classtype:attempted-recon; sid:200000074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15fa6.trk.elasticemail.com"; classtype:attempted-recon; sid:200000075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15mzz.trk.elasticemail.com"; classtype:attempted-recon; sid:200000076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15twu.trk.elasticemail.com"; classtype:attempted-recon; sid:200000077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15u7z.trk.elasticemail.com"; classtype:attempted-recon; sid:200000078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15uba.trk.elasticemail.com"; classtype:attempted-recon; sid:200000079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15udv.trk.elasticemail.com"; classtype:attempted-recon; sid:200000080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"15v9e.trk.elasticemail.com"; classtype:attempted-recon; sid:200000081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"161.35.142.2"; classtype:attempted-recon; sid:200000082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1611659748350570.rf.gd"; classtype:attempted-recon; sid:200000083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"162.222.215.182"; classtype:attempted-recon; sid:200000084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"162.222.215.185"; classtype:attempted-recon; sid:200000085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"163-1ew.pages.dev"; classtype:attempted-recon; sid:200000086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"165.227.194.222"; classtype:attempted-recon; sid:200000087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1659761148350570.rf.gd"; classtype:attempted-recon; sid:200000088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"167.71.45.12"; classtype:attempted-recon; sid:200000089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"178.128.62.233.dsl.dyn.forthnet.gr"; classtype:attempted-recon; sid:200000090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"179.48.65.130"; classtype:attempted-recon; sid:200000091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"180110116028.clickfunnels.com"; classtype:attempted-recon; sid:200000092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"190854.8b.io"; classtype:attempted-recon; sid:200000093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"192.144.227.177"; classtype:attempted-recon; sid:200000094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1951-185-198-47-28.ngrok.io"; classtype:attempted-recon; sid:200000095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"198.148.100.124"; classtype:attempted-recon; sid:200000096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"199102481445514444.42web.io"; classtype:attempted-recon; sid:200000097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1and1ionos.mfs.gg"; classtype:attempted-recon; sid:200000098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1contaconline1.webcindario.com"; classtype:attempted-recon; sid:200000099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1e2e3f.yolasite.com"; classtype:attempted-recon; sid:200000100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1fc12a31-af24-4c4a-ab87-7e6f0d957ae9.id.repl.co"; classtype:attempted-recon; sid:200000101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1ihch.link"; classtype:attempted-recon; sid:200000102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1ihch.top"; classtype:attempted-recon; sid:200000103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1inch-bonus.io"; classtype:attempted-recon; sid:200000104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1inch-io-stage-app-euc1.s3-website.eu-central-1.amazonaws.com"; classtype:attempted-recon; sid:200000105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1inch.exchenge.app"; classtype:attempted-recon; sid:200000106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1inch.mypixieset.com"; classtype:attempted-recon; sid:200000107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1lnch.host"; classtype:attempted-recon; sid:200000108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1monxt.csb.app"; classtype:attempted-recon; sid:200000109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1secure1.duckdns.org"; classtype:attempted-recon; sid:200000110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1stcapitalfundinggroup.com"; classtype:attempted-recon; sid:200000111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2.136.95.251"; classtype:attempted-recon; sid:200000112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20.14.79.47"; classtype:attempted-recon; sid:200000113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20.198.121.24"; classtype:attempted-recon; sid:200000114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20.204.75.233"; classtype:attempted-recon; sid:200000115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20.213.237.81"; classtype:attempted-recon; sid:200000116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20.214.184.4"; classtype:attempted-recon; sid:200000117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20.226.106.173"; classtype:attempted-recon; sid:200000118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20.78.61.249"; classtype:attempted-recon; sid:200000119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20101305090886952021.42web.io"; classtype:attempted-recon; sid:200000120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20228787help54664support78.co.vu"; classtype:attempted-recon; sid:200000121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"205.185.117.74"; classtype:attempted-recon; sid:200000122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"20503022222044.42web.io"; classtype:attempted-recon; sid:200000123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"206.189.201.145"; classtype:attempted-recon; sid:200000124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"206.81.15.214"; classtype:attempted-recon; sid:200000125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"207037696000000.co.vu"; classtype:attempted-recon; sid:200000126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2072596754663237747300.42web.io"; classtype:attempted-recon; sid:200000127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"208.82.115.230"; classtype:attempted-recon; sid:200000128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2080-0513905-70520.rf.gd"; classtype:attempted-recon; sid:200000129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"217651.8b.io"; classtype:attempted-recon; sid:200000130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"22-09.obs.na-mexico-1.myhuaweicloud.com"; classtype:attempted-recon; sid:200000131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"222ff4c5-6888-40b6-a282-4fb4d40c77b2.id.repl.co"; classtype:attempted-recon; sid:200000132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2356456416454.hyperphp.com"; classtype:attempted-recon; sid:200000133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"23b.rhjac.workers.dev"; classtype:attempted-recon; sid:200000134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"24611250.sibforms.com"; classtype:attempted-recon; sid:200000135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"247bitspals.com"; classtype:attempted-recon; sid:200000136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"24electrician.245.mrsmartprinting.com.my."; classtype:attempted-recon; sid:200000137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"25411335131531354653.tk"; classtype:attempted-recon; sid:200000138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"25a9ff8c.sibforms.com"; classtype:attempted-recon; sid:200000139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"260e52cc-6e0a-458b-b9e1-7b24d838c9f6.id.repl.co"; classtype:attempted-recon; sid:200000140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"28a66169-cb49-4987-a76c-989280803a60.id.repl.co"; classtype:attempted-recon; sid:200000141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2919b233c1ea8fde21529cd0bb040be4-dot-office-352115.uk.r.appspot.com"; classtype:attempted-recon; sid:200000142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2amzrom.co.jp.zdaczc.top"; classtype:attempted-recon; sid:200000143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2bbf510e119760654.temporary.link"; classtype:attempted-recon; sid:200000144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2fa.bthei.com"; classtype:attempted-recon; sid:200000145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2n.k5wn.cheeseconnoisseur.ca"; classtype:attempted-recon; sid:200000146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2wyslijpaczkeip389184.xyz"; classtype:attempted-recon; sid:200000147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3.230.168.34"; classtype:attempted-recon; sid:200000148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3.92.0.79"; classtype:attempted-recon; sid:200000149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3.94.109.135"; classtype:attempted-recon; sid:200000150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"31254662436y436.co.vu"; classtype:attempted-recon; sid:200000151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3243gr9r3h2.blogspot.com"; classtype:attempted-recon; sid:200000152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"32515641313215456.epizy.com"; classtype:attempted-recon; sid:200000153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3298re09432.webcindario.com"; classtype:attempted-recon; sid:200000154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"342535125624124756.42web.io"; classtype:attempted-recon; sid:200000155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"342535125624124756.rf.gd"; classtype:attempted-recon; sid:200000156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"343i.org"; classtype:attempted-recon; sid:200000157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"34839783344hg5566.com"; classtype:attempted-recon; sid:200000158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"35.192.38.184"; classtype:attempted-recon; sid:200000159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"351432894574850002.42web.io"; classtype:attempted-recon; sid:200000160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"355164467416414.hyperphp.com"; classtype:attempted-recon; sid:200000161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"365be.com.br"; classtype:attempted-recon; sid:200000162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"370.pef.2575.conscientiouscapitalinsights.com"; classtype:attempted-recon; sid:200000163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"37a448e44db-b1ca6e43d66c4b81bd16b8502645f77a.weebly.com"; classtype:attempted-recon; sid:200000164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3a10a178.s6t6sj4s46tu4sys54y5.pages.dev"; classtype:attempted-recon; sid:200000165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3c5.com"; classtype:attempted-recon; sid:200000166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3citizensonlinecare-7a94f5.ingress-erytho.ewp.live"; classtype:attempted-recon; sid:200000167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3dlenticular.com.sg"; classtype:attempted-recon; sid:200000168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3ff7c459-86b2-4f6d-b6b0-ba6402ef6cb0.htmlcomponentservice.com"; classtype:attempted-recon; sid:200000169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3j124.csb.app"; classtype:attempted-recon; sid:200000170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3mtalert-8-7a94f5.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200000171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3rooodnews.com"; classtype:attempted-recon; sid:200000172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3si-business.com"; classtype:attempted-recon; sid:200000173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"400cgpe9ftgophh71dks1uopj54felhbrbg9iv21eagktj8435lmdp8.siasky.net"; classtype:attempted-recon; sid:200000174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"405capital.com"; classtype:attempted-recon; sid:200000175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"416522000123897.rf.gd"; classtype:attempted-recon; sid:200000176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"419gbmuab-d4195.conagopareimbabura.gob.ec"; classtype:attempted-recon; sid:200000177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"42e2391f.sibforms.com"; classtype:attempted-recon; sid:200000178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"43.134.191.197"; classtype:attempted-recon; sid:200000179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"43gf948h3s.blogspot.com"; classtype:attempted-recon; sid:200000180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4415514541545.hyperphp.com"; classtype:attempted-recon; sid:200000181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"45.55.167.181"; classtype:attempted-recon; sid:200000182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"454145456551546.hyperphp.com"; classtype:attempted-recon; sid:200000183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"456743643541r.co.vu"; classtype:attempted-recon; sid:200000184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"45678988.909065.repl.co"; classtype:attempted-recon; sid:200000185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4581jnr8b-d4585.conagopareimbabura.gob.ec"; classtype:attempted-recon; sid:200000186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4583647836453.co.vu"; classtype:attempted-recon; sid:200000187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"46c97.eguski.com"; classtype:attempted-recon; sid:200000188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"47.89.49.243"; classtype:attempted-recon; sid:200000189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4710463d43910.bonactech.com"; classtype:attempted-recon; sid:200000190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"47826.nuveveriyonetimi.com"; classtype:attempted-recon; sid:200000191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"48519283-86de-4ef6-9db2-7be27af47c73.htmlcomponentservice.com"; classtype:attempted-recon; sid:200000192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"48cb2ffd-c759-4ea5-b00a-a8811fdd06e9.id.repl.co"; classtype:attempted-recon; sid:200000193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4br.ir"; classtype:attempted-recon; sid:200000194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4bx28w.csb.app"; classtype:attempted-recon; sid:200000195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4e039.miraclerichs.com"; classtype:attempted-recon; sid:200000196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4e81.com"; classtype:attempted-recon; sid:200000197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4everyoungco.net"; classtype:attempted-recon; sid:200000198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4rfuel-com.preview-domain.com"; classtype:attempted-recon; sid:200000199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4season.com.kh"; classtype:attempted-recon; sid:200000200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4w8bmmjcw86e.clickfunnels.com"; classtype:attempted-recon; sid:200000201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"4xlxs1.hyperphp.com"; classtype:attempted-recon; sid:200000202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"51.120.3.97"; classtype:attempted-recon; sid:200000203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"51.fi"; classtype:attempted-recon; sid:200000204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"52.20.22.249"; classtype:attempted-recon; sid:200000205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"53131.ru.com"; classtype:attempted-recon; sid:200000206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"53vzxcnk6rwp.clickfunnels.com"; classtype:attempted-recon; sid:200000207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"54289993039409563.rf.gd"; classtype:attempted-recon; sid:200000208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"545487875454212ip.co.vu"; classtype:attempted-recon; sid:200000209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"546782d6.sibforms.com"; classtype:attempted-recon; sid:200000210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5475786654-457687812-6987677433.yolasite.com"; classtype:attempted-recon; sid:200000211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"549wt515b-d5495.conagopareimbabura.gob.ec"; classtype:attempted-recon; sid:200000212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"55324.repl.co"; classtype:attempted-recon; sid:200000213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5578805078050785078i.rf.gd"; classtype:attempted-recon; sid:200000214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5646854132103213561453.epizy.com"; classtype:attempted-recon; sid:200000215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"564rgg453-ba1901.ingress-comporellon.ewp.live"; classtype:attempted-recon; sid:200000216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5667566098886665477.42web.io"; classtype:attempted-recon; sid:200000217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5688785462648234704.tk"; classtype:attempted-recon; sid:200000218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5688785462648234706.tk"; classtype:attempted-recon; sid:200000219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5688785462648234707.tk"; classtype:attempted-recon; sid:200000220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5688785462648234708.tk"; classtype:attempted-recon; sid:200000221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"58a55.osmannuriyildiz.av.tr"; classtype:attempted-recon; sid:200000222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5apps.vip"; classtype:attempted-recon; sid:200000223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5b0f6cb9-0485-4fc7-9775-eb74bb45bbf6.htmlcomponentservice.com"; classtype:attempted-recon; sid:200000224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5e841ae2.srvr-cloudmail-srvr6765e7tg.pages.dev"; classtype:attempted-recon; sid:200000225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5tu.eu"; classtype:attempted-recon; sid:200000226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6128565463651654.42web.io"; classtype:attempted-recon; sid:200000227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"61456456044241.hyperphp.com"; classtype:attempted-recon; sid:200000228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"61da8ae6.6u6566hrrthsh45.pages.dev"; classtype:attempted-recon; sid:200000229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"62.204.41.172"; classtype:attempted-recon; sid:200000230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"62.210.53.88"; classtype:attempted-recon; sid:200000231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"62.4.16.61"; classtype:attempted-recon; sid:200000232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"626525.selcdn.ru"; classtype:attempted-recon; sid:200000233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"631b926d23091.site123.me"; classtype:attempted-recon; sid:200000234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"63463777-665-1219.ga"; classtype:attempted-recon; sid:200000235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"636416.selcdn.ru"; classtype:attempted-recon; sid:200000236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"638ca12d-ba2f-451c-8418-faf56b7de7ff.htmlcomponentservice.com"; classtype:attempted-recon; sid:200000237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6416454414621.hyperphp.com"; classtype:attempted-recon; sid:200000238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6416474165132.hyperphp.com"; classtype:attempted-recon; sid:200000239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"64415646445.hyperphp.com"; classtype:attempted-recon; sid:200000240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6476927823772099930.rf.gd"; classtype:attempted-recon; sid:200000241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"651646144164.hyperphp.com"; classtype:attempted-recon; sid:200000242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6516465681656.hyperphp.com"; classtype:attempted-recon; sid:200000243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"65416451444544.hyperphp.com"; classtype:attempted-recon; sid:200000244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"65756446545456.hyperphp.com"; classtype:attempted-recon; sid:200000245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"66.212.22.201"; classtype:attempted-recon; sid:200000246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"66466651454055.hyperphp.com"; classtype:attempted-recon; sid:200000247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"67.225.251.204"; classtype:attempted-recon; sid:200000248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"67889562325a.co.vu"; classtype:attempted-recon; sid:200000249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"68.183.201.58"; classtype:attempted-recon; sid:200000250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"68645454545754.hyperphp.com"; classtype:attempted-recon; sid:200000251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"69.49.247.144"; classtype:attempted-recon; sid:200000252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"69830weqwq.webcindario.com"; classtype:attempted-recon; sid:200000253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"69o0r.hyperphp.com"; classtype:attempted-recon; sid:200000254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6kshx.hyperphp.com"; classtype:attempted-recon; sid:200000255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6w5nu-ayaaa-aaaad-qdtha-cai.raw.ic0.app"; classtype:attempted-recon; sid:200000256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6xlxs2.hyperphp.com"; classtype:attempted-recon; sid:200000257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6yu.8p4e.repl.co"; classtype:attempted-recon; sid:200000258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"713785.xyz"; classtype:attempted-recon; sid:200000259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"73346arg53473.reactivesuclave.repl.co"; classtype:attempted-recon; sid:200000260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"745b4e1ad89467221.temporary.link"; classtype:attempted-recon; sid:200000261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"74947562.galicia089v.repl.co"; classtype:attempted-recon; sid:200000262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"750shein.com"; classtype:attempted-recon; sid:200000263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7567585662116566.42web.io"; classtype:attempted-recon; sid:200000264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"766320.selcdn.ru"; classtype:attempted-recon; sid:200000265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"76ywhd.834hdtfy.repl.co"; classtype:attempted-recon; sid:200000266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"78.108.89.240"; classtype:attempted-recon; sid:200000267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"780030.selcdn.ru"; classtype:attempted-recon; sid:200000268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"789509.repl.co"; classtype:attempted-recon; sid:200000269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"79865login.weebly.com"; classtype:attempted-recon; sid:200000270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7b631qxp.r.us-west-2.awstrack.me"; classtype:attempted-recon; sid:200000271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7c576797.sibforms.com"; classtype:attempted-recon; sid:200000272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7cf3fd69.sibforms.com"; classtype:attempted-recon; sid:200000273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7dbe4fff.sibforms.com"; classtype:attempted-recon; sid:200000274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7fusw1fl.xyz"; classtype:attempted-recon; sid:200000275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7uihjk.yetew63579.workers.dev"; classtype:attempted-recon; sid:200000276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7webabds2e6dgmp4g34count.rf.gd"; classtype:attempted-recon; sid:200000277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7wr4u.csb.app"; classtype:attempted-recon; sid:200000278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7x5dvh.csb.app"; classtype:attempted-recon; sid:200000279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"7yu3v.csb.app"; classtype:attempted-recon; sid:200000280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"80-108-82-166.cable.dynamic.surfer.at"; classtype:attempted-recon; sid:200000281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"80880568352345467899.rf.gd"; classtype:attempted-recon; sid:200000282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"82v8b.app.link"; classtype:attempted-recon; sid:200000283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"83.212.106.222"; classtype:attempted-recon; sid:200000284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"84426.c1.biz"; classtype:attempted-recon; sid:200000285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"854546585454386.898654768.repl.co"; classtype:attempted-recon; sid:200000286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"858zmzpe.hyperphp.com"; classtype:attempted-recon; sid:200000287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"85eb45c3-213c-49de-b154-ba7e81f89b98.id.repl.co"; classtype:attempted-recon; sid:200000288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"86tui.pbgnfxaftmuypz.workers.dev"; classtype:attempted-recon; sid:200000289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"873734349834.start.page"; classtype:attempted-recon; sid:200000290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"873twc.csb.app"; classtype:attempted-recon; sid:200000291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"8757436545690.c1.biz"; classtype:attempted-recon; sid:200000292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"87ff99760ac5d463.co.vu"; classtype:attempted-recon; sid:200000293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"890567.repl.co"; classtype:attempted-recon; sid:200000294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"893e0.miraclerichs.com"; classtype:attempted-recon; sid:200000295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"89888756.hostfree.pw"; classtype:attempted-recon; sid:200000296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"8auahx.assertiviadoc.cloud"; classtype:attempted-recon; sid:200000297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"8d7af84c.sibforms.com"; classtype:attempted-recon; sid:200000298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"8dd401c2dbf4c414704450bd2b72fc89-dot-office-352115.uk.r.appspot.com"; classtype:attempted-recon; sid:200000299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"8pancakeswap-finance.site"; classtype:attempted-recon; sid:200000300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"92.204.144.8"; classtype:attempted-recon; sid:200000301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"92818911.111882781.repl.co"; classtype:attempted-recon; sid:200000302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"943151c8c3ad.godaddysites.com"; classtype:attempted-recon; sid:200000303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"986821122128965729233.rf.gd"; classtype:attempted-recon; sid:200000304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"987655422.8281999.repl.co"; classtype:attempted-recon; sid:200000305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9980.informacionn.repl.co"; classtype:attempted-recon; sid:200000306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"999855ez.hyperphp.com"; classtype:attempted-recon; sid:200000307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9aac.egot.workers.dev"; classtype:attempted-recon; sid:200000308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9d628f83-9b81-477e-b33f-4e1d8ed2d903.id.repl.co"; classtype:attempted-recon; sid:200000309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9d62cfee-59b3-42a8-9542-4b3a32692792.htmlcomponentservice.com"; classtype:attempted-recon; sid:200000310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9e826413-df65-47ba-a53a-7803452e67d3.id.repl.co"; classtype:attempted-recon; sid:200000311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9ftytucsh4ph.clickfunnels.com"; classtype:attempted-recon; sid:200000312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9janewshub.com.ng"; classtype:attempted-recon; sid:200000313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a.60b7ac265566e3da4341f765b2d2a73200f8f1db57b0b005a1afdc00.com"; classtype:attempted-recon; sid:200000314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a.dab342ab8887461995aad393cb294948a5ce800ca279cd1027026d47.com"; classtype:attempted-recon; sid:200000315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a.eddyx.workers.dev"; classtype:attempted-recon; sid:200000316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a.gibsonwine.workers.dev"; classtype:attempted-recon; sid:200000317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a.insecurpage.recovery-safty.workers.dev"; classtype:attempted-recon; sid:200000318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a0570626.xsph.ru"; classtype:attempted-recon; sid:200000319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a0709723.xsph.ru"; classtype:attempted-recon; sid:200000320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a0711994.xsph.ru"; classtype:attempted-recon; sid:200000321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a0w0kt.webwave.dev"; classtype:attempted-recon; sid:200000322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a4d3b42c.chgmar-d8y.pages.dev"; classtype:attempted-recon; sid:200000323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a6f3c471-86b7-44e9-8cd6-77aa84dc4468.id.repl.co"; classtype:attempted-recon; sid:200000324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a71843c1.mailssocloud-srvr65e5rd.pages.dev"; classtype:attempted-recon; sid:200000325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a76uh-rqaaa-aaaad-qcycq-cai.raw.ic0.app"; classtype:attempted-recon; sid:200000326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aa.astepforwardnv.com"; classtype:attempted-recon; sid:200000327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aa.mfs.gg"; classtype:attempted-recon; sid:200000328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aa52ea7e73864.bonactech.com"; classtype:attempted-recon; sid:200000329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaa33f221bff69e7c4f0cb9ad1b3d53d-dot-office-352115.uk.r.appspot.com"; classtype:attempted-recon; sid:200000330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaa33f221bff69e7c4fecb9ad1b3d53d-dot-office-352115.uk.r.appspot.com"; classtype:attempted-recon; sid:200000331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaaa-9qg.pages.dev"; classtype:attempted-recon; sid:200000332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aabbccee-86c0a.firebaseapp.com"; classtype:attempted-recon; sid:200000333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aabbccee-86c0a.web.app"; classtype:attempted-recon; sid:200000334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aacpvyrzzt.duckdns.org"; classtype:attempted-recon; sid:200000335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aadityabath.com"; classtype:attempted-recon; sid:200000336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aafbcbqbrp.duckdns.org"; classtype:attempted-recon; sid:200000337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aagmfatauy.duckdns.org"; classtype:attempted-recon; sid:200000338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaiuidnack.duckdns.org"; classtype:attempted-recon; sid:200000339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aajkabahujanmedia.com"; classtype:attempted-recon; sid:200000340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aamwgsecow.duckdns.org"; classtype:attempted-recon; sid:200000341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aandjstudios.com"; classtype:attempted-recon; sid:200000342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aap.org.pk"; classtype:attempted-recon; sid:200000343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aapdillxqr.duckdns.org"; classtype:attempted-recon; sid:200000344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aapeiqnzhs.duckdns.org"; classtype:attempted-recon; sid:200000345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaphdffehg.duckdns.org"; classtype:attempted-recon; sid:200000346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aapks.com"; classtype:attempted-recon; sid:200000347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaqdoykbhw.duckdns.org"; classtype:attempted-recon; sid:200000348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aarr.pages.dev"; classtype:attempted-recon; sid:200000349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aasdygsolf.duckdns.org"; classtype:attempted-recon; sid:200000350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aastyqnmgr.duckdns.org"; classtype:attempted-recon; sid:200000351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aauisemarang.com"; classtype:attempted-recon; sid:200000352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aave-ethereum.club"; classtype:attempted-recon; sid:200000353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aavedefimax.com"; classtype:attempted-recon; sid:200000354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaveds.live"; classtype:attempted-recon; sid:200000355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aavelend.net"; classtype:attempted-recon; sid:200000356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aavemq.live"; classtype:attempted-recon; sid:200000357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aavezp.live"; classtype:attempted-recon; sid:200000358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ab.galeish.workers.dev"; classtype:attempted-recon; sid:200000359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abalone-fish-screwdriver.glitch.me"; classtype:attempted-recon; sid:200000360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abatedsbqo.duckdns.org"; classtype:attempted-recon; sid:200000361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abbfxwdwml.duckdns.org"; classtype:attempted-recon; sid:200000362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abbwflxdya.duckdns.org"; classtype:attempted-recon; sid:200000363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abgitrzcal.duckdns.org"; classtype:attempted-recon; sid:200000364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abikytravels.com"; classtype:attempted-recon; sid:200000365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abmqigbmlv.duckdns.org"; classtype:attempted-recon; sid:200000366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abncra.webcindario.com"; classtype:attempted-recon; sid:200000367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abonnement.netflix.com.89-163-221-46.plesk.page"; classtype:attempted-recon; sid:200000368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abozabakwb.duckdns.org"; classtype:attempted-recon; sid:200000369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abracadabra-walet.blogspot.com"; classtype:attempted-recon; sid:200000370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abracadabra.pics"; classtype:attempted-recon; sid:200000371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"absolutepleasure.com.my"; classtype:attempted-recon; sid:200000372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abvfrkkthc.duckdns.org"; classtype:attempted-recon; sid:200000373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abxbtxkuvy.duckdns.org"; classtype:attempted-recon; sid:200000374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abyavaaulr.duckdns.org"; classtype:attempted-recon; sid:200000375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abyprudatw.duckdns.org"; classtype:attempted-recon; sid:200000376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"academia-rennersolucoes-portl.blogspot.com"; classtype:attempted-recon; sid:200000377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"academy.thenobleguardians.com"; classtype:attempted-recon; sid:200000378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accedi-online.preview-domain.com"; classtype:attempted-recon; sid:200000379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accedirestrizioni.com"; classtype:attempted-recon; sid:200000380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acceso-galicsite.com"; classtype:attempted-recon; sid:200000381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accesovirtualdaviienda.ml"; classtype:attempted-recon; sid:200000382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accesrewards.web.app"; classtype:attempted-recon; sid:200000383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"access-control-help.info"; classtype:attempted-recon; sid:200000384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accesso.clienti.sicuro.eshteghalepaydar.ir"; classtype:attempted-recon; sid:200000385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessoapp-bper.000webhostapp.com"; classtype:attempted-recon; sid:200000386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessobancabper.aljone.com"; classtype:attempted-recon; sid:200000387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessobancabper.proemergency.com"; classtype:attempted-recon; sid:200000388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessobancabper.wartatimes.com"; classtype:attempted-recon; sid:200000389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessobperbanca.elmacir.com"; classtype:attempted-recon; sid:200000390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessobperbanca.relianceplacements.com"; classtype:attempted-recon; sid:200000391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessobperbancaweb.cloud.cpanelbudgethosting.com"; classtype:attempted-recon; sid:200000392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessobperonline.com"; classtype:attempted-recon; sid:200000393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessodipartimento.com"; classtype:attempted-recon; sid:200000394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accessreward.web.app"; classtype:attempted-recon; sid:200000395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accionobligatoriacompyg562448.kilerromero.repl.co"; classtype:attempted-recon; sid:200000396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-access-review.firebaseapp.com"; classtype:attempted-recon; sid:200000397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-access-review.web.app"; classtype:attempted-recon; sid:200000398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-appeal-form-1287518.firebaseapp.com"; classtype:attempted-recon; sid:200000399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.aeiatt.ga"; classtype:attempted-recon; sid:200000400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.bs0wel.icu"; classtype:attempted-recon; sid:200000401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.eektrx.top"; classtype:attempted-recon; sid:200000402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.heqywy.ga"; classtype:attempted-recon; sid:200000403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.hupxqb.top"; classtype:attempted-recon; sid:200000404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.jhktpl.top"; classtype:attempted-recon; sid:200000405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.ugzeks.top"; classtype:attempted-recon; sid:200000406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-check.co.jp.xgpthy.top"; classtype:attempted-recon; sid:200000407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-info-review.com"; classtype:attempted-recon; sid:200000408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-update.mymom.info"; classtype:attempted-recon; sid:200000409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account.qualismais.odo.br"; classtype:attempted-recon; sid:200000410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account.verifications.help-page.workers.dev"; classtype:attempted-recon; sid:200000411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accountdelay.com"; classtype:attempted-recon; sid:200000412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acdypyphwg.duckdns.org"; classtype:attempted-recon; sid:200000413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acelerafaturahyper.xyz"; classtype:attempted-recon; sid:200000414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acess-ofici-fatura.blogspot.com"; classtype:attempted-recon; sid:200000415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessar-digital-fatura-br40.com"; classtype:attempted-recon; sid:200000416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessar-fatura-hoje-0sw6e.com"; classtype:attempted-recon; sid:200000417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessar-fatura-web-digital-sadsd5.com"; classtype:attempted-recon; sid:200000418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessar-minha-fatura-setembro-0yx6w9.com"; classtype:attempted-recon; sid:200000419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessfaturaitau.com"; classtype:attempted-recon; sid:200000420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessodedodemo.blogspot.com"; classtype:attempted-recon; sid:200000421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessoibank8.com.br"; classtype:attempted-recon; sid:200000422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acessovlahiper.com"; classtype:attempted-recon; sid:200000423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"achulemarecoa.firebaseapp.com"; classtype:attempted-recon; sid:200000424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"achulemarecoa.web.app"; classtype:attempted-recon; sid:200000425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"achwhqkxke.duckdns.org"; classtype:attempted-recon; sid:200000426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aciermetal.com.br"; classtype:attempted-recon; sid:200000427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acikdeniizv4deniizbankmobil.ga"; classtype:attempted-recon; sid:200000428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acjddacyzy.duckdns.org"; classtype:attempted-recon; sid:200000429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aclvsekshf.duckdns.org"; classtype:attempted-recon; sid:200000430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acmbvonpli.duckdns.org"; classtype:attempted-recon; sid:200000431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acn-cnfrm-scrty.my.id"; classtype:attempted-recon; sid:200000432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acn.unpbls.sprt-acn.workers.dev"; classtype:attempted-recon; sid:200000433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote001.firebaseapp.com"; classtype:attempted-recon; sid:200000434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote001.web.app"; classtype:attempted-recon; sid:200000435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote002.firebaseapp.com"; classtype:attempted-recon; sid:200000436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote002.web.app"; classtype:attempted-recon; sid:200000437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote003.firebaseapp.com"; classtype:attempted-recon; sid:200000438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote003.web.app"; classtype:attempted-recon; sid:200000439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote004.firebaseapp.com"; classtype:attempted-recon; sid:200000440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote004.web.app"; classtype:attempted-recon; sid:200000441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote005.firebaseapp.com"; classtype:attempted-recon; sid:200000442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote005.web.app"; classtype:attempted-recon; sid:200000443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote006.firebaseapp.com"; classtype:attempted-recon; sid:200000444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote006.web.app"; classtype:attempted-recon; sid:200000445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote007.firebaseapp.com"; classtype:attempted-recon; sid:200000446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote007.web.app"; classtype:attempted-recon; sid:200000447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote008.firebaseapp.com"; classtype:attempted-recon; sid:200000448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote008.web.app"; classtype:attempted-recon; sid:200000449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote009.firebaseapp.com"; classtype:attempted-recon; sid:200000450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote009.web.app"; classtype:attempted-recon; sid:200000451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote010.firebaseapp.com"; classtype:attempted-recon; sid:200000452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote010.web.app"; classtype:attempted-recon; sid:200000453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote011.firebaseapp.com"; classtype:attempted-recon; sid:200000454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote011.web.app"; classtype:attempted-recon; sid:200000455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote012.firebaseapp.com"; classtype:attempted-recon; sid:200000456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnote012.web.app"; classtype:attempted-recon; sid:200000457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnscure.cnfrm.scrthlp.workers.dev"; classtype:attempted-recon; sid:200000458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acnvuccrfe.duckdns.org"; classtype:attempted-recon; sid:200000459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acordion-stela.blogspot.com"; classtype:attempted-recon; sid:200000460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acrfrslaor.duckdns.org"; classtype:attempted-recon; sid:200000461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"act-premco.hostfree.pw"; classtype:attempted-recon; sid:200000462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"actasentrega.dev.cispcolombia.org"; classtype:attempted-recon; sid:200000463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"activartoken2.repl.co"; classtype:attempted-recon; sid:200000464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"activate-hulu-com-activate.sitey.me"; classtype:attempted-recon; sid:200000465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"activatesynmainnet.com"; classtype:attempted-recon; sid:200000466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"activatiioncode.com"; classtype:attempted-recon; sid:200000467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"active787-beb.base787bed781.repl.co"; classtype:attempted-recon; sid:200000468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"actpctyzwu.duckdns.org"; classtype:attempted-recon; sid:200000469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"actualiza-segurolbk.top"; classtype:attempted-recon; sid:200000470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"actuualiza-seguridladlbk.cconsultas-extrachcash2022.top"; classtype:attempted-recon; sid:200000471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acuascut.bluehoststaff.com"; classtype:attempted-recon; sid:200000472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acwmiyafzy.duckdns.org"; classtype:attempted-recon; sid:200000473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acxpeelxsf.duckdns.org"; classtype:attempted-recon; sid:200000474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adbrevocdd.duckdns.org"; classtype:attempted-recon; sid:200000475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adcapitals.org"; classtype:attempted-recon; sid:200000476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adcloudserver.com"; classtype:attempted-recon; sid:200000477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adcsumrhml.duckdns.org"; classtype:attempted-recon; sid:200000478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"addoha.ci"; classtype:attempted-recon; sid:200000479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adept-producer-5628.ck.page"; classtype:attempted-recon; sid:200000480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adjdhgfxpx.duckdns.org"; classtype:attempted-recon; sid:200000481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adlmjmbfjm.duckdns.org"; classtype:attempted-recon; sid:200000482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"admin-formserviceupdates.weeblysite.com"; classtype:attempted-recon; sid:200000483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"admin-update-amazon.co.jp.11671.cn"; classtype:attempted-recon; sid:200000484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"admin-update-amazon.co.jp.35687.cn"; classtype:attempted-recon; sid:200000485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"admin-update-amazon.co.jp.68532.cn"; classtype:attempted-recon; sid:200000486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"admin-update-amazon.co.jp.69825.cn"; classtype:attempted-recon; sid:200000487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"admin-update-amazon.co.jp.85536.cn"; classtype:attempted-recon; sid:200000488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"admin.epochfinancialus.com"; classtype:attempted-recon; sid:200000489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adobemicrosoftoffice.myportfolio.com"; classtype:attempted-recon; sid:200000490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adobemicrosoftonline.myportfolio.com"; classtype:attempted-recon; sid:200000491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adobeofficec5c2e764c17d59ed03ed35f514778e40c5c2e764c17d59ed03ed.officepost1.workers.dev"; classtype:attempted-recon; sid:200000492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adobepdfllc.mypixieset.com"; classtype:attempted-recon; sid:200000493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adpunemploymentclaims.sharefile.com"; classtype:attempted-recon; sid:200000494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adroitorganicssmartexpress.firebaseapp.com"; classtype:attempted-recon; sid:200000495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adroitorganicssmartexpress.web.app"; classtype:attempted-recon; sid:200000496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ads-manager-case83400917.firebaseapp.com"; classtype:attempted-recon; sid:200000497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adshomecare.com.br"; classtype:attempted-recon; sid:200000498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adsvtmodcw.duckdns.org"; classtype:attempted-recon; sid:200000499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adv-promote.com"; classtype:attempted-recon; sid:200000500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"advancelink.easy.co"; classtype:attempted-recon; sid:200000501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adveninternational.com"; classtype:attempted-recon; sid:200000502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adwoplok-investing.pro"; classtype:attempted-recon; sid:200000503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adwyunbaql.duckdns.org"; classtype:attempted-recon; sid:200000504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aec02ussba39485auth-yahoouserid4734.netlify.app"; classtype:attempted-recon; sid:200000505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aefixnqqcw.duckdns.org"; classtype:attempted-recon; sid:200000506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aeiatt.ga"; classtype:attempted-recon; sid:200000507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aeon-japan9.shop"; classtype:attempted-recon; sid:200000508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aeon.co.jp.ice-erp.com"; classtype:attempted-recon; sid:200000509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aeoncojp.shop"; classtype:attempted-recon; sid:200000510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aeropartscr.com"; classtype:attempted-recon; sid:200000511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aerospacesses.com"; classtype:attempted-recon; sid:200000512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aervatxwaz.duckdns.org"; classtype:attempted-recon; sid:200000513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aescoen.asecosoone.ufwybn.top"; classtype:attempted-recon; sid:200000514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aeseoescn.asseosoeseesaccn.gnpais.top"; classtype:attempted-recon; sid:200000515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aeseseoiosecsn.asseeososceeueossceacn.gzfmft.top"; classtype:attempted-recon; sid:200000516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesocen.asecosoeone.wetot.work"; classtype:attempted-recon; sid:200000517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesocsn.aoeescoecone.ilechun.cc"; classtype:attempted-recon; sid:200000518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesoen.asecosone.qrgj.com.cn"; classtype:attempted-recon; sid:200000519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesoen.asecosone.zjnkse.top"; classtype:attempted-recon; sid:200000520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesoesn.aseoseseacn.mojnlk.top"; classtype:attempted-recon; sid:200000521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesoesn.aseoseseacn.qxkahc.top"; classtype:attempted-recon; sid:200000522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesoioesn.aseoseiseaccn.tnklun.top"; classtype:attempted-recon; sid:200000523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesoiosesn.aseosieesceacn.rkbxko.top"; classtype:attempted-recon; sid:200000524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesosesn.aseoseeseacn.qxkahc.top"; classtype:attempted-recon; sid:200000525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesszyhvgg.duckdns.org"; classtype:attempted-recon; sid:200000526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aesymjrazh.duckdns.org"; classtype:attempted-recon; sid:200000527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aetaxapvgq.duckdns.org"; classtype:attempted-recon; sid:200000528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aezacwdozw.duckdns.org"; classtype:attempted-recon; sid:200000529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afcu-in.firebaseapp.com"; classtype:attempted-recon; sid:200000530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afcu-init.firebaseapp.com"; classtype:attempted-recon; sid:200000531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afcu-login.firebaseapp.com"; classtype:attempted-recon; sid:200000532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afdndzthck.duckdns.org"; classtype:attempted-recon; sid:200000533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afeadfgc.odoo.com"; classtype:attempted-recon; sid:200000534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afestvpljt.duckdns.org"; classtype:attempted-recon; sid:200000535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"affectionate-mahavira.209-127-178-48.plesk.page"; classtype:attempted-recon; sid:200000536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"affixwallet.net"; classtype:attempted-recon; sid:200000537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"affxtdfvmi.duckdns.org"; classtype:attempted-recon; sid:200000538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afgrznpakt.duckdns.org"; classtype:attempted-recon; sid:200000539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afhguhbnun.duckdns.org"; classtype:attempted-recon; sid:200000540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afitdmqtaq.duckdns.org"; classtype:attempted-recon; sid:200000541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afopomtfcz.duckdns.org"; classtype:attempted-recon; sid:200000542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afp--futuro.com"; classtype:attempted-recon; sid:200000543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afpphitgfr.duckdns.org"; classtype:attempted-recon; sid:200000544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afrleotnpo.duckdns.org"; classtype:attempted-recon; sid:200000545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afterpay.vip"; classtype:attempted-recon; sid:200000546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aftral.comlaurence.chretien-laurence.chretien.weareaunitednation.com"; classtype:attempted-recon; sid:200000547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afvadbscgq.duckdns.org"; classtype:attempted-recon; sid:200000548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afvsamtyiq.duckdns.org"; classtype:attempted-recon; sid:200000549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"afyllyqhku.duckdns.org"; classtype:attempted-recon; sid:200000550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agacnvljpw.duckdns.org"; classtype:attempted-recon; sid:200000551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agence-88069.firebaseapp.com"; classtype:attempted-recon; sid:200000552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agence-88069.web.app"; classtype:attempted-recon; sid:200000553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agence-wordpress-bordeaux.com"; classtype:attempted-recon; sid:200000554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencenote003.firebaseapp.com"; classtype:attempted-recon; sid:200000555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencenote003.web.app"; classtype:attempted-recon; sid:200000556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencenote009.firebaseapp.com"; classtype:attempted-recon; sid:200000557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencenote009.web.app"; classtype:attempted-recon; sid:200000558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn001.firebaseapp.com"; classtype:attempted-recon; sid:200000559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn001.web.app"; classtype:attempted-recon; sid:200000560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn004.firebaseapp.com"; classtype:attempted-recon; sid:200000561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn004.web.app"; classtype:attempted-recon; sid:200000562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn005.firebaseapp.com"; classtype:attempted-recon; sid:200000563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn005.web.app"; classtype:attempted-recon; sid:200000564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn009.firebaseapp.com"; classtype:attempted-recon; sid:200000565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn009.web.app"; classtype:attempted-recon; sid:200000566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn011.firebaseapp.com"; classtype:attempted-recon; sid:200000567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agencesgwn011.web.app"; classtype:attempted-recon; sid:200000568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.bhifly75390.top"; classtype:attempted-recon; sid:200000569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.bhiflyk40710.xyz"; classtype:attempted-recon; sid:200000570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.bhiflyk69875.xyz"; classtype:attempted-recon; sid:200000571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.bhiflyk69965.xyz"; classtype:attempted-recon; sid:200000572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.bhiflyk84276.xyz"; classtype:attempted-recon; sid:200000573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.dcgobmyh.top"; classtype:attempted-recon; sid:200000574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.deutschemkgw.top"; classtype:attempted-recon; sid:200000575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agent.kpdgmk.top"; classtype:attempted-recon; sid:200000576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ageqrpwooq.duckdns.org"; classtype:attempted-recon; sid:200000577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agi-foundation.org"; classtype:attempted-recon; sid:200000578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agnawxs.hyperphp.com"; classtype:attempted-recon; sid:200000579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agneyanw.hyperphp.com"; classtype:attempted-recon; sid:200000580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agoda-hk-booking.com"; classtype:attempted-recon; sid:200000581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agoyggnjrw.duckdns.org"; classtype:attempted-recon; sid:200000582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agreatstaffingcompany.com"; classtype:attempted-recon; sid:200000583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agri-cole-fr-t-i.web.app"; classtype:attempted-recon; sid:200000584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agrimetiersmartinique.fr"; classtype:attempted-recon; sid:200000585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agroblockchain.live"; classtype:attempted-recon; sid:200000586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agusnvnqjw.duckdns.org"; classtype:attempted-recon; sid:200000587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agvddquqrj.duckdns.org"; classtype:attempted-recon; sid:200000588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agvmosrxjh.duckdns.org"; classtype:attempted-recon; sid:200000589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agwwrapolh.duckdns.org"; classtype:attempted-recon; sid:200000590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agydadzpbl.duckdns.org"; classtype:attempted-recon; sid:200000591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahadconsultancy.com"; classtype:attempted-recon; sid:200000592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahaybdwrir.duckdns.org"; classtype:attempted-recon; sid:200000593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahelplmpwy.duckdns.org"; classtype:attempted-recon; sid:200000594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahhckfxpgu.duckdns.org"; classtype:attempted-recon; sid:200000595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahhhh.pe.kr"; classtype:attempted-recon; sid:200000596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahjdoovcsx.duckdns.org"; classtype:attempted-recon; sid:200000597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahoramismo.vista-it-support.com"; classtype:attempted-recon; sid:200000598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahpxvkdvxc.duckdns.org"; classtype:attempted-recon; sid:200000599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahztryqxrj.duckdns.org"; classtype:attempted-recon; sid:200000600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aiakpnphyu.duckdns.org"; classtype:attempted-recon; sid:200000601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aichi-bp.com"; classtype:attempted-recon; sid:200000602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aihfbj53bl.rest"; classtype:attempted-recon; sid:200000603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aikcunbwms.duckdns.org"; classtype:attempted-recon; sid:200000604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aikrxdfmex.duckdns.org"; classtype:attempted-recon; sid:200000605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aindytwory.duckdns.org"; classtype:attempted-recon; sid:200000606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"air.power.livemailsupport.com"; classtype:attempted-recon; sid:200000607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"airdrop-spherefinance.app"; classtype:attempted-recon; sid:200000608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"airstron.sofalbayat.ir"; classtype:attempted-recon; sid:200000609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aisohfxbil.duckdns.org"; classtype:attempted-recon; sid:200000610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aisqbxwjes.duckdns.org"; classtype:attempted-recon; sid:200000611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aisvqefsfd.duckdns.org"; classtype:attempted-recon; sid:200000612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aiucstieom.duckdns.org"; classtype:attempted-recon; sid:200000613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aivxuqzgcm.duckdns.org"; classtype:attempted-recon; sid:200000614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aiyobhbaad.duckdns.org"; classtype:attempted-recon; sid:200000615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aizik-whatsapp-firebase-clone.firebaseapp.com"; classtype:attempted-recon; sid:200000616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ajdutboalj.duckdns.org"; classtype:attempted-recon; sid:200000617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ajiostores.com"; classtype:attempted-recon; sid:200000618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ajmjnlitkx.duckdns.org"; classtype:attempted-recon; sid:200000619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ajuda-hiper-segura.com"; classtype:attempted-recon; sid:200000620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ajuenwsmxc.duckdns.org"; classtype:attempted-recon; sid:200000621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akamanft.truly-minting.com"; classtype:attempted-recon; sid:200000622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akanksha3012.github.io"; classtype:attempted-recon; sid:200000623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akanmubamidele.com"; classtype:attempted-recon; sid:200000624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akaropczmh.duckdns.org"; classtype:attempted-recon; sid:200000625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akavwdzmsb.duckdns.org"; classtype:attempted-recon; sid:200000626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akemidentalspecialists.com"; classtype:attempted-recon; sid:200000627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akjqzrruct.duckdns.org"; classtype:attempted-recon; sid:200000628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akkzmfnqox.duckdns.org"; classtype:attempted-recon; sid:200000629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akljfmymnb.duckdns.org"; classtype:attempted-recon; sid:200000630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akm47.duckdns.org"; classtype:attempted-recon; sid:200000631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akqlyuxdaa.duckdns.org"; classtype:attempted-recon; sid:200000632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aks34.github.io"; classtype:attempted-recon; sid:200000633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aksdmmazjc.duckdns.org"; classtype:attempted-recon; sid:200000634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aktinautla.duckdns.org"; classtype:attempted-recon; sid:200000635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aktnztkbgw.duckdns.org"; classtype:attempted-recon; sid:200000636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aktualisierungprofil-dkb.selfip.info"; classtype:attempted-recon; sid:200000637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aktualizacja.jst.pl"; classtype:attempted-recon; sid:200000638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akzdyvv.cn"; classtype:attempted-recon; sid:200000639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akzojuomyl.duckdns.org"; classtype:attempted-recon; sid:200000640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"al1l1i.web.app"; classtype:attempted-recon; sid:200000641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alalainsw.hyperphp.com"; classtype:attempted-recon; sid:200000642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alareentading-catalog.page.tl"; classtype:attempted-recon; sid:200000643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alaskaclassifiedonline.com"; classtype:attempted-recon; sid:200000644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"albaitalkhaleejibh.com"; classtype:attempted-recon; sid:200000645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"albaraka-bank.net"; classtype:attempted-recon; sid:200000646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"albel.intnet.mu"; classtype:attempted-recon; sid:200000647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"albertoliviera014.outgrow.us"; classtype:attempted-recon; sid:200000648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"albertomingueza.es"; classtype:attempted-recon; sid:200000649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aldana.in"; classtype:attempted-recon; sid:200000650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aldypszesl.duckdns.org"; classtype:attempted-recon; sid:200000651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alejrphlbz.duckdns.org"; classtype:attempted-recon; sid:200000652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alerta-accesoclientes.com"; classtype:attempted-recon; sid:200000653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alerta-novobanco-movil.com"; classtype:attempted-recon; sid:200000654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alertabangrupo.alertabancolo.repl.co"; classtype:attempted-recon; sid:200000655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alertas-bancofalabella.com"; classtype:attempted-recon; sid:200000656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alertas-movil-interbank.com"; classtype:attempted-recon; sid:200000657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alerts.department.improvement.workers.dev"; classtype:attempted-recon; sid:200000658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alezgxuhwq.duckdns.org"; classtype:attempted-recon; sid:200000659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alfeuyzpxw.duckdns.org"; classtype:attempted-recon; sid:200000660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alfjlqyvnj.duckdns.org"; classtype:attempted-recon; sid:200000661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"algazeliya.com"; classtype:attempted-recon; sid:200000662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"algeebgezx.duckdns.org"; classtype:attempted-recon; sid:200000663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"algotextil.com.br"; classtype:attempted-recon; sid:200000664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alialinedssc.com"; classtype:attempted-recon; sid:200000665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alidaled.com.cn"; classtype:attempted-recon; sid:200000666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alienatedkookynet.bancoacmepro22.repl.co"; classtype:attempted-recon; sid:200000667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alimentosybebidasrefrespul.com"; classtype:attempted-recon; sid:200000668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alinafischer.clickfunnels.com"; classtype:attempted-recon; sid:200000669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alinstante.propanofilmes.com.br"; classtype:attempted-recon; sid:200000670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alinstantecon.imprenditorecomunicatore.com"; classtype:attempted-recon; sid:200000671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alior-logowanie.com"; classtype:attempted-recon; sid:200000672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alior.gokwaz.com"; classtype:attempted-recon; sid:200000673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alior.myapp-account.com"; classtype:attempted-recon; sid:200000674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alior.myappaccount.net"; classtype:attempted-recon; sid:200000675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alitekniktools.com"; classtype:attempted-recon; sid:200000676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alkhalilgraphics.com"; classtype:attempted-recon; sid:200000677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alkorplan.de"; classtype:attempted-recon; sid:200000678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allbrowardanimalremoval.com"; classtype:attempted-recon; sid:200000679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allcountylandsurveyor.com"; classtype:attempted-recon; sid:200000680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allegr0lokalnie-purchase.799093.xyz"; classtype:attempted-recon; sid:200000681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allegrolokalnie-market.7599051.xyz"; classtype:attempted-recon; sid:200000682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alleqrolokalnie-shop.698745512.xyz"; classtype:attempted-recon; sid:200000683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alleqrolokalnie-storepay.794812454.xyz"; classtype:attempted-recon; sid:200000684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alleqrolokalnie.pl"; classtype:attempted-recon; sid:200000685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alliance-ag-services-inc.myportfolio.com"; classtype:attempted-recon; sid:200000686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alliedschoolsahiwal.com"; classtype:attempted-recon; sid:200000687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alliiant.com"; classtype:attempted-recon; sid:200000688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alliqzxxic.duckdns.org"; classtype:attempted-recon; sid:200000689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allsafetysolution.com"; classtype:attempted-recon; sid:200000690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allsharedocs-secondary.z13.web.core.windows.net"; classtype:attempted-recon; sid:200000691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allyoucanget.dyndns.info"; classtype:attempted-recon; sid:200000692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"almayadeennews.ma"; classtype:attempted-recon; sid:200000693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alongoagrigba.xyz"; classtype:attempted-recon; sid:200000694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alpha.radyum.app"; classtype:attempted-recon; sid:200000695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alppmuuigy.duckdns.org"; classtype:attempted-recon; sid:200000696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alrbmptlke.duckdns.org"; classtype:attempted-recon; sid:200000697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alsarrajjewellery.com"; classtype:attempted-recon; sid:200000698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alsofft.com"; classtype:attempted-recon; sid:200000699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"altecmetalltechnik-energiasolar.blogspot.com"; classtype:attempted-recon; sid:200000700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"altunhaliyikama.com.tr"; classtype:attempted-recon; sid:200000701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alwnwurqdb.duckdns.org"; classtype:attempted-recon; sid:200000702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alzadciqqm.duckdns.org"; classtype:attempted-recon; sid:200000703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amaozn.ywcimei.com"; classtype:attempted-recon; sid:200000704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazon-cardupdata.kc5v6f.xyz"; classtype:attempted-recon; sid:200000705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazon-interruption.com"; classtype:attempted-recon; sid:200000706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazon.ap.6ogsaj7oz13r.8kkq0u73l.autos"; classtype:attempted-recon; sid:200000707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazon.jp-lh.top"; classtype:attempted-recon; sid:200000708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazon.works.ga"; classtype:attempted-recon; sid:200000709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazonhsi.xyz"; classtype:attempted-recon; sid:200000710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazonna.shop"; classtype:attempted-recon; sid:200000711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazonng.shop"; classtype:attempted-recon; sid:200000712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazonsp.top"; classtype:attempted-recon; sid:200000713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambdwzxxsf.duckdns.org"; classtype:attempted-recon; sid:200000714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambilchipsedekah.com"; classtype:attempted-recon; sid:200000715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambrrygen.com"; classtype:attempted-recon; sid:200000716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambrygen.care"; classtype:attempted-recon; sid:200000717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amburero.com"; classtype:attempted-recon; sid:200000718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amc-training.com"; classtype:attempted-recon; sid:200000719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amczon.co.jp.dgeryrhh.com.cn"; classtype:attempted-recon; sid:200000720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amczon.co.jp.khgfdsdfg.com.cn"; classtype:attempted-recon; sid:200000721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amczon.co.jp.lbtyb.com.cn"; classtype:attempted-recon; sid:200000722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amczon.co.jp.sadryr.com.cn"; classtype:attempted-recon; sid:200000723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amdjalepo.itenlo.cn"; classtype:attempted-recon; sid:200000724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ame-services-inc.com"; classtype:attempted-recon; sid:200000725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ameli-assure-gouv.com"; classtype:attempted-recon; sid:200000726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ameli-espace-cartevitale.fr"; classtype:attempted-recon; sid:200000727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ameli67964.tmweb.ru"; classtype:attempted-recon; sid:200000728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ameliclient.services"; classtype:attempted-recon; sid:200000729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"americanas55.com"; classtype:attempted-recon; sid:200000730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"americanexpress.ceartavimbomukiccom.workers.dev"; classtype:attempted-recon; sid:200000731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"americanexpresscompersonalcardverification.valknerlhungta2com.workers.dev"; classtype:attempted-recon; sid:200000732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"americanfiresys.sofalbayat.ir"; classtype:attempted-recon; sid:200000733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"americanshdkexpress.kostyaplasnvittatocom.workers.dev"; classtype:attempted-recon; sid:200000734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"americanshdkexpresserror.kostyaplasnvittatocom.workers.dev"; classtype:attempted-recon; sid:200000735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amezingdeals.com"; classtype:attempted-recon; sid:200000736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amhwiusoeb.duckdns.org"; classtype:attempted-recon; sid:200000737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amidabuli.com"; classtype:attempted-recon; sid:200000738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amirhameed.com"; classtype:attempted-recon; sid:200000739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amizon.co.jp.cedimen.cc"; classtype:attempted-recon; sid:200000740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amizon.co.jp.obertso.cc"; classtype:attempted-recon; sid:200000741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amizon.co.jp.zmouem.cc"; classtype:attempted-recon; sid:200000742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amm-uni.com"; classtype:attempted-recon; sid:200000743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ammtiadrrg.duckdns.org"; classtype:attempted-recon; sid:200000744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ammyadybad.duckdns.org"; classtype:attempted-recon; sid:200000745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amnoloni.xyz"; classtype:attempted-recon; sid:200000746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amosleh.com"; classtype:attempted-recon; sid:200000747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.aerfde.cc"; classtype:attempted-recon; sid:200000748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.cainimjb.cc"; classtype:attempted-recon; sid:200000749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.dfgjkfg.cc"; classtype:attempted-recon; sid:200000750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.dxjsmu.com"; classtype:attempted-recon; sid:200000751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.hghgby.com"; classtype:attempted-recon; sid:200000752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.hmhgwh.com"; classtype:attempted-recon; sid:200000753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.keoiyioi.cc"; classtype:attempted-recon; sid:200000754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.mdjfier.cc"; classtype:attempted-recon; sid:200000755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.ouerneng.cc"; classtype:attempted-recon; sid:200000756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.regxgi.cc"; classtype:attempted-recon; sid:200000757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.routdfa.cc"; classtype:attempted-recon; sid:200000758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.shjsya.com"; classtype:attempted-recon; sid:200000759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amozon.co.jp.yxjsbx.com"; classtype:attempted-recon; sid:200000760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ampunbanaa.topijerami.workers.dev"; classtype:attempted-recon; sid:200000761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amreeth.github.io"; classtype:attempted-recon; sid:200000762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amrstewardshipuganda.org"; classtype:attempted-recon; sid:200000763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amtrakaccount.com"; classtype:attempted-recon; sid:200000764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amtvioftmd.duckdns.org"; classtype:attempted-recon; sid:200000765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amusing-jaybird.10web.me"; classtype:attempted-recon; sid:200000766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amyixrqomn.duckdns.org"; classtype:attempted-recon; sid:200000767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amz-details.firebaseapp.com"; classtype:attempted-recon; sid:200000768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amz-details.web.app"; classtype:attempted-recon; sid:200000769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amzano.co.ip.sttaerion.shop"; classtype:attempted-recon; sid:200000770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amzano.co.ip.temaeptan.shop"; classtype:attempted-recon; sid:200000771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amzerddppq.duckdns.org"; classtype:attempted-recon; sid:200000772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amzpqjliln.duckdns.org"; classtype:attempted-recon; sid:200000773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anambranma.org.ng"; classtype:attempted-recon; sid:200000774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anandsr-dev.github.io"; classtype:attempted-recon; sid:200000775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anapolisemprego.com.br"; classtype:attempted-recon; sid:200000776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anarchitecturestudio.com"; classtype:attempted-recon; sid:200000777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anasathalassas.gr"; classtype:attempted-recon; sid:200000778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anayfjkjaa.duckdns.org"; classtype:attempted-recon; sid:200000779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anazom.co.jp.eaqi.shop"; classtype:attempted-recon; sid:200000780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anazom.co.jp.urkdhs.shop"; classtype:attempted-recon; sid:200000781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ancient-glade-76e4.tralside5454.workers.dev"; classtype:attempted-recon; sid:200000782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ancient-morning-2521.wabrestroom.workers.dev"; classtype:attempted-recon; sid:200000783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ancient-quee6173.tmp6n9c0.workers.dev"; classtype:attempted-recon; sid:200000784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ancient-voice-a281.attnetmms78.workers.dev"; classtype:attempted-recon; sid:200000785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ancient.tybocas.workers.dev"; classtype:attempted-recon; sid:200000786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"andalusstudio.com"; classtype:attempted-recon; sid:200000787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"andersonstrategic.com.au"; classtype:attempted-recon; sid:200000788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"andriaz1700001.gq"; classtype:attempted-recon; sid:200000789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"andriaz1700002.gq"; classtype:attempted-recon; sid:200000790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"andriaz1700004.gq"; classtype:attempted-recon; sid:200000791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"andriaz1700005.gq"; classtype:attempted-recon; sid:200000792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"andriaz1700006.gq"; classtype:attempted-recon; sid:200000793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anesthesiaqbank.com"; classtype:attempted-recon; sid:200000794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"angelydigital.com"; classtype:attempted-recon; sid:200000795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"angindatanglahh.martulangsore.workers.dev"; classtype:attempted-recon; sid:200000796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"angxisifvo.duckdns.org"; classtype:attempted-recon; sid:200000797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"angxwsnsqm.duckdns.org"; classtype:attempted-recon; sid:200000798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anhgndslyh.duckdns.org"; classtype:attempted-recon; sid:200000799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anhnahobxq.duckdns.org"; classtype:attempted-recon; sid:200000800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aniazon.co.jp.djruffg.cc"; classtype:attempted-recon; sid:200000801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anithbetique.mom"; classtype:attempted-recon; sid:200000802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anjalijha167.github.io"; classtype:attempted-recon; sid:200000803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ankiety-konsumenckie.pl"; classtype:attempted-recon; sid:200000804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ankqufyjnx.duckdns.org"; classtype:attempted-recon; sid:200000805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anrremovals.co.za"; classtype:attempted-recon; sid:200000806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"antiquepopcornmuseum.com"; classtype:attempted-recon; sid:200000807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"antlertrader.com"; classtype:attempted-recon; sid:200000808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anwebnote001.firebaseapp.com"; classtype:attempted-recon; sid:200000809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anwebnote001.web.app"; classtype:attempted-recon; sid:200000810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anxoonxhzp.duckdns.org"; classtype:attempted-recon; sid:200000811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aolxperience.com"; classtype:attempted-recon; sid:200000812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aoovolemua.duckdns.org"; classtype:attempted-recon; sid:200000813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aorzdfaahn.duckdns.org"; classtype:attempted-recon; sid:200000814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aosadowpvx.duckdns.org"; classtype:attempted-recon; sid:200000815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aouymfyfra.duckdns.org"; classtype:attempted-recon; sid:200000816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aoykghfnpv.duckdns.org"; classtype:attempted-recon; sid:200000817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ap-bombcrypto-ol.blogspot.com"; classtype:attempted-recon; sid:200000818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apalthetioz.co.vu"; classtype:attempted-recon; sid:200000819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apanxcwgwn.duckdns.org"; classtype:attempted-recon; sid:200000820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aparato8qw7aa.liveblog365.com"; classtype:attempted-recon; sid:200000821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ape-club.io"; classtype:attempted-recon; sid:200000822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apelive.io"; classtype:attempted-recon; sid:200000823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apeplanetclub.com"; classtype:attempted-recon; sid:200000824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apet-romania.ro"; classtype:attempted-recon; sid:200000825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apftnfufln.duckdns.org"; classtype:attempted-recon; sid:200000826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aphipxlzqt.duckdns.org"; classtype:attempted-recon; sid:200000827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"api.51.fi"; classtype:attempted-recon; sid:200000828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"api.cyou.app"; classtype:attempted-recon; sid:200000829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"api.saiisoonccard.co.jp.rydxs.top"; classtype:attempted-recon; sid:200000830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"api.saisoncard.co.jp.18youth.cn"; classtype:attempted-recon; sid:200000831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"api.saisoncard.co.jp.totyahf.cn"; classtype:attempted-recon; sid:200000832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apiwhesgooe4560.page.link"; classtype:attempted-recon; sid:200000833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apkfcthzrj.duckdns.org"; classtype:attempted-recon; sid:200000834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apldfre.hyperphp.com"; classtype:attempted-recon; sid:200000835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aplluazwyf.duckdns.org"; classtype:attempted-recon; sid:200000836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apoalmcxwu.duckdns.org"; classtype:attempted-recon; sid:200000837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apokasz.my.id"; classtype:attempted-recon; sid:200000838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app--bombcrypto-io--acess.blogspot.com"; classtype:attempted-recon; sid:200000839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-aave.co.in"; classtype:attempted-recon; sid:200000840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-axie.com"; classtype:attempted-recon; sid:200000841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-axie.net"; classtype:attempted-recon; sid:200000842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-id6016.firebaseapp.com"; classtype:attempted-recon; sid:200000843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-id6016.web.app"; classtype:attempted-recon; sid:200000844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-id8109.firebaseapp.com"; classtype:attempted-recon; sid:200000845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-id8109.web.app"; classtype:attempted-recon; sid:200000846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-paidy.top"; classtype:attempted-recon; sid:200000847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-pekao.myappaccount.org"; classtype:attempted-recon; sid:200000848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-poly-g0nwebsite.blogspot.com"; classtype:attempted-recon; sid:200000849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-sushi-swap.tk"; classtype:attempted-recon; sid:200000850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-sushi.github.io"; classtype:attempted-recon; sid:200000851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app-sushiswap.org"; classtype:attempted-recon; sid:200000852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.assessmentgenerator.com"; classtype:attempted-recon; sid:200000853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.formbuilder.ai"; classtype:attempted-recon; sid:200000854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.hubgdpr.com"; classtype:attempted-recon; sid:200000855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.minhafaturadigital-w9sz6.com"; classtype:attempted-recon; sid:200000856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.minhafaturawebdigital-s7i8.com"; classtype:attempted-recon; sid:200000857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.moneylinecreditcorporation.com"; classtype:attempted-recon; sid:200000858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.multidefiprotocols.com"; classtype:attempted-recon; sid:200000859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.n26.20-254-67-32.cprapid.com"; classtype:attempted-recon; sid:200000860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.pncservice.workers.dev"; classtype:attempted-recon; sid:200000861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.singlelink.co"; classtype:attempted-recon; sid:200000862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.speedywaiver.io"; classtype:attempted-recon; sid:200000863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.sugarsync.com"; classtype:attempted-recon; sid:200000864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.waiverforever.com"; classtype:attempted-recon; sid:200000865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app42.host"; classtype:attempted-recon; sid:200000866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appbtconect123.webflow.io"; classtype:attempted-recon; sid:200000867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appcef2022.10001mb.com"; classtype:attempted-recon; sid:200000868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appeal-check.firebaseapp.com"; classtype:attempted-recon; sid:200000869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appeal-check.web.app"; classtype:attempted-recon; sid:200000870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appedidosenlinea-lbk.top"; classtype:attempted-recon; sid:200000871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apple-wallet-update-uk.com"; classtype:attempted-recon; sid:200000872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"application.axisbank.co.in"; classtype:attempted-recon; sid:200000873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appmngerhllppnewsinfr-accnttaxmngerprflife-infrms.com"; classtype:attempted-recon; sid:200000874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appmybtconnectbill.webflow.io"; classtype:attempted-recon; sid:200000875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appora.sviluppo.host"; classtype:attempted-recon; sid:200000876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apppekao.myappaccount.net"; classtype:attempted-recon; sid:200000877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appreter.rf.gd"; classtype:attempted-recon; sid:200000878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apps.qattanfoundation.org"; classtype:attempted-recon; sid:200000879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appscurez.co.vu"; classtype:attempted-recon; sid:200000880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appsuite.currentplug.bar"; classtype:attempted-recon; sid:200000881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appsushi.net"; classtype:attempted-recon; sid:200000882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aprus.co.jp.annvance.com"; classtype:attempted-recon; sid:200000883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aprus.co.jp.jokekaal.com"; classtype:attempted-recon; sid:200000884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aprus.co.jp.ladzarus.com"; classtype:attempted-recon; sid:200000885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aprus.co.jp.pecksweb.com"; classtype:attempted-recon; sid:200000886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aprus.co.jp.yuanmada.com"; classtype:attempted-recon; sid:200000887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apsei.org.pt"; classtype:attempted-recon; sid:200000888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apsewas.co.vu"; classtype:attempted-recon; sid:200000889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apukycbpcl.duckdns.org"; classtype:attempted-recon; sid:200000890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apxbvsmwqy.duckdns.org"; classtype:attempted-recon; sid:200000891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apzonisaza.my.id"; classtype:attempted-recon; sid:200000892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqbllmuwmc.duckdns.org"; classtype:attempted-recon; sid:200000893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqcgfryvrj.duckdns.org"; classtype:attempted-recon; sid:200000894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqmuxz.com"; classtype:attempted-recon; sid:200000895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqojjrewrp.duckdns.org"; classtype:attempted-recon; sid:200000896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqrnqqqvtx.duckdns.org"; classtype:attempted-recon; sid:200000897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqsucdlfdf.duckdns.org"; classtype:attempted-recon; sid:200000898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqtvbsvxli.duckdns.org"; classtype:attempted-recon; sid:200000899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aquarelle.es"; classtype:attempted-recon; sid:200000900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aquzea.hyperphp.com"; classtype:attempted-recon; sid:200000901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqvifincny.duckdns.org"; classtype:attempted-recon; sid:200000902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aqxuclxcgb.duckdns.org"; classtype:attempted-recon; sid:200000903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ar-rvest.firebaseapp.com"; classtype:attempted-recon; sid:200000904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ar-rvest.web.app"; classtype:attempted-recon; sid:200000905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arabianoasis.org"; classtype:attempted-recon; sid:200000906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arafathrumman.github.io"; classtype:attempted-recon; sid:200000907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aramex-confirmation.com.ae.shubhkarman.ae"; classtype:attempted-recon; sid:200000908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aratfhfixk.duckdns.org"; classtype:attempted-recon; sid:200000909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ardmnryouu.duckdns.org"; classtype:attempted-recon; sid:200000910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ardorcare.com"; classtype:attempted-recon; sid:200000911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ardqw.hyperphp.com"; classtype:attempted-recon; sid:200000912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ardvnfaitf.duckdns.org"; classtype:attempted-recon; sid:200000913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"area-clientes-actualizaciones.com"; classtype:attempted-recon; sid:200000914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"areabloccata.000webhostapp.com"; classtype:attempted-recon; sid:200000915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"areabperweb.me"; classtype:attempted-recon; sid:200000916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"areaclienti.avvisorinnovo.online"; classtype:attempted-recon; sid:200000917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"areaclientibperbanca.mhac.world"; classtype:attempted-recon; sid:200000918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"areampsverifica-online.preview-domain.com"; classtype:attempted-recon; sid:200000919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"areapersonalewebmps.info"; classtype:attempted-recon; sid:200000920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arfnisweuo.duckdns.org"; classtype:attempted-recon; sid:200000921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"argalicia-clave.supploc.repl.co"; classtype:attempted-recon; sid:200000922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"argaliciaonlinehome.com"; classtype:attempted-recon; sid:200000923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"argeonppfz.duckdns.org"; classtype:attempted-recon; sid:200000924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"argoconstruction-auth-0ffice365-folder.firebaseapp.com"; classtype:attempted-recon; sid:200000925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"argoconstruction-auth-0ffice365-folder.web.app"; classtype:attempted-recon; sid:200000926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ariiskele.com"; classtype:attempted-recon; sid:200000927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ariseac.tk"; classtype:attempted-recon; sid:200000928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arjjlbsomv.duckdns.org"; classtype:attempted-recon; sid:200000929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arlindovsky.net"; classtype:attempted-recon; sid:200000930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arnaldolanches.blogspot.com"; classtype:attempted-recon; sid:200000931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arproofing.walywyfiw.workers.dev"; classtype:attempted-recon; sid:200000932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arqhsafbhi.duckdns.org"; classtype:attempted-recon; sid:200000933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arre-9do.pages.dev"; classtype:attempted-recon; sid:200000934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arrozsabanero.com"; classtype:attempted-recon; sid:200000935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arsnwlbprh.duckdns.org"; classtype:attempted-recon; sid:200000936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artagesh.com"; classtype:attempted-recon; sid:200000937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artash95sh.com"; classtype:attempted-recon; sid:200000938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artemca2001sh.com"; classtype:attempted-recon; sid:200000939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artftlhvme.duckdns.org"; classtype:attempted-recon; sid:200000940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arthamahotels.com"; classtype:attempted-recon; sid:200000941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artiwqx.hyperphp.com"; classtype:attempted-recon; sid:200000942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artngvfufy.duckdns.org"; classtype:attempted-recon; sid:200000943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artsiluette.com"; classtype:attempted-recon; sid:200000944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arub-service.org"; classtype:attempted-recon; sid:200000945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arxhsownjr.duckdns.org"; classtype:attempted-recon; sid:200000946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aryjaavnyh.duckdns.org"; classtype:attempted-recon; sid:200000947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arywdccjzn.duckdns.org"; classtype:attempted-recon; sid:200000948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arzmwazrty.duckdns.org"; classtype:attempted-recon; sid:200000949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"as9192030.liveblog365.com"; classtype:attempted-recon; sid:200000950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asa-q98.pages.dev"; classtype:attempted-recon; sid:200000951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ascen.formazionefad.fingeco.it"; classtype:attempted-recon; sid:200000952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asdclqvpoj.duckdns.org"; classtype:attempted-recon; sid:200000953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asdrewd.hostfree.pw"; classtype:attempted-recon; sid:200000954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asesorinformatico.net"; classtype:attempted-recon; sid:200000955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ashedeoisdsipor.vamsoqeusi.repl.co"; classtype:attempted-recon; sid:200000956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ashleigharmsh.com"; classtype:attempted-recon; sid:200000957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ashleymadison10.com"; classtype:attempted-recon; sid:200000958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ashpazieana.com"; classtype:attempted-recon; sid:200000959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ashtryewjy.co.vu"; classtype:attempted-recon; sid:200000960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asilass1sh.com"; classtype:attempted-recon; sid:200000961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asinglemansh.com"; classtype:attempted-recon; sid:200000962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ask-cg.ir"; classtype:attempted-recon; sid:200000963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"askarmotorluaraclar.com"; classtype:attempted-recon; sid:200000964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asmlgsyfhy.duckdns.org"; classtype:attempted-recon; sid:200000965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asnlvkqyyj.duckdns.org"; classtype:attempted-recon; sid:200000966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asotqbqhjq.duckdns.org"; classtype:attempted-recon; sid:200000967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asptgxnhqi.duckdns.org"; classtype:attempted-recon; sid:200000968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asrdjtmwyg.duckdns.org"; classtype:attempted-recon; sid:200000969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"assessoriabradesco.net"; classtype:attempted-recon; sid:200000970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asset-file-project.files-secret.workers.dev"; classtype:attempted-recon; sid:200000971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"assets-project-cloud.reconfirmation-zip.workers.dev"; classtype:attempted-recon; sid:200000972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"assistancepaiementsecurise.com"; classtype:attempted-recon; sid:200000973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"assurance-carte.fr"; classtype:attempted-recon; sid:200000974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"assurance-la-banque-postale.firebaseapp.com"; classtype:attempted-recon; sid:200000975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"astxmhfrpx.duckdns.org"; classtype:attempted-recon; sid:200000976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asulmxpbdk.duckdns.org"; classtype:attempted-recon; sid:200000977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aswrgstjgk.xyz"; classtype:attempted-recon; sid:200000978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asxzcse.4tv9m0.cn"; classtype:attempted-recon; sid:200000979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"at-service.recoveryatt.workers.dev"; classtype:attempted-recon; sid:200000980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"at-t-mail-00d546.webflow.io"; classtype:attempted-recon; sid:200000981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"at-t-support-service1.sitey.me"; classtype:attempted-recon; sid:200000982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"at-t-yahoo.sitey.me"; classtype:attempted-recon; sid:200000983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"at0.srev.workers.dev"; classtype:attempted-recon; sid:200000984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atendimentoshopcx.shop"; classtype:attempted-recon; sid:200000985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"athuuwfweh.duckdns.org"; classtype:attempted-recon; sid:200000986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atigbjmsjl.duckdns.org"; classtype:attempted-recon; sid:200000987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atkmqeaatz.duckdns.org"; classtype:attempted-recon; sid:200000988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atm-i.com"; classtype:attempted-recon; sid:200000989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atmosdesign.com.co"; classtype:attempted-recon; sid:200000990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atnr76dxku336szy.clickfunnels.com"; classtype:attempted-recon; sid:200000991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atnuptlrtq.duckdns.org"; classtype:attempted-recon; sid:200000992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atplxvtjyq.duckdns.org"; classtype:attempted-recon; sid:200000993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atqyslcsfu.duckdns.org"; classtype:attempted-recon; sid:200000994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atrnkoikdx.duckdns.org"; classtype:attempted-recon; sid:200000995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atshop.io"; classtype:attempted-recon; sid:200000996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-100745.square.site"; classtype:attempted-recon; sid:200000997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-101452.weeblysite.com"; classtype:attempted-recon; sid:200000998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-102180.square.site"; classtype:attempted-recon; sid:200000999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-104783.weeblysite.com"; classtype:attempted-recon; sid:200001000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-107099.square.site"; classtype:attempted-recon; sid:200001001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-107104.weeblysite.com"; classtype:attempted-recon; sid:200001002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-107151.square.site"; classtype:attempted-recon; sid:200001003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-107868.square.site"; classtype:attempted-recon; sid:200001004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-107883.square.site"; classtype:attempted-recon; sid:200001005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-109459.weeblysite.com"; classtype:attempted-recon; sid:200001006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-10965323.weeblysite.com"; classtype:attempted-recon; sid:200001007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-account-support.yolasite.com"; classtype:attempted-recon; sid:200001008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-expired-4de4.att-expiredms1.workers.dev"; classtype:attempted-recon; sid:200001009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-login-101389.square.site"; classtype:attempted-recon; sid:200001010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-login-prodx.com"; classtype:attempted-recon; sid:200001011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-loginsmail.square.site"; classtype:attempted-recon; sid:200001012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-mail-108370.weeblysite.com"; classtype:attempted-recon; sid:200001013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-mail-2022.square.site"; classtype:attempted-recon; sid:200001014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-net-mailler.square.site"; classtype:attempted-recon; sid:200001015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-newsite.square.site"; classtype:attempted-recon; sid:200001016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att1-101802.square.site"; classtype:attempted-recon; sid:200001017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att1.sitey.me"; classtype:attempted-recon; sid:200001018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att7776.square.site"; classtype:attempted-recon; sid:200001019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attacker.com"; classtype:attempted-recon; sid:200001020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcustomerscareservice.weebly.com"; classtype:attempted-recon; sid:200001021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attemailonsrvgoinupdates4456.boxmode.io"; classtype:attempted-recon; sid:200001022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attemplate.com"; classtype:attempted-recon; sid:200001023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atth756.weeblysite.com"; classtype:attempted-recon; sid:200001024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atthcrtcax.duckdns.org"; classtype:attempted-recon; sid:200001025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attinserverwizzy.weebly.com"; classtype:attempted-recon; sid:200001026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attivadati2022.com"; classtype:attempted-recon; sid:200001027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attjsszomp.duckdns.org"; classtype:attempted-recon; sid:200001028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attloginsmail.square.site"; classtype:attempted-recon; sid:200001029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmail-104507.square.site"; classtype:attempted-recon; sid:200001030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmail1.boxmode.io"; classtype:attempted-recon; sid:200001031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmail2022updateongoing.boxmode.io"; classtype:attempted-recon; sid:200001032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailoo000signing.weebly.com"; classtype:attempted-recon; sid:200001033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmaintainaceupdate.square.site"; classtype:attempted-recon; sid:200001034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmemberupdate2022swerver.boxmode.io"; classtype:attempted-recon; sid:200001035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attnet-100907.square.site"; classtype:attempted-recon; sid:200001036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attnetsqr.square.site"; classtype:attempted-recon; sid:200001037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attsbctuess090333.square.site"; classtype:attempted-recon; sid:200001038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attservice072.wixsite.com"; classtype:attempted-recon; sid:200001039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attserviceupdate.webflow.io"; classtype:attempted-recon; sid:200001040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attzcxffclfjlggflggghjjhjljhjjhhk.weebly.com"; classtype:attempted-recon; sid:200001041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atualizahojefaturabr.xyz"; classtype:attempted-recon; sid:200001042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atualize-sistema-segurancaaa-ilyasshkk200758.codeanyapp.com"; classtype:attempted-recon; sid:200001043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atubanca.confirmarenline.repl.co"; classtype:attempted-recon; sid:200001044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atume45.weeblysite.com"; classtype:attempted-recon; sid:200001045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atvimeyayi.duckdns.org"; classtype:attempted-recon; sid:200001046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atwwamckhd.duckdns.org"; classtype:attempted-recon; sid:200001047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atyjcaxpos.duckdns.org"; classtype:attempted-recon; sid:200001048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-0002.pages.dev"; classtype:attempted-recon; sid:200001049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-account.firebaseapp.com"; classtype:attempted-recon; sid:200001050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-account.web.app"; classtype:attempted-recon; sid:200001051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.signinas.xyz"; classtype:attempted-recon; sid:200001052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.signinau.top"; classtype:attempted-recon; sid:200001053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.signinau.xyz"; classtype:attempted-recon; sid:200001054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.signinaua.top"; classtype:attempted-recon; sid:200001055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.signinaua.xyz"; classtype:attempted-recon; sid:200001056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.update10.top"; classtype:attempted-recon; sid:200001057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.update10.xyz"; classtype:attempted-recon; sid:200001058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.update1fd.top"; classtype:attempted-recon; sid:200001059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au-login-service.update1fd.xyz"; classtype:attempted-recon; sid:200001060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"au20th.adobersserl.workers.dev"; classtype:attempted-recon; sid:200001061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aubnrnhdkz.duckdns.org"; classtype:attempted-recon; sid:200001062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aucnujvctt.duckdns.org"; classtype:attempted-recon; sid:200001063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"audience-upholstery.net"; classtype:attempted-recon; sid:200001064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"audiencetrack.streamlink.to"; classtype:attempted-recon; sid:200001065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aufhuungzt.duckdns.org"; classtype:attempted-recon; sid:200001066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aui493849934324zim.firebaseapp.com"; classtype:attempted-recon; sid:200001067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aui493849934324zim.web.app"; classtype:attempted-recon; sid:200001068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aukfxnvmbt.duckdns.org"; classtype:attempted-recon; sid:200001069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aulamed.com.mx"; classtype:attempted-recon; sid:200001070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aulavirtualmibanco.freshdesk.com"; classtype:attempted-recon; sid:200001071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumenta.hostfree.pw"; classtype:attempted-recon; sid:200001072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumentdisp.hostfree.pw"; classtype:attempted-recon; sid:200001073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumenteseulimiterenner.com"; classtype:attempted-recon; sid:200001074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumento-web.firebaseapp.com"; classtype:attempted-recon; sid:200001075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumento-web.web.app"; classtype:attempted-recon; sid:200001076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumentocupo20221.hostfree.pw"; classtype:attempted-recon; sid:200001077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumentocupotuya.hostfree.pw"; classtype:attempted-recon; sid:200001078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumentodecupoh.hostfree.pw"; classtype:attempted-recon; sid:200001079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aumentodecupoya.atwebpages.com"; classtype:attempted-recon; sid:200001080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aunment.hostfree.pw"; classtype:attempted-recon; sid:200001081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auogxyreir.duckdns.org"; classtype:attempted-recon; sid:200001082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auomupwejd.duckdns.org"; classtype:attempted-recon; sid:200001083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aupost-bb3e0f.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200001084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auraschoolpmna.com"; classtype:attempted-recon; sid:200001085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auretechnologies.com"; classtype:attempted-recon; sid:200001086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aurntexsrt.duckdns.org"; classtype:attempted-recon; sid:200001087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aurtbhyxgh.duckdns.org"; classtype:attempted-recon; sid:200001088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aus-reschedulepost.com"; classtype:attempted-recon; sid:200001089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ausftx.com"; classtype:attempted-recon; sid:200001090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ausps.cf"; classtype:attempted-recon; sid:200001091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"austinl33.github.io"; classtype:attempted-recon; sid:200001092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"austnet.biz"; classtype:attempted-recon; sid:200001093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aut-jil-f7dd.dmarce.workers.dev"; classtype:attempted-recon; sid:200001094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autcnmuwhd.duckdns.org"; classtype:attempted-recon; sid:200001095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth-document-shared.datingg-voice.workers.dev"; classtype:attempted-recon; sid:200001096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth-login-user.firebaseapp.com"; classtype:attempted-recon; sid:200001097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth-login-user.web.app"; classtype:attempted-recon; sid:200001098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth-task1-m.web.app"; classtype:attempted-recon; sid:200001099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth-umpqua.firebaseapp.com"; classtype:attempted-recon; sid:200001100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth-umpqua.web.app"; classtype:attempted-recon; sid:200001101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth.secure-bigpond.workers.dev"; classtype:attempted-recon; sid:200001102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth0sharefid0000000200000ff1ce009id31d2bb9c.auth0rizesharedo.workers.dev"; classtype:attempted-recon; sid:200001103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth1b-jb.firebaseapp.com"; classtype:attempted-recon; sid:200001104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auth1b-jb.web.app"; classtype:attempted-recon; sid:200001105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authenticate-0oxsoxauthe.pages.dev"; classtype:attempted-recon; sid:200001106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authenticate-identity.com"; classtype:attempted-recon; sid:200001107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authenticate-user-online.firebaseapp.com"; classtype:attempted-recon; sid:200001108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authenticate-user-online.web.app"; classtype:attempted-recon; sid:200001109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authentificationpaiement-servicesecurise.ru"; classtype:attempted-recon; sid:200001110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authentsfr-client.ddns.net"; classtype:attempted-recon; sid:200001111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authnav00.duckdns.org"; classtype:attempted-recon; sid:200001112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"author-update.mymom.info"; classtype:attempted-recon; sid:200001113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authorise-id-apple.firebaseapp.com"; classtype:attempted-recon; sid:200001114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authorise-id-apple.web.app"; classtype:attempted-recon; sid:200001115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authuxeehmutconjxmailssocl.web.app"; classtype:attempted-recon; sid:200001116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autodiscover.ryder-dutton.co.uk"; classtype:attempted-recon; sid:200001117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autogarantia.com.br"; classtype:attempted-recon; sid:200001118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autohauspodcast.de"; classtype:attempted-recon; sid:200001119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autoinsurance.penny-stocks-gps.com"; classtype:attempted-recon; sid:200001120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autorectifytoken.rf.gd"; classtype:attempted-recon; sid:200001121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autoscurt24.de"; classtype:attempted-recon; sid:200001122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autoservis-vucic.com"; classtype:attempted-recon; sid:200001123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autumn-bonus-2541.flexloop5423240.workers.dev"; classtype:attempted-recon; sid:200001124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autumn-sun-4a21.paqesads-scure.workers.dev"; classtype:attempted-recon; sid:200001125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auutegdgdg65.firebaseapp.com"; classtype:attempted-recon; sid:200001126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auutegdgdg65.web.app"; classtype:attempted-recon; sid:200001127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auvinsde.hyperphp.com"; classtype:attempted-recon; sid:200001128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auxiliosocial.top"; classtype:attempted-recon; sid:200001129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auxovfuyge.duckdns.org"; classtype:attempted-recon; sid:200001130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"auxxxxxxxxx.smb.page"; classtype:attempted-recon; sid:200001131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avantilovekc.com"; classtype:attempted-recon; sid:200001132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avcggjrtcg.duckdns.org"; classtype:attempted-recon; sid:200001133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avelwgnjzz.duckdns.org"; classtype:attempted-recon; sid:200001134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avhostings.com"; classtype:attempted-recon; sid:200001135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.0dkul2k.tokyo"; classtype:attempted-recon; sid:200001136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200001137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.1dhskdt.tokyo"; classtype:attempted-recon; sid:200001138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.1gdr53n.tokyo"; classtype:attempted-recon; sid:200001139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200001140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.40sbkn9.tokyo"; classtype:attempted-recon; sid:200001141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.67ets1t.tokyo"; classtype:attempted-recon; sid:200001142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.6hqstri.tokyo"; classtype:attempted-recon; sid:200001143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.7sq5xol.tokyo"; classtype:attempted-recon; sid:200001144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.9m1dx7m.tokyo"; classtype:attempted-recon; sid:200001145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.acojek2.tokyo"; classtype:attempted-recon; sid:200001146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ad6zu4j.tokyo"; classtype:attempted-recon; sid:200001147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.anqcgo.cyou"; classtype:attempted-recon; sid:200001148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.aoadwx.sa.com"; classtype:attempted-recon; sid:200001149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.aprjql.cyou"; classtype:attempted-recon; sid:200001150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.arbzal.sa.com"; classtype:attempted-recon; sid:200001151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.asclab.sa.com"; classtype:attempted-recon; sid:200001152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.axvpsr.sa.com"; classtype:attempted-recon; sid:200001153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.axwmwk.sa.com"; classtype:attempted-recon; sid:200001154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ayczzs.cyou"; classtype:attempted-recon; sid:200001155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ayynuu.cyou"; classtype:attempted-recon; sid:200001156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.bcowma1.tokyo"; classtype:attempted-recon; sid:200001157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.bfzfkk.cyou"; classtype:attempted-recon; sid:200001158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.bjbh03z.tokyo"; classtype:attempted-recon; sid:200001159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.blblbk.sa.com"; classtype:attempted-recon; sid:200001160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.bmlrsvr.bar"; classtype:attempted-recon; sid:200001161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.bnequq.cyou"; classtype:attempted-recon; sid:200001162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.brj3o6d.tokyo"; classtype:attempted-recon; sid:200001163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.bv6u6sw.tokyo"; classtype:attempted-recon; sid:200001164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.bytirnb.bar"; classtype:attempted-recon; sid:200001165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200001166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ceszno.sa.com"; classtype:attempted-recon; sid:200001167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.cfmmcc.sa.com"; classtype:attempted-recon; sid:200001168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.cou17gj.tokyo"; classtype:attempted-recon; sid:200001169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.daoxal.sa.com"; classtype:attempted-recon; sid:200001170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dcggok.sa.com"; classtype:attempted-recon; sid:200001171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.devvza.cyou"; classtype:attempted-recon; sid:200001172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dlvwhc.cyou"; classtype:attempted-recon; sid:200001173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dpovcb.sa.com"; classtype:attempted-recon; sid:200001174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dwbuiz.cyou"; classtype:attempted-recon; sid:200001175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dwhodwb.tokyo"; classtype:attempted-recon; sid:200001176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dzlhme.sa.com"; classtype:attempted-recon; sid:200001177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dzmeui.sa.com"; classtype:attempted-recon; sid:200001178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200001179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200001180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.edordv.cyou"; classtype:attempted-recon; sid:200001181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.emutiy.cyou"; classtype:attempted-recon; sid:200001182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.epduyp.sa.com"; classtype:attempted-recon; sid:200001183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.erstm5s.tokyo"; classtype:attempted-recon; sid:200001184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ewjvlp.sa.com"; classtype:attempted-recon; sid:200001185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200001186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200001187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.fbcsrf.sa.com"; classtype:attempted-recon; sid:200001188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200001189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ftiwnj.cyou"; classtype:attempted-recon; sid:200001190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.gbrjfas.bar"; classtype:attempted-recon; sid:200001191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.gijebej.bar"; classtype:attempted-recon; sid:200001192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.gikdch.cyou"; classtype:attempted-recon; sid:200001193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.gmaphld.bar"; classtype:attempted-recon; sid:200001194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.gnvikzo.bar"; classtype:attempted-recon; sid:200001195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.gpnzgi.sa.com"; classtype:attempted-recon; sid:200001196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.hmppcy.cyou"; classtype:attempted-recon; sid:200001197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.hnzbsyi.bar"; classtype:attempted-recon; sid:200001198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ht6zjbe.tokyo"; classtype:attempted-recon; sid:200001199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.hxr0gop.tokyo"; classtype:attempted-recon; sid:200001200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.i59bh36.tokyo"; classtype:attempted-recon; sid:200001201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.i9ipcur.tokyo"; classtype:attempted-recon; sid:200001202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.iqvrzg.cyou"; classtype:attempted-recon; sid:200001203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.j5ubutg.tokyo"; classtype:attempted-recon; sid:200001204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.jkbtvl.cyou"; classtype:attempted-recon; sid:200001205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.jrxtrx.cyou"; classtype:attempted-recon; sid:200001206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.kcbnudb.bar"; classtype:attempted-recon; sid:200001207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.kebujh.cyou"; classtype:attempted-recon; sid:200001208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.kfeyef.sa.com"; classtype:attempted-recon; sid:200001209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.kgwqgz.cyou"; classtype:attempted-recon; sid:200001210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.khfzku.cyou"; classtype:attempted-recon; sid:200001211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.kpv6yhp.tokyo"; classtype:attempted-recon; sid:200001212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.kubvkj.cyou"; classtype:attempted-recon; sid:200001213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.l7cvwgf.tokyo"; classtype:attempted-recon; sid:200001214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.lbjcqh.cyou"; classtype:attempted-recon; sid:200001215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ld8y2wm.tokyo"; classtype:attempted-recon; sid:200001216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.lhrlkr.cyou"; classtype:attempted-recon; sid:200001217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.lk6s17b.tokyo"; classtype:attempted-recon; sid:200001218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.lpmefip.bar"; classtype:attempted-recon; sid:200001219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.nlxlcrg.bar"; classtype:attempted-recon; sid:200001220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.nqhywi.cyou"; classtype:attempted-recon; sid:200001221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ntk466j.tokyo"; classtype:attempted-recon; sid:200001222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.oeauteo.bar"; classtype:attempted-recon; sid:200001223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.of5uthp.tokyo"; classtype:attempted-recon; sid:200001224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ojissf0.tokyo"; classtype:attempted-recon; sid:200001225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.onjfanv.bar"; classtype:attempted-recon; sid:200001226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ouvqak.cyou"; classtype:attempted-recon; sid:200001227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.owaiyut.bar"; classtype:attempted-recon; sid:200001228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.oxo5uzj.tokyo"; classtype:attempted-recon; sid:200001229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.p2pfwd4.tokyo"; classtype:attempted-recon; sid:200001230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.plmioax.bar"; classtype:attempted-recon; sid:200001231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.pnl01rh.tokyo"; classtype:attempted-recon; sid:200001232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ppsbcf.cyou"; classtype:attempted-recon; sid:200001233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.qnswad.cyou"; classtype:attempted-recon; sid:200001234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.qrvshpr.bar"; classtype:attempted-recon; sid:200001235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rbqkzx.cyou"; classtype:attempted-recon; sid:200001236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.relwog.cyou"; classtype:attempted-recon; sid:200001237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rfuwmd.cyou"; classtype:attempted-recon; sid:200001238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rlemhb.sa.com"; classtype:attempted-recon; sid:200001239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rljqbs.cyou"; classtype:attempted-recon; sid:200001240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rn0xdmv.tokyo"; classtype:attempted-recon; sid:200001241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rqgjzca.tokyo"; classtype:attempted-recon; sid:200001242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rvzdfax.bar"; classtype:attempted-recon; sid:200001243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.rybtstu.bar"; classtype:attempted-recon; sid:200001244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.segeva.cyou"; classtype:attempted-recon; sid:200001245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.sfhjtf.cyou"; classtype:attempted-recon; sid:200001246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.sxgakd.cyou"; classtype:attempted-recon; sid:200001247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.tbbahr5.tokyo"; classtype:attempted-recon; sid:200001248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.tllpkf.cyou"; classtype:attempted-recon; sid:200001249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.tlqzfl.cyou"; classtype:attempted-recon; sid:200001250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.togabs.cyou"; classtype:attempted-recon; sid:200001251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.towybn.cyou"; classtype:attempted-recon; sid:200001252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.u8b21na.tokyo"; classtype:attempted-recon; sid:200001253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.udbgrm.cyou"; classtype:attempted-recon; sid:200001254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.uieihm.cyou"; classtype:attempted-recon; sid:200001255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.uleyron.bar"; classtype:attempted-recon; sid:200001256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.uprcqy.cyou"; classtype:attempted-recon; sid:200001257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.urw49nf.tokyo"; classtype:attempted-recon; sid:200001258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.uvgoago.tokyo"; classtype:attempted-recon; sid:200001259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.vbdcvc.cyou"; classtype:attempted-recon; sid:200001260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.vflcpnz.bar"; classtype:attempted-recon; sid:200001261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.vgrsaup.bar"; classtype:attempted-recon; sid:200001262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.vgtkezc.bar"; classtype:attempted-recon; sid:200001263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.vhandn.cyou"; classtype:attempted-recon; sid:200001264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.vhvaed.cyou"; classtype:attempted-recon; sid:200001265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.vyvkdq.cyou"; classtype:attempted-recon; sid:200001266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200001267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.wddyfx.cyou"; classtype:attempted-recon; sid:200001268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.whtllp.cyou"; classtype:attempted-recon; sid:200001269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.wpbssyd.bar"; classtype:attempted-recon; sid:200001270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.x3ywxsy.tokyo"; classtype:attempted-recon; sid:200001271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.xbmdtb.cyou"; classtype:attempted-recon; sid:200001272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.xjwvxks.bar"; classtype:attempted-recon; sid:200001273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.xkukewn.bar"; classtype:attempted-recon; sid:200001274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.xtquna8.tokyo"; classtype:attempted-recon; sid:200001275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.xw5wonm.tokyo"; classtype:attempted-recon; sid:200001276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.y6o61cj.tokyo"; classtype:attempted-recon; sid:200001277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ycfbzf.cyou"; classtype:attempted-recon; sid:200001278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.ynlo5if.tokyo"; classtype:attempted-recon; sid:200001279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.yuzksv.cyou"; classtype:attempted-recon; sid:200001280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.yvuirw.cyou"; classtype:attempted-recon; sid:200001281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.yzepa9c.tokyo"; classtype:attempted-recon; sid:200001282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.zjwtdw.cyou"; classtype:attempted-recon; sid:200001283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.zox9nus.tokyo"; classtype:attempted-recon; sid:200001284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.zslnpb.cyou"; classtype:attempted-recon; sid:200001285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.zwvk70j.tokyo"; classtype:attempted-recon; sid:200001286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.zzzlky.cyou"; classtype:attempted-recon; sid:200001287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.0aluzd9.tokyo"; classtype:attempted-recon; sid:200001288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.1gdr53n.tokyo"; classtype:attempted-recon; sid:200001289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.2aaiklj.tokyo"; classtype:attempted-recon; sid:200001290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.3r2oxoq.tokyo"; classtype:attempted-recon; sid:200001291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.54z2thv.tokyo"; classtype:attempted-recon; sid:200001292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.67ets1t.tokyo"; classtype:attempted-recon; sid:200001293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.6ah1rxz.tokyo"; classtype:attempted-recon; sid:200001294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.6hqstri.tokyo"; classtype:attempted-recon; sid:200001295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.a59wwgh.tokyo"; classtype:attempted-recon; sid:200001296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.acojek2.tokyo"; classtype:attempted-recon; sid:200001297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ad6zu4j.tokyo"; classtype:attempted-recon; sid:200001298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.aoadwx.sa.com"; classtype:attempted-recon; sid:200001299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.aprjql.cyou"; classtype:attempted-recon; sid:200001300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.asclab.sa.com"; classtype:attempted-recon; sid:200001301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.asivvk.sa.com"; classtype:attempted-recon; sid:200001302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.axwmwk.sa.com"; classtype:attempted-recon; sid:200001303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ayczzs.cyou"; classtype:attempted-recon; sid:200001304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ayynuu.cyou"; classtype:attempted-recon; sid:200001305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.bbogvx.sa.com"; classtype:attempted-recon; sid:200001306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.bhzykr.sa.com"; classtype:attempted-recon; sid:200001307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.bjlhhf.sa.com"; classtype:attempted-recon; sid:200001308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.blblbk.sa.com"; classtype:attempted-recon; sid:200001309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.bmlrsvr.bar"; classtype:attempted-recon; sid:200001310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.bomvpw.sa.com"; classtype:attempted-recon; sid:200001311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.brj3o6d.tokyo"; classtype:attempted-recon; sid:200001312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.bv6u6sw.tokyo"; classtype:attempted-recon; sid:200001313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.bytirnb.bar"; classtype:attempted-recon; sid:200001314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.cdteph.cyou"; classtype:attempted-recon; sid:200001315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ceszno.sa.com"; classtype:attempted-recon; sid:200001316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.cfmmcc.sa.com"; classtype:attempted-recon; sid:200001317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ckjvqn.cyou"; classtype:attempted-recon; sid:200001318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.cmkqku.sa.com"; classtype:attempted-recon; sid:200001319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.cxzuod.sa.com"; classtype:attempted-recon; sid:200001320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.daoxal.sa.com"; classtype:attempted-recon; sid:200001321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.dcggok.sa.com"; classtype:attempted-recon; sid:200001322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.devvza.cyou"; classtype:attempted-recon; sid:200001323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.dlvwhc.cyou"; classtype:attempted-recon; sid:200001324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.dpovcb.sa.com"; classtype:attempted-recon; sid:200001325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.dzmeui.sa.com"; classtype:attempted-recon; sid:200001326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200001327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ebejok.sa.com"; classtype:attempted-recon; sid:200001328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ecoi15j.tokyo"; classtype:attempted-recon; sid:200001329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.eeeejz.cyou"; classtype:attempted-recon; sid:200001330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ektixe.cyou"; classtype:attempted-recon; sid:200001331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ekyhckm.tokyo"; classtype:attempted-recon; sid:200001332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.emutiy.cyou"; classtype:attempted-recon; sid:200001333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.epduyp.sa.com"; classtype:attempted-recon; sid:200001334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.eudyfc0.tokyo"; classtype:attempted-recon; sid:200001335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.evsrns.cyou"; classtype:attempted-recon; sid:200001336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200001337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.fozmyn.cyou"; classtype:attempted-recon; sid:200001338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.fqcxro.cyou"; classtype:attempted-recon; sid:200001339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.fvxazeg.bar"; classtype:attempted-recon; sid:200001340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.fwehhr.cyou"; classtype:attempted-recon; sid:200001341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.gbrjfas.bar"; classtype:attempted-recon; sid:200001342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.gisyli.cyou"; classtype:attempted-recon; sid:200001343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.gkvkwmv.bar"; classtype:attempted-recon; sid:200001344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.gmaphld.bar"; classtype:attempted-recon; sid:200001345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.gnvikzo.bar"; classtype:attempted-recon; sid:200001346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.goinjd.cyou"; classtype:attempted-recon; sid:200001347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.gpelhdu.bar"; classtype:attempted-recon; sid:200001348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.gxkcxhn.bar"; classtype:attempted-recon; sid:200001349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.hehbty1.tokyo"; classtype:attempted-recon; sid:200001350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.hmppcy.cyou"; classtype:attempted-recon; sid:200001351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.hnghnil.bar"; classtype:attempted-recon; sid:200001352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.hnzbsyi.bar"; classtype:attempted-recon; sid:200001353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.hqmwm27.tokyo"; classtype:attempted-recon; sid:200001354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ht6zjbe.tokyo"; classtype:attempted-recon; sid:200001355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.hxr0gop.tokyo"; classtype:attempted-recon; sid:200001356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.j5ubutg.tokyo"; classtype:attempted-recon; sid:200001357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.jrxtrx.cyou"; classtype:attempted-recon; sid:200001358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.jsboug.cyou"; classtype:attempted-recon; sid:200001359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.kaldkzh.bar"; classtype:attempted-recon; sid:200001360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.kebujh.cyou"; classtype:attempted-recon; sid:200001361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.kgwqgz.cyou"; classtype:attempted-recon; sid:200001362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.khfzku.cyou"; classtype:attempted-recon; sid:200001363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.kpv6yhp.tokyo"; classtype:attempted-recon; sid:200001364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ktcwwov.bar"; classtype:attempted-recon; sid:200001365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ktltos.cyou"; classtype:attempted-recon; sid:200001366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.kubvkj.cyou"; classtype:attempted-recon; sid:200001367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.l7cvwgf.tokyo"; classtype:attempted-recon; sid:200001368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.lbjcqh.cyou"; classtype:attempted-recon; sid:200001369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ld8y2wm.tokyo"; classtype:attempted-recon; sid:200001370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.lhrlkr.cyou"; classtype:attempted-recon; sid:200001371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.lpmefip.bar"; classtype:attempted-recon; sid:200001372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.lxiapm.cyou"; classtype:attempted-recon; sid:200001373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.mbizjf.cyou"; classtype:attempted-recon; sid:200001374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.mjgkwb.cyou"; classtype:attempted-recon; sid:200001375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.molxoa.cyou"; classtype:attempted-recon; sid:200001376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.mvspqa.cyou"; classtype:attempted-recon; sid:200001377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.nfghnn.sa.com"; classtype:attempted-recon; sid:200001378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.oeauteo.bar"; classtype:attempted-recon; sid:200001379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.of5uthp.tokyo"; classtype:attempted-recon; sid:200001380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.oqeptzu.bar"; classtype:attempted-recon; sid:200001381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.owaiyut.bar"; classtype:attempted-recon; sid:200001382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.oxo5uzj.tokyo"; classtype:attempted-recon; sid:200001383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.p2pfwd4.tokyo"; classtype:attempted-recon; sid:200001384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.pqxamup.bar"; classtype:attempted-recon; sid:200001385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.qrvshpr.bar"; classtype:attempted-recon; sid:200001386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.qtjufvf.tokyo"; classtype:attempted-recon; sid:200001387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.qyrlqd.cyou"; classtype:attempted-recon; sid:200001388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.rljqbs.cyou"; classtype:attempted-recon; sid:200001389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.rnwggn.cyou"; classtype:attempted-recon; sid:200001390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.rvzdfax.bar"; classtype:attempted-recon; sid:200001391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.rybtstu.bar"; classtype:attempted-recon; sid:200001392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.segeva.cyou"; classtype:attempted-recon; sid:200001393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.sfhjtf.cyou"; classtype:attempted-recon; sid:200001394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.sgakhql.bar"; classtype:attempted-recon; sid:200001395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.sxgakd.cyou"; classtype:attempted-recon; sid:200001396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.t0ec6bw.tokyo"; classtype:attempted-recon; sid:200001397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.t6ncsda.tokyo"; classtype:attempted-recon; sid:200001398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.tbbahr5.tokyo"; classtype:attempted-recon; sid:200001399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.tdyoar.cyou"; classtype:attempted-recon; sid:200001400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.tllpkf.cyou"; classtype:attempted-recon; sid:200001401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.tlqzfl.cyou"; classtype:attempted-recon; sid:200001402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.tp9ufdn.tokyo"; classtype:attempted-recon; sid:200001403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.udbgrm.cyou"; classtype:attempted-recon; sid:200001404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.uieihm.cyou"; classtype:attempted-recon; sid:200001405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.uleyron.bar"; classtype:attempted-recon; sid:200001406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.umceew.cyou"; classtype:attempted-recon; sid:200001407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.uprcqy.cyou"; classtype:attempted-recon; sid:200001408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.urw49nf.tokyo"; classtype:attempted-recon; sid:200001409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.vbiuzus.bar"; classtype:attempted-recon; sid:200001410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.vgrsaup.bar"; classtype:attempted-recon; sid:200001411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.vgtkezc.bar"; classtype:attempted-recon; sid:200001412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.vmiutt.cyou"; classtype:attempted-recon; sid:200001413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.vsqafmp.bar"; classtype:attempted-recon; sid:200001414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.wddyfx.cyou"; classtype:attempted-recon; sid:200001415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.wkcbmds.bar"; classtype:attempted-recon; sid:200001416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.wpbssyd.bar"; classtype:attempted-recon; sid:200001417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.x1o0ou2.tokyo"; classtype:attempted-recon; sid:200001418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.x3ywxsy.tokyo"; classtype:attempted-recon; sid:200001419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.xbmdtb.cyou"; classtype:attempted-recon; sid:200001420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.xjwvxks.bar"; classtype:attempted-recon; sid:200001421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.xkukewn.bar"; classtype:attempted-recon; sid:200001422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.xtquna8.tokyo"; classtype:attempted-recon; sid:200001423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.xyftnix.bar"; classtype:attempted-recon; sid:200001424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.xyrmwug.bar"; classtype:attempted-recon; sid:200001425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.y6o61cj.tokyo"; classtype:attempted-recon; sid:200001426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ybmykhr.bar"; classtype:attempted-recon; sid:200001427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.ydj2q19.tokyo"; classtype:attempted-recon; sid:200001428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.yijxdrm.bar"; classtype:attempted-recon; sid:200001429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.yklocra.tokyo"; classtype:attempted-recon; sid:200001430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.zbvjke.cyou"; classtype:attempted-recon; sid:200001431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.zlorenj.tokyo"; classtype:attempted-recon; sid:200001432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.zox9nus.tokyo"; classtype:attempted-recon; sid:200001433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.zsdlgq.cyou"; classtype:attempted-recon; sid:200001434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.zslnpb.cyou"; classtype:attempted-recon; sid:200001435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.zyojde.cyou"; classtype:attempted-recon; sid:200001436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.1gdr53n.tokyo"; classtype:attempted-recon; sid:200001437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200001438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.2r5v45q.tokyo"; classtype:attempted-recon; sid:200001439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.6ah1rxz.tokyo"; classtype:attempted-recon; sid:200001440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.7sq5xol.tokyo"; classtype:attempted-recon; sid:200001441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.8b9onfo.tokyo"; classtype:attempted-recon; sid:200001442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.9m1dx7m.tokyo"; classtype:attempted-recon; sid:200001443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.9m4ymbi.tokyo"; classtype:attempted-recon; sid:200001444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.acojek2.tokyo"; classtype:attempted-recon; sid:200001445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ad6zu4j.tokyo"; classtype:attempted-recon; sid:200001446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.agltfj.cyou"; classtype:attempted-recon; sid:200001447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.anqcgo.cyou"; classtype:attempted-recon; sid:200001448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.aprjql.cyou"; classtype:attempted-recon; sid:200001449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.arbzal.sa.com"; classtype:attempted-recon; sid:200001450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.asclab.sa.com"; classtype:attempted-recon; sid:200001451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.asivvk.sa.com"; classtype:attempted-recon; sid:200001452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ayczzs.cyou"; classtype:attempted-recon; sid:200001453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bbogvx.sa.com"; classtype:attempted-recon; sid:200001454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bcowma1.tokyo"; classtype:attempted-recon; sid:200001455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.befcgi.sa.com"; classtype:attempted-recon; sid:200001456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bjbh03z.tokyo"; classtype:attempted-recon; sid:200001457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bjlhhf.sa.com"; classtype:attempted-recon; sid:200001458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.blblbk.sa.com"; classtype:attempted-recon; sid:200001459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bmlrsvr.bar"; classtype:attempted-recon; sid:200001460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bomvpw.sa.com"; classtype:attempted-recon; sid:200001461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bqtksis.tokyo"; classtype:attempted-recon; sid:200001462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.brj3o6d.tokyo"; classtype:attempted-recon; sid:200001463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.brpccx.sa.com"; classtype:attempted-recon; sid:200001464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.bytirnb.bar"; classtype:attempted-recon; sid:200001465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200001466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.cfmmcc.sa.com"; classtype:attempted-recon; sid:200001467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.cldtta.sa.com"; classtype:attempted-recon; sid:200001468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.cou17gj.tokyo"; classtype:attempted-recon; sid:200001469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ctaf1bo.tokyo"; classtype:attempted-recon; sid:200001470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.cvtbit.sa.com"; classtype:attempted-recon; sid:200001471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.cxzuod.sa.com"; classtype:attempted-recon; sid:200001472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.dcggok.sa.com"; classtype:attempted-recon; sid:200001473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.devvza.cyou"; classtype:attempted-recon; sid:200001474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.dlvwhc.cyou"; classtype:attempted-recon; sid:200001475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.dwbuiz.cyou"; classtype:attempted-recon; sid:200001476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.dwhodwb.tokyo"; classtype:attempted-recon; sid:200001477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.dzmeui.sa.com"; classtype:attempted-recon; sid:200001478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200001479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ebejok.sa.com"; classtype:attempted-recon; sid:200001480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200001481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.eeeejz.cyou"; classtype:attempted-recon; sid:200001482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ek6va0y.tokyo"; classtype:attempted-recon; sid:200001483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ektixe.cyou"; classtype:attempted-recon; sid:200001484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ekyhckm.tokyo"; classtype:attempted-recon; sid:200001485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.evsrns.cyou"; classtype:attempted-recon; sid:200001486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ewjvlp.sa.com"; classtype:attempted-recon; sid:200001487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ewmqdi.sa.com"; classtype:attempted-recon; sid:200001488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200001489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.fbcsrf.sa.com"; classtype:attempted-recon; sid:200001490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.femqam.cyou"; classtype:attempted-recon; sid:200001491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200001492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.fnzxzx.cyou"; classtype:attempted-recon; sid:200001493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.fqcxro.cyou"; classtype:attempted-recon; sid:200001494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.fvxazeg.bar"; classtype:attempted-recon; sid:200001495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.fwehhr.cyou"; classtype:attempted-recon; sid:200001496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gbrjfas.bar"; classtype:attempted-recon; sid:200001497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gijebej.bar"; classtype:attempted-recon; sid:200001498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gikdch.cyou"; classtype:attempted-recon; sid:200001499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gkvkwmv.bar"; classtype:attempted-recon; sid:200001500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gmaphld.bar"; classtype:attempted-recon; sid:200001501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gnvikzo.bar"; classtype:attempted-recon; sid:200001502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.goinjd.cyou"; classtype:attempted-recon; sid:200001503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gpelhdu.bar"; classtype:attempted-recon; sid:200001504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.gxkcxhn.bar"; classtype:attempted-recon; sid:200001505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.hdyn4ul.tokyo"; classtype:attempted-recon; sid:200001506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.hkvdul.cyou"; classtype:attempted-recon; sid:200001507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.hnzbsyi.bar"; classtype:attempted-recon; sid:200001508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ht6zjbe.tokyo"; classtype:attempted-recon; sid:200001509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.i59bh36.tokyo"; classtype:attempted-recon; sid:200001510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.i9ipcur.tokyo"; classtype:attempted-recon; sid:200001511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.i9jfvsc.tokyo"; classtype:attempted-recon; sid:200001512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.iojyii.cyou"; classtype:attempted-recon; sid:200001513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.iqvrzg.cyou"; classtype:attempted-recon; sid:200001514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.izmggt.cyou"; classtype:attempted-recon; sid:200001515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.j5ubutg.tokyo"; classtype:attempted-recon; sid:200001516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.kcbnudb.bar"; classtype:attempted-recon; sid:200001517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.kgwqgz.cyou"; classtype:attempted-recon; sid:200001518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ktltos.cyou"; classtype:attempted-recon; sid:200001519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.kubvkj.cyou"; classtype:attempted-recon; sid:200001520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.kw0cnwm.tokyo"; classtype:attempted-recon; sid:200001521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.l7cvwgf.tokyo"; classtype:attempted-recon; sid:200001522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.lk6s17b.tokyo"; classtype:attempted-recon; sid:200001523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.lpmefip.bar"; classtype:attempted-recon; sid:200001524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.lquyvj.cyou"; classtype:attempted-recon; sid:200001525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.mjgkwb.cyou"; classtype:attempted-recon; sid:200001526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.mmkzepw.tokyo"; classtype:attempted-recon; sid:200001527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.molxoa.cyou"; classtype:attempted-recon; sid:200001528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.mvspqa.cyou"; classtype:attempted-recon; sid:200001529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.nlxlcrg.bar"; classtype:attempted-recon; sid:200001530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.no1hppb.tokyo"; classtype:attempted-recon; sid:200001531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ntk466j.tokyo"; classtype:attempted-recon; sid:200001532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200001533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.onjfanv.bar"; classtype:attempted-recon; sid:200001534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.oqeptzu.bar"; classtype:attempted-recon; sid:200001535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ouvqak.cyou"; classtype:attempted-recon; sid:200001536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.owaiyut.bar"; classtype:attempted-recon; sid:200001537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.p2pfwd4.tokyo"; classtype:attempted-recon; sid:200001538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.paogxs.sa.com"; classtype:attempted-recon; sid:200001539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.plmioax.bar"; classtype:attempted-recon; sid:200001540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.pnl01rh.tokyo"; classtype:attempted-recon; sid:200001541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.pnm3imk.tokyo"; classtype:attempted-recon; sid:200001542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ppsbcf.cyou"; classtype:attempted-recon; sid:200001543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.pqxamup.bar"; classtype:attempted-recon; sid:200001544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.qr9csce.tokyo"; classtype:attempted-recon; sid:200001545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.qrvshpr.bar"; classtype:attempted-recon; sid:200001546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.qyrlqd.cyou"; classtype:attempted-recon; sid:200001547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.rbqkzx.cyou"; classtype:attempted-recon; sid:200001548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.relwog.cyou"; classtype:attempted-recon; sid:200001549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.rfoqkx.cyou"; classtype:attempted-recon; sid:200001550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.rljqbs.cyou"; classtype:attempted-recon; sid:200001551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.rn0xdmv.tokyo"; classtype:attempted-recon; sid:200001552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.rybtstu.bar"; classtype:attempted-recon; sid:200001553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.sciatmc.bar"; classtype:attempted-recon; sid:200001554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.segeva.cyou"; classtype:attempted-recon; sid:200001555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.sfhghim.bar"; classtype:attempted-recon; sid:200001556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.sgakhql.bar"; classtype:attempted-recon; sid:200001557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.t0ec6bw.tokyo"; classtype:attempted-recon; sid:200001558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.t6ncsda.tokyo"; classtype:attempted-recon; sid:200001559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.tbbahr5.tokyo"; classtype:attempted-recon; sid:200001560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.tdv3bmb.tokyo"; classtype:attempted-recon; sid:200001561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.tlqzfl.cyou"; classtype:attempted-recon; sid:200001562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.togabs.cyou"; classtype:attempted-recon; sid:200001563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.udbgrm.cyou"; classtype:attempted-recon; sid:200001564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.uieihm.cyou"; classtype:attempted-recon; sid:200001565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.uleyron.bar"; classtype:attempted-recon; sid:200001566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.umceew.cyou"; classtype:attempted-recon; sid:200001567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.urw49nf.tokyo"; classtype:attempted-recon; sid:200001568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.vbiuzus.bar"; classtype:attempted-recon; sid:200001569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.vflcpnz.bar"; classtype:attempted-recon; sid:200001570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.vgrsaup.bar"; classtype:attempted-recon; sid:200001571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.vhandn.cyou"; classtype:attempted-recon; sid:200001572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.vhvaed.cyou"; classtype:attempted-recon; sid:200001573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.vsqafmp.bar"; classtype:attempted-recon; sid:200001574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.vyvkdq.cyou"; classtype:attempted-recon; sid:200001575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200001576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.wddyfx.cyou"; classtype:attempted-recon; sid:200001577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.whtllp.cyou"; classtype:attempted-recon; sid:200001578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.wpbssyd.bar"; classtype:attempted-recon; sid:200001579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.x1y65xf.tokyo"; classtype:attempted-recon; sid:200001580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.xjwvxks.bar"; classtype:attempted-recon; sid:200001581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.xkukewn.bar"; classtype:attempted-recon; sid:200001582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.xruwfho.bar"; classtype:attempted-recon; sid:200001583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.xw5wonm.tokyo"; classtype:attempted-recon; sid:200001584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.xyftnix.bar"; classtype:attempted-recon; sid:200001585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.xyrmwug.bar"; classtype:attempted-recon; sid:200001586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.y6o61cj.tokyo"; classtype:attempted-recon; sid:200001587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ybmykhr.bar"; classtype:attempted-recon; sid:200001588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.ydj2q19.tokyo"; classtype:attempted-recon; sid:200001589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.yijxdrm.bar"; classtype:attempted-recon; sid:200001590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.yuzksv.cyou"; classtype:attempted-recon; sid:200001591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.yvuirw.cyou"; classtype:attempted-recon; sid:200001592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.zamgwo.cyou"; classtype:attempted-recon; sid:200001593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.0aluzd9.tokyo"; classtype:attempted-recon; sid:200001594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200001595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200001596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.2r5v45q.tokyo"; classtype:attempted-recon; sid:200001597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.40sbkn9.tokyo"; classtype:attempted-recon; sid:200001598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.6ah1rxz.tokyo"; classtype:attempted-recon; sid:200001599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.6hqstri.tokyo"; classtype:attempted-recon; sid:200001600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.9m4ymbi.tokyo"; classtype:attempted-recon; sid:200001601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.a59wwgh.tokyo"; classtype:attempted-recon; sid:200001602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.aakapv.sa.com"; classtype:attempted-recon; sid:200001603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ad6zu4j.tokyo"; classtype:attempted-recon; sid:200001604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.agltfj.cyou"; classtype:attempted-recon; sid:200001605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.aoadwx.sa.com"; classtype:attempted-recon; sid:200001606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.arbzal.sa.com"; classtype:attempted-recon; sid:200001607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ayynuu.cyou"; classtype:attempted-recon; sid:200001608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.bfzfkk.cyou"; classtype:attempted-recon; sid:200001609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.bjbh03z.tokyo"; classtype:attempted-recon; sid:200001610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.bmlrsvr.bar"; classtype:attempted-recon; sid:200001611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.bnequq.cyou"; classtype:attempted-recon; sid:200001612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.bomvpw.sa.com"; classtype:attempted-recon; sid:200001613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.brpccx.sa.com"; classtype:attempted-recon; sid:200001614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.bv6u6sw.tokyo"; classtype:attempted-recon; sid:200001615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.bytirnb.bar"; classtype:attempted-recon; sid:200001616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200001617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.cdteph.cyou"; classtype:attempted-recon; sid:200001618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.cfmmcc.sa.com"; classtype:attempted-recon; sid:200001619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.cktnal.cyou"; classtype:attempted-recon; sid:200001620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.cldtta.sa.com"; classtype:attempted-recon; sid:200001621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.cmkqku.sa.com"; classtype:attempted-recon; sid:200001622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.cvtbit.sa.com"; classtype:attempted-recon; sid:200001623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.dlvwhc.cyou"; classtype:attempted-recon; sid:200001624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.dpovcb.sa.com"; classtype:attempted-recon; sid:200001625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.dwbuiz.cyou"; classtype:attempted-recon; sid:200001626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200001627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ecoi15j.tokyo"; classtype:attempted-recon; sid:200001628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.eeeejz.cyou"; classtype:attempted-recon; sid:200001629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.emutiy.cyou"; classtype:attempted-recon; sid:200001630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.erstm5s.tokyo"; classtype:attempted-recon; sid:200001631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ewmqdi.sa.com"; classtype:attempted-recon; sid:200001632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200001633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200001634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.fnzxzx.cyou"; classtype:attempted-recon; sid:200001635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.fqcxro.cyou"; classtype:attempted-recon; sid:200001636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.fvxazeg.bar"; classtype:attempted-recon; sid:200001637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.fwehhr.cyou"; classtype:attempted-recon; sid:200001638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.gbrjfas.bar"; classtype:attempted-recon; sid:200001639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.gijebej.bar"; classtype:attempted-recon; sid:200001640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.gkvkwmv.bar"; classtype:attempted-recon; sid:200001641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.gmaphld.bar"; classtype:attempted-recon; sid:200001642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.gnvikzo.bar"; classtype:attempted-recon; sid:200001643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.gpelhdu.bar"; classtype:attempted-recon; sid:200001644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.gxkcxhn.bar"; classtype:attempted-recon; sid:200001645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.hehbty1.tokyo"; classtype:attempted-recon; sid:200001646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.hjcbmcu.bar"; classtype:attempted-recon; sid:200001647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.hkvdul.cyou"; classtype:attempted-recon; sid:200001648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.hnghnil.bar"; classtype:attempted-recon; sid:200001649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.hnzbsyi.bar"; classtype:attempted-recon; sid:200001650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.hqmwm27.tokyo"; classtype:attempted-recon; sid:200001651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.hxr0gop.tokyo"; classtype:attempted-recon; sid:200001652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.i59bh36.tokyo"; classtype:attempted-recon; sid:200001653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.i9jfvsc.tokyo"; classtype:attempted-recon; sid:200001654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ikwggv.sa.com"; classtype:attempted-recon; sid:200001655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.iojyii.cyou"; classtype:attempted-recon; sid:200001656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.iqvrzg.cyou"; classtype:attempted-recon; sid:200001657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.jrxtrx.cyou"; classtype:attempted-recon; sid:200001658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.k30p5dz.tokyo"; classtype:attempted-recon; sid:200001659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.kaldkzh.bar"; classtype:attempted-recon; sid:200001660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.kcbnudb.bar"; classtype:attempted-recon; sid:200001661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.kgwqgz.cyou"; classtype:attempted-recon; sid:200001662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.khfzku.cyou"; classtype:attempted-recon; sid:200001663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.kpv6yhp.tokyo"; classtype:attempted-recon; sid:200001664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.kqamky.cyou"; classtype:attempted-recon; sid:200001665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ktcwwov.bar"; classtype:attempted-recon; sid:200001666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ktltos.cyou"; classtype:attempted-recon; sid:200001667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.lbjcqh.cyou"; classtype:attempted-recon; sid:200001668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.lpmefip.bar"; classtype:attempted-recon; sid:200001669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.lquyvj.cyou"; classtype:attempted-recon; sid:200001670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.mjgkwb.cyou"; classtype:attempted-recon; sid:200001671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.molxoa.cyou"; classtype:attempted-recon; sid:200001672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.mvspqa.cyou"; classtype:attempted-recon; sid:200001673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.nqhywi.cyou"; classtype:attempted-recon; sid:200001674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.nsywex.cyou"; classtype:attempted-recon; sid:200001675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ntfwiyr.bar"; classtype:attempted-recon; sid:200001676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ntk466j.tokyo"; classtype:attempted-recon; sid:200001677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200001678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.oeauteo.bar"; classtype:attempted-recon; sid:200001679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ohhclj.cyou"; classtype:attempted-recon; sid:200001680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.onjfanv.bar"; classtype:attempted-recon; sid:200001681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.owaiyut.bar"; classtype:attempted-recon; sid:200001682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.oxo5uzj.tokyo"; classtype:attempted-recon; sid:200001683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.pknnlio.bar"; classtype:attempted-recon; sid:200001684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.pnl01rh.tokyo"; classtype:attempted-recon; sid:200001685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.pnm3imk.tokyo"; classtype:attempted-recon; sid:200001686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.qnswad.cyou"; classtype:attempted-recon; sid:200001687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.qoccyx.sa.com"; classtype:attempted-recon; sid:200001688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.qr9csce.tokyo"; classtype:attempted-recon; sid:200001689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.qyrlqd.cyou"; classtype:attempted-recon; sid:200001690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.rfoqkx.cyou"; classtype:attempted-recon; sid:200001691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.rn0xdmv.tokyo"; classtype:attempted-recon; sid:200001692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.rnwggn.cyou"; classtype:attempted-recon; sid:200001693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.rqgjzca.tokyo"; classtype:attempted-recon; sid:200001694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.rvzdfax.bar"; classtype:attempted-recon; sid:200001695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.schzxh.cyou"; classtype:attempted-recon; sid:200001696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.sfhghim.bar"; classtype:attempted-recon; sid:200001697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.t0ec6bw.tokyo"; classtype:attempted-recon; sid:200001698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.t6ncsda.tokyo"; classtype:attempted-recon; sid:200001699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.tdyoar.cyou"; classtype:attempted-recon; sid:200001700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.towybn.cyou"; classtype:attempted-recon; sid:200001701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.tp9ufdn.tokyo"; classtype:attempted-recon; sid:200001702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.u8b21na.tokyo"; classtype:attempted-recon; sid:200001703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.udbgrm.cyou"; classtype:attempted-recon; sid:200001704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ughrxg.cyou"; classtype:attempted-recon; sid:200001705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.umceew.cyou"; classtype:attempted-recon; sid:200001706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.uprcqy.cyou"; classtype:attempted-recon; sid:200001707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.urw49nf.tokyo"; classtype:attempted-recon; sid:200001708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.vbdcvc.cyou"; classtype:attempted-recon; sid:200001709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.vbiuzus.bar"; classtype:attempted-recon; sid:200001710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.vflcpnz.bar"; classtype:attempted-recon; sid:200001711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.vgtkezc.bar"; classtype:attempted-recon; sid:200001712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.vhvaed.cyou"; classtype:attempted-recon; sid:200001713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.vl2s0dl.tokyo"; classtype:attempted-recon; sid:200001714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.vqsejg.cyou"; classtype:attempted-recon; sid:200001715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200001716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.wddyfx.cyou"; classtype:attempted-recon; sid:200001717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.whtllp.cyou"; classtype:attempted-recon; sid:200001718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.x1y65xf.tokyo"; classtype:attempted-recon; sid:200001719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xbmdtb.cyou"; classtype:attempted-recon; sid:200001720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xjwvxks.bar"; classtype:attempted-recon; sid:200001721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xkukewn.bar"; classtype:attempted-recon; sid:200001722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xruwfho.bar"; classtype:attempted-recon; sid:200001723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xtquna8.tokyo"; classtype:attempted-recon; sid:200001724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xw5wonm.tokyo"; classtype:attempted-recon; sid:200001725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xxqgjdj.bar"; classtype:attempted-recon; sid:200001726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ybmykhr.bar"; classtype:attempted-recon; sid:200001727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.yggusos.tokyo"; classtype:attempted-recon; sid:200001728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.yijxdrm.bar"; classtype:attempted-recon; sid:200001729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.ynlo5if.tokyo"; classtype:attempted-recon; sid:200001730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.yuzksv.cyou"; classtype:attempted-recon; sid:200001731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.zjwtdw.cyou"; classtype:attempted-recon; sid:200001732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.zox9nus.tokyo"; classtype:attempted-recon; sid:200001733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.zsdlgq.cyou"; classtype:attempted-recon; sid:200001734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.zwvk70j.tokyo"; classtype:attempted-recon; sid:200001735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.zyojde.cyou"; classtype:attempted-recon; sid:200001736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.zzzlky.cyou"; classtype:attempted-recon; sid:200001737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avikhnvuij.duckdns.org"; classtype:attempted-recon; sid:200001738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aviotksadq.duckdns.org"; classtype:attempted-recon; sid:200001739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avisaboneee.blogspot.com"; classtype:attempted-recon; sid:200001740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avitalagro.com"; classtype:attempted-recon; sid:200001741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avkjaqzkwr.duckdns.org"; classtype:attempted-recon; sid:200001742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avkvxxmikj.duckdns.org"; classtype:attempted-recon; sid:200001743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avlvcemetw.duckdns.org"; classtype:attempted-recon; sid:200001744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avnusdokoq.duckdns.org"; classtype:attempted-recon; sid:200001745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avookkwqkl.duckdns.org"; classtype:attempted-recon; sid:200001746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avoutrygle.duckdns.org"; classtype:attempted-recon; sid:200001747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avrapnnlvd.duckdns.org"; classtype:attempted-recon; sid:200001748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.1dhskdt.tokyo"; classtype:attempted-recon; sid:200001749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.1gdr53n.tokyo"; classtype:attempted-recon; sid:200001750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.2aaiklj.tokyo"; classtype:attempted-recon; sid:200001751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.6hqstri.tokyo"; classtype:attempted-recon; sid:200001752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.9m1dx7m.tokyo"; classtype:attempted-recon; sid:200001753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.a59wwgh.tokyo"; classtype:attempted-recon; sid:200001754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ad6zu4j.tokyo"; classtype:attempted-recon; sid:200001755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.aoadwx.sa.com"; classtype:attempted-recon; sid:200001756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.aprjql.cyou"; classtype:attempted-recon; sid:200001757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.axvpsr.sa.com"; classtype:attempted-recon; sid:200001758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ayynuu.cyou"; classtype:attempted-recon; sid:200001759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bbogvx.sa.com"; classtype:attempted-recon; sid:200001760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bcowma1.tokyo"; classtype:attempted-recon; sid:200001761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.befcgi.sa.com"; classtype:attempted-recon; sid:200001762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bhzykr.sa.com"; classtype:attempted-recon; sid:200001763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bjbh03z.tokyo"; classtype:attempted-recon; sid:200001764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bjlhhf.sa.com"; classtype:attempted-recon; sid:200001765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bnequq.cyou"; classtype:attempted-recon; sid:200001766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bomvpw.sa.com"; classtype:attempted-recon; sid:200001767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bqtksis.tokyo"; classtype:attempted-recon; sid:200001768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.bytirnb.bar"; classtype:attempted-recon; sid:200001769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ckjvqn.cyou"; classtype:attempted-recon; sid:200001770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.cktnal.cyou"; classtype:attempted-recon; sid:200001771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.cldtta.sa.com"; classtype:attempted-recon; sid:200001772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.cvtbit.sa.com"; classtype:attempted-recon; sid:200001773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.cxzuod.sa.com"; classtype:attempted-recon; sid:200001774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.daoxal.sa.com"; classtype:attempted-recon; sid:200001775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.dcggok.sa.com"; classtype:attempted-recon; sid:200001776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.dzlhme.sa.com"; classtype:attempted-recon; sid:200001777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.dzmeui.sa.com"; classtype:attempted-recon; sid:200001778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200001779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ebejok.sa.com"; classtype:attempted-recon; sid:200001780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200001781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.edordv.cyou"; classtype:attempted-recon; sid:200001782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.eeeejz.cyou"; classtype:attempted-recon; sid:200001783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ek6va0y.tokyo"; classtype:attempted-recon; sid:200001784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ekyhckm.tokyo"; classtype:attempted-recon; sid:200001785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.emutiy.cyou"; classtype:attempted-recon; sid:200001786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.epduyp.sa.com"; classtype:attempted-recon; sid:200001787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.eudyfc0.tokyo"; classtype:attempted-recon; sid:200001788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.evsrns.cyou"; classtype:attempted-recon; sid:200001789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200001790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.femqam.cyou"; classtype:attempted-recon; sid:200001791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.fnzxzx.cyou"; classtype:attempted-recon; sid:200001792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.fozmyn.cyou"; classtype:attempted-recon; sid:200001793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.fqcxro.cyou"; classtype:attempted-recon; sid:200001794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.fvxazeg.bar"; classtype:attempted-recon; sid:200001795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.gbrjfas.bar"; classtype:attempted-recon; sid:200001796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ggjomnz.bar"; classtype:attempted-recon; sid:200001797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.gijebej.bar"; classtype:attempted-recon; sid:200001798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.gisyli.cyou"; classtype:attempted-recon; sid:200001799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.gmaphld.bar"; classtype:attempted-recon; sid:200001800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.gnvikzo.bar"; classtype:attempted-recon; sid:200001801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.gpelhdu.bar"; classtype:attempted-recon; sid:200001802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.gxkcxhn.bar"; classtype:attempted-recon; sid:200001803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.hdyn4ul.tokyo"; classtype:attempted-recon; sid:200001804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.hjcbmcu.bar"; classtype:attempted-recon; sid:200001805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.hmppcy.cyou"; classtype:attempted-recon; sid:200001806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.hnzbsyi.bar"; classtype:attempted-recon; sid:200001807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.i9ipcur.tokyo"; classtype:attempted-recon; sid:200001808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.i9jfvsc.tokyo"; classtype:attempted-recon; sid:200001809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.iltcsk.cyou"; classtype:attempted-recon; sid:200001810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.iojyii.cyou"; classtype:attempted-recon; sid:200001811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.jjh5qc9.tokyo"; classtype:attempted-recon; sid:200001812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.jkbtvl.cyou"; classtype:attempted-recon; sid:200001813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.jrxtrx.cyou"; classtype:attempted-recon; sid:200001814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.jsboug.cyou"; classtype:attempted-recon; sid:200001815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.kaldkzh.bar"; classtype:attempted-recon; sid:200001816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.kebujh.cyou"; classtype:attempted-recon; sid:200001817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.kfo1w27.tokyo"; classtype:attempted-recon; sid:200001818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.kqamky.cyou"; classtype:attempted-recon; sid:200001819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ktltos.cyou"; classtype:attempted-recon; sid:200001820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.lrwvtyt.bar"; classtype:attempted-recon; sid:200001821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.mbizjf.cyou"; classtype:attempted-recon; sid:200001822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.mjgkwb.cyou"; classtype:attempted-recon; sid:200001823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.nlxlcrg.bar"; classtype:attempted-recon; sid:200001824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.nqhywi.cyou"; classtype:attempted-recon; sid:200001825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ntk466j.tokyo"; classtype:attempted-recon; sid:200001826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200001827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.oeauteo.bar"; classtype:attempted-recon; sid:200001828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ohhclj.cyou"; classtype:attempted-recon; sid:200001829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.onjfanv.bar"; classtype:attempted-recon; sid:200001830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.orlkpu.cyou"; classtype:attempted-recon; sid:200001831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.ouvqak.cyou"; classtype:attempted-recon; sid:200001832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.oxo5uzj.tokyo"; classtype:attempted-recon; sid:200001833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.pknnlio.bar"; classtype:attempted-recon; sid:200001834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.plmioax.bar"; classtype:attempted-recon; sid:200001835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.q3x8vmb.tokyo"; classtype:attempted-recon; sid:200001836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.qfnplv.sa.com"; classtype:attempted-recon; sid:200001837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.qtjufvf.tokyo"; classtype:attempted-recon; sid:200001838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.qyrlqd.cyou"; classtype:attempted-recon; sid:200001839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.rbqkzx.cyou"; classtype:attempted-recon; sid:200001840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.relwog.cyou"; classtype:attempted-recon; sid:200001841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.rfoqkx.cyou"; classtype:attempted-recon; sid:200001842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.rfuwmd.cyou"; classtype:attempted-recon; sid:200001843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.rn0xdmv.tokyo"; classtype:attempted-recon; sid:200001844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.rvzdfax.bar"; classtype:attempted-recon; sid:200001845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.rybtstu.bar"; classtype:attempted-recon; sid:200001846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.sciatmc.bar"; classtype:attempted-recon; sid:200001847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.sxgakd.cyou"; classtype:attempted-recon; sid:200001848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.t0ec6bw.tokyo"; classtype:attempted-recon; sid:200001849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.tdyoar.cyou"; classtype:attempted-recon; sid:200001850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.tllpkf.cyou"; classtype:attempted-recon; sid:200001851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.tlqzfl.cyou"; classtype:attempted-recon; sid:200001852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.tzxgqw.cyou"; classtype:attempted-recon; sid:200001853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.uieihm.cyou"; classtype:attempted-recon; sid:200001854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.uleyron.bar"; classtype:attempted-recon; sid:200001855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.umceew.cyou"; classtype:attempted-recon; sid:200001856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.urw49nf.tokyo"; classtype:attempted-recon; sid:200001857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.vbdcvc.cyou"; classtype:attempted-recon; sid:200001858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.vflcpnz.bar"; classtype:attempted-recon; sid:200001859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.vgrsaup.bar"; classtype:attempted-recon; sid:200001860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.vhvaed.cyou"; classtype:attempted-recon; sid:200001861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200001862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.w7q6yld.tokyo"; classtype:attempted-recon; sid:200001863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.wkcbmds.bar"; classtype:attempted-recon; sid:200001864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.x1o0ou2.tokyo"; classtype:attempted-recon; sid:200001865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.x3ywxsy.tokyo"; classtype:attempted-recon; sid:200001866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.xbmdtb.cyou"; classtype:attempted-recon; sid:200001867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.xjwvxks.bar"; classtype:attempted-recon; sid:200001868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.xtquna8.tokyo"; classtype:attempted-recon; sid:200001869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.y6o61cj.tokyo"; classtype:attempted-recon; sid:200001870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.yijxdrm.bar"; classtype:attempted-recon; sid:200001871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.yuzksv.cyou"; classtype:attempted-recon; sid:200001872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.yvuirw.cyou"; classtype:attempted-recon; sid:200001873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.zamgwo.cyou"; classtype:attempted-recon; sid:200001874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.zbvjke.cyou"; classtype:attempted-recon; sid:200001875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.zox9nus.tokyo"; classtype:attempted-recon; sid:200001876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.zsdlgq.cyou"; classtype:attempted-recon; sid:200001877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.zslnpb.cyou"; classtype:attempted-recon; sid:200001878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.zyojde.cyou"; classtype:attempted-recon; sid:200001879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.0aluzd9.tokyo"; classtype:attempted-recon; sid:200001880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200001881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.1gdr53n.tokyo"; classtype:attempted-recon; sid:200001882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.2aaiklj.tokyo"; classtype:attempted-recon; sid:200001883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.3e9h13w.tokyo"; classtype:attempted-recon; sid:200001884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.54z2thv.tokyo"; classtype:attempted-recon; sid:200001885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.67ets1t.tokyo"; classtype:attempted-recon; sid:200001886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.6hqstri.tokyo"; classtype:attempted-recon; sid:200001887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.8b9onfo.tokyo"; classtype:attempted-recon; sid:200001888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.9m1dx7m.tokyo"; classtype:attempted-recon; sid:200001889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.9m4ymbi.tokyo"; classtype:attempted-recon; sid:200001890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.acojek2.tokyo"; classtype:attempted-recon; sid:200001891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.aoadwx.sa.com"; classtype:attempted-recon; sid:200001892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.asclab.sa.com"; classtype:attempted-recon; sid:200001893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.asivvk.sa.com"; classtype:attempted-recon; sid:200001894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.axwmwk.sa.com"; classtype:attempted-recon; sid:200001895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.bbogvx.sa.com"; classtype:attempted-recon; sid:200001896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.bcowma1.tokyo"; classtype:attempted-recon; sid:200001897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.bfzfkk.cyou"; classtype:attempted-recon; sid:200001898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.bhzykr.sa.com"; classtype:attempted-recon; sid:200001899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.bjlhhf.sa.com"; classtype:attempted-recon; sid:200001900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.blblbk.sa.com"; classtype:attempted-recon; sid:200001901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.bmlrsvr.bar"; classtype:attempted-recon; sid:200001902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.bqtksis.tokyo"; classtype:attempted-recon; sid:200001903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.brj3o6d.tokyo"; classtype:attempted-recon; sid:200001904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200001905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ceszno.sa.com"; classtype:attempted-recon; sid:200001906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.cldtta.sa.com"; classtype:attempted-recon; sid:200001907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.cmkqku.sa.com"; classtype:attempted-recon; sid:200001908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.cvtbit.sa.com"; classtype:attempted-recon; sid:200001909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.cxzuod.sa.com"; classtype:attempted-recon; sid:200001910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.daoxal.sa.com"; classtype:attempted-recon; sid:200001911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.dlvwhc.cyou"; classtype:attempted-recon; sid:200001912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.dwbuiz.cyou"; classtype:attempted-recon; sid:200001913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.dzmeui.sa.com"; classtype:attempted-recon; sid:200001914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200001915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ebejok.sa.com"; classtype:attempted-recon; sid:200001916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200001917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ecoi15j.tokyo"; classtype:attempted-recon; sid:200001918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ektixe.cyou"; classtype:attempted-recon; sid:200001919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.epduyp.sa.com"; classtype:attempted-recon; sid:200001920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.eudyfc0.tokyo"; classtype:attempted-recon; sid:200001921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.evsrns.cyou"; classtype:attempted-recon; sid:200001922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ewmqdi.sa.com"; classtype:attempted-recon; sid:200001923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200001924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200001925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.fozmyn.cyou"; classtype:attempted-recon; sid:200001926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.fvxazeg.bar"; classtype:attempted-recon; sid:200001927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.gbrjfas.bar"; classtype:attempted-recon; sid:200001928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.gikdch.cyou"; classtype:attempted-recon; sid:200001929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.gisyli.cyou"; classtype:attempted-recon; sid:200001930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.gkvkwmv.bar"; classtype:attempted-recon; sid:200001931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.gmaphld.bar"; classtype:attempted-recon; sid:200001932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.gpelhdu.bar"; classtype:attempted-recon; sid:200001933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.gxkcxhn.bar"; classtype:attempted-recon; sid:200001934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.hnzbsyi.bar"; classtype:attempted-recon; sid:200001935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.hqmwm27.tokyo"; classtype:attempted-recon; sid:200001936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ht6zjbe.tokyo"; classtype:attempted-recon; sid:200001937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.i59bh36.tokyo"; classtype:attempted-recon; sid:200001938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.iltcsk.cyou"; classtype:attempted-recon; sid:200001939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.iqvrzg.cyou"; classtype:attempted-recon; sid:200001940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.j5ubutg.tokyo"; classtype:attempted-recon; sid:200001941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.jjh5qc9.tokyo"; classtype:attempted-recon; sid:200001942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.jkbtvl.cyou"; classtype:attempted-recon; sid:200001943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.jrxtrx.cyou"; classtype:attempted-recon; sid:200001944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kaldkzh.bar"; classtype:attempted-recon; sid:200001945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kcbnudb.bar"; classtype:attempted-recon; sid:200001946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kfo1w27.tokyo"; classtype:attempted-recon; sid:200001947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kgwqgz.cyou"; classtype:attempted-recon; sid:200001948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.khfzku.cyou"; classtype:attempted-recon; sid:200001949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kqamky.cyou"; classtype:attempted-recon; sid:200001950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ktcwwov.bar"; classtype:attempted-recon; sid:200001951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ktltos.cyou"; classtype:attempted-recon; sid:200001952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kubvkj.cyou"; classtype:attempted-recon; sid:200001953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kw0cnwm.tokyo"; classtype:attempted-recon; sid:200001954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.kzbhsj.sa.com"; classtype:attempted-recon; sid:200001955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.lbjcqh.cyou"; classtype:attempted-recon; sid:200001956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.lhrlkr.cyou"; classtype:attempted-recon; sid:200001957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.lpmefip.bar"; classtype:attempted-recon; sid:200001958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.lquyvj.cyou"; classtype:attempted-recon; sid:200001959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.lrwvtyt.bar"; classtype:attempted-recon; sid:200001960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.lxiapm.cyou"; classtype:attempted-recon; sid:200001961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.molxoa.cyou"; classtype:attempted-recon; sid:200001962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.mvspqa.cyou"; classtype:attempted-recon; sid:200001963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.nlxlcrg.bar"; classtype:attempted-recon; sid:200001964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.nqhywi.cyou"; classtype:attempted-recon; sid:200001965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.nsywex.cyou"; classtype:attempted-recon; sid:200001966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200001967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ohhclj.cyou"; classtype:attempted-recon; sid:200001968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ojissf0.tokyo"; classtype:attempted-recon; sid:200001969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.onjfanv.bar"; classtype:attempted-recon; sid:200001970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.oqeptzu.bar"; classtype:attempted-recon; sid:200001971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.owaiyut.bar"; classtype:attempted-recon; sid:200001972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.pknnlio.bar"; classtype:attempted-recon; sid:200001973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.plmioax.bar"; classtype:attempted-recon; sid:200001974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.pqxamup.bar"; classtype:attempted-recon; sid:200001975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.q3x8vmb.tokyo"; classtype:attempted-recon; sid:200001976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.qr9csce.tokyo"; classtype:attempted-recon; sid:200001977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.qrvshpr.bar"; classtype:attempted-recon; sid:200001978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.qyrlqd.cyou"; classtype:attempted-recon; sid:200001979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.rbqkzx.cyou"; classtype:attempted-recon; sid:200001980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.relwog.cyou"; classtype:attempted-recon; sid:200001981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.rvzdfax.bar"; classtype:attempted-recon; sid:200001982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.rybtstu.bar"; classtype:attempted-recon; sid:200001983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.segeva.cyou"; classtype:attempted-recon; sid:200001984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.sfhghim.bar"; classtype:attempted-recon; sid:200001985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.sfhjtf.cyou"; classtype:attempted-recon; sid:200001986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.sgakhql.bar"; classtype:attempted-recon; sid:200001987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.sxgakd.cyou"; classtype:attempted-recon; sid:200001988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.tlqzfl.cyou"; classtype:attempted-recon; sid:200001989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.tp9ufdn.tokyo"; classtype:attempted-recon; sid:200001990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.u8b21na.tokyo"; classtype:attempted-recon; sid:200001991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.udbgrm.cyou"; classtype:attempted-recon; sid:200001992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.uleyron.bar"; classtype:attempted-recon; sid:200001993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vbdcvc.cyou"; classtype:attempted-recon; sid:200001994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vbiuzus.bar"; classtype:attempted-recon; sid:200001995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vflcpnz.bar"; classtype:attempted-recon; sid:200001996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vgrsaup.bar"; classtype:attempted-recon; sid:200001997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vgtkezc.bar"; classtype:attempted-recon; sid:200001998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vhandn.cyou"; classtype:attempted-recon; sid:200001999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vhvaed.cyou"; classtype:attempted-recon; sid:200002000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vl2s0dl.tokyo"; classtype:attempted-recon; sid:200002001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.vmiutt.cyou"; classtype:attempted-recon; sid:200002002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200002003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.w7q6yld.tokyo"; classtype:attempted-recon; sid:200002004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.wddyfx.cyou"; classtype:attempted-recon; sid:200002005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.whtllp.cyou"; classtype:attempted-recon; sid:200002006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.wysprt.cyou"; classtype:attempted-recon; sid:200002007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.x1o0ou2.tokyo"; classtype:attempted-recon; sid:200002008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.x3ywxsy.tokyo"; classtype:attempted-recon; sid:200002009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.xtquna8.tokyo"; classtype:attempted-recon; sid:200002010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ycfbzf.cyou"; classtype:attempted-recon; sid:200002011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.yijxdrm.bar"; classtype:attempted-recon; sid:200002012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.ynlo5if.tokyo"; classtype:attempted-recon; sid:200002013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.yuzksv.cyou"; classtype:attempted-recon; sid:200002014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.yvuirw.cyou"; classtype:attempted-recon; sid:200002015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.zbvjke.cyou"; classtype:attempted-recon; sid:200002016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.zlorenj.tokyo"; classtype:attempted-recon; sid:200002017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.zox9nus.tokyo"; classtype:attempted-recon; sid:200002018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.zsdlgq.cyou"; classtype:attempted-recon; sid:200002019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.zwvk70j.tokyo"; classtype:attempted-recon; sid:200002020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.zyojde.cyou"; classtype:attempted-recon; sid:200002021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.0aluzd9.tokyo"; classtype:attempted-recon; sid:200002022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.0dkul2k.tokyo"; classtype:attempted-recon; sid:200002023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200002024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.1dhskdt.tokyo"; classtype:attempted-recon; sid:200002025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.1gdr53n.tokyo"; classtype:attempted-recon; sid:200002026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200002027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.3e9h13w.tokyo"; classtype:attempted-recon; sid:200002028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.3r2oxoq.tokyo"; classtype:attempted-recon; sid:200002029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.54z2thv.tokyo"; classtype:attempted-recon; sid:200002030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.67ets1t.tokyo"; classtype:attempted-recon; sid:200002031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.6ah1rxz.tokyo"; classtype:attempted-recon; sid:200002032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.7sq5xol.tokyo"; classtype:attempted-recon; sid:200002033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.a59wwgh.tokyo"; classtype:attempted-recon; sid:200002034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.aakapv.sa.com"; classtype:attempted-recon; sid:200002035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.acojek2.tokyo"; classtype:attempted-recon; sid:200002036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.agltfj.cyou"; classtype:attempted-recon; sid:200002037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.anqcgo.cyou"; classtype:attempted-recon; sid:200002038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.aoadwx.sa.com"; classtype:attempted-recon; sid:200002039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.aprjql.cyou"; classtype:attempted-recon; sid:200002040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.asclab.sa.com"; classtype:attempted-recon; sid:200002041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.asivvk.sa.com"; classtype:attempted-recon; sid:200002042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.axwmwk.sa.com"; classtype:attempted-recon; sid:200002043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ayczzs.cyou"; classtype:attempted-recon; sid:200002044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bbogvx.sa.com"; classtype:attempted-recon; sid:200002045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bcowma1.tokyo"; classtype:attempted-recon; sid:200002046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.befcgi.sa.com"; classtype:attempted-recon; sid:200002047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bfzfkk.cyou"; classtype:attempted-recon; sid:200002048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bhzykr.sa.com"; classtype:attempted-recon; sid:200002049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bjlhhf.sa.com"; classtype:attempted-recon; sid:200002050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bmlrsvr.bar"; classtype:attempted-recon; sid:200002051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bomvpw.sa.com"; classtype:attempted-recon; sid:200002052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.brpccx.sa.com"; classtype:attempted-recon; sid:200002053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.bv6u6sw.tokyo"; classtype:attempted-recon; sid:200002054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200002055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ceszno.sa.com"; classtype:attempted-recon; sid:200002056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ckjvqn.cyou"; classtype:attempted-recon; sid:200002057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.cou17gj.tokyo"; classtype:attempted-recon; sid:200002058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.cvtbit.sa.com"; classtype:attempted-recon; sid:200002059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.daoxal.sa.com"; classtype:attempted-recon; sid:200002060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.dcggok.sa.com"; classtype:attempted-recon; sid:200002061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.dpovcb.sa.com"; classtype:attempted-recon; sid:200002062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.dwbuiz.cyou"; classtype:attempted-recon; sid:200002063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.dzmeui.sa.com"; classtype:attempted-recon; sid:200002064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200002065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ebejok.sa.com"; classtype:attempted-recon; sid:200002066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ecoi15j.tokyo"; classtype:attempted-recon; sid:200002067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ek6va0y.tokyo"; classtype:attempted-recon; sid:200002068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ektixe.cyou"; classtype:attempted-recon; sid:200002069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ekyhckm.tokyo"; classtype:attempted-recon; sid:200002070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.evsrns.cyou"; classtype:attempted-recon; sid:200002071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ewmqdi.sa.com"; classtype:attempted-recon; sid:200002072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200002073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200002074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.fbcsrf.sa.com"; classtype:attempted-recon; sid:200002075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.femqam.cyou"; classtype:attempted-recon; sid:200002076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200002077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.fqcxro.cyou"; classtype:attempted-recon; sid:200002078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ftiwnj.cyou"; classtype:attempted-recon; sid:200002079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.fvxazeg.bar"; classtype:attempted-recon; sid:200002080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ggjomnz.bar"; classtype:attempted-recon; sid:200002081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.gijebej.bar"; classtype:attempted-recon; sid:200002082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.gkvkwmv.bar"; classtype:attempted-recon; sid:200002083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.goinjd.cyou"; classtype:attempted-recon; sid:200002084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.gpelhdu.bar"; classtype:attempted-recon; sid:200002085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.hehbty1.tokyo"; classtype:attempted-recon; sid:200002086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.hjcbmcu.bar"; classtype:attempted-recon; sid:200002087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.hnghnil.bar"; classtype:attempted-recon; sid:200002088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.hnzbsyi.bar"; classtype:attempted-recon; sid:200002089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ht6zjbe.tokyo"; classtype:attempted-recon; sid:200002090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.hxr0gop.tokyo"; classtype:attempted-recon; sid:200002091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.i9ipcur.tokyo"; classtype:attempted-recon; sid:200002092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.iojyii.cyou"; classtype:attempted-recon; sid:200002093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.izmggt.cyou"; classtype:attempted-recon; sid:200002094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.jsboug.cyou"; classtype:attempted-recon; sid:200002095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.k30p5dz.tokyo"; classtype:attempted-recon; sid:200002096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.kpv6yhp.tokyo"; classtype:attempted-recon; sid:200002097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.kqamky.cyou"; classtype:attempted-recon; sid:200002098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.krhwpv.cyou"; classtype:attempted-recon; sid:200002099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.kubvkj.cyou"; classtype:attempted-recon; sid:200002100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.kw0cnwm.tokyo"; classtype:attempted-recon; sid:200002101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.lhrlkr.cyou"; classtype:attempted-recon; sid:200002102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.lk6s17b.tokyo"; classtype:attempted-recon; sid:200002103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.lrwvtyt.bar"; classtype:attempted-recon; sid:200002104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.mjgkwb.cyou"; classtype:attempted-recon; sid:200002105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.mmkzepw.tokyo"; classtype:attempted-recon; sid:200002106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.molxoa.cyou"; classtype:attempted-recon; sid:200002107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.mvspqa.cyou"; classtype:attempted-recon; sid:200002108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.nlxlcrg.bar"; classtype:attempted-recon; sid:200002109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.nsywex.cyou"; classtype:attempted-recon; sid:200002110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ntk466j.tokyo"; classtype:attempted-recon; sid:200002111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200002112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ohhclj.cyou"; classtype:attempted-recon; sid:200002113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.onjfanv.bar"; classtype:attempted-recon; sid:200002114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.orlkpu.cyou"; classtype:attempted-recon; sid:200002115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ouvqak.cyou"; classtype:attempted-recon; sid:200002116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.owaiyut.bar"; classtype:attempted-recon; sid:200002117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.p2pfwd4.tokyo"; classtype:attempted-recon; sid:200002118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.pknnlio.bar"; classtype:attempted-recon; sid:200002119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.plmioax.bar"; classtype:attempted-recon; sid:200002120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.pnm3imk.tokyo"; classtype:attempted-recon; sid:200002121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ppsbcf.cyou"; classtype:attempted-recon; sid:200002122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.pqxamup.bar"; classtype:attempted-recon; sid:200002123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.qnswad.cyou"; classtype:attempted-recon; sid:200002124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.qr9csce.tokyo"; classtype:attempted-recon; sid:200002125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.qrvshpr.bar"; classtype:attempted-recon; sid:200002126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.qtjufvf.tokyo"; classtype:attempted-recon; sid:200002127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.rbqkzx.cyou"; classtype:attempted-recon; sid:200002128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.relwog.cyou"; classtype:attempted-recon; sid:200002129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.rljqbs.cyou"; classtype:attempted-recon; sid:200002130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.rn0xdmv.tokyo"; classtype:attempted-recon; sid:200002131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.rnwggn.cyou"; classtype:attempted-recon; sid:200002132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.rqgjzca.tokyo"; classtype:attempted-recon; sid:200002133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.rybtstu.bar"; classtype:attempted-recon; sid:200002134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.sciatmc.bar"; classtype:attempted-recon; sid:200002135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.sfhghim.bar"; classtype:attempted-recon; sid:200002136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.sgakhql.bar"; classtype:attempted-recon; sid:200002137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.t0ec6bw.tokyo"; classtype:attempted-recon; sid:200002138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.t6ncsda.tokyo"; classtype:attempted-recon; sid:200002139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.tbbahr5.tokyo"; classtype:attempted-recon; sid:200002140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.tllpkf.cyou"; classtype:attempted-recon; sid:200002141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.tp9ufdn.tokyo"; classtype:attempted-recon; sid:200002142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.u8b21na.tokyo"; classtype:attempted-recon; sid:200002143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.udbgrm.cyou"; classtype:attempted-recon; sid:200002144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ughrxg.cyou"; classtype:attempted-recon; sid:200002145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.uieihm.cyou"; classtype:attempted-recon; sid:200002146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.uleyron.bar"; classtype:attempted-recon; sid:200002147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.uvgoago.tokyo"; classtype:attempted-recon; sid:200002148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vbdcvc.cyou"; classtype:attempted-recon; sid:200002149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vgtkezc.bar"; classtype:attempted-recon; sid:200002150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vhandn.cyou"; classtype:attempted-recon; sid:200002151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vhvaed.cyou"; classtype:attempted-recon; sid:200002152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vl2s0dl.tokyo"; classtype:attempted-recon; sid:200002153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vmiutt.cyou"; classtype:attempted-recon; sid:200002154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vqsejg.cyou"; classtype:attempted-recon; sid:200002155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.vsqafmp.bar"; classtype:attempted-recon; sid:200002156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.w7q6yld.tokyo"; classtype:attempted-recon; sid:200002157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.wddyfx.cyou"; classtype:attempted-recon; sid:200002158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.wpbssyd.bar"; classtype:attempted-recon; sid:200002159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.x3ywxsy.tokyo"; classtype:attempted-recon; sid:200002160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xbmdtb.cyou"; classtype:attempted-recon; sid:200002161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xjwvxks.bar"; classtype:attempted-recon; sid:200002162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xruwfho.bar"; classtype:attempted-recon; sid:200002163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xtquna8.tokyo"; classtype:attempted-recon; sid:200002164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xw5wonm.tokyo"; classtype:attempted-recon; sid:200002165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xxqgjdj.bar"; classtype:attempted-recon; sid:200002166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xyftnix.bar"; classtype:attempted-recon; sid:200002167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.xyrmwug.bar"; classtype:attempted-recon; sid:200002168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.y6o61cj.tokyo"; classtype:attempted-recon; sid:200002169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ybmykhr.bar"; classtype:attempted-recon; sid:200002170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.yggusos.tokyo"; classtype:attempted-recon; sid:200002171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.yklocra.tokyo"; classtype:attempted-recon; sid:200002172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.ynlo5if.tokyo"; classtype:attempted-recon; sid:200002173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.zamgwo.cyou"; classtype:attempted-recon; sid:200002174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.zsdlgq.cyou"; classtype:attempted-recon; sid:200002175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.zslnpb.cyou"; classtype:attempted-recon; sid:200002176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.zwvk70j.tokyo"; classtype:attempted-recon; sid:200002177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.zyojde.cyou"; classtype:attempted-recon; sid:200002178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacerceroi.visacucarnsvserrooeiraio.zzzlky.cyou"; classtype:attempted-recon; sid:200002179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200002180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200002181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.2aaiklj.tokyo"; classtype:attempted-recon; sid:200002182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.2r5v45q.tokyo"; classtype:attempted-recon; sid:200002183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.3e9h13w.tokyo"; classtype:attempted-recon; sid:200002184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.3r2oxoq.tokyo"; classtype:attempted-recon; sid:200002185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.40sbkn9.tokyo"; classtype:attempted-recon; sid:200002186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.54z2thv.tokyo"; classtype:attempted-recon; sid:200002187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.67ets1t.tokyo"; classtype:attempted-recon; sid:200002188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.6ah1rxz.tokyo"; classtype:attempted-recon; sid:200002189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.6hqstri.tokyo"; classtype:attempted-recon; sid:200002190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.7sq5xol.tokyo"; classtype:attempted-recon; sid:200002191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.acojek2.tokyo"; classtype:attempted-recon; sid:200002192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.anqcgo.cyou"; classtype:attempted-recon; sid:200002193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.aprjql.cyou"; classtype:attempted-recon; sid:200002194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.asivvk.sa.com"; classtype:attempted-recon; sid:200002195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.axwmwk.sa.com"; classtype:attempted-recon; sid:200002196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ayynuu.cyou"; classtype:attempted-recon; sid:200002197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.bbogvx.sa.com"; classtype:attempted-recon; sid:200002198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.bcowma1.tokyo"; classtype:attempted-recon; sid:200002199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.befcgi.sa.com"; classtype:attempted-recon; sid:200002200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.bfzfkk.cyou"; classtype:attempted-recon; sid:200002201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.blblbk.sa.com"; classtype:attempted-recon; sid:200002202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.bnequq.cyou"; classtype:attempted-recon; sid:200002203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.bomvpw.sa.com"; classtype:attempted-recon; sid:200002204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.brj3o6d.tokyo"; classtype:attempted-recon; sid:200002205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.bytirnb.bar"; classtype:attempted-recon; sid:200002206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.cdteph.cyou"; classtype:attempted-recon; sid:200002207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ceszno.sa.com"; classtype:attempted-recon; sid:200002208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.cktnal.cyou"; classtype:attempted-recon; sid:200002209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.cldtta.sa.com"; classtype:attempted-recon; sid:200002210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.cou17gj.tokyo"; classtype:attempted-recon; sid:200002211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ctaf1bo.tokyo"; classtype:attempted-recon; sid:200002212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.cvtbit.sa.com"; classtype:attempted-recon; sid:200002213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.cxzuod.sa.com"; classtype:attempted-recon; sid:200002214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.daoxal.sa.com"; classtype:attempted-recon; sid:200002215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.dcggok.sa.com"; classtype:attempted-recon; sid:200002216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.devvza.cyou"; classtype:attempted-recon; sid:200002217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.dwbuiz.cyou"; classtype:attempted-recon; sid:200002218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.dwhodwb.tokyo"; classtype:attempted-recon; sid:200002219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.dzmeui.sa.com"; classtype:attempted-recon; sid:200002220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ebejok.sa.com"; classtype:attempted-recon; sid:200002221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ek6va0y.tokyo"; classtype:attempted-recon; sid:200002222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ektixe.cyou"; classtype:attempted-recon; sid:200002223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ekyhckm.tokyo"; classtype:attempted-recon; sid:200002224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.erstm5s.tokyo"; classtype:attempted-recon; sid:200002225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.eudyfc0.tokyo"; classtype:attempted-recon; sid:200002226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ewjvlp.sa.com"; classtype:attempted-recon; sid:200002227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ewmqdi.sa.com"; classtype:attempted-recon; sid:200002228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200002229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200002230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.femqam.cyou"; classtype:attempted-recon; sid:200002231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200002232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.fqcxro.cyou"; classtype:attempted-recon; sid:200002233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ftiwnj.cyou"; classtype:attempted-recon; sid:200002234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.fvxazeg.bar"; classtype:attempted-recon; sid:200002235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.gbrjfas.bar"; classtype:attempted-recon; sid:200002236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ggjomnz.bar"; classtype:attempted-recon; sid:200002237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.gisyli.cyou"; classtype:attempted-recon; sid:200002238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.gkvkwmv.bar"; classtype:attempted-recon; sid:200002239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.gmaphld.bar"; classtype:attempted-recon; sid:200002240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.gpelhdu.bar"; classtype:attempted-recon; sid:200002241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.gxkcxhn.bar"; classtype:attempted-recon; sid:200002242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.hdyn4ul.tokyo"; classtype:attempted-recon; sid:200002243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.hehbty1.tokyo"; classtype:attempted-recon; sid:200002244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.hjcbmcu.bar"; classtype:attempted-recon; sid:200002245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.hnzbsyi.bar"; classtype:attempted-recon; sid:200002246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ht6zjbe.tokyo"; classtype:attempted-recon; sid:200002247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.i59bh36.tokyo"; classtype:attempted-recon; sid:200002248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.iltcsk.cyou"; classtype:attempted-recon; sid:200002249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.iojyii.cyou"; classtype:attempted-recon; sid:200002250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.iqvrzg.cyou"; classtype:attempted-recon; sid:200002251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.jjh5qc9.tokyo"; classtype:attempted-recon; sid:200002252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.jrxtrx.cyou"; classtype:attempted-recon; sid:200002253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.k30p5dz.tokyo"; classtype:attempted-recon; sid:200002254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.kaldkzh.bar"; classtype:attempted-recon; sid:200002255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.kcbnudb.bar"; classtype:attempted-recon; sid:200002256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.kebujh.cyou"; classtype:attempted-recon; sid:200002257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.kfo1w27.tokyo"; classtype:attempted-recon; sid:200002258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.kgwqgz.cyou"; classtype:attempted-recon; sid:200002259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.kpv6yhp.tokyo"; classtype:attempted-recon; sid:200002260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.krhwpv.cyou"; classtype:attempted-recon; sid:200002261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ktcwwov.bar"; classtype:attempted-recon; sid:200002262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.kubvkj.cyou"; classtype:attempted-recon; sid:200002263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.l7cvwgf.tokyo"; classtype:attempted-recon; sid:200002264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ld8y2wm.tokyo"; classtype:attempted-recon; sid:200002265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.lhrlkr.cyou"; classtype:attempted-recon; sid:200002266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.lk6s17b.tokyo"; classtype:attempted-recon; sid:200002267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.lxiapm.cyou"; classtype:attempted-recon; sid:200002268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.mbizjf.cyou"; classtype:attempted-recon; sid:200002269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.mjgkwb.cyou"; classtype:attempted-recon; sid:200002270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.nlxlcrg.bar"; classtype:attempted-recon; sid:200002271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.nqhywi.cyou"; classtype:attempted-recon; sid:200002272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.nsywex.cyou"; classtype:attempted-recon; sid:200002273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200002274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.oeauteo.bar"; classtype:attempted-recon; sid:200002275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ohhclj.cyou"; classtype:attempted-recon; sid:200002276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ojissf0.tokyo"; classtype:attempted-recon; sid:200002277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.oqeptzu.bar"; classtype:attempted-recon; sid:200002278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.orlkpu.cyou"; classtype:attempted-recon; sid:200002279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ouvqak.cyou"; classtype:attempted-recon; sid:200002280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.owaiyut.bar"; classtype:attempted-recon; sid:200002281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.p2pfwd4.tokyo"; classtype:attempted-recon; sid:200002282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.pknnlio.bar"; classtype:attempted-recon; sid:200002283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.pnl01rh.tokyo"; classtype:attempted-recon; sid:200002284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.pnm3imk.tokyo"; classtype:attempted-recon; sid:200002285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ppsbcf.cyou"; classtype:attempted-recon; sid:200002286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.pqxamup.bar"; classtype:attempted-recon; sid:200002287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.q3x8vmb.tokyo"; classtype:attempted-recon; sid:200002288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.qr9csce.tokyo"; classtype:attempted-recon; sid:200002289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.qyrlqd.cyou"; classtype:attempted-recon; sid:200002290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.rbqkzx.cyou"; classtype:attempted-recon; sid:200002291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.rfuwmd.cyou"; classtype:attempted-recon; sid:200002292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.rnwggn.cyou"; classtype:attempted-recon; sid:200002293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.rqgjzca.tokyo"; classtype:attempted-recon; sid:200002294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.rvzdfax.bar"; classtype:attempted-recon; sid:200002295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.rybtstu.bar"; classtype:attempted-recon; sid:200002296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.schzxh.cyou"; classtype:attempted-recon; sid:200002297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.segeva.cyou"; classtype:attempted-recon; sid:200002298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.sfhghim.bar"; classtype:attempted-recon; sid:200002299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.t6ncsda.tokyo"; classtype:attempted-recon; sid:200002300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.tbbahr5.tokyo"; classtype:attempted-recon; sid:200002301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.tlqzfl.cyou"; classtype:attempted-recon; sid:200002302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.togabs.cyou"; classtype:attempted-recon; sid:200002303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.tp9ufdn.tokyo"; classtype:attempted-recon; sid:200002304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.tuyfdv.sa.com"; classtype:attempted-recon; sid:200002305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.tzxgqw.cyou"; classtype:attempted-recon; sid:200002306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ughrxg.cyou"; classtype:attempted-recon; sid:200002307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.umceew.cyou"; classtype:attempted-recon; sid:200002308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.uprcqy.cyou"; classtype:attempted-recon; sid:200002309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.uvgoago.tokyo"; classtype:attempted-recon; sid:200002310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.vflcpnz.bar"; classtype:attempted-recon; sid:200002311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.vhvaed.cyou"; classtype:attempted-recon; sid:200002312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.vl2s0dl.tokyo"; classtype:attempted-recon; sid:200002313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.vsqafmp.bar"; classtype:attempted-recon; sid:200002314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200002315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.wpbssyd.bar"; classtype:attempted-recon; sid:200002316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.x1o0ou2.tokyo"; classtype:attempted-recon; sid:200002317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.x1y65xf.tokyo"; classtype:attempted-recon; sid:200002318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.x3ywxsy.tokyo"; classtype:attempted-recon; sid:200002319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.xbmdtb.cyou"; classtype:attempted-recon; sid:200002320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.xptjwf.sa.com"; classtype:attempted-recon; sid:200002321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.xruwfho.bar"; classtype:attempted-recon; sid:200002322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.xtquna8.tokyo"; classtype:attempted-recon; sid:200002323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.xyrmwug.bar"; classtype:attempted-recon; sid:200002324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.y6o61cj.tokyo"; classtype:attempted-recon; sid:200002325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ybmykhr.bar"; classtype:attempted-recon; sid:200002326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ycfbzf.cyou"; classtype:attempted-recon; sid:200002327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.yggusos.tokyo"; classtype:attempted-recon; sid:200002328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.yijxdrm.bar"; classtype:attempted-recon; sid:200002329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.ynlo5if.tokyo"; classtype:attempted-recon; sid:200002330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.yzepa9c.tokyo"; classtype:attempted-recon; sid:200002331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.zzzlky.cyou"; classtype:attempted-recon; sid:200002332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.0dkul2k.tokyo"; classtype:attempted-recon; sid:200002333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200002334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200002335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.2aaiklj.tokyo"; classtype:attempted-recon; sid:200002336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.3e9h13w.tokyo"; classtype:attempted-recon; sid:200002337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.54z2thv.tokyo"; classtype:attempted-recon; sid:200002338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.67ets1t.tokyo"; classtype:attempted-recon; sid:200002339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.6hqstri.tokyo"; classtype:attempted-recon; sid:200002340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.7sq5xol.tokyo"; classtype:attempted-recon; sid:200002341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.a59wwgh.tokyo"; classtype:attempted-recon; sid:200002342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.aakapv.sa.com"; classtype:attempted-recon; sid:200002343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.acojek2.tokyo"; classtype:attempted-recon; sid:200002344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ad6zu4j.tokyo"; classtype:attempted-recon; sid:200002345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.agltfj.cyou"; classtype:attempted-recon; sid:200002346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.aoadwx.sa.com"; classtype:attempted-recon; sid:200002347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.aprjql.cyou"; classtype:attempted-recon; sid:200002348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.arbzal.sa.com"; classtype:attempted-recon; sid:200002349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.asivvk.sa.com"; classtype:attempted-recon; sid:200002350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.axvpsr.sa.com"; classtype:attempted-recon; sid:200002351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ayynuu.cyou"; classtype:attempted-recon; sid:200002352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bbogvx.sa.com"; classtype:attempted-recon; sid:200002353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bcowma1.tokyo"; classtype:attempted-recon; sid:200002354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.befcgi.sa.com"; classtype:attempted-recon; sid:200002355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bfzfkk.cyou"; classtype:attempted-recon; sid:200002356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bhzykr.sa.com"; classtype:attempted-recon; sid:200002357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bjlhhf.sa.com"; classtype:attempted-recon; sid:200002358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bmlrsvr.bar"; classtype:attempted-recon; sid:200002359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bnequq.cyou"; classtype:attempted-recon; sid:200002360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bomvpw.sa.com"; classtype:attempted-recon; sid:200002361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bqtksis.tokyo"; classtype:attempted-recon; sid:200002362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.brj3o6d.tokyo"; classtype:attempted-recon; sid:200002363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.brpccx.sa.com"; classtype:attempted-recon; sid:200002364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bv6u6sw.tokyo"; classtype:attempted-recon; sid:200002365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.bytirnb.bar"; classtype:attempted-recon; sid:200002366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200002367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.cdteph.cyou"; classtype:attempted-recon; sid:200002368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ceszno.sa.com"; classtype:attempted-recon; sid:200002369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.cfmmcc.sa.com"; classtype:attempted-recon; sid:200002370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ckjvqn.cyou"; classtype:attempted-recon; sid:200002371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.cmkqku.sa.com"; classtype:attempted-recon; sid:200002372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.cou17gj.tokyo"; classtype:attempted-recon; sid:200002373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ctaf1bo.tokyo"; classtype:attempted-recon; sid:200002374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.cvtbit.sa.com"; classtype:attempted-recon; sid:200002375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.devvza.cyou"; classtype:attempted-recon; sid:200002376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.dpovcb.sa.com"; classtype:attempted-recon; sid:200002377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.dwbuiz.cyou"; classtype:attempted-recon; sid:200002378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200002379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ebejok.sa.com"; classtype:attempted-recon; sid:200002380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200002381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ek6va0y.tokyo"; classtype:attempted-recon; sid:200002382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ektixe.cyou"; classtype:attempted-recon; sid:200002383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ekyhckm.tokyo"; classtype:attempted-recon; sid:200002384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.emutiy.cyou"; classtype:attempted-recon; sid:200002385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.epduyp.sa.com"; classtype:attempted-recon; sid:200002386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.erstm5s.tokyo"; classtype:attempted-recon; sid:200002387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.evsrns.cyou"; classtype:attempted-recon; sid:200002388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ewjvlp.sa.com"; classtype:attempted-recon; sid:200002389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ewmqdi.sa.com"; classtype:attempted-recon; sid:200002390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200002391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200002392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.fbcsrf.sa.com"; classtype:attempted-recon; sid:200002393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200002394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.fnzxzx.cyou"; classtype:attempted-recon; sid:200002395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.fqcxro.cyou"; classtype:attempted-recon; sid:200002396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.fvxazeg.bar"; classtype:attempted-recon; sid:200002397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.gbrjfas.bar"; classtype:attempted-recon; sid:200002398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ggjomnz.bar"; classtype:attempted-recon; sid:200002399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.gijebej.bar"; classtype:attempted-recon; sid:200002400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.gkvkwmv.bar"; classtype:attempted-recon; sid:200002401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.gmaphld.bar"; classtype:attempted-recon; sid:200002402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.gnvikzo.bar"; classtype:attempted-recon; sid:200002403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.goinjd.cyou"; classtype:attempted-recon; sid:200002404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.gpelhdu.bar"; classtype:attempted-recon; sid:200002405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.hdyn4ul.tokyo"; classtype:attempted-recon; sid:200002406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.hehbty1.tokyo"; classtype:attempted-recon; sid:200002407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.hjcbmcu.bar"; classtype:attempted-recon; sid:200002408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.hkvdul.cyou"; classtype:attempted-recon; sid:200002409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.hnzbsyi.bar"; classtype:attempted-recon; sid:200002410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.hxr0gop.tokyo"; classtype:attempted-recon; sid:200002411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.i9ipcur.tokyo"; classtype:attempted-recon; sid:200002412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ijamkm.sa.com"; classtype:attempted-recon; sid:200002413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.iltcsk.cyou"; classtype:attempted-recon; sid:200002414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.iqvrzg.cyou"; classtype:attempted-recon; sid:200002415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.j5ubutg.tokyo"; classtype:attempted-recon; sid:200002416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.jkbtvl.cyou"; classtype:attempted-recon; sid:200002417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.jrxtrx.cyou"; classtype:attempted-recon; sid:200002418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.kaldkzh.bar"; classtype:attempted-recon; sid:200002419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.kgwqgz.cyou"; classtype:attempted-recon; sid:200002420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.khfzku.cyou"; classtype:attempted-recon; sid:200002421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.kqamky.cyou"; classtype:attempted-recon; sid:200002422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ktcwwov.bar"; classtype:attempted-recon; sid:200002423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ktltos.cyou"; classtype:attempted-recon; sid:200002424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ld8y2wm.tokyo"; classtype:attempted-recon; sid:200002425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.lk6s17b.tokyo"; classtype:attempted-recon; sid:200002426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.lpmefip.bar"; classtype:attempted-recon; sid:200002427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.lrwvtyt.bar"; classtype:attempted-recon; sid:200002428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.mmkzepw.tokyo"; classtype:attempted-recon; sid:200002429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.nlxlcrg.bar"; classtype:attempted-recon; sid:200002430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.nqhywi.cyou"; classtype:attempted-recon; sid:200002431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.oeauteo.bar"; classtype:attempted-recon; sid:200002432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ohhclj.cyou"; classtype:attempted-recon; sid:200002433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.onjfanv.bar"; classtype:attempted-recon; sid:200002434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.oqeptzu.bar"; classtype:attempted-recon; sid:200002435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.orlkpu.cyou"; classtype:attempted-recon; sid:200002436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ouvqak.cyou"; classtype:attempted-recon; sid:200002437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.owaiyut.bar"; classtype:attempted-recon; sid:200002438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.oxo5uzj.tokyo"; classtype:attempted-recon; sid:200002439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.p2pfwd4.tokyo"; classtype:attempted-recon; sid:200002440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.plmioax.bar"; classtype:attempted-recon; sid:200002441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.pnl01rh.tokyo"; classtype:attempted-recon; sid:200002442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.pnm3imk.tokyo"; classtype:attempted-recon; sid:200002443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ppsbcf.cyou"; classtype:attempted-recon; sid:200002444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.pqxamup.bar"; classtype:attempted-recon; sid:200002445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.q3x8vmb.tokyo"; classtype:attempted-recon; sid:200002446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.qnswad.cyou"; classtype:attempted-recon; sid:200002447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.qr9csce.tokyo"; classtype:attempted-recon; sid:200002448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.qrvshpr.bar"; classtype:attempted-recon; sid:200002449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.qtjufvf.tokyo"; classtype:attempted-recon; sid:200002450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.relwog.cyou"; classtype:attempted-recon; sid:200002451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.rfoqkx.cyou"; classtype:attempted-recon; sid:200002452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.rfuwmd.cyou"; classtype:attempted-recon; sid:200002453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.rybtstu.bar"; classtype:attempted-recon; sid:200002454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.sciatmc.bar"; classtype:attempted-recon; sid:200002455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.segeva.cyou"; classtype:attempted-recon; sid:200002456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.sfhjtf.cyou"; classtype:attempted-recon; sid:200002457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.sgakhql.bar"; classtype:attempted-recon; sid:200002458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.sxgakd.cyou"; classtype:attempted-recon; sid:200002459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.tbbahr5.tokyo"; classtype:attempted-recon; sid:200002460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.tdyoar.cyou"; classtype:attempted-recon; sid:200002461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.tllpkf.cyou"; classtype:attempted-recon; sid:200002462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ughrxg.cyou"; classtype:attempted-recon; sid:200002463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.uieihm.cyou"; classtype:attempted-recon; sid:200002464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.uleyron.bar"; classtype:attempted-recon; sid:200002465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.vbiuzus.bar"; classtype:attempted-recon; sid:200002466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.vflcpnz.bar"; classtype:attempted-recon; sid:200002467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.vl2s0dl.tokyo"; classtype:attempted-recon; sid:200002468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.vmiutt.cyou"; classtype:attempted-recon; sid:200002469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.vqsejg.cyou"; classtype:attempted-recon; sid:200002470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200002471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.wddyfx.cyou"; classtype:attempted-recon; sid:200002472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.whtllp.cyou"; classtype:attempted-recon; sid:200002473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.wkcbmds.bar"; classtype:attempted-recon; sid:200002474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.x1y65xf.tokyo"; classtype:attempted-recon; sid:200002475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.xjwvxks.bar"; classtype:attempted-recon; sid:200002476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.xw5wonm.tokyo"; classtype:attempted-recon; sid:200002477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.xyrmwug.bar"; classtype:attempted-recon; sid:200002478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ybmykhr.bar"; classtype:attempted-recon; sid:200002479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ydj2q19.tokyo"; classtype:attempted-recon; sid:200002480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.yggusos.tokyo"; classtype:attempted-recon; sid:200002481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.yijxdrm.bar"; classtype:attempted-recon; sid:200002482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.yklocra.tokyo"; classtype:attempted-recon; sid:200002483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.ynlo5if.tokyo"; classtype:attempted-recon; sid:200002484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.yuzksv.cyou"; classtype:attempted-recon; sid:200002485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.zjwtdw.cyou"; classtype:attempted-recon; sid:200002486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.zlorenj.tokyo"; classtype:attempted-recon; sid:200002487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.zox9nus.tokyo"; classtype:attempted-recon; sid:200002488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.zwvk70j.tokyo"; classtype:attempted-recon; sid:200002489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.zyojde.cyou"; classtype:attempted-recon; sid:200002490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.zzzlky.cyou"; classtype:attempted-recon; sid:200002491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.0aluzd9.tokyo"; classtype:attempted-recon; sid:200002492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.0dkul2k.tokyo"; classtype:attempted-recon; sid:200002493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200002494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.1dhskdt.tokyo"; classtype:attempted-recon; sid:200002495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200002496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.2aaiklj.tokyo"; classtype:attempted-recon; sid:200002497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.2r5v45q.tokyo"; classtype:attempted-recon; sid:200002498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.3e9h13w.tokyo"; classtype:attempted-recon; sid:200002499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.6ah1rxz.tokyo"; classtype:attempted-recon; sid:200002500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.6hqstri.tokyo"; classtype:attempted-recon; sid:200002501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.7sq5xol.tokyo"; classtype:attempted-recon; sid:200002502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.8b9onfo.tokyo"; classtype:attempted-recon; sid:200002503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.9m1dx7m.tokyo"; classtype:attempted-recon; sid:200002504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.9m4ymbi.tokyo"; classtype:attempted-recon; sid:200002505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.aakapv.sa.com"; classtype:attempted-recon; sid:200002506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.agltfj.cyou"; classtype:attempted-recon; sid:200002507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.aoadwx.sa.com"; classtype:attempted-recon; sid:200002508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.aprjql.cyou"; classtype:attempted-recon; sid:200002509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.arbzal.sa.com"; classtype:attempted-recon; sid:200002510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.asclab.sa.com"; classtype:attempted-recon; sid:200002511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.axvpsr.sa.com"; classtype:attempted-recon; sid:200002512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ayczzs.cyou"; classtype:attempted-recon; sid:200002513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.bbogvx.sa.com"; classtype:attempted-recon; sid:200002514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.befcgi.sa.com"; classtype:attempted-recon; sid:200002515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.bjlhhf.sa.com"; classtype:attempted-recon; sid:200002516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.blblbk.sa.com"; classtype:attempted-recon; sid:200002517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.brpccx.sa.com"; classtype:attempted-recon; sid:200002518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.bv6u6sw.tokyo"; classtype:attempted-recon; sid:200002519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.bytirnb.bar"; classtype:attempted-recon; sid:200002520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200002521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.cdteph.cyou"; classtype:attempted-recon; sid:200002522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.cfmmcc.sa.com"; classtype:attempted-recon; sid:200002523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ckjvqn.cyou"; classtype:attempted-recon; sid:200002524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.cktnal.cyou"; classtype:attempted-recon; sid:200002525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.cmkqku.sa.com"; classtype:attempted-recon; sid:200002526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.cvtbit.sa.com"; classtype:attempted-recon; sid:200002527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.daoxal.sa.com"; classtype:attempted-recon; sid:200002528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.dcggok.sa.com"; classtype:attempted-recon; sid:200002529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.dpovcb.sa.com"; classtype:attempted-recon; sid:200002530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.dwbuiz.cyou"; classtype:attempted-recon; sid:200002531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.dzxvjl.sa.com"; classtype:attempted-recon; sid:200002532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ebejok.sa.com"; classtype:attempted-recon; sid:200002533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200002534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.epduyp.sa.com"; classtype:attempted-recon; sid:200002535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.erstm5s.tokyo"; classtype:attempted-recon; sid:200002536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.eudyfc0.tokyo"; classtype:attempted-recon; sid:200002537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ewjvlp.sa.com"; classtype:attempted-recon; sid:200002538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200002539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200002540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200002541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.fnzxzx.cyou"; classtype:attempted-recon; sid:200002542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.fwehhr.cyou"; classtype:attempted-recon; sid:200002543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.gbrjfas.bar"; classtype:attempted-recon; sid:200002544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ggjomnz.bar"; classtype:attempted-recon; sid:200002545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.gijebej.bar"; classtype:attempted-recon; sid:200002546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.gikdch.cyou"; classtype:attempted-recon; sid:200002547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.gisyli.cyou"; classtype:attempted-recon; sid:200002548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.gnvikzo.bar"; classtype:attempted-recon; sid:200002549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.goinjd.cyou"; classtype:attempted-recon; sid:200002550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.hdyn4ul.tokyo"; classtype:attempted-recon; sid:200002551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.hjcbmcu.bar"; classtype:attempted-recon; sid:200002552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.hkvdul.cyou"; classtype:attempted-recon; sid:200002553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.hmppcy.cyou"; classtype:attempted-recon; sid:200002554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ht6zjbe.tokyo"; classtype:attempted-recon; sid:200002555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.hxr0gop.tokyo"; classtype:attempted-recon; sid:200002556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.i59bh36.tokyo"; classtype:attempted-recon; sid:200002557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.i9ipcur.tokyo"; classtype:attempted-recon; sid:200002558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.i9jfvsc.tokyo"; classtype:attempted-recon; sid:200002559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.iojyii.cyou"; classtype:attempted-recon; sid:200002560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.iqvrzg.cyou"; classtype:attempted-recon; sid:200002561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.izmggt.cyou"; classtype:attempted-recon; sid:200002562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.j5ubutg.tokyo"; classtype:attempted-recon; sid:200002563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.jjh5qc9.tokyo"; classtype:attempted-recon; sid:200002564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.jsboug.cyou"; classtype:attempted-recon; sid:200002565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.k30p5dz.tokyo"; classtype:attempted-recon; sid:200002566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.kaldkzh.bar"; classtype:attempted-recon; sid:200002567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.kcbnudb.bar"; classtype:attempted-recon; sid:200002568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.kgwqgz.cyou"; classtype:attempted-recon; sid:200002569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.khfzku.cyou"; classtype:attempted-recon; sid:200002570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.kpv6yhp.tokyo"; classtype:attempted-recon; sid:200002571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.kqamky.cyou"; classtype:attempted-recon; sid:200002572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.krhwpv.cyou"; classtype:attempted-recon; sid:200002573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.kubvkj.cyou"; classtype:attempted-recon; sid:200002574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.kw0cnwm.tokyo"; classtype:attempted-recon; sid:200002575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.lbjcqh.cyou"; classtype:attempted-recon; sid:200002576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ld8y2wm.tokyo"; classtype:attempted-recon; sid:200002577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.lhrlkr.cyou"; classtype:attempted-recon; sid:200002578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.lk6s17b.tokyo"; classtype:attempted-recon; sid:200002579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.lpmefip.bar"; classtype:attempted-recon; sid:200002580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.lrwvtyt.bar"; classtype:attempted-recon; sid:200002581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.lxiapm.cyou"; classtype:attempted-recon; sid:200002582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.mbizjf.cyou"; classtype:attempted-recon; sid:200002583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.no1hppb.tokyo"; classtype:attempted-recon; sid:200002584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.nqhywi.cyou"; classtype:attempted-recon; sid:200002585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.oeauteo.bar"; classtype:attempted-recon; sid:200002586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.of5uthp.tokyo"; classtype:attempted-recon; sid:200002587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.onjfanv.bar"; classtype:attempted-recon; sid:200002588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.oqeptzu.bar"; classtype:attempted-recon; sid:200002589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.oxo5uzj.tokyo"; classtype:attempted-recon; sid:200002590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.plmioax.bar"; classtype:attempted-recon; sid:200002591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.pqxamup.bar"; classtype:attempted-recon; sid:200002592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.q3x8vmb.tokyo"; classtype:attempted-recon; sid:200002593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.qnswad.cyou"; classtype:attempted-recon; sid:200002594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.rbqkzx.cyou"; classtype:attempted-recon; sid:200002595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.relwog.cyou"; classtype:attempted-recon; sid:200002596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.rfuwmd.cyou"; classtype:attempted-recon; sid:200002597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.rn0xdmv.tokyo"; classtype:attempted-recon; sid:200002598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.rnwggn.cyou"; classtype:attempted-recon; sid:200002599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.rqgjzca.tokyo"; classtype:attempted-recon; sid:200002600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.rvzdfax.bar"; classtype:attempted-recon; sid:200002601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.rybtstu.bar"; classtype:attempted-recon; sid:200002602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.sciatmc.bar"; classtype:attempted-recon; sid:200002603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.sfhghim.bar"; classtype:attempted-recon; sid:200002604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.sxgakd.cyou"; classtype:attempted-recon; sid:200002605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.t6ncsda.tokyo"; classtype:attempted-recon; sid:200002606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.tdv3bmb.tokyo"; classtype:attempted-recon; sid:200002607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.tlqzfl.cyou"; classtype:attempted-recon; sid:200002608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.tzxgqw.cyou"; classtype:attempted-recon; sid:200002609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.u8b21na.tokyo"; classtype:attempted-recon; sid:200002610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.uieihm.cyou"; classtype:attempted-recon; sid:200002611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.uleyron.bar"; classtype:attempted-recon; sid:200002612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.umceew.cyou"; classtype:attempted-recon; sid:200002613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.vsqafmp.bar"; classtype:attempted-recon; sid:200002614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.vyvkdq.cyou"; classtype:attempted-recon; sid:200002615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.wkcbmds.bar"; classtype:attempted-recon; sid:200002616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.wysprt.cyou"; classtype:attempted-recon; sid:200002617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.x1y65xf.tokyo"; classtype:attempted-recon; sid:200002618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.xjwvxks.bar"; classtype:attempted-recon; sid:200002619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ydj2q19.tokyo"; classtype:attempted-recon; sid:200002620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.yggusos.tokyo"; classtype:attempted-recon; sid:200002621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.ynlo5if.tokyo"; classtype:attempted-recon; sid:200002622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.yuzksv.cyou"; classtype:attempted-recon; sid:200002623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.yzepa9c.tokyo"; classtype:attempted-recon; sid:200002624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.zamgwo.cyou"; classtype:attempted-recon; sid:200002625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.zbvjke.cyou"; classtype:attempted-recon; sid:200002626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.zjwtdw.cyou"; classtype:attempted-recon; sid:200002627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.zsdlgq.cyou"; classtype:attempted-recon; sid:200002628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.zslnpb.cyou"; classtype:attempted-recon; sid:200002629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.zzzlky.cyou"; classtype:attempted-recon; sid:200002630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.0fsirhh.tokyo"; classtype:attempted-recon; sid:200002631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.1gdr53n.tokyo"; classtype:attempted-recon; sid:200002632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.1p2ap08.tokyo"; classtype:attempted-recon; sid:200002633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.2aaiklj.tokyo"; classtype:attempted-recon; sid:200002634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.3e9h13w.tokyo"; classtype:attempted-recon; sid:200002635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.3r2oxoq.tokyo"; classtype:attempted-recon; sid:200002636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.6ah1rxz.tokyo"; classtype:attempted-recon; sid:200002637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.9m4ymbi.tokyo"; classtype:attempted-recon; sid:200002638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.aakapv.sa.com"; classtype:attempted-recon; sid:200002639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.acojek2.tokyo"; classtype:attempted-recon; sid:200002640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.agltfj.cyou"; classtype:attempted-recon; sid:200002641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.aoadwx.sa.com"; classtype:attempted-recon; sid:200002642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.arbzal.sa.com"; classtype:attempted-recon; sid:200002643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.bqtksis.tokyo"; classtype:attempted-recon; sid:200002644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.brpccx.sa.com"; classtype:attempted-recon; sid:200002645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200002646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.cdteph.cyou"; classtype:attempted-recon; sid:200002647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.cmkqku.sa.com"; classtype:attempted-recon; sid:200002648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.cou17gj.tokyo"; classtype:attempted-recon; sid:200002649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ebt1tt8.tokyo"; classtype:attempted-recon; sid:200002650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ecoi15j.tokyo"; classtype:attempted-recon; sid:200002651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ek6va0y.tokyo"; classtype:attempted-recon; sid:200002652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ektixe.cyou"; classtype:attempted-recon; sid:200002653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.epduyp.sa.com"; classtype:attempted-recon; sid:200002654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.eudyfc0.tokyo"; classtype:attempted-recon; sid:200002655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.evsrns.cyou"; classtype:attempted-recon; sid:200002656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ewjvlp.sa.com"; classtype:attempted-recon; sid:200002657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ewmqdi.sa.com"; classtype:attempted-recon; sid:200002658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.fgwsjfe.tokyo"; classtype:attempted-recon; sid:200002659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.gnvikzo.bar"; classtype:attempted-recon; sid:200002660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.hjcbmcu.bar"; classtype:attempted-recon; sid:200002661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.hmppcy.cyou"; classtype:attempted-recon; sid:200002662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.hnghnil.bar"; classtype:attempted-recon; sid:200002663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.hqmwm27.tokyo"; classtype:attempted-recon; sid:200002664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.jsboug.cyou"; classtype:attempted-recon; sid:200002665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.kcbnudb.bar"; classtype:attempted-recon; sid:200002666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.kfo1w27.tokyo"; classtype:attempted-recon; sid:200002667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.kqamky.cyou"; classtype:attempted-recon; sid:200002668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ktcwwov.bar"; classtype:attempted-recon; sid:200002669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ktltos.cyou"; classtype:attempted-recon; sid:200002670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.kubvkj.cyou"; classtype:attempted-recon; sid:200002671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.kw0cnwm.tokyo"; classtype:attempted-recon; sid:200002672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.l7cvwgf.tokyo"; classtype:attempted-recon; sid:200002673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ld8y2wm.tokyo"; classtype:attempted-recon; sid:200002674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.msxzhi.sa.com"; classtype:attempted-recon; sid:200002675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.nlxlcrg.bar"; classtype:attempted-recon; sid:200002676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.nqhywi.cyou"; classtype:attempted-recon; sid:200002677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ntfwiyr.bar"; classtype:attempted-recon; sid:200002678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ntk466j.tokyo"; classtype:attempted-recon; sid:200002679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200002680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.oeauteo.bar"; classtype:attempted-recon; sid:200002681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.of5uthp.tokyo"; classtype:attempted-recon; sid:200002682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ojissf0.tokyo"; classtype:attempted-recon; sid:200002683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.oqeptzu.bar"; classtype:attempted-recon; sid:200002684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.ouvqak.cyou"; classtype:attempted-recon; sid:200002685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.owaiyut.bar"; classtype:attempted-recon; sid:200002686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.oxo5uzj.tokyo"; classtype:attempted-recon; sid:200002687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.pknnlio.bar"; classtype:attempted-recon; sid:200002688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.rbqkzx.cyou"; classtype:attempted-recon; sid:200002689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.rfoqkx.cyou"; classtype:attempted-recon; sid:200002690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.rn0xdmv.tokyo"; classtype:attempted-recon; sid:200002691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.segeva.cyou"; classtype:attempted-recon; sid:200002692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.sfhghim.bar"; classtype:attempted-recon; sid:200002693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.sfhjtf.cyou"; classtype:attempted-recon; sid:200002694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.towybn.cyou"; classtype:attempted-recon; sid:200002695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.tzxgqw.cyou"; classtype:attempted-recon; sid:200002696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.vgtkezc.bar"; classtype:attempted-recon; sid:200002697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.vmiutt.cyou"; classtype:attempted-recon; sid:200002698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.vsqafmp.bar"; classtype:attempted-recon; sid:200002699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.w0zqb68.tokyo"; classtype:attempted-recon; sid:200002700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.whtllp.cyou"; classtype:attempted-recon; sid:200002701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.wpbssyd.bar"; classtype:attempted-recon; sid:200002702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.x1y65xf.tokyo"; classtype:attempted-recon; sid:200002703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.xbmdtb.cyou"; classtype:attempted-recon; sid:200002704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.xkukewn.bar"; classtype:attempted-recon; sid:200002705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.xruwfho.bar"; classtype:attempted-recon; sid:200002706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.yijxdrm.bar"; classtype:attempted-recon; sid:200002707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.yuzksv.cyou"; classtype:attempted-recon; sid:200002708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.yvuirw.cyou"; classtype:attempted-recon; sid:200002709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.zjwtdw.cyou"; classtype:attempted-recon; sid:200002710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.zslnpb.cyou"; classtype:attempted-recon; sid:200002711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.zwvk70j.tokyo"; classtype:attempted-recon; sid:200002712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.zzzlky.cyou"; classtype:attempted-recon; sid:200002713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.6hqstri.tokyo"; classtype:attempted-recon; sid:200002714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.7sq5xol.tokyo"; classtype:attempted-recon; sid:200002715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.9m1dx7m.tokyo"; classtype:attempted-recon; sid:200002716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.a59wwgh.tokyo"; classtype:attempted-recon; sid:200002717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.acojek2.tokyo"; classtype:attempted-recon; sid:200002718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.agltfj.cyou"; classtype:attempted-recon; sid:200002719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.aoadwx.sa.com"; classtype:attempted-recon; sid:200002720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.arbzal.sa.com"; classtype:attempted-recon; sid:200002721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.axwmwk.sa.com"; classtype:attempted-recon; sid:200002722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.bomvpw.sa.com"; classtype:attempted-recon; sid:200002723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.brpccx.sa.com"; classtype:attempted-recon; sid:200002724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.bv6u6sw.tokyo"; classtype:attempted-recon; sid:200002725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.bytirnb.bar"; classtype:attempted-recon; sid:200002726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.cbrcwg.sa.com"; classtype:attempted-recon; sid:200002727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ceszno.sa.com"; classtype:attempted-recon; sid:200002728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ckjvqn.cyou"; classtype:attempted-recon; sid:200002729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.cldtta.sa.com"; classtype:attempted-recon; sid:200002730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.cmkqku.sa.com"; classtype:attempted-recon; sid:200002731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.cou17gj.tokyo"; classtype:attempted-recon; sid:200002732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.cvtbit.sa.com"; classtype:attempted-recon; sid:200002733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.daoxal.sa.com"; classtype:attempted-recon; sid:200002734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.devvza.cyou"; classtype:attempted-recon; sid:200002735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.edordv.cyou"; classtype:attempted-recon; sid:200002736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.eeeejz.cyou"; classtype:attempted-recon; sid:200002737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ektixe.cyou"; classtype:attempted-recon; sid:200002738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.emutiy.cyou"; classtype:attempted-recon; sid:200002739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.epduyp.sa.com"; classtype:attempted-recon; sid:200002740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ewjvlp.sa.com"; classtype:attempted-recon; sid:200002741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ezwvtt.sa.com"; classtype:attempted-recon; sid:200002742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.f3h0hoz.tokyo"; classtype:attempted-recon; sid:200002743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.fbcsrf.sa.com"; classtype:attempted-recon; sid:200002744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.gisyli.cyou"; classtype:attempted-recon; sid:200002745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.gnvikzo.bar"; classtype:attempted-recon; sid:200002746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.gxkcxhn.bar"; classtype:attempted-recon; sid:200002747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.hdyn4ul.tokyo"; classtype:attempted-recon; sid:200002748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.hmppcy.cyou"; classtype:attempted-recon; sid:200002749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.hnghnil.bar"; classtype:attempted-recon; sid:200002750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.hqmwm27.tokyo"; classtype:attempted-recon; sid:200002751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.jrxtrx.cyou"; classtype:attempted-recon; sid:200002752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.kcbnudb.bar"; classtype:attempted-recon; sid:200002753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.kfo1w27.tokyo"; classtype:attempted-recon; sid:200002754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.kgwqgz.cyou"; classtype:attempted-recon; sid:200002755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.kqamky.cyou"; classtype:attempted-recon; sid:200002756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.krhwpv.cyou"; classtype:attempted-recon; sid:200002757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ktcwwov.bar"; classtype:attempted-recon; sid:200002758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.kubvkj.cyou"; classtype:attempted-recon; sid:200002759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.kw0cnwm.tokyo"; classtype:attempted-recon; sid:200002760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.lbjcqh.cyou"; classtype:attempted-recon; sid:200002761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ld8y2wm.tokyo"; classtype:attempted-recon; sid:200002762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.mvspqa.cyou"; classtype:attempted-recon; sid:200002763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.nlxlcrg.bar"; classtype:attempted-recon; sid:200002764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.no1hppb.tokyo"; classtype:attempted-recon; sid:200002765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.nsywex.cyou"; classtype:attempted-recon; sid:200002766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ntfwiyr.bar"; classtype:attempted-recon; sid:200002767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ntk466j.tokyo"; classtype:attempted-recon; sid:200002768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.nwey3w6.tokyo"; classtype:attempted-recon; sid:200002769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.oeauteo.bar"; classtype:attempted-recon; sid:200002770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.of5uthp.tokyo"; classtype:attempted-recon; sid:200002771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.pnl01rh.tokyo"; classtype:attempted-recon; sid:200002772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ppsbcf.cyou"; classtype:attempted-recon; sid:200002773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.q3x8vmb.tokyo"; classtype:attempted-recon; sid:200002774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.qnswad.cyou"; classtype:attempted-recon; sid:200002775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.qrvshpr.bar"; classtype:attempted-recon; sid:200002776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.qtjufvf.tokyo"; classtype:attempted-recon; sid:200002777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.qyrlqd.cyou"; classtype:attempted-recon; sid:200002778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.relwog.cyou"; classtype:attempted-recon; sid:200002779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.rfuwmd.cyou"; classtype:attempted-recon; sid:200002780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.rljqbs.cyou"; classtype:attempted-recon; sid:200002781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.tllpkf.cyou"; classtype:attempted-recon; sid:200002782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.uvgoago.tokyo"; classtype:attempted-recon; sid:200002783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.vbdcvc.cyou"; classtype:attempted-recon; sid:200002784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.vbiuzus.bar"; classtype:attempted-recon; sid:200002785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.wpbssyd.bar"; classtype:attempted-recon; sid:200002786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.wysprt.cyou"; classtype:attempted-recon; sid:200002787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.x1y65xf.tokyo"; classtype:attempted-recon; sid:200002788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.xjwvxks.bar"; classtype:attempted-recon; sid:200002789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.xkukewn.bar"; classtype:attempted-recon; sid:200002790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.xruwfho.bar"; classtype:attempted-recon; sid:200002791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.xtquna8.tokyo"; classtype:attempted-recon; sid:200002792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.xxqgjdj.bar"; classtype:attempted-recon; sid:200002793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.xyftnix.bar"; classtype:attempted-recon; sid:200002794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.y6o61cj.tokyo"; classtype:attempted-recon; sid:200002795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ybmykhr.bar"; classtype:attempted-recon; sid:200002796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.ycfbzf.cyou"; classtype:attempted-recon; sid:200002797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.zzzlky.cyou"; classtype:attempted-recon; sid:200002798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avsrcbdrpm.duckdns.org"; classtype:attempted-recon; sid:200002799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avsybwetzy.duckdns.org"; classtype:attempted-recon; sid:200002800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avtomobil.4me.link"; classtype:attempted-recon; sid:200002801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avucokrjxr.duckdns.org"; classtype:attempted-recon; sid:200002802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avzwepumbb.duckdns.org"; classtype:attempted-recon; sid:200002803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awaisrasheed.com"; classtype:attempted-recon; sid:200002804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awbzzdcyyb.duckdns.org"; classtype:attempted-recon; sid:200002805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awczhkwqcq.duckdns.org"; classtype:attempted-recon; sid:200002806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awduilttxb.duckdns.org"; classtype:attempted-recon; sid:200002807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aweeerjpvs.duckdns.org"; classtype:attempted-recon; sid:200002808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aweogorgjy.duckdns.org"; classtype:attempted-recon; sid:200002809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awesome-leaders.com"; classtype:attempted-recon; sid:200002810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aweth.io"; classtype:attempted-recon; sid:200002811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awhcfavoxs.duckdns.org"; classtype:attempted-recon; sid:200002812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awhvxrciyc.duckdns.org"; classtype:attempted-recon; sid:200002813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awhwhpubdd.duckdns.org"; classtype:attempted-recon; sid:200002814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awjxsridez.duckdns.org"; classtype:attempted-recon; sid:200002815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awnbepoesx.duckdns.org"; classtype:attempted-recon; sid:200002816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awnkhginsb.duckdns.org"; classtype:attempted-recon; sid:200002817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aworldlyaffair.com"; classtype:attempted-recon; sid:200002818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awpoordeic.duckdns.org"; classtype:attempted-recon; sid:200002819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awroqdidej.duckdns.org"; classtype:attempted-recon; sid:200002820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"awwbbziraw.duckdns.org"; classtype:attempted-recon; sid:200002821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axeielneflnity.com"; classtype:attempted-recon; sid:200002822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axgotlvljy.duckdns.org"; classtype:attempted-recon; sid:200002823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axia-land.blogspot.com"; classtype:attempted-recon; sid:200002824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axiaarchitects.com"; classtype:attempted-recon; sid:200002825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axie-infinity.ru"; classtype:attempted-recon; sid:200002826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axie-land-page.blogspot.com"; classtype:attempted-recon; sid:200002827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axieinfenitu.fun"; classtype:attempted-recon; sid:200002828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axieinfinily.net"; classtype:attempted-recon; sid:200002829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axieinfinity.simt.ind.in"; classtype:attempted-recon; sid:200002830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axieinfiuity.com"; classtype:attempted-recon; sid:200002831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axieinftinite.fun"; classtype:attempted-recon; sid:200002832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axienfinity.io"; classtype:attempted-recon; sid:200002833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axienft.top"; classtype:attempted-recon; sid:200002834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axiinninfinityp.com"; classtype:attempted-recon; sid:200002835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axjalnfinjty.com"; classtype:attempted-recon; sid:200002836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axjrtqwsmw.duckdns.org"; classtype:attempted-recon; sid:200002837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axlujnflnjty.com"; classtype:attempted-recon; sid:200002838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axlulnflnlty.com"; classtype:attempted-recon; sid:200002839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axvmvogezn.duckdns.org"; classtype:attempted-recon; sid:200002840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"axvtkerunw.duckdns.org"; classtype:attempted-recon; sid:200002841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aynibnskji.duckdns.org"; classtype:attempted-recon; sid:200002842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aynlhsrobg.duckdns.org"; classtype:attempted-recon; sid:200002843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ayogfofwtu.duckdns.org"; classtype:attempted-recon; sid:200002844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aypffqnyrx.duckdns.org"; classtype:attempted-recon; sid:200002845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ayplowwrbd.duckdns.org"; classtype:attempted-recon; sid:200002846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aysenurbozdogan.av.tr"; classtype:attempted-recon; sid:200002847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ayutandrealove.liveblog365.com"; classtype:attempted-recon; sid:200002848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ayymrqpsob.duckdns.org"; classtype:attempted-recon; sid:200002849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"az-pca.top"; classtype:attempted-recon; sid:200002850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azizi-developments.com"; classtype:attempted-recon; sid:200002851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azk2e-kaaaa-aaaad-qdwwa-cai.raw.ic0.app"; classtype:attempted-recon; sid:200002852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azkqywknmm.duckdns.org"; classtype:attempted-recon; sid:200002853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aznkzamjlb.duckdns.org"; classtype:attempted-recon; sid:200002854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azqpom.hyperphp.com"; classtype:attempted-recon; sid:200002855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azrvservices.com"; classtype:attempted-recon; sid:200002856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azuki-110716005.vercel.app"; classtype:attempted-recon; sid:200002857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azuki-mint-connect.web.app"; classtype:attempted-recon; sid:200002858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azuki.com.co"; classtype:attempted-recon; sid:200002859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azvsmvumpv.duckdns.org"; classtype:attempted-recon; sid:200002860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azznhfujbd.duckdns.org"; classtype:attempted-recon; sid:200002861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b00st.online"; classtype:attempted-recon; sid:200002862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b0512850b11759fcd43bec4524ade9.firebaseapp.com"; classtype:attempted-recon; sid:200002863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b0512850b11759fcd43bec4524ade9.web.app"; classtype:attempted-recon; sid:200002864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b059c86968a6427389952025bcee9886.svc.dynamics.com"; classtype:attempted-recon; sid:200002865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b24-2n0356.bitrix24.site"; classtype:attempted-recon; sid:200002866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b2bxenz.com"; classtype:attempted-recon; sid:200002867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b4e921f0.sso-mailsrvr-4344e5teed.pages.dev"; classtype:attempted-recon; sid:200002868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b97bca39.srvr-cloudmail-srvr6754e5rte.pages.dev"; classtype:attempted-recon; sid:200002869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baanofamericase8.hostfree.pw"; classtype:attempted-recon; sid:200002870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baby-swap.blogspot.com"; classtype:attempted-recon; sid:200002871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"babysvvap.com"; classtype:attempted-recon; sid:200002872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"backend.b2bxmkgw.top"; classtype:attempted-recon; sid:200002873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"backend.bahif9042.xyz"; classtype:attempted-recon; sid:200002874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"backend.bhiflyk36637.xyz"; classtype:attempted-recon; sid:200002875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"backend.bhiflyk48573.xyz"; classtype:attempted-recon; sid:200002876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"backend.bhiflyk64168.xyz"; classtype:attempted-recon; sid:200002877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"backend.bhiflyk84276.xyz"; classtype:attempted-recon; sid:200002878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"backend.dcgobmyh.top"; classtype:attempted-recon; sid:200002879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bacpayee.contactin.bio"; classtype:attempted-recon; sid:200002880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bacredomatic.webcindario.com"; classtype:attempted-recon; sid:200002881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"badaso-staging.uatech.co.id"; classtype:attempted-recon; sid:200002882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeiaseiccnilblsdusmrkofxzzedulqsti52qjejstblyi7oj2ritqq.ipfs.w3s.link"; classtype:attempted-recon; sid:200002883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeibbtgciqnm6pqlscopyh556im5rqvwarla6voi4n7okpx6ai3aeci.ipfs.nftstorage.link"; classtype:attempted-recon; sid:200002884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeibdy5i4nr5ght5p3fp66lj3hbedfjr5pzxuepz7bupuerf74gyxoy.ipfs.w3s.link"; classtype:attempted-recon; sid:200002885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeibwteteysxljum4owlusptthmqqik3h6r3tce7sx23duelarphxgu.ipfs.nftstorage.link"; classtype:attempted-recon; sid:200002886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeida33rhrdrttgvi22vzrxk6kqvhzqhk3w4dv254yyschmqsrgty2a.ipfs.cf-ipfs.com"; classtype:attempted-recon; sid:200002887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeidazdeuzkfxjja6uqv7djqmeyxngfnd52hzgcj27yqqgmxm2tbsw4.ipfs.w3s.link"; classtype:attempted-recon; sid:200002888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeidglwijm2pkquminfs4x3pso4tsnxl6xig6o5djsugh5hoiekahxu.ipfs.w3s.link"; classtype:attempted-recon; sid:200002889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeidrh56vohkluey3kp3firhbnvl2vutctx5cgdnjnipjj4sgyfs5vq.ipfs.infura-ipfs.io"; classtype:attempted-recon; sid:200002890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeiermha3ozljzzr7yohvasolr42t4cwl3kpl4cjogtna3l6casrbua.ipfs.cf-ipfs.com"; classtype:attempted-recon; sid:200002891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeif5da5uioyg7zqeiciidlid2yp5pkrwmolqm3mtw2qlhwfsr4feu4.ipfs.w3s.link"; classtype:attempted-recon; sid:200002892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeigpp3hkapwa6cjguy66ie4x2ymhkdhily6jfad6tyxsu3ezt3yrrm.ipfs.dweb.link"; classtype:attempted-recon; sid:200002893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeih34jr3ipykbbwqb2oxbz225xfadqghtjip65ssjuskmdvaajcj5u.ipfs.dweb.link"; classtype:attempted-recon; sid:200002894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeihiwoqryy433j6wlktnlkilossmmecnd67nc3yxjy66xgfofdi2by.ipfs.w3s.link"; classtype:attempted-recon; sid:200002895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeihwqgsiib3farmchcqmdvcm5s2sg25jh3rjgaurart6nxcgvhxbau.ipfs.nftstorage.link"; classtype:attempted-recon; sid:200002896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bagqgfxrsd.duckdns.org"; classtype:attempted-recon; sid:200002897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bahiacubanpizza.com"; classtype:attempted-recon; sid:200002898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bahthy.net"; classtype:attempted-recon; sid:200002899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baigllbyfm.duckdns.org"; classtype:attempted-recon; sid:200002900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bakhai.vn"; classtype:attempted-recon; sid:200002901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baktrvoakb.duckdns.org"; classtype:attempted-recon; sid:200002902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baleariclifestyle.be"; classtype:attempted-recon; sid:200002903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ballinasmashrepairs.com.au"; classtype:attempted-recon; sid:200002904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banacionetmes003.webcindario.com"; classtype:attempted-recon; sid:200002905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banarasiweaversshop.com"; classtype:attempted-recon; sid:200002906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banbifemprsas.com"; classtype:attempted-recon; sid:200002907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banc0naciona1.webcindario.com"; classtype:attempted-recon; sid:200002908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banca-electronica1.odoo.com"; classtype:attempted-recon; sid:200002909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaenlinea.bienlineagt.repl.co"; classtype:attempted-recon; sid:200002910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaenlinea.pacificosegura.repl.co"; classtype:attempted-recon; sid:200002911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancamps-filiale1.me"; classtype:attempted-recon; sid:200002912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaonlineficoshahondura.ficoshacuenta.repl.co"; classtype:attempted-recon; sid:200002913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaporinterneinterbank.pe-loge.app"; classtype:attempted-recon; sid:200002914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaporinterneinterbank.pe-logo.app"; classtype:attempted-recon; sid:200002915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaporinternet.net"; classtype:attempted-recon; sid:200002916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaporlnternetlnterbarnk.aaabestratesmoving.com"; classtype:attempted-recon; sid:200002917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaporlnternetlnterbarnk.danielaalmeida.com"; classtype:attempted-recon; sid:200002918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaporlnternetlnterbarnk.fannysigns.com"; classtype:attempted-recon; sid:200002919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancaporlntrrnet-lnterbank.seguropro-peru2022.top"; classtype:attempted-recon; sid:200002920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancnacion4l.webcindario.com"; classtype:attempted-recon; sid:200002921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancodavivienda.hostfree.pw"; classtype:attempted-recon; sid:200002922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancodobrasil.ethicspoint.eu"; classtype:attempted-recon; sid:200002923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancogalicia.galiciasban.repl.co"; classtype:attempted-recon; sid:200002924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancogalicia01.ddns.net"; classtype:attempted-recon; sid:200002925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolo339gg844.bancolonc0303fs.repl.co"; classtype:attempted-recon; sid:200002926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolom2.bancolom2.repl.co"; classtype:attempted-recon; sid:200002927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombia-1.bancolombia000.repl.co"; classtype:attempted-recon; sid:200002928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombia-2.bancolombia000.repl.co"; classtype:attempted-recon; sid:200002929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombia.alertabancolomb.repl.co"; classtype:attempted-recon; sid:200002930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombiagrup.bancolombiagrup.repl.co"; classtype:attempted-recon; sid:200002931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombiainformaclave.jean34.repl.co"; classtype:attempted-recon; sid:200002932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombiasss.bancolombiasss.repl.co"; classtype:attempted-recon; sid:200002933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombiausua.bancolombiausua.repl.co"; classtype:attempted-recon; sid:200002934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banconacional01.webcindario.com"; classtype:attempted-recon; sid:200002935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banconacional040.ultimatefreehost.in"; classtype:attempted-recon; sid:200002936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banconacional1.webcindario.com"; classtype:attempted-recon; sid:200002937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banconacional796.webcindario.com"; classtype:attempted-recon; sid:200002938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banconacional907.webcindario.com"; classtype:attempted-recon; sid:200002939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancoogalicia.ddns.net"; classtype:attempted-recon; sid:200002940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancopancreditodigital.com"; classtype:attempted-recon; sid:200002941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancor-gala.com"; classtype:attempted-recon; sid:200002942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancor.cordobaar.repl.co"; classtype:attempted-recon; sid:200002943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancoverific.bancoverific.repl.co"; classtype:attempted-recon; sid:200002944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banditcoil.augeprint.com"; classtype:attempted-recon; sid:200002945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banese-acessoo.blogspot.com"; classtype:attempted-recon; sid:200002946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banese-llbank.blogspot.com"; classtype:attempted-recon; sid:200002947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banhjarrro.duckdns.org"; classtype:attempted-recon; sid:200002948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bank-dkb-de.canadacentral.cloudapp.azure.com"; classtype:attempted-recon; sid:200002949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bank.amilbank.com.br"; classtype:attempted-recon; sid:200002950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bank.citiis.workers.dev"; classtype:attempted-recon; sid:200002951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banki0wa.us"; classtype:attempted-recon; sid:200002952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bankingseguridad.galihome.repl.co"; classtype:attempted-recon; sid:200002953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bannacion4l1.webcindario.com"; classtype:attempted-recon; sid:200002954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bannerbank.control-inc.com"; classtype:attempted-recon; sid:200002955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banonline989.webcindario.com"; classtype:attempted-recon; sid:200002956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"banquepopulaire.wizardly-mccarthy.199-247-13-220.plesk.page"; classtype:attempted-recon; sid:200002957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baohanhtulanh.vn"; classtype:attempted-recon; sid:200002958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baqws.hyperphp.com"; classtype:attempted-recon; sid:200002959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baradua.it"; classtype:attempted-recon; sid:200002960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"barbacena.odo.br"; classtype:attempted-recon; sid:200002961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"barcaenlinea-ibk.website"; classtype:attempted-recon; sid:200002962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"barcaenlinea-soluciones.shop"; classtype:attempted-recon; sid:200002963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bardgdf.hyperphp.com"; classtype:attempted-recon; sid:200002964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"barraespaci.webcindario.com"; classtype:attempted-recon; sid:200002965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"barshow.com.ua"; classtype:attempted-recon; sid:200002966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"basbyqntkj.duckdns.org"; classtype:attempted-recon; sid:200002967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"basketbackup.com"; classtype:attempted-recon; sid:200002968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"basti-32omna.zealatahimtre.workers.dev"; classtype:attempted-recon; sid:200002969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bathandfloor.com"; classtype:attempted-recon; sid:200002970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"battlebikefitness.com"; classtype:attempted-recon; sid:200002971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bavarianhaven1.firebaseapp.com"; classtype:attempted-recon; sid:200002972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bavarianhaven1.web.app"; classtype:attempted-recon; sid:200002973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baxgbpmrzz.duckdns.org"; classtype:attempted-recon; sid:200002974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bayclive.io"; classtype:attempted-recon; sid:200002975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bb1.club"; classtype:attempted-recon; sid:200002976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbadujgjqx.duckdns.org"; classtype:attempted-recon; sid:200002977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbccb.webcindario.com"; classtype:attempted-recon; sid:200002978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbexdfvq.cc"; classtype:attempted-recon; sid:200002979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbfd.68557.cn"; classtype:attempted-recon; sid:200002980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbfdcpknrw.duckdns.org"; classtype:attempted-recon; sid:200002981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbgrhqodxx.duckdns.org"; classtype:attempted-recon; sid:200002982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbgwcfmkaj.duckdns.org"; classtype:attempted-recon; sid:200002983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbkano.mystoreden.com"; classtype:attempted-recon; sid:200002984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbmaconline.com"; classtype:attempted-recon; sid:200002985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbngztqvmu.duckdns.org"; classtype:attempted-recon; sid:200002986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbomhstpor.duckdns.org"; classtype:attempted-recon; sid:200002987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbsiwbjahp.duckdns.org"; classtype:attempted-recon; sid:200002988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbvlfjveuo.duckdns.org"; classtype:attempted-recon; sid:200002989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbynkttgwe.duckdns.org"; classtype:attempted-recon; sid:200002990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbzzoilrga.duckdns.org"; classtype:attempted-recon; sid:200002991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bc.tc"; classtype:attempted-recon; sid:200002992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcaobvpefz.duckdns.org"; classtype:attempted-recon; sid:200002993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcazboeauj.duckdns.org"; classtype:attempted-recon; sid:200002994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcdc1cde.sibforms.com"; classtype:attempted-recon; sid:200002995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcffn.klxrmyy.cn"; classtype:attempted-recon; sid:200002996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcgjkybebk.duckdns.org"; classtype:attempted-recon; sid:200002997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcjmhutaor.duckdns.org"; classtype:attempted-recon; sid:200002998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bckdcoihbs.duckdns.org"; classtype:attempted-recon; sid:200002999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcnrolikwu.duckdns.org"; classtype:attempted-recon; sid:200003000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcp-marketing.com"; classtype:attempted-recon; sid:200003001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcr8j4js4am4v8pt.webcindario.com"; classtype:attempted-recon; sid:200003002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcraxxljvo.duckdns.org"; classtype:attempted-recon; sid:200003003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcsibutqtd.duckdns.org"; classtype:attempted-recon; sid:200003004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcuwhvwksq.duckdns.org"; classtype:attempted-recon; sid:200003005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bcxtrjyhvx.duckdns.org"; classtype:attempted-recon; sid:200003006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bczzhtgmqa.duckdns.org"; classtype:attempted-recon; sid:200003007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdaqiagmrz.duckdns.org"; classtype:attempted-recon; sid:200003008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdbgmeuckw.duckdns.org"; classtype:attempted-recon; sid:200003009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdc-canada.com"; classtype:attempted-recon; sid:200003010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdcsvr.com"; classtype:attempted-recon; sid:200003011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdellsouthonlineverificationupdate.yolasite.com"; classtype:attempted-recon; sid:200003012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdescon12empresas.blogspot.com"; classtype:attempted-recon; sid:200003013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdf.ijingzhen.cn"; classtype:attempted-recon; sid:200003014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdfbf.78197.cn"; classtype:attempted-recon; sid:200003015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdfh.73877.cn"; classtype:attempted-recon; sid:200003016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdhn.hrxrmyy.cn"; classtype:attempted-recon; sid:200003017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdhrhjmgfsvm.top"; classtype:attempted-recon; sid:200003018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdnzlfulbx.duckdns.org"; classtype:attempted-recon; sid:200003019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdsdhgstjhg.top"; classtype:attempted-recon; sid:200003020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdxxkyqtwu.duckdns.org"; classtype:attempted-recon; sid:200003021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdyixwmrkc.duckdns.org"; classtype:attempted-recon; sid:200003022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bdzxxgzlvv.duckdns.org"; classtype:attempted-recon; sid:200003023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"be-inghome.firebaseapp.com"; classtype:attempted-recon; sid:200003024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"be-inghome.web.app"; classtype:attempted-recon; sid:200003025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"be-itsme-db4bc.firebaseapp.com"; classtype:attempted-recon; sid:200003026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"be-itsme-db4bc.web.app"; classtype:attempted-recon; sid:200003027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"be4yji.firebaseapp.com"; classtype:attempted-recon; sid:200003028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"be4yji.web.app"; classtype:attempted-recon; sid:200003029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beacon.marylands.workers.dev"; classtype:attempted-recon; sid:200003030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beautifulnails.it"; classtype:attempted-recon; sid:200003031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beautylablaser.com"; classtype:attempted-recon; sid:200003032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beautyplus365.com"; classtype:attempted-recon; sid:200003033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bebemoss.fr"; classtype:attempted-recon; sid:200003034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bebxyiomif.duckdns.org"; classtype:attempted-recon; sid:200003035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"becchjyaeb.duckdns.org"; classtype:attempted-recon; sid:200003036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bechtolsheim.ch"; classtype:attempted-recon; sid:200003037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"becverifserduehep.duckdns.org"; classtype:attempted-recon; sid:200003038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beeduzdort.duckdns.org"; classtype:attempted-recon; sid:200003039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"befkagjzce.duckdns.org"; classtype:attempted-recon; sid:200003040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.submit.q18a.live"; classtype:attempted-recon; sid:200003041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.submit.q83s.live"; classtype:attempted-recon; sid:200003042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.submit.q94j.live"; classtype:attempted-recon; sid:200003043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.submit.r05b.live"; classtype:attempted-recon; sid:200003044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.tax.q96l.live"; classtype:attempted-recon; sid:200003045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.tax.s52h.live"; classtype:attempted-recon; sid:200003046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.tax.s57k.live"; classtype:attempted-recon; sid:200003047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begin.tax.s60f.live"; classtype:attempted-recon; sid:200003048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"begwejldcc.duckdns.org"; classtype:attempted-recon; sid:200003049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beho.it"; classtype:attempted-recon; sid:200003050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beingcarte.firebaseapp.com"; classtype:attempted-recon; sid:200003051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beingcarte.web.app"; classtype:attempted-recon; sid:200003052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beingmelinda.organicmelinda.com"; classtype:attempted-recon; sid:200003053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bekairos.se"; classtype:attempted-recon; sid:200003054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouth-mail-update.yolasite.com"; classtype:attempted-recon; sid:200003055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouth-online-verification114.yolasite.com"; classtype:attempted-recon; sid:200003056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouth-online-verification115.yolasite.com"; classtype:attempted-recon; sid:200003057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouth-online-verification132.yolasite.com"; classtype:attempted-recon; sid:200003058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouth10.yolasite.com"; classtype:attempted-recon; sid:200003059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouthcustomerverification.yolasite.com"; classtype:attempted-recon; sid:200003060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouthonlineverificationupdate9.yolasite.com"; classtype:attempted-recon; sid:200003061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bellsouthverification124.yolasite.com"; classtype:attempted-recon; sid:200003062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"benbapwtuo.duckdns.org"; classtype:attempted-recon; sid:200003063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bendahari.unimap.edu.my"; classtype:attempted-recon; sid:200003064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beneficiotuyapay.hostfree.pw"; classtype:attempted-recon; sid:200003065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"benft-extracashsetiembre.com"; classtype:attempted-recon; sid:200003066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beqgknuvxr.duckdns.org"; classtype:attempted-recon; sid:200003067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"berelpuebla.com.mx"; classtype:attempted-recon; sid:200003068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"berjuang.duckdns.org"; classtype:attempted-recon; sid:200003069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"berlind.net"; classtype:attempted-recon; sid:200003070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bermudiskasa.co.vu"; classtype:attempted-recon; sid:200003071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"berpost.eu"; classtype:attempted-recon; sid:200003072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"berryblossoms.com"; classtype:attempted-recon; sid:200003073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"berserk-readmanga.com"; classtype:attempted-recon; sid:200003074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bespoke-auth-0nedrive-m365.web.app"; classtype:attempted-recon; sid:200003075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bestadealsmalls.club"; classtype:attempted-recon; sid:200003076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bestbusinesscreditcard.net"; classtype:attempted-recon; sid:200003077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bestcnanges.com"; classtype:attempted-recon; sid:200003078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bestcoin.su"; classtype:attempted-recon; sid:200003079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bestcryptochange24.com"; classtype:attempted-recon; sid:200003080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bestistanbul.org"; classtype:attempted-recon; sid:200003081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beta.sweettreatsbyjill.com"; classtype:attempted-recon; sid:200003082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"betamedia.com.ng"; classtype:attempted-recon; sid:200003083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"betasegura-viabcp.movil-sms.com"; classtype:attempted-recon; sid:200003084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"betc.app"; classtype:attempted-recon; sid:200003085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"betjjkntan.duckdns.org"; classtype:attempted-recon; sid:200003086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"betrogs.site"; classtype:attempted-recon; sid:200003087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"better.com.np"; classtype:attempted-recon; sid:200003088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bewitchedextraneouswireframe.asassama.repl.co"; classtype:attempted-recon; sid:200003089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bewqsx.hyperphp.com"; classtype:attempted-recon; sid:200003090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bexbubemwc.duckdns.org"; classtype:attempted-recon; sid:200003091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bexwebmailupdate.web.app"; classtype:attempted-recon; sid:200003092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beyond-point.com"; classtype:attempted-recon; sid:200003093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beyondcryptofx.com"; classtype:attempted-recon; sid:200003094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfashion-morals.site"; classtype:attempted-recon; sid:200003095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfbg.73936.cn"; classtype:attempted-recon; sid:200003096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfbodpdqju.duckdns.org"; classtype:attempted-recon; sid:200003097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfcsikhmda.duckdns.org"; classtype:attempted-recon; sid:200003098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfdb.63279.cn"; classtype:attempted-recon; sid:200003099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfdh.uhajwjv.cn"; classtype:attempted-recon; sid:200003100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfdhtf.qgjyxsp.cn"; classtype:attempted-recon; sid:200003101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfdv.73951.cn"; classtype:attempted-recon; sid:200003102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfeuukszhn.duckdns.org"; classtype:attempted-recon; sid:200003103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfirrijawp.duckdns.org"; classtype:attempted-recon; sid:200003104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfkfcnsrbv.duckdns.org"; classtype:attempted-recon; sid:200003105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfkplamkba.duckdns.org"; classtype:attempted-recon; sid:200003106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfmm.xlqrmyy.cn"; classtype:attempted-recon; sid:200003107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfmplkpotj.duckdns.org"; classtype:attempted-recon; sid:200003108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfnf.97739.cn"; classtype:attempted-recon; sid:200003109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfojzdennd.duckdns.org"; classtype:attempted-recon; sid:200003110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bft.79153.cn"; classtype:attempted-recon; sid:200003111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfuqfkfwyq.duckdns.org"; classtype:attempted-recon; sid:200003112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfzuvrozro.duckdns.org"; classtype:attempted-recon; sid:200003113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgcvxsedyf.duckdns.org"; classtype:attempted-recon; sid:200003114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgfqpwznaq.duckdns.org"; classtype:attempted-recon; sid:200003115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgielectrical.co.uk"; classtype:attempted-recon; sid:200003116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgqzuarnky.duckdns.org"; classtype:attempted-recon; sid:200003117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgrgjknnng.duckdns.org"; classtype:attempted-recon; sid:200003118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgtju.llaal.cn"; classtype:attempted-recon; sid:200003119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgtkkzvpoc.duckdns.org"; classtype:attempted-recon; sid:200003120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgxrmulpcu.duckdns.org"; classtype:attempted-recon; sid:200003121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bgxwsvsuiu.duckdns.org"; classtype:attempted-recon; sid:200003122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhairavstotra.com"; classtype:attempted-recon; sid:200003123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bharathi1809.github.io"; classtype:attempted-recon; sid:200003124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhavin0077.github.io"; classtype:attempted-recon; sid:200003125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhftmtujjd.duckdns.org"; classtype:attempted-recon; sid:200003126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhfvouefgo.duckdns.org"; classtype:attempted-recon; sid:200003127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhspnhlqih.duckdns.org"; classtype:attempted-recon; sid:200003128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhucznsumy.duckdns.org"; classtype:attempted-recon; sid:200003129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhybolqosm.duckdns.org"; classtype:attempted-recon; sid:200003130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bhzvhcvxdcs.weeblysite.com"; classtype:attempted-recon; sid:200003131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"biblioteca.sicrediprogresso.com.br"; classtype:attempted-recon; sid:200003132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bibtltupdd.duckdns.org"; classtype:attempted-recon; sid:200003133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bicicentroslezama.com"; classtype:attempted-recon; sid:200003134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bidlyiwjem.duckdns.org"; classtype:attempted-recon; sid:200003135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bieibmbmom.duckdns.org"; classtype:attempted-recon; sid:200003136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bienlinea12.sportsontheweb.net"; classtype:attempted-recon; sid:200003137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bienlineaseguridad.bienlinea.repl.co"; classtype:attempted-recon; sid:200003138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bienvenidos-iniciar-sesion.homebankinggal.repl.co"; classtype:attempted-recon; sid:200003139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bienvenueespace.podia.com"; classtype:attempted-recon; sid:200003140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bigapztdvo.duckdns.org"; classtype:attempted-recon; sid:200003141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bigshortbets.com"; classtype:attempted-recon; sid:200003142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bijouxacv.com"; classtype:attempted-recon; sid:200003143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bill-attset-c8bc.billnproblem.workers.dev"; classtype:attempted-recon; sid:200003144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"billing-status-check.firebaseapp.com"; classtype:attempted-recon; sid:200003145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"billing-status-check.web.app"; classtype:attempted-recon; sid:200003146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"billowing-king-3b55.westernbot.workers.dev"; classtype:attempted-recon; sid:200003147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"billowing-king-b316.cabrag7764019.workers.dev"; classtype:attempted-recon; sid:200003148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"binance-1inch.listviewss.com"; classtype:attempted-recon; sid:200003149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"binarytrade000.com"; classtype:attempted-recon; sid:200003150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"biotogrow.com"; classtype:attempted-recon; sid:200003151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bipcuwiyln.duckdns.org"; classtype:attempted-recon; sid:200003152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"birgitkoerner.clickfunnels.com"; classtype:attempted-recon; sid:200003153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bisentechzone.com"; classtype:attempted-recon; sid:200003154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bisujxywoi.duckdns.org"; classtype:attempted-recon; sid:200003155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"biswaptrade.org"; classtype:attempted-recon; sid:200003156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitbaink.web.app"; classtype:attempted-recon; sid:200003157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitcoin-store.net"; classtype:attempted-recon; sid:200003158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitcoinb.cc"; classtype:attempted-recon; sid:200003159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitcoinsucels.com"; classtype:attempted-recon; sid:200003160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitfinexbtck.com"; classtype:attempted-recon; sid:200003161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitfinexday.com"; classtype:attempted-recon; sid:200003162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitfinexhkpd.com"; classtype:attempted-recon; sid:200003163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bithunnb.web.app"; classtype:attempted-recon; sid:200003164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitkub-app.com"; classtype:attempted-recon; sid:200003165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitkub.digitalhub.co.th"; classtype:attempted-recon; sid:200003166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitkub.ml"; classtype:attempted-recon; sid:200003167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitkub.uk.to"; classtype:attempted-recon; sid:200003168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitkubcoin.com"; classtype:attempted-recon; sid:200003169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitly.lc"; classtype:attempted-recon; sid:200003170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitmart-trust.net"; classtype:attempted-recon; sid:200003171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitpiecrypto.com"; classtype:attempted-recon; sid:200003172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitpieex.com"; classtype:attempted-recon; sid:200003173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitriago56.dgfhh5.repl.co"; classtype:attempted-recon; sid:200003174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitte.modimyk.workers.dev"; classtype:attempted-recon; sid:200003175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitter-fog-1ad0.stubhub.workers.dev"; classtype:attempted-recon; sid:200003176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitter-moon-9725.regaccounts1009466.workers.dev"; classtype:attempted-recon; sid:200003177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitter-queen-2945.on.fleek.co"; classtype:attempted-recon; sid:200003178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitter-sunset-daaa.lamseem.workers.dev"; classtype:attempted-recon; sid:200003179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitter-surf-a18b.tyost.workers.dev"; classtype:attempted-recon; sid:200003180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitter-term-08e1.masao.workers.dev"; classtype:attempted-recon; sid:200003181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bivknacnfs.duckdns.org"; classtype:attempted-recon; sid:200003182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjbqruappi.duckdns.org"; classtype:attempted-recon; sid:200003183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjcmqhycbj.duckdns.org"; classtype:attempted-recon; sid:200003184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjdbsdmetc.duckdns.org"; classtype:attempted-recon; sid:200003185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjhwhnjpjz.duckdns.org"; classtype:attempted-recon; sid:200003186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjlbcisjth.duckdns.org"; classtype:attempted-recon; sid:200003187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjlunhyqtd.duckdns.org"; classtype:attempted-recon; sid:200003188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjmptulaat.duckdns.org"; classtype:attempted-recon; sid:200003189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjoska-inv.firebaseapp.com"; classtype:attempted-recon; sid:200003190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjoska-inv.web.app"; classtype:attempted-recon; sid:200003191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjoska-invests.firebaseapp.com"; classtype:attempted-recon; sid:200003192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjoska-invests.web.app"; classtype:attempted-recon; sid:200003193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjpgdfwiew.duckdns.org"; classtype:attempted-recon; sid:200003194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjqgvyhvxa.duckdns.org"; classtype:attempted-recon; sid:200003195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjyzjvrgtn.duckdns.org"; classtype:attempted-recon; sid:200003196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjzvglrqhr.duckdns.org"; classtype:attempted-recon; sid:200003197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bjzvpfpejr.duckdns.org"; classtype:attempted-recon; sid:200003198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bkhkxgulng.duckdns.org"; classtype:attempted-recon; sid:200003199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bkoqmspekm.duckdns.org"; classtype:attempted-recon; sid:200003200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bkuhohjarr.duckdns.org"; classtype:attempted-recon; sid:200003201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bkxdlajquu.duckdns.org"; classtype:attempted-recon; sid:200003202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bkyxvwqbzi.duckdns.org"; classtype:attempted-recon; sid:200003203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"black-bonus-a22b.greensandersss.workers.dev"; classtype:attempted-recon; sid:200003204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"black-disk-6500.anyrag8021015.workers.dev"; classtype:attempted-recon; sid:200003205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blacksprut.com"; classtype:attempted-recon; sid:200003206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blank-lebonnncoin.37-221-67-172.plesk.page"; classtype:attempted-recon; sid:200003207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blcqmkjfli.duckdns.org"; classtype:attempted-recon; sid:200003208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bleezarun-authbaqtyus.mom"; classtype:attempted-recon; sid:200003209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blehbtxblf.duckdns.org"; classtype:attempted-recon; sid:200003210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bleqkhjpty.duckdns.org"; classtype:attempted-recon; sid:200003211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blerecovery.22web.org"; classtype:attempted-recon; sid:200003212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blfjaswncs.duckdns.org"; classtype:attempted-recon; sid:200003213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blizzardlogin-us.com"; classtype:attempted-recon; sid:200003214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bljdaczvjh.duckdns.org"; classtype:attempted-recon; sid:200003215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blkeqnxulx.duckdns.org"; classtype:attempted-recon; sid:200003216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blnujkleic.duckdns.org"; classtype:attempted-recon; sid:200003217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bloccooperazionemps.com"; classtype:attempted-recon; sid:200003218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockchain-recovery.ml"; classtype:attempted-recon; sid:200003219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockchain-recovery.tk"; classtype:attempted-recon; sid:200003220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockchain-wallets.tk"; classtype:attempted-recon; sid:200003221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockchainconnect.tk"; classtype:attempted-recon; sid:200003222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockchains-recovery.tk"; classtype:attempted-recon; sid:200003223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockchains-wallet.tk"; classtype:attempted-recon; sid:200003224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockchains-wallets.tk"; classtype:attempted-recon; sid:200003225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blockscanfix.com"; classtype:attempted-recon; sid:200003226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blog-metamask.io"; classtype:attempted-recon; sid:200003227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blog.ipsf.org"; classtype:attempted-recon; sid:200003228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blog.porta-nuova.ch"; classtype:attempted-recon; sid:200003229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bloodandravensxsuit.tk"; classtype:attempted-recon; sid:200003230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blopet.avl-developer.es"; classtype:attempted-recon; sid:200003231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blowfish-ltd.co.uk"; classtype:attempted-recon; sid:200003232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blrjcobzyt.duckdns.org"; classtype:attempted-recon; sid:200003233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bltlvfdcla.duckdns.org"; classtype:attempted-recon; sid:200003234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bltmkjaftw.duckdns.org"; classtype:attempted-recon; sid:200003235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bluebirdmagazine.com"; classtype:attempted-recon; sid:200003236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blueoceandiamondsjewlery.com"; classtype:attempted-recon; sid:200003237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blutus234.onlinebg432.repl.co"; classtype:attempted-recon; sid:200003238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blzcufgxbd.duckdns.org"; classtype:attempted-recon; sid:200003239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blzghtesrcl.mfs.gg"; classtype:attempted-recon; sid:200003240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmabnlcwrn.duckdns.org"; classtype:attempted-recon; sid:200003241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmakcibuoq.duckdns.org"; classtype:attempted-recon; sid:200003242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmegroups.bme4718.workers.dev"; classtype:attempted-recon; sid:200003243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmgmluteck.duckdns.org"; classtype:attempted-recon; sid:200003244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmihbxqvoa.duckdns.org"; classtype:attempted-recon; sid:200003245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmjoslfibe.duckdns.org"; classtype:attempted-recon; sid:200003246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmoobpdhzb.duckdns.org"; classtype:attempted-recon; sid:200003247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bmxwejemgf.duckdns.org"; classtype:attempted-recon; sid:200003248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bn01928712.ultimatefreehost.in"; classtype:attempted-recon; sid:200003249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnacrinform.webcindario.com"; classtype:attempted-recon; sid:200003250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnacrsalogin0333.webcindario.com"; classtype:attempted-recon; sid:200003251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnb-pancake.finance"; classtype:attempted-recon; sid:200003252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnb-pancake.org"; classtype:attempted-recon; sid:200003253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnblever.com"; classtype:attempted-recon; sid:200003254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncas72376332.webcindario.com"; classtype:attempted-recon; sid:200003255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncbncrs2.webcindario.com"; classtype:attempted-recon; sid:200003256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncbncrs2123.webcindario.com"; classtype:attempted-recon; sid:200003257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncnar.webcindario.com"; classtype:attempted-recon; sid:200003258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnconacional.odoo.com"; classtype:attempted-recon; sid:200003259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncontacto00982.hostfree.pw"; classtype:attempted-recon; sid:200003260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncosantanderesg.com.swtest.ru"; classtype:attempted-recon; sid:200003261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncprovargacceso.com"; classtype:attempted-recon; sid:200003262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncr-livers61.webcindario.com"; classtype:attempted-recon; sid:200003263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncre.odoo.com"; classtype:attempted-recon; sid:200003264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncrna.webcindario.com"; classtype:attempted-recon; sid:200003265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bncrsecuryt.webcindario.com"; classtype:attempted-recon; sid:200003266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnculan.webcindario.com"; classtype:attempted-recon; sid:200003267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnkonlinegalicia.liveblog365.com"; classtype:attempted-recon; sid:200003268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnl-web-lt.preview-domain.com"; classtype:attempted-recon; sid:200003269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnnacionaluer.webcindario.com"; classtype:attempted-recon; sid:200003270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnnacionane.webcindario.com"; classtype:attempted-recon; sid:200003271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnncapornternet.intrerbarnk.top"; classtype:attempted-recon; sid:200003272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnncaprinternt.interbenk-pe.top"; classtype:attempted-recon; sid:200003273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnpnote004.firebaseapp.com"; classtype:attempted-recon; sid:200003274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnpnote004.web.app"; classtype:attempted-recon; sid:200003275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnrcsecunacio.webcindario.com"; classtype:attempted-recon; sid:200003276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnrfwixlen.duckdns.org"; classtype:attempted-recon; sid:200003277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnrwzouxvn.duckdns.org"; classtype:attempted-recon; sid:200003278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnsmyaqanf.duckdns.org"; classtype:attempted-recon; sid:200003279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnswor.hwwag.workers.dev"; classtype:attempted-recon; sid:200003280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bntts.webcindario.com"; classtype:attempted-recon; sid:200003281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnueoswtyx.duckdns.org"; classtype:attempted-recon; sid:200003282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnuokwgcaf.duckdns.org"; classtype:attempted-recon; sid:200003283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnytoldtwd.duckdns.org"; classtype:attempted-recon; sid:200003284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bnzjpssktn.duckdns.org"; classtype:attempted-recon; sid:200003285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boanergesbiblecollege.org"; classtype:attempted-recon; sid:200003286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"board.pancakesvqp.com"; classtype:attempted-recon; sid:200003287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boatekantokente.com.br"; classtype:attempted-recon; sid:200003288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bobssigns.net"; classtype:attempted-recon; sid:200003289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boc-update.firebaseapp.com"; classtype:attempted-recon; sid:200003290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boc-update.web.app"; classtype:attempted-recon; sid:200003291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bocahviralsmp.duckdns.org"; classtype:attempted-recon; sid:200003292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boddoevcbn.duckdns.org"; classtype:attempted-recon; sid:200003293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bodybuilding-muscle-supplements.com"; classtype:attempted-recon; sid:200003294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boebklpbhu.duckdns.org"; classtype:attempted-recon; sid:200003295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boetebzojt.duckdns.org"; classtype:attempted-recon; sid:200003296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bogdonovlerer.com"; classtype:attempted-recon; sid:200003297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boiling.muli.net.cn"; classtype:attempted-recon; sid:200003298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boiziqyojw.duckdns.org"; classtype:attempted-recon; sid:200003299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bokgabanesolutions.co.za"; classtype:attempted-recon; sid:200003300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bokohuryal.duckdns.org"; classtype:attempted-recon; sid:200003301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bokxwtnxnc.duckdns.org"; classtype:attempted-recon; sid:200003302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bold-cray.5-255-104-136.plesk.page"; classtype:attempted-recon; sid:200003303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bold-curie.109-206-241-201.plesk.page"; classtype:attempted-recon; sid:200003304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bold-flower-99ee.pontufbksd.workers.dev"; classtype:attempted-recon; sid:200003305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bold-heyrovsky.51-89-26-119.plesk.page"; classtype:attempted-recon; sid:200003306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bold-lake-3a7f.pojeecay.workers.dev"; classtype:attempted-recon; sid:200003307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bold.wvo.workers.dev"; classtype:attempted-recon; sid:200003308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boldd.martobang.workers.dev"; classtype:attempted-recon; sid:200003309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bolivar01.bitbucket.io"; classtype:attempted-recon; sid:200003310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boloafnrnr.duckdns.org"; classtype:attempted-recon; sid:200003311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bombcripto-game-cv.blogspot.com"; classtype:attempted-recon; sid:200003312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bommtfzsra.duckdns.org"; classtype:attempted-recon; sid:200003313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bomujah.uno"; classtype:attempted-recon; sid:200003314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bonolle.com"; classtype:attempted-recon; sid:200003315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bonsaitopics.com"; classtype:attempted-recon; sid:200003316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"booksfollower.com"; classtype:attempted-recon; sid:200003317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boostbyq.com"; classtype:attempted-recon; sid:200003318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boredapeyachtclub.special-mint.com"; classtype:attempted-recon; sid:200003319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"borma.co.id"; classtype:attempted-recon; sid:200003320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bosbosleon.com"; classtype:attempted-recon; sid:200003321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bossireland.com"; classtype:attempted-recon; sid:200003322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"botecodomanolo.blogspot.com"; classtype:attempted-recon; sid:200003323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"botnvuwfrf.duckdns.org"; classtype:attempted-recon; sid:200003324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bottlecap-graphics.com"; classtype:attempted-recon; sid:200003325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bountysday.com"; classtype:attempted-recon; sid:200003326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bowlxpzsjs.duckdns.org"; classtype:attempted-recon; sid:200003327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boxdrop.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200003328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boxroyalem11.com"; classtype:attempted-recon; sid:200003329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boxypty.com"; classtype:attempted-recon; sid:200003330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpdgttgfgs.duckdns.org"; classtype:attempted-recon; sid:200003331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpeclick.com"; classtype:attempted-recon; sid:200003332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpelvlrfey.duckdns.org"; classtype:attempted-recon; sid:200003333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bper.13-230-168-173.cprapid.com"; classtype:attempted-recon; sid:200003334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bperbanca.smart.whitedogwebdesign.com"; classtype:attempted-recon; sid:200003335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bperbancaweb.qiagency.com"; classtype:attempted-recon; sid:200003336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bperbancawebaccesso.besurehomehealth.com"; classtype:attempted-recon; sid:200003337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bperbancawebaccesso.iasrpublication.com"; classtype:attempted-recon; sid:200003338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bperbancawebaccesso.orientassets.com"; classtype:attempted-recon; sid:200003339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bphostarea.com"; classtype:attempted-recon; sid:200003340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpkmggislj.duckdns.org"; classtype:attempted-recon; sid:200003341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpknxmjcao.duckdns.org"; classtype:attempted-recon; sid:200003342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpmpdovegb.duckdns.org"; classtype:attempted-recon; sid:200003343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpnote0010.firebaseapp.com"; classtype:attempted-recon; sid:200003344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpnote0010.web.app"; classtype:attempted-recon; sid:200003345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpnote006.firebaseapp.com"; classtype:attempted-recon; sid:200003346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpnote006.web.app"; classtype:attempted-recon; sid:200003347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpokqumyyv.duckdns.org"; classtype:attempted-recon; sid:200003348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpucjofugm.duckdns.org"; classtype:attempted-recon; sid:200003349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpxrrvhjyb.duckdns.org"; classtype:attempted-recon; sid:200003350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bqcjuouhka.duckdns.org"; classtype:attempted-recon; sid:200003351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bqczopeifa.duckdns.org"; classtype:attempted-recon; sid:200003352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bqdvzfects.duckdns.org"; classtype:attempted-recon; sid:200003353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bqfrmnauis.duckdns.org"; classtype:attempted-recon; sid:200003354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bqolwufdfv.duckdns.org"; classtype:attempted-recon; sid:200003355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bqsarnijax.duckdns.org"; classtype:attempted-recon; sid:200003356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bra904.7853bra908.repl.co"; classtype:attempted-recon; sid:200003357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bradesco.netsuporte.com"; classtype:attempted-recon; sid:200003358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bradescoempresas.bankto.me"; classtype:attempted-recon; sid:200003359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bragoff.com"; classtype:attempted-recon; sid:200003360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brandsoutlet.qa"; classtype:attempted-recon; sid:200003361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brave-gelatinous-puffin.glitch.me"; classtype:attempted-recon; sid:200003362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bravepartialdiskdrive.soportbrou.repl.co"; classtype:attempted-recon; sid:200003363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brdh.distktf.cn"; classtype:attempted-recon; sid:200003364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"breckenridge.peopletekinc.com"; classtype:attempted-recon; sid:200003365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brezwiydrx.duckdns.org"; classtype:attempted-recon; sid:200003366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"briefvapidmodels.galicia34.repl.co"; classtype:attempted-recon; sid:200003367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brightwisecleaning.com"; classtype:attempted-recon; sid:200003368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"briketstroj.hr"; classtype:attempted-recon; sid:200003369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brittanyalleman.com"; classtype:attempted-recon; sid:200003370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brjtv.in"; classtype:attempted-recon; sid:200003371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brjueyodti.duckdns.org"; classtype:attempted-recon; sid:200003372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brknlgbvuq.duckdns.org"; classtype:attempted-recon; sid:200003373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brmaoipwwp.duckdns.org"; classtype:attempted-recon; sid:200003374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"broad-band-100183.weeblysite.com"; classtype:attempted-recon; sid:200003375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"broad-band-108736.weeblysite.com"; classtype:attempted-recon; sid:200003376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"broad-cherry-f932.mlynn1461.workers.dev"; classtype:attempted-recon; sid:200003377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"broad-path.sofalbayat.ir"; classtype:attempted-recon; sid:200003378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"broad-violet-b788.wesmoded.workers.dev"; classtype:attempted-recon; sid:200003379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brohgsebroysh.hostfree.pw"; classtype:attempted-recon; sid:200003380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brokbv.com"; classtype:attempted-recon; sid:200003381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"broke.bibirpergikedanaubuatan.workers.dev"; classtype:attempted-recon; sid:200003382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"broken-rice-20d6.richardmayworm252638.workers.dev"; classtype:attempted-recon; sid:200003383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks--canada.com"; classtype:attempted-recon; sid:200003384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks-forrunning.top"; classtype:attempted-recon; sid:200003385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks-move.top"; classtype:attempted-recon; sid:200003386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks-ooke.top"; classtype:attempted-recon; sid:200003387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks-runfarther.top"; classtype:attempted-recon; sid:200003388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks-xsbdyugd.top"; classtype:attempted-recon; sid:200003389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks-xsdaodab.top"; classtype:attempted-recon; sid:200003390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks-xsdauofc.top"; classtype:attempted-recon; sid:200003391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooks1914.top"; classtype:attempted-recon; sid:200003392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksair.top"; classtype:attempted-recon; sid:200003393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksfactoryoutlets.com"; classtype:attempted-recon; sid:200003394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksforsports.top"; classtype:attempted-recon; sid:200003395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksghost13sale.com"; classtype:attempted-recon; sid:200003396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brookshome.top"; classtype:attempted-recon; sid:200003397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksmajor.top"; classtype:attempted-recon; sid:200003398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksnewmethod.top"; classtype:attempted-recon; sid:200003399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksnewsports.top"; classtype:attempted-recon; sid:200003400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksonlinekaufen.com"; classtype:attempted-recon; sid:200003401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksprime.top"; classtype:attempted-recon; sid:200003402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksrunningcanada.ca"; classtype:attempted-recon; sid:200003403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksrunninges.com"; classtype:attempted-recon; sid:200003404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksrunningshoesusa.com"; classtype:attempted-recon; sid:200003405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksrunshoeshopping.top"; classtype:attempted-recon; sid:200003406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brookssalemalaysia.com"; classtype:attempted-recon; sid:200003407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksshoeau.com"; classtype:attempted-recon; sid:200003408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksshoesmalaysiaoutlet.com"; classtype:attempted-recon; sid:200003409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksshoesoutletonline.us"; classtype:attempted-recon; sid:200003410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksshoesstore.us"; classtype:attempted-recon; sid:200003411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksshoesuksale.com"; classtype:attempted-recon; sid:200003412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brooksshopsft.top"; classtype:attempted-recon; sid:200003413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brookssko-norge.com"; classtype:attempted-recon; sid:200003414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brookssneakerssale.us"; classtype:attempted-recon; sid:200003415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brookssoft.top"; classtype:attempted-recon; sid:200003416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brou-e.amerrrciagal00.repl.co"; classtype:attempted-recon; sid:200003417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brouonlibankuy.brouonlibankuy.repl.co"; classtype:attempted-recon; sid:200003418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brroooksssale.com"; classtype:attempted-recon; sid:200003419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brtovutytr.duckdns.org"; classtype:attempted-recon; sid:200003420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bruceslufthadas0291.clickfunnels.com"; classtype:attempted-recon; sid:200003421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brunetaw.hyperphp.com"; classtype:attempted-recon; sid:200003422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brunsonproperties.com"; classtype:attempted-recon; sid:200003423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bruralcleangtwashing.com"; classtype:attempted-recon; sid:200003424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brxqahxtck.duckdns.org"; classtype:attempted-recon; sid:200003425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bs2www2.blogspot.com"; classtype:attempted-recon; sid:200003426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bscpad.com.pe"; classtype:attempted-recon; sid:200003427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsdfdfasdaf213.liveblog365.com"; classtype:attempted-recon; sid:200003428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bshein.shop"; classtype:attempted-recon; sid:200003429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsihnpecoy.duckdns.org"; classtype:attempted-recon; sid:200003430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bslcagtzlb.duckdns.org"; classtype:attempted-recon; sid:200003431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bslivmkgyx.duckdns.org"; classtype:attempted-recon; sid:200003432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bslrtskmgd.duckdns.org"; classtype:attempted-recon; sid:200003433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsneiqirqu.duckdns.org"; classtype:attempted-recon; sid:200003434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsnshlp.sprtacn.scrthlp.workers.dev"; classtype:attempted-recon; sid:200003435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bstxydqmsm.duckdns.org"; classtype:attempted-recon; sid:200003436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsuhiebabi.duckdns.org"; classtype:attempted-recon; sid:200003437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsukczyxhc.duckdns.org"; classtype:attempted-recon; sid:200003438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bswap-finance.web.app"; classtype:attempted-recon; sid:200003439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bsylenwzyi.duckdns.org"; classtype:attempted-recon; sid:200003440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-105905.weeblysite.com"; classtype:attempted-recon; sid:200003441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-alertservice.boxmode.io"; classtype:attempted-recon; sid:200003442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-home-page-109263.weeblysite.com"; classtype:attempted-recon; sid:200003443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-internet-107187.weeblysite.com"; classtype:attempted-recon; sid:200003444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-login-103136.weeblysite.com"; classtype:attempted-recon; sid:200003445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-mail-104427.weeblysite.com"; classtype:attempted-recon; sid:200003446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt.my-style.in"; classtype:attempted-recon; sid:200003447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt30i4040e.webflow.io"; classtype:attempted-recon; sid:200003448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btafmokyqi.duckdns.org"; classtype:attempted-recon; sid:200003449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btbusinessbill-baa2b7.webflow.io"; classtype:attempted-recon; sid:200003450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btbusinessbilling.wordpress.com"; classtype:attempted-recon; sid:200003451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btbusinesscommunication.github.io"; classtype:attempted-recon; sid:200003452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btbusinessreadybill.webflow.io"; classtype:attempted-recon; sid:200003453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btccommuniactinbusinness-btapp.webflow.io"; classtype:attempted-recon; sid:200003454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btconnect-109798.square.site"; classtype:attempted-recon; sid:200003455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btconnect-380a87.webflow.io"; classtype:attempted-recon; sid:200003456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btconnect-60fa7a.webflow.io"; classtype:attempted-recon; sid:200003457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btconnect-903380.webflow.io"; classtype:attempted-recon; sid:200003458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btcx2.pro"; classtype:attempted-recon; sid:200003459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btgt.jjmmj.cn"; classtype:attempted-recon; sid:200003460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternet-104583.weeblysite.com"; classtype:attempted-recon; sid:200003461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternet-109158.weeblysite.com"; classtype:attempted-recon; sid:200003462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternet-109822.weeblysite.com"; classtype:attempted-recon; sid:200003463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternet-f17493.webflow.io"; classtype:attempted-recon; sid:200003464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternet-web-page.weeblysite.com"; classtype:attempted-recon; sid:200003465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternetcom-108632.weeblysite.com"; classtype:attempted-recon; sid:200003466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternetw.weeblysite.com"; classtype:attempted-recon; sid:200003467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btiuytdr567829etysrgzfagswergt.weebly.com"; classtype:attempted-recon; sid:200003468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btjyk.juzhongchuang.cn"; classtype:attempted-recon; sid:200003469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btkatuelwn.duckdns.org"; classtype:attempted-recon; sid:200003470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btlyrgh.mfs.gg"; classtype:attempted-recon; sid:200003471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btncxqwudi.duckdns.org"; classtype:attempted-recon; sid:200003472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btoex.vip"; classtype:attempted-recon; sid:200003473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btqghdkwhh.weeblysite.com"; classtype:attempted-recon; sid:200003474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btsagjonfl.duckdns.org"; classtype:attempted-recon; sid:200003475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btsei.net"; classtype:attempted-recon; sid:200003476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btstcbxlhm.duckdns.org"; classtype:attempted-recon; sid:200003477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btsuvzzhpo.duckdns.org"; classtype:attempted-recon; sid:200003478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bttdlovflk.duckdns.org"; classtype:attempted-recon; sid:200003479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bttsbyrsvd.duckdns.org"; classtype:attempted-recon; sid:200003480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btupbvqcmu.duckdns.org"; classtype:attempted-recon; sid:200003481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btvhjhghgfhj.weeblysite.com"; classtype:attempted-recon; sid:200003482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btyeqarumu.duckdns.org"; classtype:attempted-recon; sid:200003483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buaizonline.com"; classtype:attempted-recon; sid:200003484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bubcpubwvf.duckdns.org"; classtype:attempted-recon; sid:200003485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"budbngncvg.duckdns.org"; classtype:attempted-recon; sid:200003486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"budrrpvhlj.duckdns.org"; classtype:attempted-recon; sid:200003487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buegqbphxd.duckdns.org"; classtype:attempted-recon; sid:200003488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bugfabdmct.duckdns.org"; classtype:attempted-recon; sid:200003489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buggywebtech453.ml"; classtype:attempted-recon; sid:200003490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bugiohxele.duckdns.org"; classtype:attempted-recon; sid:200003491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buildclerk.com"; classtype:attempted-recon; sid:200003492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"builder.frontsite.org"; classtype:attempted-recon; sid:200003493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bukidnonmockpolls.com"; classtype:attempted-recon; sid:200003494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bukirtermisa.co.vu"; classtype:attempted-recon; sid:200003495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bukix.com"; classtype:attempted-recon; sid:200003496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bullettrainbtn2.blogspot.com"; classtype:attempted-recon; sid:200003497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bullettrainbtn4.blogspot.com"; classtype:attempted-recon; sid:200003498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bullettrainbtn5.blogspot.com"; classtype:attempted-recon; sid:200003499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bund-de.lojaintegrada.com.br"; classtype:attempted-recon; sid:200003500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buralenergiasolar.blogspot.com"; classtype:attempted-recon; sid:200003501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"burftjmuwb.duckdns.org"; classtype:attempted-recon; sid:200003502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"burlyfaroffdesignmethod.joseacosta10.repl.co"; classtype:attempted-recon; sid:200003503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"busanopen.org"; classtype:attempted-recon; sid:200003504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-alert-page-192851.firebaseapp.com"; classtype:attempted-recon; sid:200003505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-alert-page19285.firebaseapp.com"; classtype:attempted-recon; sid:200003506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-appeal-form-127851.firebaseapp.com"; classtype:attempted-recon; sid:200003507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-appeal-form-182751.firebaseapp.com"; classtype:attempted-recon; sid:200003508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-appeal-form-18275891.firebaseapp.com"; classtype:attempted-recon; sid:200003509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-bt1.webflow.io"; classtype:attempted-recon; sid:200003510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-copyright-appeal-0125.firebaseapp.com"; classtype:attempted-recon; sid:200003511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-copyright-appeal-1105.firebaseapp.com"; classtype:attempted-recon; sid:200003512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-copyright-appeal-1257.firebaseapp.com"; classtype:attempted-recon; sid:200003513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-copyright-appeal-1285.firebaseapp.com"; classtype:attempted-recon; sid:200003514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-copyright-appeal-1685.firebaseapp.com"; classtype:attempted-recon; sid:200003515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-copyright-appeal-1807.firebaseapp.com"; classtype:attempted-recon; sid:200003516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-fb-copyright-1285781.firebaseapp.com"; classtype:attempted-recon; sid:200003517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-00-258912.firebaseapp.com"; classtype:attempted-recon; sid:200003518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-00-258912.web.app"; classtype:attempted-recon; sid:200003519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-00-519792.firebaseapp.com"; classtype:attempted-recon; sid:200003520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-00-519792.web.app"; classtype:attempted-recon; sid:200003521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-10-028591.firebaseapp.com"; classtype:attempted-recon; sid:200003522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-10-028591.web.app"; classtype:attempted-recon; sid:200003523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-11-687349.firebaseapp.com"; classtype:attempted-recon; sid:200003524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-11-687349.web.app"; classtype:attempted-recon; sid:200003525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12-029591.firebaseapp.com"; classtype:attempted-recon; sid:200003526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12-029591.web.app"; classtype:attempted-recon; sid:200003527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12-052125.firebaseapp.com"; classtype:attempted-recon; sid:200003528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12-052125.web.app"; classtype:attempted-recon; sid:200003529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12-085091.firebaseapp.com"; classtype:attempted-recon; sid:200003530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12-085091.web.app"; classtype:attempted-recon; sid:200003531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-120606252.web.app"; classtype:attempted-recon; sid:200003532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12076-952.firebaseapp.com"; classtype:attempted-recon; sid:200003533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-12076-952.web.app"; classtype:attempted-recon; sid:200003534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-122-92386.firebaseapp.com"; classtype:attempted-recon; sid:200003535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-122-92386.web.app"; classtype:attempted-recon; sid:200003536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-1260-0963.firebaseapp.com"; classtype:attempted-recon; sid:200003537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-1260-0963.web.app"; classtype:attempted-recon; sid:200003538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-129-06200.firebaseapp.com"; classtype:attempted-recon; sid:200003539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-129-06200.web.app"; classtype:attempted-recon; sid:200003540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-1900-0072.firebaseapp.com"; classtype:attempted-recon; sid:200003541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-appeal-1900-0072.web.app"; classtype:attempted-recon; sid:200003542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-18-359.firebaseapp.com"; classtype:attempted-recon; sid:200003543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-18-359.web.app"; classtype:attempted-recon; sid:200003544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-19-331.firebaseapp.com"; classtype:attempted-recon; sid:200003545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-19-331.web.app"; classtype:attempted-recon; sid:200003546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-197-62.firebaseapp.com"; classtype:attempted-recon; sid:200003547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-197-62.web.app"; classtype:attempted-recon; sid:200003548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-298942.firebaseapp.com"; classtype:attempted-recon; sid:200003549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-violation-298942.web.app"; classtype:attempted-recon; sid:200003550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"businessappwebazienda-com.preview-domain.com"; classtype:attempted-recon; sid:200003551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"businessbtappbill.webflow.io"; classtype:attempted-recon; sid:200003552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"businessbtconnect.webflow.io"; classtype:attempted-recon; sid:200003553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"busnzzpeys.duckdns.org"; classtype:attempted-recon; sid:200003554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"butyvansoldskool.com"; classtype:attempted-recon; sid:200003555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buwbpcuvbw.duckdns.org"; classtype:attempted-recon; sid:200003556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buwfafqrmf.duckdns.org"; classtype:attempted-recon; sid:200003557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buxsvxjgzd.duckdns.org"; classtype:attempted-recon; sid:200003558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bvcmh.ghadfyp.cn"; classtype:attempted-recon; sid:200003559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bvlubijhdf.duckdns.org"; classtype:attempted-recon; sid:200003560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bvtgvejlnk.duckdns.org"; classtype:attempted-recon; sid:200003561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bvuiqoqlkv.duckdns.org"; classtype:attempted-recon; sid:200003562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bvwexibkej.duckdns.org"; classtype:attempted-recon; sid:200003563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bvxigttdfb.duckdns.org"; classtype:attempted-recon; sid:200003564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bw8zgq.webwave.dev"; classtype:attempted-recon; sid:200003565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bwctqakhbt.duckdns.org"; classtype:attempted-recon; sid:200003566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bwjdhjvbew.duckdns.org"; classtype:attempted-recon; sid:200003567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bwjyfmrrzz.duckdns.org"; classtype:attempted-recon; sid:200003568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bwubbpbdjj.duckdns.org"; classtype:attempted-recon; sid:200003569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bwysmywjbh.duckdns.org"; classtype:attempted-recon; sid:200003570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bxe.d3pga84a97knro.amplifyapp.com"; classtype:attempted-recon; sid:200003571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bxfhj.6xmh40g.cn"; classtype:attempted-recon; sid:200003572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bxgqxsmctg.duckdns.org"; classtype:attempted-recon; sid:200003573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bxhbyozkyz.duckdns.org"; classtype:attempted-recon; sid:200003574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bxpbdzjwts.duckdns.org"; classtype:attempted-recon; sid:200003575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bxvchhuvya3.top"; classtype:attempted-recon; sid:200003576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bxwfjgtpuf.duckdns.org"; classtype:attempted-recon; sid:200003577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bybij.vip"; classtype:attempted-recon; sid:200003578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bybte.vip"; classtype:attempted-recon; sid:200003579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"byimnewtgf.duckdns.org"; classtype:attempted-recon; sid:200003580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bynpywdcny.duckdns.org"; classtype:attempted-recon; sid:200003581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"byringenieros.com"; classtype:attempted-recon; sid:200003582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"byrl.me"; classtype:attempted-recon; sid:200003583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"byslibrary.com"; classtype:attempted-recon; sid:200003584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bywafdtaxp.duckdns.org"; classtype:attempted-recon; sid:200003585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bywleuxckr.duckdns.org"; classtype:attempted-recon; sid:200003586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"byzxtnskin.duckdns.org"; classtype:attempted-recon; sid:200003587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"byzzrjrdjc.duckdns.org"; classtype:attempted-recon; sid:200003588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzbputtceq.duckdns.org"; classtype:attempted-recon; sid:200003589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzcpoxbvbi.duckdns.org"; classtype:attempted-recon; sid:200003590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzdzjqwdux.duckdns.org"; classtype:attempted-recon; sid:200003591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzfabrrdcp.duckdns.org"; classtype:attempted-recon; sid:200003592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzfpudgoxv.duckdns.org"; classtype:attempted-recon; sid:200003593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzletxicce.duckdns.org"; classtype:attempted-recon; sid:200003594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzotecdqjm.duckdns.org"; classtype:attempted-recon; sid:200003595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bztqpbzxhx.duckdns.org"; classtype:attempted-recon; sid:200003596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzxiuwtdnf.duckdns.org"; classtype:attempted-recon; sid:200003597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzxwdtyjcm.duckdns.org"; classtype:attempted-recon; sid:200003598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bzygrrfyfk.duckdns.org"; classtype:attempted-recon; sid:200003599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c.curiousmorty.be"; classtype:attempted-recon; sid:200003600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c.gibsonwine.workers.dev"; classtype:attempted-recon; sid:200003601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c.loveawaits.be"; classtype:attempted-recon; sid:200003602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c.mail.com"; classtype:attempted-recon; sid:200003603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c1christine.tjelmeland2e.cso.gov.tt"; classtype:attempted-recon; sid:200003604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c1tizens.com"; classtype:attempted-recon; sid:200003605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c20f0789f73545650ebf57fa7dddc.firebaseapp.com"; classtype:attempted-recon; sid:200003606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c20f0789f73545650ebf57fa7dddc.web.app"; classtype:attempted-recon; sid:200003607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c2dcw069.caspio.com"; classtype:attempted-recon; sid:200003608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c2hch255.caspio.com"; classtype:attempted-recon; sid:200003609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c3abh425.caspio.com"; classtype:attempted-recon; sid:200003610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c46f9fa1-f94c-421f-9828-331363875e11.id.repl.co"; classtype:attempted-recon; sid:200003611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c6ebv708.caspio.com"; classtype:attempted-recon; sid:200003612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c7d8fcc775c13766835eb0481e1c9.firebaseapp.com"; classtype:attempted-recon; sid:200003613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c7d8fcc775c13766835eb0481e1c9.web.app"; classtype:attempted-recon; sid:200003614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c838d141661e86782cebe369822.firebaseapp.com"; classtype:attempted-recon; sid:200003615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c838d141661e86782cebe369822.web.app"; classtype:attempted-recon; sid:200003616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ca-italiawebcc.me"; classtype:attempted-recon; sid:200003617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ca24credi-agricolle.one"; classtype:attempted-recon; sid:200003618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ca24credi-agrlcole.online"; classtype:attempted-recon; sid:200003619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ca65t4498313.sitebuilder.name.tools"; classtype:attempted-recon; sid:200003620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ca69218.tmweb.ru"; classtype:attempted-recon; sid:200003621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cabanacotulariesului.ro"; classtype:attempted-recon; sid:200003622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cacfnd.cam"; classtype:attempted-recon; sid:200003623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cache.nebula.phx3.secureserver.net"; classtype:attempted-recon; sid:200003624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cadupexsite.com"; classtype:attempted-recon; sid:200003625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caeauweqro.duckdns.org"; classtype:attempted-recon; sid:200003626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caeng.hyperphp.com"; classtype:attempted-recon; sid:200003627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cagomweljk.duckdns.org"; classtype:attempted-recon; sid:200003628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cahxvxovdl.duckdns.org"; classtype:attempted-recon; sid:200003629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisse-ce.devupdadfr.info"; classtype:attempted-recon; sid:200003630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-be.firebaseapp.com"; classtype:attempted-recon; sid:200003631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-be.web.app"; classtype:attempted-recon; sid:200003632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-cab8a.firebaseapp.com"; classtype:attempted-recon; sid:200003633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-cab8a.web.app"; classtype:attempted-recon; sid:200003634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-error.firebaseapp.com"; classtype:attempted-recon; sid:200003635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-error.web.app"; classtype:attempted-recon; sid:200003636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-fd099.firebaseapp.com"; classtype:attempted-recon; sid:200003637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-fd099.web.app"; classtype:attempted-recon; sid:200003638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-home.firebaseapp.com"; classtype:attempted-recon; sid:200003639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseing-home.web.app"; classtype:attempted-recon; sid:200003640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseingbe.firebaseapp.com"; classtype:attempted-recon; sid:200003641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caisseingbe.web.app"; classtype:attempted-recon; sid:200003642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caixainfos.cargo.site"; classtype:attempted-recon; sid:200003643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caixaregularize.blogspot.com"; classtype:attempted-recon; sid:200003644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caixaseguradora.quadientcloud.com"; classtype:attempted-recon; sid:200003645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cajaarequipa.bossanostra.com.br"; classtype:attempted-recon; sid:200003646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cajaarequipa.com"; classtype:attempted-recon; sid:200003647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cajaarequipa.hisagence.com"; classtype:attempted-recon; sid:200003648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cajabanrural.negocio.site"; classtype:attempted-recon; sid:200003649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cajapiurape.com"; classtype:attempted-recon; sid:200003650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cajarequipaserv.com"; classtype:attempted-recon; sid:200003651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cajaspiura.xyz"; classtype:attempted-recon; sid:200003652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calculatingforkedactivecontent.galiciaabac.repl.co"; classtype:attempted-recon; sid:200003653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calgaryren234tlistwca.ru"; classtype:attempted-recon; sid:200003654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calm-bakum.mchkkbny.workers.dev"; classtype:attempted-recon; sid:200003655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calm-bird.media-personal.workers.dev"; classtype:attempted-recon; sid:200003656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calm-grass-8770.tropicstarsfd2299.workers.dev"; classtype:attempted-recon; sid:200003657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calm-lab-e74a.cattaleya76.workers.dev"; classtype:attempted-recon; sid:200003658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calstateedu.securevdr.com"; classtype:attempted-recon; sid:200003659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"camaxtesmails.firebaseapp.com"; classtype:attempted-recon; sid:200003660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"camaxtesmails.web.app"; classtype:attempted-recon; sid:200003661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"camineri.com"; classtype:attempted-recon; sid:200003662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"camiseta-verde.blogspot.com"; classtype:attempted-recon; sid:200003663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"camrey.com.br"; classtype:attempted-recon; sid:200003664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"canadavisitisrael.com"; classtype:attempted-recon; sid:200003665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"canal-clientes.firebaseapp.com"; classtype:attempted-recon; sid:200003666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"canal-clientes.web.app"; classtype:attempted-recon; sid:200003667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"canales-cmr.firebaseapp.com"; classtype:attempted-recon; sid:200003668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"canales-cmr.web.app"; classtype:attempted-recon; sid:200003669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cangkulang.dnset.com"; classtype:attempted-recon; sid:200003670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"canpostpackage.com"; classtype:attempted-recon; sid:200003671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"capacitacionserprof.cl"; classtype:attempted-recon; sid:200003672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"capedwondereurope.com"; classtype:attempted-recon; sid:200003673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caphvphcwr.duckdns.org"; classtype:attempted-recon; sid:200003674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"capitecza.com"; classtype:attempted-recon; sid:200003675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"captainpenguin.com"; classtype:attempted-recon; sid:200003676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caracasmateriais.blogspot.com"; classtype:attempted-recon; sid:200003677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cardanostake.io"; classtype:attempted-recon; sid:200003678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"careerbuilder-52038.firebaseapp.com"; classtype:attempted-recon; sid:200003679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"careerbuilder-52038.web.app"; classtype:attempted-recon; sid:200003680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caringfortextiles.com"; classtype:attempted-recon; sid:200003681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"carlos.hostfree.pw"; classtype:attempted-recon; sid:200003682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"carltonnh-pdf.ml"; classtype:attempted-recon; sid:200003683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"carpediemxp.com"; classtype:attempted-recon; sid:200003684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"carrinho-produt09811.com"; classtype:attempted-recon; sid:200003685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cartevitale.assumalade.fr"; classtype:attempted-recon; sid:200003686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cas-polygon.blogspot.com"; classtype:attempted-recon; sid:200003687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cas2323233.webcindario.com"; classtype:attempted-recon; sid:200003688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cas2323233767.webcindario.com"; classtype:attempted-recon; sid:200003689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cas2328743.webcindario.com"; classtype:attempted-recon; sid:200003690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casadoborracheiroxx.blogspot.com"; classtype:attempted-recon; sid:200003691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casanaturalle.com"; classtype:attempted-recon; sid:200003692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casbancolomb.casbancolomb.repl.co"; classtype:attempted-recon; sid:200003693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case--id.454654321131.com"; classtype:attempted-recon; sid:200003694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case-id.19786543621962.com"; classtype:attempted-recon; sid:200003695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case.454654321131.com"; classtype:attempted-recon; sid:200003696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10002361316.firebaseapp.com"; classtype:attempted-recon; sid:200003697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10002361316.web.app"; classtype:attempted-recon; sid:200003698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10002616111.firebaseapp.com"; classtype:attempted-recon; sid:200003699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10002616111.web.app"; classtype:attempted-recon; sid:200003700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100036443676721.firebaseapp.com"; classtype:attempted-recon; sid:200003701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100036443676721.web.app"; classtype:attempted-recon; sid:200003702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1000423621661.firebaseapp.com"; classtype:attempted-recon; sid:200003703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1000423621661.web.app"; classtype:attempted-recon; sid:200003704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10005415641518.firebaseapp.com"; classtype:attempted-recon; sid:200003705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10005415641518.web.app"; classtype:attempted-recon; sid:200003706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100065464684564.web.app"; classtype:attempted-recon; sid:200003707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100105610851085.adsreview.us"; classtype:attempted-recon; sid:200003708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1001056541241.adsreview.us"; classtype:attempted-recon; sid:200003709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1001056851150.adsreview.us"; classtype:attempted-recon; sid:200003710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1001508515201.ad-help-support.com"; classtype:attempted-recon; sid:200003711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10015345345654.adsreview.us"; classtype:attempted-recon; sid:200003712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1001856184151.firebaseapp.com"; classtype:attempted-recon; sid:200003713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1001856184151.web.app"; classtype:attempted-recon; sid:200003714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1004300386.firebaseapp.com"; classtype:attempted-recon; sid:200003715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1004300386.web.app"; classtype:attempted-recon; sid:200003716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100451485222510.firebaseapp.com"; classtype:attempted-recon; sid:200003717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100451485222510.web.app"; classtype:attempted-recon; sid:200003718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10051895201020.firebaseapp.com"; classtype:attempted-recon; sid:200003719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10051895201020.web.app"; classtype:attempted-recon; sid:200003720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100543765456.firebaseapp.com"; classtype:attempted-recon; sid:200003721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100543765456.web.app"; classtype:attempted-recon; sid:200003722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1005438754743.firebaseapp.com"; classtype:attempted-recon; sid:200003723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1005438754743.web.app"; classtype:attempted-recon; sid:200003724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10054610510.firebaseapp.com"; classtype:attempted-recon; sid:200003725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10054687234324.web.app"; classtype:attempted-recon; sid:200003726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1005643859565.firebaseapp.com"; classtype:attempted-recon; sid:200003727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1005643859565.web.app"; classtype:attempted-recon; sid:200003728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1005810852150.firebaseapp.com"; classtype:attempted-recon; sid:200003729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1005810852150.web.app"; classtype:attempted-recon; sid:200003730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10058206451563.web.app"; classtype:attempted-recon; sid:200003731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case1005861298564132.firebaseapp.com"; classtype:attempted-recon; sid:200003732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100895415656103.firebaseapp.com"; classtype:attempted-recon; sid:200003733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100895415656103.web.app"; classtype:attempted-recon; sid:200003734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10096211465415.adsreview.us"; classtype:attempted-recon; sid:200003735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100965286510.adsreview.us"; classtype:attempted-recon; sid:200003736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100984156514650.firebaseapp.com"; classtype:attempted-recon; sid:200003737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case100984156514650.web.app"; classtype:attempted-recon; sid:200003738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10098541532156410.firebaseapp.com"; classtype:attempted-recon; sid:200003739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10098541532156410.web.app"; classtype:attempted-recon; sid:200003740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10098561010320.web.app"; classtype:attempted-recon; sid:200003741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10502036121.firebaseapp.com"; classtype:attempted-recon; sid:200003742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case10502036121.web.app"; classtype:attempted-recon; sid:200003743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case5848552020520.firebaseapp.com"; classtype:attempted-recon; sid:200003744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case984932423.firebaseapp.com"; classtype:attempted-recon; sid:200003745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"case984932423.web.app"; classtype:attempted-recon; sid:200003746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casehelp1000437865789607.firebaseapp.com"; classtype:attempted-recon; sid:200003747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casehelp1000437865789607.web.app"; classtype:attempted-recon; sid:200003748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caseid.454654321131.com"; classtype:attempted-recon; sid:200003749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caseid10052347862364.adsreview.us"; classtype:attempted-recon; sid:200003750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caseid4785055283customerservice.blogspot.com"; classtype:attempted-recon; sid:200003751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caseid923874238921.firebaseapp.com"; classtype:attempted-recon; sid:200003752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caseid923874238921.web.app"; classtype:attempted-recon; sid:200003753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casemetahelpsupport.firebaseapp.com"; classtype:attempted-recon; sid:200003754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casemetahelpsupport.web.app"; classtype:attempted-recon; sid:200003755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caso28172384.caso28172384.repl.co"; classtype:attempted-recon; sid:200003756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caso87hu78.give65.repl.co"; classtype:attempted-recon; sid:200003757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casobrou1111.webcindario.com"; classtype:attempted-recon; sid:200003758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casomicrosoftco7.hostfree.pw"; classtype:attempted-recon; sid:200003759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"casvpqjyni.duckdns.org"; classtype:attempted-recon; sid:200003760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cateringfoodanddrinksupplies777.business.site"; classtype:attempted-recon; sid:200003761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"catkin-brindle-houseboat.glitch.me"; classtype:attempted-recon; sid:200003762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"catur.com"; classtype:attempted-recon; sid:200003763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"catus.cat"; classtype:attempted-recon; sid:200003764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"causelesshappiness.org"; classtype:attempted-recon; sid:200003765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cavabienalley.com"; classtype:attempted-recon; sid:200003766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caycos.beispielseite-wmka.de"; classtype:attempted-recon; sid:200003767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cb66792.tmweb.ru"; classtype:attempted-recon; sid:200003768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbaaaesvln.duckdns.org"; classtype:attempted-recon; sid:200003769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbckmwtzmu.duckdns.org"; classtype:attempted-recon; sid:200003770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbhou91px.fiswebdv.net"; classtype:attempted-recon; sid:200003771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbprnmcadd.duckdns.org"; classtype:attempted-recon; sid:200003772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbqozynalv.duckdns.org"; classtype:attempted-recon; sid:200003773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbskateshoop.blogspot.com"; classtype:attempted-recon; sid:200003774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbydmwuwvb.duckdns.org"; classtype:attempted-recon; sid:200003775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cbzrdracog.duckdns.org"; classtype:attempted-recon; sid:200003776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cc12403.tmweb.ru"; classtype:attempted-recon; sid:200003777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cc50391.tmweb.ru"; classtype:attempted-recon; sid:200003778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cc69507.tmweb.ru"; classtype:attempted-recon; sid:200003779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cc79228.tmweb.ru"; classtype:attempted-recon; sid:200003780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccavbipysz.duckdns.org"; classtype:attempted-recon; sid:200003781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccbewjzjmf.duckdns.org"; classtype:attempted-recon; sid:200003782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccdbgjpfrv.duckdns.org"; classtype:attempted-recon; sid:200003783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccedkswpip.duckdns.org"; classtype:attempted-recon; sid:200003784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccexhfamzx.duckdns.org"; classtype:attempted-recon; sid:200003785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccjrlaw.com"; classtype:attempted-recon; sid:200003786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cclnxdrzov.duckdns.org"; classtype:attempted-recon; sid:200003787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccoeurblanc.mom"; classtype:attempted-recon; sid:200003788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccopotjbhp.duckdns.org"; classtype:attempted-recon; sid:200003789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccorsrfkee.duckdns.org"; classtype:attempted-recon; sid:200003790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ccpannel0ebrou00000.0011111.repl.co"; classtype:attempted-recon; sid:200003791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cd39439.tmweb.ru"; classtype:attempted-recon; sid:200003792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cd54425.tmweb.ru"; classtype:attempted-recon; sid:200003793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cddsjspmlu.duckdns.org"; classtype:attempted-recon; sid:200003794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdemp.cl"; classtype:attempted-recon; sid:200003795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdf.cysa5ey.cn"; classtype:attempted-recon; sid:200003796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdfsafesecure29293.net"; classtype:attempted-recon; sid:200003797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdgd.fu62q2.cn"; classtype:attempted-recon; sid:200003798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdghj-105751.square.site"; classtype:attempted-recon; sid:200003799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdhk9i.webwave.dev"; classtype:attempted-recon; sid:200003800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdlvfwocxw.duckdns.org"; classtype:attempted-recon; sid:200003801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdn-32965.airbnb-onelogin.com"; classtype:attempted-recon; sid:200003802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdqxpypoik.duckdns.org"; classtype:attempted-recon; sid:200003803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cdxvg.maicgxv.cn"; classtype:attempted-recon; sid:200003804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ce55892.tmweb.ru"; classtype:attempted-recon; sid:200003805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ce92986.tmweb.ru"; classtype:attempted-recon; sid:200003806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ce94127.tmweb.ru"; classtype:attempted-recon; sid:200003807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cebvzvjqow.duckdns.org"; classtype:attempted-recon; sid:200003808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ceccinmyee.duckdns.org"; classtype:attempted-recon; sid:200003809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cef8vwt7y9h.typeform.com"; classtype:attempted-recon; sid:200003810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cegsqaejju.duckdns.org"; classtype:attempted-recon; sid:200003811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cehwxzagqr.duckdns.org"; classtype:attempted-recon; sid:200003812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cejfrnnafb.duckdns.org"; classtype:attempted-recon; sid:200003813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cekih9.duckdns.org"; classtype:attempted-recon; sid:200003814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"centermanagementsupport464587.co.vu"; classtype:attempted-recon; sid:200003815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"centermanagementsupport5656565698.co.vu"; classtype:attempted-recon; sid:200003816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"centraldafaturasbr.xyz"; classtype:attempted-recon; sid:200003817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cents-ability.org"; classtype:attempted-recon; sid:200003818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ceqnmtutrn.duckdns.org"; classtype:attempted-recon; sid:200003819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cerbvpofht.duckdns.org"; classtype:attempted-recon; sid:200003820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"certificadosgobmx.com"; classtype:attempted-recon; sid:200003821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfauzlubtl.duckdns.org"; classtype:attempted-recon; sid:200003822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfcanqfpfl.duckdns.org"; classtype:attempted-recon; sid:200003823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cffdh.nnxzyy.cn"; classtype:attempted-recon; sid:200003824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfghh.lsjl120.cn"; classtype:attempted-recon; sid:200003825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfklpezpbh.duckdns.org"; classtype:attempted-recon; sid:200003826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cflaxii.com"; classtype:attempted-recon; sid:200003827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cflkcwszau.duckdns.org"; classtype:attempted-recon; sid:200003828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfpajtpshy.duckdns.org"; classtype:attempted-recon; sid:200003829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cftechno.in"; classtype:attempted-recon; sid:200003830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfvixkwtvu.duckdns.org"; classtype:attempted-recon; sid:200003831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfvx.weeblysite.com"; classtype:attempted-recon; sid:200003832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cfxxmadpsi.duckdns.org"; classtype:attempted-recon; sid:200003833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cg00758.tmweb.ru"; classtype:attempted-recon; sid:200003834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cg24569.tmweb.ru"; classtype:attempted-recon; sid:200003835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cg52058.tmweb.ru"; classtype:attempted-recon; sid:200003836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cg58191.tmweb.ru"; classtype:attempted-recon; sid:200003837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cgagvvaxeq.duckdns.org"; classtype:attempted-recon; sid:200003838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cgaozhavjm.duckdns.org"; classtype:attempted-recon; sid:200003839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cgkqsutwoa.duckdns.org"; classtype:attempted-recon; sid:200003840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cgouguphnd.duckdns.org"; classtype:attempted-recon; sid:200003841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cgtiuzvssp.duckdns.org"; classtype:attempted-recon; sid:200003842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cgyjwcgorv.duckdns.org"; classtype:attempted-recon; sid:200003843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cgywoikvza.duckdns.org"; classtype:attempted-recon; sid:200003844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ch-328328328832.blogspot.com"; classtype:attempted-recon; sid:200003845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ch-483828832.blogspot.com"; classtype:attempted-recon; sid:200003846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ch12207.tmweb.ru"; classtype:attempted-recon; sid:200003847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ch97528.tmweb.ru"; classtype:attempted-recon; sid:200003848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chabow.hyperphp.com"; classtype:attempted-recon; sid:200003849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chain-sync.org"; classtype:attempted-recon; sid:200003850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chainlinkauth.site"; classtype:attempted-recon; sid:200003851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chainofchanges.com"; classtype:attempted-recon; sid:200003852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chainswap-ecomi.com"; classtype:attempted-recon; sid:200003853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chainwallet.42web.io"; classtype:attempted-recon; sid:200003854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chalawqx.hyperphp.com"; classtype:attempted-recon; sid:200003855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chalkerabeat.web.app"; classtype:attempted-recon; sid:200003856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chambimpltatinpasa.dapimplatinplat.repl.co"; classtype:attempted-recon; sid:200003857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chancey.byethost31.com"; classtype:attempted-recon; sid:200003858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"charming-black.103-195-5-156.plesk.page"; classtype:attempted-recon; sid:200003859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chartterfirst.weebly.com"; classtype:attempted-recon; sid:200003860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chase-help-support-locked.blogspot.com"; classtype:attempted-recon; sid:200003861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chase-onlinehelp.blogspot.com"; classtype:attempted-recon; sid:200003862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chasecertificatesusigon.bill48408mailfonycom.workers.dev"; classtype:attempted-recon; sid:200003863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chat-whatsapp-nik-adam-mika-viral.duckdns.org"; classtype:attempted-recon; sid:200003864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"check-acc20.tk"; classtype:attempted-recon; sid:200003865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"check-status-31f89.firebaseapp.com"; classtype:attempted-recon; sid:200003866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"check-status-31f89.web.app"; classtype:attempted-recon; sid:200003867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkmynewphotos.com"; classtype:attempted-recon; sid:200003868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-50000264598754239705.tk"; classtype:attempted-recon; sid:200003869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-50000264598754239709.tk"; classtype:attempted-recon; sid:200003870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-7458569862364506.tk"; classtype:attempted-recon; sid:200003871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-7458569862364507.tk"; classtype:attempted-recon; sid:200003872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-10000002365498446636526497.tk"; classtype:attempted-recon; sid:200003873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-30000000025693459865849632.ml"; classtype:attempted-recon; sid:200003874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-30000000025693459865849633.ml"; classtype:attempted-recon; sid:200003875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-30000000025693459865849634.ml"; classtype:attempted-recon; sid:200003876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-30000000025693459865849636.ml"; classtype:attempted-recon; sid:200003877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-30000000025693459865849638.ml"; classtype:attempted-recon; sid:200003878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-30000000025693459865849639.ml"; classtype:attempted-recon; sid:200003879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-40000025631526895621365980.ml"; classtype:attempted-recon; sid:200003880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-40000025631526895621365981.ml"; classtype:attempted-recon; sid:200003881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-40000025631526895621365987.ml"; classtype:attempted-recon; sid:200003882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-40000025631526895621365989.ml"; classtype:attempted-recon; sid:200003883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-80000000365948596325936972.tk"; classtype:attempted-recon; sid:200003884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-80000000365948596325936974.tk"; classtype:attempted-recon; sid:200003885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-80000000365948596325936975.tk"; classtype:attempted-recon; sid:200003886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-fb-80000000365948596325936976.tk"; classtype:attempted-recon; sid:200003887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkpoint-perbaikan-akun-fb11.weeblysite.com"; classtype:attempted-recon; sid:200003888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail25.firebaseapp.com"; classtype:attempted-recon; sid:200003889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail25.web.app"; classtype:attempted-recon; sid:200003890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail26.firebaseapp.com"; classtype:attempted-recon; sid:200003891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail26.web.app"; classtype:attempted-recon; sid:200003892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail27.firebaseapp.com"; classtype:attempted-recon; sid:200003893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail27.web.app"; classtype:attempted-recon; sid:200003894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail28.firebaseapp.com"; classtype:attempted-recon; sid:200003895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail28.web.app"; classtype:attempted-recon; sid:200003896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail29.firebaseapp.com"; classtype:attempted-recon; sid:200003897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail29.web.app"; classtype:attempted-recon; sid:200003898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail30.firebaseapp.com"; classtype:attempted-recon; sid:200003899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail30.web.app"; classtype:attempted-recon; sid:200003900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail31.firebaseapp.com"; classtype:attempted-recon; sid:200003901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail31.web.app"; classtype:attempted-recon; sid:200003902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail32.firebaseapp.com"; classtype:attempted-recon; sid:200003903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail32.web.app"; classtype:attempted-recon; sid:200003904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail33.firebaseapp.com"; classtype:attempted-recon; sid:200003905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail33.web.app"; classtype:attempted-recon; sid:200003906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail34.firebaseapp.com"; classtype:attempted-recon; sid:200003907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail34.web.app"; classtype:attempted-recon; sid:200003908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail35.firebaseapp.com"; classtype:attempted-recon; sid:200003909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail35.web.app"; classtype:attempted-recon; sid:200003910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail36.firebaseapp.com"; classtype:attempted-recon; sid:200003911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checksweetmail36.web.app"; classtype:attempted-recon; sid:200003912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cheerthai.co"; classtype:attempted-recon; sid:200003913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cherrr12.blogspot.com"; classtype:attempted-recon; sid:200003914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chfjkfunow.duckdns.org"; classtype:attempted-recon; sid:200003915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chhatrapatitimes.com"; classtype:attempted-recon; sid:200003916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chhoxyihyx.duckdns.org"; classtype:attempted-recon; sid:200003917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chicagotrolleyservice.com"; classtype:attempted-recon; sid:200003918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chicoelectric.com"; classtype:attempted-recon; sid:200003919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chiddingstonenursery.co.uk"; classtype:attempted-recon; sid:200003920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chikkuthomas.github.io"; classtype:attempted-recon; sid:200003921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"childjesuschurch.in"; classtype:attempted-recon; sid:200003922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chillmeteor-n7jo4d--68073434900837.stormkit.dev"; classtype:attempted-recon; sid:200003923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"china-gear.org"; classtype:attempted-recon; sid:200003924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chinmayavidyalayarspuram.com"; classtype:attempted-recon; sid:200003925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chiragrajoria.github.io"; classtype:attempted-recon; sid:200003926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chiyuo.ec-site.net"; classtype:attempted-recon; sid:200003927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chjjiniwga.duckdns.org"; classtype:attempted-recon; sid:200003928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chjptwlbfy.duckdns.org"; classtype:attempted-recon; sid:200003929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chkcaptcha14.ml"; classtype:attempted-recon; sid:200003930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chkcaptcha16.ml"; classtype:attempted-recon; sid:200003931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chkcaptcha17.ml"; classtype:attempted-recon; sid:200003932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chkcaptcha2.ml"; classtype:attempted-recon; sid:200003933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chkcaptcha8.ml"; classtype:attempted-recon; sid:200003934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chkcaqoacr.duckdns.org"; classtype:attempted-recon; sid:200003935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chkredirects.ml"; classtype:attempted-recon; sid:200003936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chois.jp"; classtype:attempted-recon; sid:200003937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chounbressn.hostenko.net"; classtype:attempted-recon; sid:200003938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chrgmqafdr.duckdns.org"; classtype:attempted-recon; sid:200003939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chutlincrapo.web.app"; classtype:attempted-recon; sid:200003940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chvnnvpxxz.duckdns.org"; classtype:attempted-recon; sid:200003941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chyjrrofys.duckdns.org"; classtype:attempted-recon; sid:200003942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chzeudmban.duckdns.org"; classtype:attempted-recon; sid:200003943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ci1ltnz8.com"; classtype:attempted-recon; sid:200003944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ci64056.tmweb.ru"; classtype:attempted-recon; sid:200003945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciceqjiwdz.duckdns.org"; classtype:attempted-recon; sid:200003946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cielegwwq.hyperphp.com"; classtype:attempted-recon; sid:200003947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cihocrvldq.duckdns.org"; classtype:attempted-recon; sid:200003948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciitiezen.com"; classtype:attempted-recon; sid:200003949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cijuahylbr.duckdns.org"; classtype:attempted-recon; sid:200003950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cijwuukaie.duckdns.org"; classtype:attempted-recon; sid:200003951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cikyfltlwc.duckdns.org"; classtype:attempted-recon; sid:200003952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cimeronline.firebaseapp.com"; classtype:attempted-recon; sid:200003953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cimeronline.web.app"; classtype:attempted-recon; sid:200003954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cimeronlineiadesistemi.web.app"; classtype:attempted-recon; sid:200003955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cimzwqlsvc.duckdns.org"; classtype:attempted-recon; sid:200003956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cintasejatidrink.com"; classtype:attempted-recon; sid:200003957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciqqqzcpuv.duckdns.org"; classtype:attempted-recon; sid:200003958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cirddclnul.duckdns.org"; classtype:attempted-recon; sid:200003959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cirious.com"; classtype:attempted-recon; sid:200003960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cirrilla-stripe-form.firebaseapp.com"; classtype:attempted-recon; sid:200003961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cirrilla-stripe-form.web.app"; classtype:attempted-recon; sid:200003962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cisrznlecr.duckdns.org"; classtype:attempted-recon; sid:200003963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cisteodpady.cz"; classtype:attempted-recon; sid:200003964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citapreviabccr2022.com"; classtype:attempted-recon; sid:200003965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citi-b39ca.firebaseapp.com"; classtype:attempted-recon; sid:200003966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citi-b39ca.web.app"; classtype:attempted-recon; sid:200003967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citi-bank.citi-supports.workers.dev"; classtype:attempted-recon; sid:200003968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citizensinfo.firebaseapp.com"; classtype:attempted-recon; sid:200003969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citizensinfo.web.app"; classtype:attempted-recon; sid:200003970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citizensonline-service.web.app"; classtype:attempted-recon; sid:200003971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citulje-pomeni.com"; classtype:attempted-recon; sid:200003972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"city-ad.com"; classtype:attempted-recon; sid:200003973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"city-of-jazz.de"; classtype:attempted-recon; sid:200003974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"citztnvyonline.com"; classtype:attempted-recon; sid:200003975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciudadanoseguro.cl"; classtype:attempted-recon; sid:200003976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciya2022.duckdns.org"; classtype:attempted-recon; sid:200003977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cizn1b.com"; classtype:attempted-recon; sid:200003978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cj00405.tmweb.ru"; classtype:attempted-recon; sid:200003979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cj24325.tmweb.ru"; classtype:attempted-recon; sid:200003980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjebcbngxz.duckdns.org"; classtype:attempted-recon; sid:200003981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjhvcdoxna.duckdns.org"; classtype:attempted-recon; sid:200003982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjkfbvzmqt.duckdns.org"; classtype:attempted-recon; sid:200003983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjlmofwqez.duckdns.org"; classtype:attempted-recon; sid:200003984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjpefxinii.duckdns.org"; classtype:attempted-recon; sid:200003985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjswesgtvb.duckdns.org"; classtype:attempted-recon; sid:200003986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjveilxnrn.duckdns.org"; classtype:attempted-recon; sid:200003987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cjwjpyhkyv.duckdns.org"; classtype:attempted-recon; sid:200003988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ck01364.tmweb.ru"; classtype:attempted-recon; sid:200003989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ck26163.tmweb.ru"; classtype:attempted-recon; sid:200003990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ckbrgdtwco.duckdns.org"; classtype:attempted-recon; sid:200003991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ckegqytwkj.duckdns.org"; classtype:attempted-recon; sid:200003992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ckfhygrwvu.duckdns.org"; classtype:attempted-recon; sid:200003993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ckhibsnbnc.duckdns.org"; classtype:attempted-recon; sid:200003994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ckkuuknwbj.duckdns.org"; classtype:attempted-recon; sid:200003995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ckqiblrcna.duckdns.org"; classtype:attempted-recon; sid:200003996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cl05460.tmweb.ru"; classtype:attempted-recon; sid:200003997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cl23487.tmweb.ru"; classtype:attempted-recon; sid:200003998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim-online-irs.x24hr.com"; classtype:attempted-recon; sid:200003999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.refund.bz3tv.us"; classtype:attempted-recon; sid:200004000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.refund.s52gv.us"; classtype:attempted-recon; sid:200004001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.submit.r45a.live"; classtype:attempted-recon; sid:200004002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.submit.s02h.live"; classtype:attempted-recon; sid:200004003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.submit.s20k.live"; classtype:attempted-recon; sid:200004004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.17f6e.us"; classtype:attempted-recon; sid:200004005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.8flm6.live"; classtype:attempted-recon; sid:200004006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.3797qsc.us"; classtype:attempted-recon; sid:200004007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.5zy0my1.us"; classtype:attempted-recon; sid:200004008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.7pzpjq3.us"; classtype:attempted-recon; sid:200004009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.q74u0dn.us"; classtype:attempted-recon; sid:200004010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.t60w124.us"; classtype:attempted-recon; sid:200004011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.ui0rb.us"; classtype:attempted-recon; sid:200004012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.umfiduu.us"; classtype:attempted-recon; sid:200004013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.wtz1uru.us"; classtype:attempted-recon; sid:200004014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amanded.yumbass.me"; classtype:attempted-recon; sid:200004015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.amended.itqdzy8.us"; classtype:attempted-recon; sid:200004016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.l3j8sdh.us"; classtype:attempted-recon; sid:200004017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.llgca.us"; classtype:attempted-recon; sid:200004018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.oetnh.us"; classtype:attempted-recon; sid:200004019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.q20a.live"; classtype:attempted-recon; sid:200004020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.r96a.live"; classtype:attempted-recon; sid:200004021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.0rbewwg.us"; classtype:attempted-recon; sid:200004022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.0vhiz2s.us"; classtype:attempted-recon; sid:200004023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.5zy0my1.us"; classtype:attempted-recon; sid:200004024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.6evd0t2.us"; classtype:attempted-recon; sid:200004025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.7bfwbgu.us"; classtype:attempted-recon; sid:200004026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.andflute.live"; classtype:attempted-recon; sid:200004027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.bpd7eay.us"; classtype:attempted-recon; sid:200004028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.cl0ue.us"; classtype:attempted-recon; sid:200004029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.d849a4l.us"; classtype:attempted-recon; sid:200004030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.mj0tey4.us"; classtype:attempted-recon; sid:200004031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.r3k0u.us"; classtype:attempted-recon; sid:200004032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.ragrassy.me"; classtype:attempted-recon; sid:200004033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.rimse7en.me"; classtype:attempted-recon; sid:200004034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.sgwb39q.us"; classtype:attempted-recon; sid:200004035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.swmhyf6.us"; classtype:attempted-recon; sid:200004036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.udnf7de.us"; classtype:attempted-recon; sid:200004037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.vu65m1t.us"; classtype:attempted-recon; sid:200004038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.vyv0a.us"; classtype:attempted-recon; sid:200004039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.w5j2y9a.us"; classtype:attempted-recon; sid:200004040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.w6a19u2.us"; classtype:attempted-recon; sid:200004041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.wgynxn9.us"; classtype:attempted-recon; sid:200004042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.refund.ykrdz.us"; classtype:attempted-recon; sid:200004043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.4eansov.us"; classtype:attempted-recon; sid:200004044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.4xwct51.us"; classtype:attempted-recon; sid:200004045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.5sbfb21.us"; classtype:attempted-recon; sid:200004046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.6c7q2s3.us"; classtype:attempted-recon; sid:200004047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.7bfwbgu.us"; classtype:attempted-recon; sid:200004048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.agk8p8z.us"; classtype:attempted-recon; sid:200004049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.aqh28n9.us"; classtype:attempted-recon; sid:200004050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.d1pqhzy.us"; classtype:attempted-recon; sid:200004051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.juggd2p.us"; classtype:attempted-recon; sid:200004052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.kgcs1mj.us"; classtype:attempted-recon; sid:200004053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.l280qko.us"; classtype:attempted-recon; sid:200004054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.mjj3mkq.us"; classtype:attempted-recon; sid:200004055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.otyvu6o.us"; classtype:attempted-recon; sid:200004056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.rexdb33.us"; classtype:attempted-recon; sid:200004057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.udnf7de.us"; classtype:attempted-recon; sid:200004058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.ulsb46j.us"; classtype:attempted-recon; sid:200004059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.return.uy5quug.us"; classtype:attempted-recon; sid:200004060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.0ssrygp.us"; classtype:attempted-recon; sid:200004061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.2ucaebr.us"; classtype:attempted-recon; sid:200004062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.4eansov.us"; classtype:attempted-recon; sid:200004063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.5nj189o.us"; classtype:attempted-recon; sid:200004064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.6evd0t2.us"; classtype:attempted-recon; sid:200004065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.7tl6u5t.us"; classtype:attempted-recon; sid:200004066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.aox8e80.us"; classtype:attempted-recon; sid:200004067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.b9ffekf.us"; classtype:attempted-recon; sid:200004068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.cacat.me"; classtype:attempted-recon; sid:200004069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.dynamos.live"; classtype:attempted-recon; sid:200004070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.hakhyx8.us"; classtype:attempted-recon; sid:200004071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.l280qko.us"; classtype:attempted-recon; sid:200004072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.mjy1x3h.us"; classtype:attempted-recon; sid:200004073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.rafarchery.live"; classtype:attempted-recon; sid:200004074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.robsfhh.us"; classtype:attempted-recon; sid:200004075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.vgxqczj.us"; classtype:attempted-recon; sid:200004076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.xh1qxcf.us"; classtype:attempted-recon; sid:200004077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.tax.service.zalnxpc.us"; classtype:attempted-recon; sid:200004078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.taxservice.49dz68l.us"; classtype:attempted-recon; sid:200004079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claim.txrefund.eazng.us"; classtype:attempted-recon; sid:200004080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claimchip1-5b.com"; classtype:attempted-recon; sid:200004081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claimsolana.bar"; classtype:attempted-recon; sid:200004082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"classiceyewear.in"; classtype:attempted-recon; sid:200004083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claus.bz"; classtype:attempted-recon; sid:200004084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clavegaliciaar.boludinec.repl.co"; classtype:attempted-recon; sid:200004085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clavtyefuf.duckdns.org"; classtype:attempted-recon; sid:200004086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clayzhqwsm.duckdns.org"; classtype:attempted-recon; sid:200004087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clbejowrwp.duckdns.org"; classtype:attempted-recon; sid:200004088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clblink.live"; classtype:attempted-recon; sid:200004089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clcrdct.org"; classtype:attempted-recon; sid:200004090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cldaoagkeo.duckdns.org"; classtype:attempted-recon; sid:200004091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cldsezrdhk.duckdns.org"; classtype:attempted-recon; sid:200004092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cleargalaxy.net"; classtype:attempted-recon; sid:200004093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cleverlandbuyers.com"; classtype:attempted-recon; sid:200004094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clgnrscknt.duckdns.org"; classtype:attempted-recon; sid:200004095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clhoqldmso.duckdns.org"; classtype:attempted-recon; sid:200004096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clhrbiltty.duckdns.org"; classtype:attempted-recon; sid:200004097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clhuvpxgct.duckdns.org"; classtype:attempted-recon; sid:200004098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clic.ae"; classtype:attempted-recon; sid:200004099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"click-here.one"; classtype:attempted-recon; sid:200004100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clicklo.live"; classtype:attempted-recon; sid:200004101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"client-servicessupport003.oznemedya.com"; classtype:attempted-recon; sid:200004102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clienteperfil.bradapp.site"; classtype:attempted-recon; sid:200004103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clientes.helpbrou.repl.co"; classtype:attempted-recon; sid:200004104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clienti.accesso.sicuro.youthnest.in"; classtype:attempted-recon; sid:200004105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clientisicurezzamps-online.preview-domain.com"; classtype:attempted-recon; sid:200004106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clients-portal-dkb.ddns.mobi"; classtype:attempted-recon; sid:200004107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clients-portal-dkb.serveusers.com"; classtype:attempted-recon; sid:200004108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clients.devtux.com"; classtype:attempted-recon; sid:200004109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cliffordchnllp.com"; classtype:attempted-recon; sid:200004110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clockurl.com"; classtype:attempted-recon; sid:200004111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clone-7473c.web.app"; classtype:attempted-recon; sid:200004112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"closingdocs9480.myportfolio.com"; classtype:attempted-recon; sid:200004113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"closingllo.myportfolio.com"; classtype:attempted-recon; sid:200004114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-based-preview.shared-fileees.workers.dev"; classtype:attempted-recon; sid:200004115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-based-shared.line-assets.workers.dev"; classtype:attempted-recon; sid:200004116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-documents.member-datings.workers.dev"; classtype:attempted-recon; sid:200004117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-owa-cyncrons.abeuac.workers.dev"; classtype:attempted-recon; sid:200004118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-preview-doc.zip-sneidjer.workers.dev"; classtype:attempted-recon; sid:200004119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-preview-shared.auth-sahidoc.workers.dev"; classtype:attempted-recon; sid:200004120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-private-project.progrest-auth.workers.dev"; classtype:attempted-recon; sid:200004121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-project-august.media-love.workers.dev"; classtype:attempted-recon; sid:200004122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-project-folder.files-progress.workers.dev"; classtype:attempted-recon; sid:200004123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-publish-document.drop-documentts.workers.dev"; classtype:attempted-recon; sid:200004124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-share-file-drive.firebaseapp.com"; classtype:attempted-recon; sid:200004125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-share-file-drive.web.app"; classtype:attempted-recon; sid:200004126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-shared-folder.preg-remit.workers.dev"; classtype:attempted-recon; sid:200004127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-shared-preview.pre-signen.workers.dev"; classtype:attempted-recon; sid:200004128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-storage.files-recruitments.workers.dev"; classtype:attempted-recon; sid:200004129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud-ways-document.confidednt-auth.workers.dev"; classtype:attempted-recon; sid:200004130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud.onedrivees.workers.dev"; classtype:attempted-recon; sid:200004131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud.onlineapp.rest"; classtype:attempted-recon; sid:200004132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud.rodemsys.com"; classtype:attempted-recon; sid:200004133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloud102.hostgator.com"; classtype:attempted-recon; sid:200004134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clouddoc-authorize.firebaseapp.com"; classtype:attempted-recon; sid:200004135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloudflaremaillogin.myportfolio.com"; classtype:attempted-recon; sid:200004136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cloudi.sitea.workers.dev"; classtype:attempted-recon; sid:200004137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clqmuvydnm.duckdns.org"; classtype:attempted-recon; sid:200004138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clsoingtlc.myportfolio.com"; classtype:attempted-recon; sid:200004139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clt1432536.bmetrack.com"; classtype:attempted-recon; sid:200004140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clt1448359.bmetrack.com"; classtype:attempted-recon; sid:200004141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clttmyvqbw.duckdns.org"; classtype:attempted-recon; sid:200004142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clubeamigosdopedrosegundo.com.br"; classtype:attempted-recon; sid:200004143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clubinventica.cnprsv.ro"; classtype:attempted-recon; sid:200004144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clukdwjdpb.duckdns.org"; classtype:attempted-recon; sid:200004145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clwkldfhpo.duckdns.org"; classtype:attempted-recon; sid:200004146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clxgqvpkht.duckdns.org"; classtype:attempted-recon; sid:200004147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cm07820.tmweb.ru"; classtype:attempted-recon; sid:200004148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cm89649.tmweb.ru"; classtype:attempted-recon; sid:200004149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmbrczlavp.duckdns.org"; classtype:attempted-recon; sid:200004150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmdfdrecoveryapges10000228.co.vu"; classtype:attempted-recon; sid:200004151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmggnmpm-69031.docauthshareportal.workers.dev"; classtype:attempted-recon; sid:200004152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmjspiura.co"; classtype:attempted-recon; sid:200004153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmm-rcsg-pdf.gq"; classtype:attempted-recon; sid:200004154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmm-rcsg-pdf.ml"; classtype:attempted-recon; sid:200004155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmm-rcsg.cf"; classtype:attempted-recon; sid:200004156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmm-rcsg.gq"; classtype:attempted-recon; sid:200004157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmm-rockmart-doc.gq"; classtype:attempted-recon; sid:200004158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmm-rockmart.gq"; classtype:attempted-recon; sid:200004159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmrzpzyzlm.duckdns.org"; classtype:attempted-recon; sid:200004160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmvezefvai.duckdns.org"; classtype:attempted-recon; sid:200004161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmxagiwsbb.duckdns.org"; classtype:attempted-recon; sid:200004162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmyudthibh.duckdns.org"; classtype:attempted-recon; sid:200004163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cn29089.tmweb.ru"; classtype:attempted-recon; sid:200004164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cn4e-69e69.firebaseapp.com"; classtype:attempted-recon; sid:200004165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cn4e-69e69.web.app"; classtype:attempted-recon; sid:200004166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cn74681.tmweb.ru"; classtype:attempted-recon; sid:200004167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnbas-log.mobirisesite.com"; classtype:attempted-recon; sid:200004168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cndrbwyhoq.duckdns.org"; classtype:attempted-recon; sid:200004169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cner283829.odoo.com"; classtype:attempted-recon; sid:200004170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnfirmd2prblmpage365429.co.vu"; classtype:attempted-recon; sid:200004171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnfrmacn.hprusak.workers.dev"; classtype:attempted-recon; sid:200004172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cngfjmtfrd.duckdns.org"; classtype:attempted-recon; sid:200004173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnn-cameroon-fb-1eb71.web.app"; classtype:attempted-recon; sid:200004174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnuxkuquyb.duckdns.org"; classtype:attempted-recon; sid:200004175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnvaxxjpqh.duckdns.org"; classtype:attempted-recon; sid:200004176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnwuniversals.com"; classtype:attempted-recon; sid:200004177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cny-shopee.blogspot.com"; classtype:attempted-recon; sid:200004178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"co-kr-e7800.firebaseapp.com"; classtype:attempted-recon; sid:200004179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"co00868.tmweb.ru"; classtype:attempted-recon; sid:200004180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"co70927.tmweb.ru"; classtype:attempted-recon; sid:200004181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"co97467.tmweb.ru"; classtype:attempted-recon; sid:200004182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"co98618.tmweb.ru"; classtype:attempted-recon; sid:200004183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coachtrainer.ru"; classtype:attempted-recon; sid:200004184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coba.tabalongkab.go.id"; classtype:attempted-recon; sid:200004185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coc-blog.com"; classtype:attempted-recon; sid:200004186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coda.prmm.cf"; classtype:attempted-recon; sid:200004187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"codecgalc.codecgalc.repl.co"; classtype:attempted-recon; sid:200004188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"codepasta.app"; classtype:attempted-recon; sid:200004189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"codespixel.click"; classtype:attempted-recon; sid:200004190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cofqfknguw.duckdns.org"; classtype:attempted-recon; sid:200004191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cofrhjhbum.duckdns.org"; classtype:attempted-recon; sid:200004192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coin98n.firebaseapp.com"; classtype:attempted-recon; sid:200004193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coin98n.web.app"; classtype:attempted-recon; sid:200004194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinbasedefi.club"; classtype:attempted-recon; sid:200004195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinbazer.com"; classtype:attempted-recon; sid:200004196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinmarketscope.com"; classtype:attempted-recon; sid:200004197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinpayu-adres.blogspot.com"; classtype:attempted-recon; sid:200004198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinsolutionportal.best"; classtype:attempted-recon; sid:200004199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinssolutionrectification.com"; classtype:attempted-recon; sid:200004200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinwin.vip"; classtype:attempted-recon; sid:200004201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coiognline.net"; classtype:attempted-recon; sid:200004202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cojtpqdilw.duckdns.org"; classtype:attempted-recon; sid:200004203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cokerconsultancy.com"; classtype:attempted-recon; sid:200004204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"colcentralnew.procesardatos.com"; classtype:attempted-recon; sid:200004205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cold-king-e857.marilyn.workers.dev"; classtype:attempted-recon; sid:200004206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"colegiopaulovi.edu.ar"; classtype:attempted-recon; sid:200004207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"colislaposte.wonstasite.com"; classtype:attempted-recon; sid:200004208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"collablandsync-surge-wl.firebaseapp.com"; classtype:attempted-recon; sid:200004209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"collablandsync-surge-wl.web.app"; classtype:attempted-recon; sid:200004210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"colorpsychology.co"; classtype:attempted-recon; sid:200004211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"combank.au-ssl.one"; classtype:attempted-recon; sid:200004212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"comerica-rfy.firebaseapp.com"; classtype:attempted-recon; sid:200004213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"comerica-rfy.web.app"; classtype:attempted-recon; sid:200004214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"comfirmyourpage2022.co.vu"; classtype:attempted-recon; sid:200004215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"commbank-auth-id.com"; classtype:attempted-recon; sid:200004216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"commbank-help-849c3.com"; classtype:attempted-recon; sid:200004217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"commbank-online-au.com"; classtype:attempted-recon; sid:200004218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"commerzbank-phototan76z2.firebaseapp.com"; classtype:attempted-recon; sid:200004219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"commerzbank-phototan76z2.web.app"; classtype:attempted-recon; sid:200004220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"communauteaserm.com"; classtype:attempted-recon; sid:200004221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"communityatomic.com"; classtype:attempted-recon; sid:200004222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"compilityglobweb145.ml"; classtype:attempted-recon; sid:200004223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"complementosicop.com"; classtype:attempted-recon; sid:200004224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"comprind.com.br"; classtype:attempted-recon; sid:200004225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"compuclon.com"; classtype:attempted-recon; sid:200004226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"compute-cloud.info"; classtype:attempted-recon; sid:200004227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"comunicazionebper.com"; classtype:attempted-recon; sid:200004228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"comunicazioneclienti.com"; classtype:attempted-recon; sid:200004229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"comunicazionecontrollo.com"; classtype:attempted-recon; sid:200004230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"conceptwelcomehome.com"; classtype:attempted-recon; sid:200004231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"concernant-lacceptation.com.swtest.ru"; classtype:attempted-recon; sid:200004232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"conexaonautica.com.br"; classtype:attempted-recon; sid:200004233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"conf.chuuu.workers.dev"; classtype:attempted-recon; sid:200004234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"configsure-admin.zzux.com"; classtype:attempted-recon; sid:200004235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confir.confirmacion2.repl.co"; classtype:attempted-recon; sid:200004236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirm-unsub-gsqm3qwbqomtmhgy2ww2mjz145aogo.weebly.com"; classtype:attempted-recon; sid:200004237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirm-your-identity.epizy.com"; classtype:attempted-recon; sid:200004238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmaciondecuenta-c30e.czemarkojo.workers.dev"; classtype:attempted-recon; sid:200004239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmacionesgad.ddns.net"; classtype:attempted-recon; sid:200004240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmarenline.repl.co"; classtype:attempted-recon; sid:200004241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmaroline.confirmaroline.repl.co"; classtype:attempted-recon; sid:200004242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmationgetstarted55g5g4h5g2r.co.vu"; classtype:attempted-recon; sid:200004243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmatucuent.repl.co"; classtype:attempted-recon; sid:200004244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmmaso.repl.co"; classtype:attempted-recon; sid:200004245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confrim-account-pages.epizy.com"; classtype:attempted-recon; sid:200004246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updateb1.top"; classtype:attempted-recon; sid:200004247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updateb1.xyz"; classtype:attempted-recon; sid:200004248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updatebn.xyz"; classtype:attempted-recon; sid:200004249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updatedd.club"; classtype:attempted-recon; sid:200004250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updatedd.top"; classtype:attempted-recon; sid:200004251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updateee.club"; classtype:attempted-recon; sid:200004252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updateee.top"; classtype:attempted-recon; sid:200004253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au-login.updatrr.top"; classtype:attempted-recon; sid:200004254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect-au.wlpjqc60v.top"; classtype:attempted-recon; sid:200004255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connect.validatorsecure.top"; classtype:attempted-recon; sid:200004256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connectme-collab.land"; classtype:attempted-recon; sid:200004257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connectwalletvalidator.rf.gd"; classtype:attempted-recon; sid:200004258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connexion-0e.boxmode.io"; classtype:attempted-recon; sid:200004259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connexionlbc.fr"; classtype:attempted-recon; sid:200004260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connt-w-t.firebaseapp.com"; classtype:attempted-recon; sid:200004261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"connt-w-t.web.app"; classtype:attempted-recon; sid:200004262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"consegnacarta.com"; classtype:attempted-recon; sid:200004263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"consent.clarosgvas.mobicare.com.br"; classtype:attempted-recon; sid:200004264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"considerpublisher.com"; classtype:attempted-recon; sid:200004265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"construction-document.kit-ouath.workers.dev"; classtype:attempted-recon; sid:200004266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"constructoramyc.cr"; classtype:attempted-recon; sid:200004267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"consultafacil24horas.com"; classtype:attempted-recon; sid:200004268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"consultarhiperpdf.com"; classtype:attempted-recon; sid:200004269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"consultas.atencionmb.site"; classtype:attempted-recon; sid:200004270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"consultas.cuentapersonal.site"; classtype:attempted-recon; sid:200004271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"consultas.mbpersona.site"; classtype:attempted-recon; sid:200004272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contabilidaderabello.com.br"; classtype:attempted-recon; sid:200004273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contact-noreply003-my-cheetah-website-1.cheetah.builderall.com"; classtype:attempted-recon; sid:200004274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"continentalproducts.com"; classtype:attempted-recon; sid:200004275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contohweb-mediafire.meediafiire.my.id"; classtype:attempted-recon; sid:200004276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contoo-inf02.ga"; classtype:attempted-recon; sid:200004277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contrataes.sslblindado.com"; classtype:attempted-recon; sid:200004278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"controlpanel00180722.server1.trinchera.dev"; classtype:attempted-recon; sid:200004279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"convalidanumero.com"; classtype:attempted-recon; sid:200004280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cool-queen-7743.on.fleek.co"; classtype:attempted-recon; sid:200004281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cool-sun-00a2.wessternroade.workers.dev"; classtype:attempted-recon; sid:200004282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cool-unit-8dd6.whybed6896573.workers.dev"; classtype:attempted-recon; sid:200004283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coolcats.mints-link.com"; classtype:attempted-recon; sid:200004284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copymint-blog.com"; classtype:attempted-recon; sid:200004285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-helpcenter15689135.firebaseapp.com"; classtype:attempted-recon; sid:200004286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-helpcenter15689135.web.app"; classtype:attempted-recon; sid:200004287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-helpcenter23178920.firebaseapp.com"; classtype:attempted-recon; sid:200004288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-helpcenter23178920.web.app"; classtype:attempted-recon; sid:200004289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-helpcenter561679314.web.app"; classtype:attempted-recon; sid:200004290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-helpcenter8513589522.firebaseapp.com"; classtype:attempted-recon; sid:200004291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-helpcenter8513589522.web.app"; classtype:attempted-recon; sid:200004292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-supportcenter5618237.firebaseapp.com"; classtype:attempted-recon; sid:200004293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-supportcenter5618237.web.app"; classtype:attempted-recon; sid:200004294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-supportcenter7562813.firebaseapp.com"; classtype:attempted-recon; sid:200004295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-supportcenter7562813.web.app"; classtype:attempted-recon; sid:200004296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-supportcenter8731639.web.app"; classtype:attempted-recon; sid:200004297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-supportcenter9134833.firebaseapp.com"; classtype:attempted-recon; sid:200004298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyright-supportcenter9134833.web.app"; classtype:attempted-recon; sid:200004299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"copyrightadminmeta.ga"; classtype:attempted-recon; sid:200004300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"core.pdf-asset.workers.dev"; classtype:attempted-recon; sid:200004301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cornfeesilkunawarespread.diosestodo2022.repl.co"; classtype:attempted-recon; sid:200004302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correctionconnect.com"; classtype:attempted-recon; sid:200004303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correctionnode.services"; classtype:attempted-recon; sid:200004304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correctionwallet.com"; classtype:attempted-recon; sid:200004305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correo.pancakesvqp.com"; classtype:attempted-recon; sid:200004306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correos-es.firebaseapp.com"; classtype:attempted-recon; sid:200004307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correos-es.web.app"; classtype:attempted-recon; sid:200004308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correos-estimado-cliente-b7cd82.ingress-comporellon.ewp.live"; classtype:attempted-recon; sid:200004309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correos-package.firebaseapp.com"; classtype:attempted-recon; sid:200004310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correos-package.web.app"; classtype:attempted-recon; sid:200004311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"costaricaprueba.webcindario.com"; classtype:attempted-recon; sid:200004312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cottonwooddentalg.nimbusweb.me"; classtype:attempted-recon; sid:200004313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"courtcase.co.in"; classtype:attempted-recon; sid:200004314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"couvilrxcj.duckdns.org"; classtype:attempted-recon; sid:200004315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coyhykhwgm.duckdns.org"; classtype:attempted-recon; sid:200004316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cp.digitalprocurements.co.uk"; classtype:attempted-recon; sid:200004317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpanel.authenticate0.workers.dev"; classtype:attempted-recon; sid:200004318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpanel10wh.bkk1.cloud.z.com"; classtype:attempted-recon; sid:200004319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpanel16wh.bkk1.cloud.z.com"; classtype:attempted-recon; sid:200004320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpdqkarkwx.duckdns.org"; classtype:attempted-recon; sid:200004321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpdzzthlce.duckdns.org"; classtype:attempted-recon; sid:200004322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cphamembers.co.za"; classtype:attempted-recon; sid:200004323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cphusymcdw.duckdns.org"; classtype:attempted-recon; sid:200004324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpjgzhwqzm.duckdns.org"; classtype:attempted-recon; sid:200004325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpjjosuerq.duckdns.org"; classtype:attempted-recon; sid:200004326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpkgrfwmzo.duckdns.org"; classtype:attempted-recon; sid:200004327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpkipwbwok.duckdns.org"; classtype:attempted-recon; sid:200004328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cplojenrel.duckdns.org"; classtype:attempted-recon; sid:200004329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpmaxyenrl.duckdns.org"; classtype:attempted-recon; sid:200004330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpndanayfm.duckdns.org"; classtype:attempted-recon; sid:200004331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpnqrpzkwx.duckdns.org"; classtype:attempted-recon; sid:200004332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cptpvbgpmw.duckdns.org"; classtype:attempted-recon; sid:200004333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpxqihqdtj.duckdns.org"; classtype:attempted-recon; sid:200004334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpzwadwqrl.duckdns.org"; classtype:attempted-recon; sid:200004335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cq18683.tmweb.ru"; classtype:attempted-recon; sid:200004336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cq59416.tmweb.ru"; classtype:attempted-recon; sid:200004337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqhroggcwb.duckdns.org"; classtype:attempted-recon; sid:200004338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqjinlejzi.duckdns.org"; classtype:attempted-recon; sid:200004339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqmuco.myportfolio.com"; classtype:attempted-recon; sid:200004340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqmuco4afa.myportfolio.com"; classtype:attempted-recon; sid:200004341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqmwoyzrkc.duckdns.org"; classtype:attempted-recon; sid:200004342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqqawqqzod.duckdns.org"; classtype:attempted-recon; sid:200004343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqqmxdgmhp.duckdns.org"; classtype:attempted-recon; sid:200004344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqsuipxnwx.duckdns.org"; classtype:attempted-recon; sid:200004345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqtewfrqek.duckdns.org"; classtype:attempted-recon; sid:200004346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cqvzqimrag.duckdns.org"; classtype:attempted-recon; sid:200004347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cr83530.tmweb.ru"; classtype:attempted-recon; sid:200004348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cra.syneoshealthlearning.com"; classtype:attempted-recon; sid:200004349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crazy-taxi.de"; classtype:attempted-recon; sid:200004350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crbygapxst.duckdns.org"; classtype:attempted-recon; sid:200004351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crdcvbjksp.duckdns.org"; classtype:attempted-recon; sid:200004352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crddixsspd.duckdns.org"; classtype:attempted-recon; sid:200004353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cre-agricole-info.preview-domain.com"; classtype:attempted-recon; sid:200004354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creativeani.com"; classtype:attempted-recon; sid:200004355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cred-agricol-info.preview-domain.com"; classtype:attempted-recon; sid:200004356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"credifinanciera.didacsis.com"; classtype:attempted-recon; sid:200004357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditagricole-sudrhonealpes.blogspot.ba"; classtype:attempted-recon; sid:200004358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditagricole-sudrhonealpes.blogspot.com"; classtype:attempted-recon; sid:200004359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditagricole-sudrhonealpes.blogspot.ro"; classtype:attempted-recon; sid:200004360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditagricole.archiquest-dz.com"; classtype:attempted-recon; sid:200004361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditagricole.bank-online.ml"; classtype:attempted-recon; sid:200004362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditagricole.djenanenoor.com"; classtype:attempted-recon; sid:200004363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditdunord-session.firebaseapp.com"; classtype:attempted-recon; sid:200004364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditdunord-session.web.app"; classtype:attempted-recon; sid:200004365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditiperhabbogratissicuro100.blogspot.it"; classtype:attempted-recon; sid:200004366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"credito.prestamosonline.us"; classtype:attempted-recon; sid:200004367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditphds.credit101main.com"; classtype:attempted-recon; sid:200004368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creditsuisse.bluproducts.com.py"; classtype:attempted-recon; sid:200004369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creltentdisassemblegal.emintent.repl.co"; classtype:attempted-recon; sid:200004370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crematoriolitoralsp.com.br"; classtype:attempted-recon; sid:200004371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creunaorg-letsencrypt-app.azurewebsites.net"; classtype:attempted-recon; sid:200004372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crgbybnwco.duckdns.org"; classtype:attempted-recon; sid:200004373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cricutcomregister.com"; classtype:attempted-recon; sid:200004374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crimson-dawn-bc08.bizd134.workers.dev"; classtype:attempted-recon; sid:200004375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crimson-snowflake-5a43.anyrag8021015.workers.dev"; classtype:attempted-recon; sid:200004376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crimson-truth-b81b.jefferyscatering1615.workers.dev"; classtype:attempted-recon; sid:200004377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crm-galicia.snet.ar"; classtype:attempted-recon; sid:200004378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crm.epochfinancialus.com"; classtype:attempted-recon; sid:200004379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cromexa.com"; classtype:attempted-recon; sid:200004380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crossoverbrazil.com"; classtype:attempted-recon; sid:200004381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crpgvrafyu.duckdns.org"; classtype:attempted-recon; sid:200004382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crsdidbrhj.duckdns.org"; classtype:attempted-recon; sid:200004383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crtrbduyiu.duckdns.org"; classtype:attempted-recon; sid:200004384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cruizwdxzr.duckdns.org"; classtype:attempted-recon; sid:200004385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crvtxznzvx.duckdns.org"; classtype:attempted-recon; sid:200004386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"crypto-trustpads.io"; classtype:attempted-recon; sid:200004387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cryptoassetrecovery.com"; classtype:attempted-recon; sid:200004388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cryptocar.biz"; classtype:attempted-recon; sid:200004389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cryptocarspro.com"; classtype:attempted-recon; sid:200004390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cryptonvest.com"; classtype:attempted-recon; sid:200004391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cryptoplanes.top"; classtype:attempted-recon; sid:200004392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cryptvalidate.com"; classtype:attempted-recon; sid:200004393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cs.bxuspy.cn"; classtype:attempted-recon; sid:200004394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cs.k3pu0ux.cn"; classtype:attempted-recon; sid:200004395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cs18723.tmweb.ru"; classtype:attempted-recon; sid:200004396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csa.zgljhtv.cn"; classtype:attempted-recon; sid:200004397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csd.pyvwypl.cn"; classtype:attempted-recon; sid:200004398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csdv.79272.cn"; classtype:attempted-recon; sid:200004399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cse-syneoshealth.opence.fr"; classtype:attempted-recon; sid:200004400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csgdf.6gse0t.cn"; classtype:attempted-recon; sid:200004401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csgdn.mqjxaho.cn"; classtype:attempted-recon; sid:200004402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csgnqgkwof.duckdns.org"; classtype:attempted-recon; sid:200004403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csgofloat.com.cm"; classtype:attempted-recon; sid:200004404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csgofloat.de"; classtype:attempted-recon; sid:200004405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csgwvorkjy.duckdns.org"; classtype:attempted-recon; sid:200004406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cslektqdzz.duckdns.org"; classtype:attempted-recon; sid:200004407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cssworks-auth-0ffice365-folder.firebaseapp.com"; classtype:attempted-recon; sid:200004408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cssworks-auth-0ffice365-folder.web.app"; classtype:attempted-recon; sid:200004409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cssworks1-auth-0ffice365-folder.firebaseapp.com"; classtype:attempted-recon; sid:200004410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cssworks1-auth-0ffice365-folder.web.app"; classtype:attempted-recon; sid:200004411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csutliztpi.duckdns.org"; classtype:attempted-recon; sid:200004412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cswaommqyi.duckdns.org"; classtype:attempted-recon; sid:200004413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"csytiyzgli.duckdns.org"; classtype:attempted-recon; sid:200004414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cszs.jdqrpzo.cn"; classtype:attempted-recon; sid:200004415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ctbkqfwuuz.duckdns.org"; classtype:attempted-recon; sid:200004416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ctdrpsiqdm.duckdns.org"; classtype:attempted-recon; sid:200004417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ctmredirapp.firebaseapp.com"; classtype:attempted-recon; sid:200004418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ctmredirapp.web.app"; classtype:attempted-recon; sid:200004419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ctubujygar.duckdns.org"; classtype:attempted-recon; sid:200004420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cu06665.tmweb.ru"; classtype:attempted-recon; sid:200004421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cuaiucntgl.duckdns.org"; classtype:attempted-recon; sid:200004422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cubbychase5k10k.org"; classtype:attempted-recon; sid:200004423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cube-me.cam"; classtype:attempted-recon; sid:200004424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cudnpicemg.duckdns.org"; classtype:attempted-recon; sid:200004425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cuentasfreefire.club"; classtype:attempted-recon; sid:200004426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cuercnesxa.duckdns.org"; classtype:attempted-recon; sid:200004427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cufjbclbks.duckdns.org"; classtype:attempted-recon; sid:200004428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cuiveymeeo.duckdns.org"; classtype:attempted-recon; sid:200004429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cujcgwajdo.duckdns.org"; classtype:attempted-recon; sid:200004430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cumitermiska.co.vu"; classtype:attempted-recon; sid:200004431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cunamutualconnect.com"; classtype:attempted-recon; sid:200004432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cuoyewlulb.duckdns.org"; classtype:attempted-recon; sid:200004433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cupomax.hostfree.pw"; classtype:attempted-recon; sid:200004434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cupos-clientes.firebaseapp.com"; classtype:attempted-recon; sid:200004435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cupos-clientes.web.app"; classtype:attempted-recon; sid:200004436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"curly-field-bd79.wareareto.workers.dev"; classtype:attempted-recon; sid:200004437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"curly-fog-aa13.breadgold8885649.workers.dev"; classtype:attempted-recon; sid:200004438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"curly-paper-7426.m-2-31.workers.dev"; classtype:attempted-recon; sid:200004439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlycom0.yolasite.com"; classtype:attempted-recon; sid:200004440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"curtismscaparrotti03.mfs.gg"; classtype:attempted-recon; sid:200004441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"customer-p.firebaseapp.com"; classtype:attempted-recon; sid:200004442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"customer-p.web.app"; classtype:attempted-recon; sid:200004443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"customersde-support24.de"; classtype:attempted-recon; sid:200004444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cuteworrisomecleaninstallbrou.brocol.repl.co"; classtype:attempted-recon; sid:200004445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cv51696.tmweb.ru"; classtype:attempted-recon; sid:200004446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cv56345.tmweb.ru"; classtype:attempted-recon; sid:200004447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvblniuiho.duckdns.org"; classtype:attempted-recon; sid:200004448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvciaqyjfr.duckdns.org"; classtype:attempted-recon; sid:200004449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvgsafrwsd.duckdns.org"; classtype:attempted-recon; sid:200004450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvjaqitrrl.duckdns.org"; classtype:attempted-recon; sid:200004451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvjklevgxo.duckdns.org"; classtype:attempted-recon; sid:200004452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvkonnkblp.duckdns.org"; classtype:attempted-recon; sid:200004453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvnvdvuxif.duckdns.org"; classtype:attempted-recon; sid:200004454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvpiuxwphh.duckdns.org"; classtype:attempted-recon; sid:200004455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvqaffxnhm.duckdns.org"; classtype:attempted-recon; sid:200004456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvqzvgvgen.duckdns.org"; classtype:attempted-recon; sid:200004457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvsr1.hyperphp.com"; classtype:attempted-recon; sid:200004458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvtsybumxy.duckdns.org"; classtype:attempted-recon; sid:200004459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cvumwrqtnm.duckdns.org"; classtype:attempted-recon; sid:200004460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwailygllh.duckdns.org"; classtype:attempted-recon; sid:200004461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwar9.enviodecontrato.digital"; classtype:attempted-recon; sid:200004462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwbwka.firebaseapp.com"; classtype:attempted-recon; sid:200004463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwbwka.web.app"; classtype:attempted-recon; sid:200004464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwdrwdxmus.duckdns.org"; classtype:attempted-recon; sid:200004465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwdyjhaidh.duckdns.org"; classtype:attempted-recon; sid:200004466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwoejrkmac.duckdns.org"; classtype:attempted-recon; sid:200004467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwtkfhyqkn.duckdns.org"; classtype:attempted-recon; sid:200004468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwurlrymfv.duckdns.org"; classtype:attempted-recon; sid:200004469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cx38056.tmweb.ru"; classtype:attempted-recon; sid:200004470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxaugmrwln.duckdns.org"; classtype:attempted-recon; sid:200004471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxbahoisqq.duckdns.org"; classtype:attempted-recon; sid:200004472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxdybcdozn.duckdns.org"; classtype:attempted-recon; sid:200004473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxlsqfhxzq.duckdns.org"; classtype:attempted-recon; sid:200004474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxltquksqs.duckdns.org"; classtype:attempted-recon; sid:200004475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxoztqrbsd.duckdns.org"; classtype:attempted-recon; sid:200004476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxqqafdrlq.duckdns.org"; classtype:attempted-recon; sid:200004477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxs.lizekmb.cn"; classtype:attempted-recon; sid:200004478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxs.vlngnlm.cn"; classtype:attempted-recon; sid:200004479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxs.xas7y4w.cn"; classtype:attempted-recon; sid:200004480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxsd.mbjwybw.cn"; classtype:attempted-recon; sid:200004481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxsxcxtuyachsxcx.hostfree.pw"; classtype:attempted-recon; sid:200004482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxtrdbkhie.duckdns.org"; classtype:attempted-recon; sid:200004483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cxvfd.pax3tpu.cn"; classtype:attempted-recon; sid:200004484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cy75363.tmweb.ru"; classtype:attempted-recon; sid:200004485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cybrrcwcqi.duckdns.org"; classtype:attempted-recon; sid:200004486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyhxkmbgzb.duckdns.org"; classtype:attempted-recon; sid:200004487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyiotjvizp.duckdns.org"; classtype:attempted-recon; sid:200004488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyjeangock.duckdns.org"; classtype:attempted-recon; sid:200004489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyjuehdpsx.duckdns.org"; classtype:attempted-recon; sid:200004490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyljhzuaah.duckdns.org"; classtype:attempted-recon; sid:200004491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyqnmtkrel.duckdns.org"; classtype:attempted-recon; sid:200004492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyxbzxuyym.duckdns.org"; classtype:attempted-recon; sid:200004493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cyxkkjwafq.duckdns.org"; classtype:attempted-recon; sid:200004494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cz0874.webflow.io"; classtype:attempted-recon; sid:200004495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cziwaeoxlt.duckdns.org"; classtype:attempted-recon; sid:200004496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"czkawobpko.duckdns.org"; classtype:attempted-recon; sid:200004497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"czkprjisjg.duckdns.org"; classtype:attempted-recon; sid:200004498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cztpmrdkos.duckdns.org"; classtype:attempted-recon; sid:200004499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"czurmkyrhw.duckdns.org"; classtype:attempted-recon; sid:200004500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"czvon.4fan.cz"; classtype:attempted-recon; sid:200004501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"czx.jegcrmo.cn"; classtype:attempted-recon; sid:200004502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"czyvsmwiwd.duckdns.org"; classtype:attempted-recon; sid:200004503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"czzmyuefrs.duckdns.org"; classtype:attempted-recon; sid:200004504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d-internat.amd-international.net"; classtype:attempted-recon; sid:200004505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d-outlook3930034.firebaseapp.com"; classtype:attempted-recon; sid:200004506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d.app01988.xyz"; classtype:attempted-recon; sid:200004507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d.appkoi65y.xyz"; classtype:attempted-recon; sid:200004508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d.edgecryptobf.xyz"; classtype:attempted-recon; sid:200004509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d.jxted.top"; classtype:attempted-recon; sid:200004510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d.oftde.top"; classtype:attempted-recon; sid:200004511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d2kyz7.hyperphp.com"; classtype:attempted-recon; sid:200004512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d42d3494-6f03-452a-addf-97dc1fb5e973.id.repl.co"; classtype:attempted-recon; sid:200004513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d4303943-31.firebaseapp.com"; classtype:attempted-recon; sid:200004514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d4303943-31.web.app"; classtype:attempted-recon; sid:200004515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"da.gd"; classtype:attempted-recon; sid:200004516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dacetnroj-gemes.com"; classtype:attempted-recon; sid:200004517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dachnaymgb.duckdns.org"; classtype:attempted-recon; sid:200004518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dadjtxwuix.duckdns.org"; classtype:attempted-recon; sid:200004519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daifiijdjfsdfeporwe.liveblog365.com"; classtype:attempted-recon; sid:200004520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daiichi-gakki.co.jp"; classtype:attempted-recon; sid:200004521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dailyclaimnows.run.place"; classtype:attempted-recon; sid:200004522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dailygames24.com"; classtype:attempted-recon; sid:200004523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dainikjeevan.com"; classtype:attempted-recon; sid:200004524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dalemcmanus.com"; classtype:attempted-recon; sid:200004525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dalsekfelj.duckdns.org"; classtype:attempted-recon; sid:200004526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"damp-brook-ef1f.wm9t6yeu.workers.dev"; classtype:attempted-recon; sid:200004527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"damp-cell-b538.walkingvibe0036866.workers.dev"; classtype:attempted-recon; sid:200004528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"damp-dawn-51e1.nicholasa.workers.dev"; classtype:attempted-recon; sid:200004529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"damp-f43e.recovery-page-secur.workers.dev"; classtype:attempted-recon; sid:200004530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dan.sasou.jp"; classtype:attempted-recon; sid:200004531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daneves.net"; classtype:attempted-recon; sid:200004532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dangol-v2.web.app"; classtype:attempted-recon; sid:200004533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dapp.activationaccess.com"; classtype:attempted-recon; sid:200004534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dapp.busta.gg"; classtype:attempted-recon; sid:200004535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappai.net"; classtype:attempted-recon; sid:200004536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappauto.top"; classtype:attempted-recon; sid:200004537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappbridgeprotocol.com"; classtype:attempted-recon; sid:200004538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappbuilder.org"; classtype:attempted-recon; sid:200004539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappconnectpad.com"; classtype:attempted-recon; sid:200004540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dapplinksync.com"; classtype:attempted-recon; sid:200004541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappnetsync.com"; classtype:attempted-recon; sid:200004542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dapps-live.web.app"; classtype:attempted-recon; sid:200004543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dapps-rewards.com"; classtype:attempted-recon; sid:200004544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappssynch.win"; classtype:attempted-recon; sid:200004545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappsync.tk"; classtype:attempted-recon; sid:200004546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dapptoolsolution.com"; classtype:attempted-recon; sid:200004547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dar.kupabaruak.workers.dev"; classtype:attempted-recon; sid:200004548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dark-base-6f49.dotmay820.workers.dev"; classtype:attempted-recon; sid:200004549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dark-boat.media-peoplle.workers.dev"; classtype:attempted-recon; sid:200004550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dasfujxqwg.duckdns.org"; classtype:attempted-recon; sid:200004551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dasse.top"; classtype:attempted-recon; sid:200004552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dasvwrqgcn.duckdns.org"; classtype:attempted-recon; sid:200004553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dat.d1pal8j7mv1fr0.amplifyapp.com"; classtype:attempted-recon; sid:200004554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"data.podlink.to"; classtype:attempted-recon; sid:200004555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"datacoresystems.com"; classtype:attempted-recon; sid:200004556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"date-update-ups.com"; classtype:attempted-recon; sid:200004557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"davip2022confirma.daviplata2022.repl.co"; classtype:attempted-recon; sid:200004558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"davipcosegurd.daviseguros.repl.co"; classtype:attempted-recon; sid:200004559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daviplata221.repl.co"; classtype:attempted-recon; sid:200004560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daviplatainformacion.activoacgivorec.repl.co"; classtype:attempted-recon; sid:200004561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daviplatasegurainformacion.daviviendausers.repl.co"; classtype:attempted-recon; sid:200004562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daviplataverificacion.daviplataverify.repl.co"; classtype:attempted-recon; sid:200004563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daviviendaclave.hostfree.pw"; classtype:attempted-recon; sid:200004564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"davpemrcus.duckdns.org"; classtype:attempted-recon; sid:200004565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dawert675432.liveblog365.com"; classtype:attempted-recon; sid:200004566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dawn-river-3b54.marylands.workers.dev"; classtype:attempted-recon; sid:200004567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dawno.ciwumugiasda.workers.dev"; classtype:attempted-recon; sid:200004568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dawq.wlyhxj477.workers.dev"; classtype:attempted-recon; sid:200004569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dawthbyvna.duckdns.org"; classtype:attempted-recon; sid:200004570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daxezfpekb.duckdns.org"; classtype:attempted-recon; sid:200004571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daycoval.contrato.srv.br"; classtype:attempted-recon; sid:200004572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daycoval.facildepagar.com.br"; classtype:attempted-recon; sid:200004573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"daytrading-wallet.net"; classtype:attempted-recon; sid:200004574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dazjwuuvsd.duckdns.org"; classtype:attempted-recon; sid:200004575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dazzling-shaw.209-127-178-48.plesk.page"; classtype:attempted-recon; sid:200004576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"db-bb2cad.ingress-comporellon.ewp.live"; classtype:attempted-recon; sid:200004577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbc3255c57.nxcli.io"; classtype:attempted-recon; sid:200004578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbcsugddqo.duckdns.org"; classtype:attempted-recon; sid:200004579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbdbdbfbfnggn.000webhostapp.com"; classtype:attempted-recon; sid:200004580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbdf.lknjdfk.cn"; classtype:attempted-recon; sid:200004581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbfn.81932.cn"; classtype:attempted-recon; sid:200004582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbhlohalgw.duckdns.org"; classtype:attempted-recon; sid:200004583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbijmudqgc.duckdns.org"; classtype:attempted-recon; sid:200004584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbn.8ti0qkp.cn"; classtype:attempted-recon; sid:200004585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbolsmwyoi.duckdns.org"; classtype:attempted-recon; sid:200004586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbqfwjdoma.duckdns.org"; classtype:attempted-recon; sid:200004587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbrxyncmta.duckdns.org"; classtype:attempted-recon; sid:200004588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbs-siingaporre-online-login.web-apply.shop"; classtype:attempted-recon; sid:200004589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbspvwqpew.duckdns.org"; classtype:attempted-recon; sid:200004590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbwsedilym.duckdns.org"; classtype:attempted-recon; sid:200004591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbwulqqhco.duckdns.org"; classtype:attempted-recon; sid:200004592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dbxd.opfhqjj.cn"; classtype:attempted-recon; sid:200004593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dccjmhtnqg.duckdns.org"; classtype:attempted-recon; sid:200004594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dcg.fq0vj4j.cn"; classtype:attempted-recon; sid:200004595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dcjwyqezqy.duckdns.org"; classtype:attempted-recon; sid:200004596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dcllijudfn.duckdns.org"; classtype:attempted-recon; sid:200004597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dclmbjjmgj.duckdns.org"; classtype:attempted-recon; sid:200004598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dcmbjgwswo.duckdns.org"; classtype:attempted-recon; sid:200004599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dcojtuxbrx.duckdns.org"; classtype:attempted-recon; sid:200004600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dcoknvtqgp.duckdns.org"; classtype:attempted-recon; sid:200004601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dcoogtesfc.duckdns.org"; classtype:attempted-recon; sid:200004602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dctitan.com"; classtype:attempted-recon; sid:200004603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dd1b31ee8fa4b8d16cf300f4e8222e.firebaseapp.com"; classtype:attempted-recon; sid:200004604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dd1b31ee8fa4b8d16cf300f4e8222e.web.app"; classtype:attempted-recon; sid:200004605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dd90001.github.io"; classtype:attempted-recon; sid:200004606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddazjearvq.duckdns.org"; classtype:attempted-recon; sid:200004607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddcpcpcbop.duckdns.org"; classtype:attempted-recon; sid:200004608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dddcpgprha.duckdns.org"; classtype:attempted-recon; sid:200004609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dddszrlgiy.duckdns.org"; classtype:attempted-recon; sid:200004610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddfdgdgdgdsgdg.54354.repl.co"; classtype:attempted-recon; sid:200004611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddfgh.npdmsro.cn"; classtype:attempted-recon; sid:200004612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddfmkjtaxi.duckdns.org"; classtype:attempted-recon; sid:200004613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddjqsqllhp.duckdns.org"; classtype:attempted-recon; sid:200004614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddjzgiuyhg.duckdns.org"; classtype:attempted-recon; sid:200004615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddlzeltjgg.duckdns.org"; classtype:attempted-recon; sid:200004616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddpsgickyp.duckdns.org"; classtype:attempted-recon; sid:200004617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dds.rvgnmnt.cn"; classtype:attempted-recon; sid:200004618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddsdouvfal.duckdns.org"; classtype:attempted-recon; sid:200004619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddv.irwsis.cn"; classtype:attempted-recon; sid:200004620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ddzxeocqlx.duckdns.org"; classtype:attempted-recon; sid:200004621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"de22c9kukppr.clickfunnels.com"; classtype:attempted-recon; sid:200004622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deaeagpbsu.duckdns.org"; classtype:attempted-recon; sid:200004623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deangele.com.br"; classtype:attempted-recon; sid:200004624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deborahholland.net"; classtype:attempted-recon; sid:200004625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"decenlretends.com"; classtype:attempted-recon; sid:200004626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"decentralgames.wl-limit.com"; classtype:attempted-recon; sid:200004627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"decentraqames.com"; classtype:attempted-recon; sid:200004628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"decentrskal-games-on.com"; classtype:attempted-recon; sid:200004629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"decrocheur.com"; classtype:attempted-recon; sid:200004630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dedb.a9h3vqu.cn"; classtype:attempted-recon; sid:200004631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dedetizadoracleansos.com.br"; classtype:attempted-recon; sid:200004632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dedikkboac.duckdns.org"; classtype:attempted-recon; sid:200004633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dedqeaxlag.duckdns.org"; classtype:attempted-recon; sid:200004634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deekshabhoomi.org"; classtype:attempted-recon; sid:200004635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deepecho.io"; classtype:attempted-recon; sid:200004636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deexvrgmjf.duckdns.org"; classtype:attempted-recon; sid:200004637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defh.7x8sp9.cn"; classtype:attempted-recon; sid:200004638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defi-aavev3.cloud"; classtype:attempted-recon; sid:200004639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defi-aavev3.club"; classtype:attempted-recon; sid:200004640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defi-aavev3.co"; classtype:attempted-recon; sid:200004641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defi-aavev3.info"; classtype:attempted-recon; sid:200004642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defi-go.me"; classtype:attempted-recon; sid:200004643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defi-kingdoms.net"; classtype:attempted-recon; sid:200004644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defi-mining.live"; classtype:attempted-recon; sid:200004645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defikingdoms.com"; classtype:attempted-recon; sid:200004646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"defilo.io"; classtype:attempted-recon; sid:200004647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"degensweepers.online"; classtype:attempted-recon; sid:200004648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"degerkromaj.com.tr"; classtype:attempted-recon; sid:200004649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deguidesrv-customers.de"; classtype:attempted-recon; sid:200004650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dehashed.com"; classtype:attempted-recon; sid:200004651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deintiershop.com"; classtype:attempted-recon; sid:200004652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dejpaad.com"; classtype:attempted-recon; sid:200004653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delaynekuhl.myportfolio.com"; classtype:attempted-recon; sid:200004654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delbarriovalpo.cl"; classtype:attempted-recon; sid:200004655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delezhen.mashalezhen.com"; classtype:attempted-recon; sid:200004656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delhiescort69.com"; classtype:attempted-recon; sid:200004657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delicate-bush-0904.rcvrypahsajk.workers.dev"; classtype:attempted-recon; sid:200004658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delicate-dawn-reganba.vb2jdb03.workers.dev"; classtype:attempted-recon; sid:200004659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delightful-arithmetic-791f00.netlify.app"; classtype:attempted-recon; sid:200004660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delivery-0lx.315421211.xyz"; classtype:attempted-recon; sid:200004661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delivery-inpost.6795630.xyz"; classtype:attempted-recon; sid:200004662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delivery.attempt.failure.printandpub.net"; classtype:attempted-recon; sid:200004663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delivery.attempt.ndelectric-dz.com"; classtype:attempted-recon; sid:200004664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deliveryurequestclientxservicessupporsps.oznemedya.com"; classtype:attempted-recon; sid:200004665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deliveryuspsservices.com"; classtype:attempted-recon; sid:200004666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dellver5ollxpolska.pln-dostawkanens41.shop"; classtype:attempted-recon; sid:200004667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deluxify-ff527.firebaseapp.com"; classtype:attempted-recon; sid:200004668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deluxify-ff527.web.app"; classtype:attempted-recon; sid:200004669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demasiadoloco.com"; classtype:attempted-recon; sid:200004670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demaxcables.com"; classtype:attempted-recon; sid:200004671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demo.360degreeinfo.net"; classtype:attempted-recon; sid:200004672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demo.bradescocontrol.vertitecnologia.com.br"; classtype:attempted-recon; sid:200004673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demo.cmtech.co.in"; classtype:attempted-recon; sid:200004674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demo.giamso.com.sg"; classtype:attempted-recon; sid:200004675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demo2.cloudwp.dev"; classtype:attempted-recon; sid:200004676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demovp.cruisesmekongriver.net"; classtype:attempted-recon; sid:200004677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"denied-transaction-access.com"; classtype:attempted-recon; sid:200004678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deoree10.wixsite.com"; classtype:attempted-recon; sid:200004679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deqrmcseel.duckdns.org"; classtype:attempted-recon; sid:200004680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dermrbtlyr.duckdns.org"; classtype:attempted-recon; sid:200004681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"desarrolloturisticopartidordelsol.com"; classtype:attempted-recon; sid:200004682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"designcast.jp"; classtype:attempted-recon; sid:200004683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"desimvtjmt.duckdns.org"; classtype:attempted-recon; sid:200004684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deskorganize.com"; classtype:attempted-recon; sid:200004685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"desplugado.com"; classtype:attempted-recon; sid:200004686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"detail-info-customer.com"; classtype:attempted-recon; sid:200004687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dettawnber.duckdns.org"; classtype:attempted-recon; sid:200004688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deutcher.easy.co"; classtype:attempted-recon; sid:200004689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-doorverwijzing.pantheonsite.io"; classtype:attempted-recon; sid:200004690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-hbvcffes.pantheonsite.io"; classtype:attempted-recon; sid:200004691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-industrialbionli.pantheonsite.io"; classtype:attempted-recon; sid:200004692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-nadaj.orlenpaczka.ce5.pl"; classtype:attempted-recon; sid:200004693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-nniontbs.pantheonsite.io"; classtype:attempted-recon; sid:200004694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-pliodustrilamesn.pantheonsite.io"; classtype:attempted-recon; sid:200004695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-www.orlenpaczka.ce5.pl"; classtype:attempted-recon; sid:200004696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev.exitwabashandlake.com"; classtype:attempted-recon; sid:200004697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev.pagseguro.qisar.com.br"; classtype:attempted-recon; sid:200004698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev.technotackle.com"; classtype:attempted-recon; sid:200004699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev4199.d3hz77jb91jvsy.amplifyapp.com"; classtype:attempted-recon; sid:200004700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev5924.dxxsgb6hsq3ex.amplifyapp.com"; classtype:attempted-recon; sid:200004701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev7029.dxxsgb6hsq3ex.amplifyapp.com"; classtype:attempted-recon; sid:200004702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev8002.dot5sis18w0nf.amplifyapp.com"; classtype:attempted-recon; sid:200004703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev8460.d39ve8d19n9mzm.amplifyapp.com"; classtype:attempted-recon; sid:200004704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"development.aisecureme.com"; classtype:attempted-recon; sid:200004705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"development.omefyi.com"; classtype:attempted-recon; sid:200004706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dewdaa.ml"; classtype:attempted-recon; sid:200004707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dexbridgelink.com"; classtype:attempted-recon; sid:200004708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dexfixrestore.com"; classtype:attempted-recon; sid:200004709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dezefruuwh.duckdns.org"; classtype:attempted-recon; sid:200004710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dezemvbmhv.duckdns.org"; classtype:attempted-recon; sid:200004711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfbfd.75263.cn"; classtype:attempted-recon; sid:200004712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfcsa56.hyperphp.com"; classtype:attempted-recon; sid:200004713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfdn.qinzuihou.cn"; classtype:attempted-recon; sid:200004714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfeldjpfem.duckdns.org"; classtype:attempted-recon; sid:200004715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfexmjdufx.duckdns.org"; classtype:attempted-recon; sid:200004716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dffs-drsfer-ftreeryt.agilecrm.com"; classtype:attempted-recon; sid:200004717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfgbsgdaxc.top"; classtype:attempted-recon; sid:200004718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfgdsjhnfgjnaedzh.x10.mx"; classtype:attempted-recon; sid:200004719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfgg.dkbcdbg.cn"; classtype:attempted-recon; sid:200004720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfgg.hq-smart.cn"; classtype:attempted-recon; sid:200004721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfgg.wc1xuj.cn"; classtype:attempted-recon; sid:200004722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfggh.htkvjwluwx.cn"; classtype:attempted-recon; sid:200004723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfggh.k2vhkjp.cn"; classtype:attempted-recon; sid:200004724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfggh.oenqllk.cn"; classtype:attempted-recon; sid:200004725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfgghh.1l8ls9j.cn"; classtype:attempted-recon; sid:200004726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfgh.amtuijguang-0031.cn"; classtype:attempted-recon; sid:200004727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfghh.htkvjwlgahj.cn"; classtype:attempted-recon; sid:200004728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfghh.kooszuh.cn"; classtype:attempted-recon; sid:200004729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfghh.wuyueducation.cn"; classtype:attempted-recon; sid:200004730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfghj.lyuvkgs.cn"; classtype:attempted-recon; sid:200004731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfhjj.irg70nt.cn"; classtype:attempted-recon; sid:200004732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfjffvfazj.duckdns.org"; classtype:attempted-recon; sid:200004733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dflafgpgvf.duckdns.org"; classtype:attempted-recon; sid:200004734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfmbkctoif.duckdns.org"; classtype:attempted-recon; sid:200004735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfmixlomzi.duckdns.org"; classtype:attempted-recon; sid:200004736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfmkdnlxxv.duckdns.org"; classtype:attempted-recon; sid:200004737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfsvmhejgw.duckdns.org"; classtype:attempted-recon; sid:200004738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dftojc.web.app"; classtype:attempted-recon; sid:200004739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dg.cxhrxvd.cn"; classtype:attempted-recon; sid:200004740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dg.efcgjgq.cn"; classtype:attempted-recon; sid:200004741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgadagadating.xyz"; classtype:attempted-recon; sid:200004742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgdh.jbxrmyy.cn"; classtype:attempted-recon; sid:200004743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgfgkzayie.duckdns.org"; classtype:attempted-recon; sid:200004744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgfoodsnet.myportfolio.com"; classtype:attempted-recon; sid:200004745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dggkcuwcrc.duckdns.org"; classtype:attempted-recon; sid:200004746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dggshsg.top"; classtype:attempted-recon; sid:200004747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dghhj.kpbx8jt.cn"; classtype:attempted-recon; sid:200004748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dghhj.nqrtppc.cn"; classtype:attempted-recon; sid:200004749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dghjj.hhxxh.cn"; classtype:attempted-recon; sid:200004750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgjbqvklvg.duckdns.org"; classtype:attempted-recon; sid:200004751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgjhdlirdg.duckdns.org"; classtype:attempted-recon; sid:200004752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgkijnmosk.duckdns.org"; classtype:attempted-recon; sid:200004753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgkrlgwcne.duckdns.org"; classtype:attempted-recon; sid:200004754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dglnqabeip.duckdns.org"; classtype:attempted-recon; sid:200004755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgnalkprmg.duckdns.org"; classtype:attempted-recon; sid:200004756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgshqtkqbm.duckdns.org"; classtype:attempted-recon; sid:200004757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgtbvrhnbd.duckdns.org"; classtype:attempted-recon; sid:200004758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgthyrdthrds.hostfree.pw"; classtype:attempted-recon; sid:200004759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgu9g3a2kzqx2.cloudfront.net"; classtype:attempted-recon; sid:200004760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgvdf.fqmu47.cn"; classtype:attempted-recon; sid:200004761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgw.soundestlink.com"; classtype:attempted-recon; sid:200004762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgwkvqjpyn.duckdns.org"; classtype:attempted-recon; sid:200004763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgworld.biz"; classtype:attempted-recon; sid:200004764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dgzjeigxxw.duckdns.org"; classtype:attempted-recon; sid:200004765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhamfwjkez.duckdns.org"; classtype:attempted-recon; sid:200004766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhanushr24.github.io"; classtype:attempted-recon; sid:200004767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhbzdyevpv.duckdns.org"; classtype:attempted-recon; sid:200004768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhcsnjqehd.duckdns.org"; classtype:attempted-recon; sid:200004769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhipyuokbi.duckdns.org"; classtype:attempted-recon; sid:200004770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhjaaxkmev.duckdns.org"; classtype:attempted-recon; sid:200004771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhkdgeijak.duckdns.org"; classtype:attempted-recon; sid:200004772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhl-event.app"; classtype:attempted-recon; sid:200004773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhl.de.carbisbayoceanclub.uk"; classtype:attempted-recon; sid:200004774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhn.trssmhm.cn"; classtype:attempted-recon; sid:200004775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhn.zccf64h.cn"; classtype:attempted-recon; sid:200004776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhnxsdnlnp.duckdns.org"; classtype:attempted-recon; sid:200004777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhtgf.pjg3le1.cn"; classtype:attempted-recon; sid:200004778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhxh.2b9iz31.cn"; classtype:attempted-recon; sid:200004779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhysggxrae.duckdns.org"; classtype:attempted-recon; sid:200004780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"diadvaschiniwww02hiper.com"; classtype:attempted-recon; sid:200004781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"diamond-gratis-terbaru-agustus.duckdns.org"; classtype:attempted-recon; sid:200004782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"diamondalied.biz"; classtype:attempted-recon; sid:200004783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"diaplanu.com"; classtype:attempted-recon; sid:200004784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dicantrelend.blogspot.com"; classtype:attempted-recon; sid:200004785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dice-20a85.firebaseapp.com"; classtype:attempted-recon; sid:200004786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dice-20a85.web.app"; classtype:attempted-recon; sid:200004787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"die-post-swiss-id-19782635812.psd2any.com"; classtype:attempted-recon; sid:200004788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"die-post.softr.app"; classtype:attempted-recon; sid:200004789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"die-postch.ddns.net"; classtype:attempted-recon; sid:200004790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dieetpsovo.duckdns.org"; classtype:attempted-recon; sid:200004791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dienergia.com.br"; classtype:attempted-recon; sid:200004792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"diftgwicmh.duckdns.org"; classtype:attempted-recon; sid:200004793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"digiboxtest.com"; classtype:attempted-recon; sid:200004794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"digiibuy.com"; classtype:attempted-recon; sid:200004795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"digitaglobal.com"; classtype:attempted-recon; sid:200004796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"digital-fatura-setembro-br42.com"; classtype:attempted-recon; sid:200004797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"digital.mps.controllodianagrafici.eu"; classtype:attempted-recon; sid:200004798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"digitalesicuromps-info.preview-domain.com"; classtype:attempted-recon; sid:200004799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"digitalhub.westrock.com"; classtype:attempted-recon; sid:200004800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dijnidexkb.duckdns.org"; classtype:attempted-recon; sid:200004801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"diksowe.uno"; classtype:attempted-recon; sid:200004802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dikxjlyzzk.duckdns.org"; classtype:attempted-recon; sid:200004803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dipdfdkvkj.duckdns.org"; classtype:attempted-recon; sid:200004804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"direccion219191.webcindario.com"; classtype:attempted-recon; sid:200004805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"direct.smbc.co.jp.bjdrhc.com"; classtype:attempted-recon; sid:200004806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"directnewszone.com"; classtype:attempted-recon; sid:200004807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"directoryindex-repo.pages.dev"; classtype:attempted-recon; sid:200004808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"direx.is-great.net"; classtype:attempted-recon; sid:200004809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dirgold.easy.co"; classtype:attempted-recon; sid:200004810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"discocock.herokuapp.com"; classtype:attempted-recon; sid:200004811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"discordl-nitro.com"; classtype:attempted-recon; sid:200004812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"discoverdhaslkcxfinity1.560f866578.workers.dev"; classtype:attempted-recon; sid:200004813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"discovervisionary.com"; classtype:attempted-recon; sid:200004814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"diskrpge.ml"; classtype:attempted-recon; sid:200004815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"disponibleahora.assitecac.com"; classtype:attempted-recon; sid:200004816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"disponibleahoramismo.tfs-training.gy"; classtype:attempted-recon; sid:200004817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"disponibleaqui.transparency-tv.com"; classtype:attempted-recon; sid:200004818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"disrupto.xyz"; classtype:attempted-recon; sid:200004819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dissociadispositivoweb.com"; classtype:attempted-recon; sid:200004820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"distinctdarkredsubversion.josaperes.repl.co"; classtype:attempted-recon; sid:200004821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"distinctivei.com"; classtype:attempted-recon; sid:200004822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ditcgzjfou.duckdns.org"; classtype:attempted-recon; sid:200004823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"divine-haze-2415.whybed6896573.workers.dev"; classtype:attempted-recon; sid:200004824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"divine-mouse-da46.kontor5687.workers.dev"; classtype:attempted-recon; sid:200004825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"divine-sunset.p16t2853.workers.dev"; classtype:attempted-recon; sid:200004826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"divino.zxinomoiszer.workers.dev"; classtype:attempted-recon; sid:200004827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"divorcelawyers.co.in"; classtype:attempted-recon; sid:200004828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dizjutvkcv.duckdns.org"; classtype:attempted-recon; sid:200004829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djbingproductions.com"; classtype:attempted-recon; sid:200004830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djbsgjpkpv.duckdns.org"; classtype:attempted-recon; sid:200004831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djcdklgbvu.duckdns.org"; classtype:attempted-recon; sid:200004832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djcshrfloo.duckdns.org"; classtype:attempted-recon; sid:200004833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djdtllerod.duckdns.org"; classtype:attempted-recon; sid:200004834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djfkmoqmee.duckdns.org"; classtype:attempted-recon; sid:200004835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djgblbucsu.duckdns.org"; classtype:attempted-recon; sid:200004836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djivsgethj.duckdns.org"; classtype:attempted-recon; sid:200004837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djmebjrrjy.duckdns.org"; classtype:attempted-recon; sid:200004838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djnoqjlfsq.duckdns.org"; classtype:attempted-recon; sid:200004839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djpowurhdj.duckdns.org"; classtype:attempted-recon; sid:200004840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djscordnltro.com"; classtype:attempted-recon; sid:200004841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djsgountfz.duckdns.org"; classtype:attempted-recon; sid:200004842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djytenygax.duckdns.org"; classtype:attempted-recon; sid:200004843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dk.domholding.kz"; classtype:attempted-recon; sid:200004844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dk6k0z.webwave.dev"; classtype:attempted-recon; sid:200004845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkb-daten.act-or.de"; classtype:attempted-recon; sid:200004846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkb-konto.digital-1.one"; classtype:attempted-recon; sid:200004847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkb-kunden.de"; classtype:attempted-recon; sid:200004848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkb-online.wadsoncables.co.za"; classtype:attempted-recon; sid:200004849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkdbuiwmjl.duckdns.org"; classtype:attempted-recon; sid:200004850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkhvddzxqj.duckdns.org"; classtype:attempted-recon; sid:200004851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkksilaban.helpprotections.workers.dev"; classtype:attempted-recon; sid:200004852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkksitamjuntakk.martulangsore.workers.dev"; classtype:attempted-recon; sid:200004853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkkwrcyzpd.duckdns.org"; classtype:attempted-recon; sid:200004854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dklqwtiobb.duckdns.org"; classtype:attempted-recon; sid:200004855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkmdgvtjzn.duckdns.org"; classtype:attempted-recon; sid:200004856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dknbkzxlea.duckdns.org"; classtype:attempted-recon; sid:200004857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dknusoinec.duckdns.org"; classtype:attempted-recon; sid:200004858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkrujcdxci.duckdns.org"; classtype:attempted-recon; sid:200004859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dktcbiooal.duckdns.org"; classtype:attempted-recon; sid:200004860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkukncdjxt.duckdns.org"; classtype:attempted-recon; sid:200004861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkuwuvqorz.duckdns.org"; classtype:attempted-recon; sid:200004862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkxcflnggl.duckdns.org"; classtype:attempted-recon; sid:200004863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dl.9xu.com"; classtype:attempted-recon; sid:200004864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlbqiypsnq.duckdns.org"; classtype:attempted-recon; sid:200004865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlcyjztfme.duckdns.org"; classtype:attempted-recon; sid:200004866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlhdeliveryparcele.ga"; classtype:attempted-recon; sid:200004867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlrcfirgbt.duckdns.org"; classtype:attempted-recon; sid:200004868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlroezdxfc.duckdns.org"; classtype:attempted-recon; sid:200004869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlscjordnitro.com"; classtype:attempted-recon; sid:200004870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlscord-tm.com"; classtype:attempted-recon; sid:200004871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlvfhkxvmh.duckdns.org"; classtype:attempted-recon; sid:200004872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlvtdrqusx.duckdns.org"; classtype:attempted-recon; sid:200004873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dlwjhgdncu.duckdns.org"; classtype:attempted-recon; sid:200004874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dm2.opq.pa-tarutung.go.id"; classtype:attempted-recon; sid:200004875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmdecors.com"; classtype:attempted-recon; sid:200004876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmjrnyhvvu.duckdns.org"; classtype:attempted-recon; sid:200004877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmlnpgjwdi.duckdns.org"; classtype:attempted-recon; sid:200004878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmosxpyyor.duckdns.org"; classtype:attempted-recon; sid:200004879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmqywcprkd.duckdns.org"; classtype:attempted-recon; sid:200004880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmvhqjmefs.duckdns.org"; classtype:attempted-recon; sid:200004881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmwwlgbmxx.duckdns.org"; classtype:attempted-recon; sid:200004882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnbauth4.firebaseapp.com"; classtype:attempted-recon; sid:200004883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnbauth4.web.app"; classtype:attempted-recon; sid:200004884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dncobidorf.duckdns.org"; classtype:attempted-recon; sid:200004885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnhgzbdjzg.duckdns.org"; classtype:attempted-recon; sid:200004886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnmchcxjgi.duckdns.org"; classtype:attempted-recon; sid:200004887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnnpcutsrt.duckdns.org"; classtype:attempted-recon; sid:200004888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnpqphafpv.duckdns.org"; classtype:attempted-recon; sid:200004889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnqnmlknvo.duckdns.org"; classtype:attempted-recon; sid:200004890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnss-3982f.firebaseapp.com"; classtype:attempted-recon; sid:200004891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnss-3982f.web.app"; classtype:attempted-recon; sid:200004892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnwkgmgfyw.duckdns.org"; classtype:attempted-recon; sid:200004893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnwvmsqact.duckdns.org"; classtype:attempted-recon; sid:200004894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnwvpkuwii.duckdns.org"; classtype:attempted-recon; sid:200004895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"do-any-3.strangled.net"; classtype:attempted-recon; sid:200004896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doanmnmmmmbnmdffd.weebly.com"; classtype:attempted-recon; sid:200004897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doc001.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200004898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doccusend.com"; classtype:attempted-recon; sid:200004899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docdrive01060authorizesharingfile.onmicrosoft365.workers.dev"; classtype:attempted-recon; sid:200004900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docfilepropos.myportfolio.com"; classtype:attempted-recon; sid:200004901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doclab-console-auth.firebaseapp.com"; classtype:attempted-recon; sid:200004902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doclab-console-auth.web.app"; classtype:attempted-recon; sid:200004903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docs-dew-6406.retupamyte.workers.dev"; classtype:attempted-recon; sid:200004904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docs-thevillagesoforleans.cf"; classtype:attempted-recon; sid:200004905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docs-thevillagesoforleans.tk"; classtype:attempted-recon; sid:200004906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docs.revv.so"; classtype:attempted-recon; sid:200004907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docs.transactional.pandadoc.net"; classtype:attempted-recon; sid:200004908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docsend.myportfolio.com"; classtype:attempted-recon; sid:200004909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docsharex-authorize.firebaseapp.com"; classtype:attempted-recon; sid:200004910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docsharex-authorize.web.app"; classtype:attempted-recon; sid:200004911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docu-office01.myportfolio.com"; classtype:attempted-recon; sid:200004912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-cloud-secure.piltrimuging.workers.dev"; classtype:attempted-recon; sid:200004913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-clouds.fuconbaetu.workers.dev"; classtype:attempted-recon; sid:200004914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-folder.chat-verify.workers.dev"; classtype:attempted-recon; sid:200004915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-folder.ownyuguestyu.workers.dev"; classtype:attempted-recon; sid:200004916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-folder.shared-reconnecting.workers.dev"; classtype:attempted-recon; sid:200004917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-june.mature-auth.workers.dev"; classtype:attempted-recon; sid:200004918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-private.direct-sustutelue.workers.dev"; classtype:attempted-recon; sid:200004919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-product.rototetiined.workers.dev"; classtype:attempted-recon; sid:200004920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-progress-asset.retupamyte.workers.dev"; classtype:attempted-recon; sid:200004921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-project-june.voicee-love.workers.dev"; classtype:attempted-recon; sid:200004922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-project.secure-count.workers.dev"; classtype:attempted-recon; sid:200004923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-projects.files-auuth.workers.dev"; classtype:attempted-recon; sid:200004924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-shared-folder.date-oauth.workers.dev"; classtype:attempted-recon; sid:200004925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-shared.datings-prev.workers.dev"; classtype:attempted-recon; sid:200004926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document-update-progress.shared-filees.workers.dev"; classtype:attempted-recon; sid:200004927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document.lates-proposale.workers.dev"; classtype:attempted-recon; sid:200004928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document.project-shared-adobe.workers.dev"; classtype:attempted-recon; sid:200004929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document.storages-clouds.workers.dev"; classtype:attempted-recon; sid:200004930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document2c-f4e80.firebaseapp.com"; classtype:attempted-recon; sid:200004931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document2c-f4e80.web.app"; classtype:attempted-recon; sid:200004932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document3b-d779b.firebaseapp.com"; classtype:attempted-recon; sid:200004933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document3b-d779b.web.app"; classtype:attempted-recon; sid:200004934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document3e-e09ee.firebaseapp.com"; classtype:attempted-recon; sid:200004935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document3e-e09ee.web.app"; classtype:attempted-recon; sid:200004936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document4b-8063c.firebaseapp.com"; classtype:attempted-recon; sid:200004937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document4b-8063c.web.app"; classtype:attempted-recon; sid:200004938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document4c-aabc6.firebaseapp.com"; classtype:attempted-recon; sid:200004939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document4c-aabc6.web.app"; classtype:attempted-recon; sid:200004940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document5-153bf.firebaseapp.com"; classtype:attempted-recon; sid:200004941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document5-153bf.web.app"; classtype:attempted-recon; sid:200004942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document5e-22051.firebaseapp.com"; classtype:attempted-recon; sid:200004943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document5e-22051.web.app"; classtype:attempted-recon; sid:200004944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document6-23891.firebaseapp.com"; classtype:attempted-recon; sid:200004945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document6-23891.web.app"; classtype:attempted-recon; sid:200004946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"document6c-3d65b.web.app"; classtype:attempted-recon; sid:200004947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"documentoprotetto.filedicondivisione-909524fb9aa348b230295a2b7a842c21.workers.dev"; classtype:attempted-recon; sid:200004948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"documents.projects-june.workers.dev"; classtype:attempted-recon; sid:200004949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"documents.shared-authentiicated.workers.dev"; classtype:attempted-recon; sid:200004950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"documents.uvzcknthvfffqjzakuxgdrnthu.workers.dev"; classtype:attempted-recon; sid:200004951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docusign-share.myportfolio.com"; classtype:attempted-recon; sid:200004952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docusign.mslive.workers.dev"; classtype:attempted-recon; sid:200004953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docusignredtail.web.app"; classtype:attempted-recon; sid:200004954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doezos.com"; classtype:attempted-recon; sid:200004955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dofus-touch-com.fr"; classtype:attempted-recon; sid:200004956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dohguredhole.myportfolio.com"; classtype:attempted-recon; sid:200004957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dokxevgjeu.duckdns.org"; classtype:attempted-recon; sid:200004958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dolipops.com"; classtype:attempted-recon; sid:200004959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dolphy.in"; classtype:attempted-recon; sid:200004960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dolunaytravel.com"; classtype:attempted-recon; sid:200004961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domain.x49v5.cn"; classtype:attempted-recon; sid:200004962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domaincontroller.pmeimg.co.uk"; classtype:attempted-recon; sid:200004963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg1.firebaseapp.com"; classtype:attempted-recon; sid:200004964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg1.web.app"; classtype:attempted-recon; sid:200004965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg10.firebaseapp.com"; classtype:attempted-recon; sid:200004966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg10.web.app"; classtype:attempted-recon; sid:200004967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg12.firebaseapp.com"; classtype:attempted-recon; sid:200004968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg12.web.app"; classtype:attempted-recon; sid:200004969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg15.firebaseapp.com"; classtype:attempted-recon; sid:200004970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg15.web.app"; classtype:attempted-recon; sid:200004971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg16.firebaseapp.com"; classtype:attempted-recon; sid:200004972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg16.web.app"; classtype:attempted-recon; sid:200004973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg17.firebaseapp.com"; classtype:attempted-recon; sid:200004974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg17.web.app"; classtype:attempted-recon; sid:200004975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg19.firebaseapp.com"; classtype:attempted-recon; sid:200004976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg19.web.app"; classtype:attempted-recon; sid:200004977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg2.firebaseapp.com"; classtype:attempted-recon; sid:200004978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg2.web.app"; classtype:attempted-recon; sid:200004979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg20.firebaseapp.com"; classtype:attempted-recon; sid:200004980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg20.web.app"; classtype:attempted-recon; sid:200004981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg21.firebaseapp.com"; classtype:attempted-recon; sid:200004982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg21.web.app"; classtype:attempted-recon; sid:200004983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg22.firebaseapp.com"; classtype:attempted-recon; sid:200004984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg22.web.app"; classtype:attempted-recon; sid:200004985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg23.firebaseapp.com"; classtype:attempted-recon; sid:200004986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg23.web.app"; classtype:attempted-recon; sid:200004987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg24.firebaseapp.com"; classtype:attempted-recon; sid:200004988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg24.web.app"; classtype:attempted-recon; sid:200004989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg25.firebaseapp.com"; classtype:attempted-recon; sid:200004990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg25.web.app"; classtype:attempted-recon; sid:200004991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg27.firebaseapp.com"; classtype:attempted-recon; sid:200004992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg27.web.app"; classtype:attempted-recon; sid:200004993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg28.firebaseapp.com"; classtype:attempted-recon; sid:200004994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg28.web.app"; classtype:attempted-recon; sid:200004995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg29.firebaseapp.com"; classtype:attempted-recon; sid:200004996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg29.web.app"; classtype:attempted-recon; sid:200004997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg3.firebaseapp.com"; classtype:attempted-recon; sid:200004998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg3.web.app"; classtype:attempted-recon; sid:200004999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg30.firebaseapp.com"; classtype:attempted-recon; sid:200005000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg30.web.app"; classtype:attempted-recon; sid:200005001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg31.firebaseapp.com"; classtype:attempted-recon; sid:200005002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg31.web.app"; classtype:attempted-recon; sid:200005003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg32.firebaseapp.com"; classtype:attempted-recon; sid:200005004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg32.web.app"; classtype:attempted-recon; sid:200005005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg33.firebaseapp.com"; classtype:attempted-recon; sid:200005006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg33.web.app"; classtype:attempted-recon; sid:200005007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg34.firebaseapp.com"; classtype:attempted-recon; sid:200005008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg34.web.app"; classtype:attempted-recon; sid:200005009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg35.firebaseapp.com"; classtype:attempted-recon; sid:200005010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg35.web.app"; classtype:attempted-recon; sid:200005011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg4.firebaseapp.com"; classtype:attempted-recon; sid:200005012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg4.web.app"; classtype:attempted-recon; sid:200005013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg6.firebaseapp.com"; classtype:attempted-recon; sid:200005014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg6.web.app"; classtype:attempted-recon; sid:200005015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg7.firebaseapp.com"; classtype:attempted-recon; sid:200005016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg7.web.app"; classtype:attempted-recon; sid:200005017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg8.firebaseapp.com"; classtype:attempted-recon; sid:200005018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domappcheckomeg8.web.app"; classtype:attempted-recon; sid:200005019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domelnews.com"; classtype:attempted-recon; sid:200005020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domesmarketing.com"; classtype:attempted-recon; sid:200005021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domino6b.cf"; classtype:attempted-recon; sid:200005022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domino6b.tk"; classtype:attempted-recon; sid:200005023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"domotec.com.uy"; classtype:attempted-recon; sid:200005024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doodles.mints-link.com"; classtype:attempted-recon; sid:200005025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dotfkxwcld.duckdns.org"; classtype:attempted-recon; sid:200005026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dotmatrixcodenet345.ml"; classtype:attempted-recon; sid:200005027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dotsatoshi.pro"; classtype:attempted-recon; sid:200005028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dovzdrpdxi.duckdns.org"; classtype:attempted-recon; sid:200005029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dowaba-s2dhl.blogspot.com"; classtype:attempted-recon; sid:200005030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"download-folder-files.secure-place.workers.dev"; classtype:attempted-recon; sid:200005031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"download.bitkubfy.com"; classtype:attempted-recon; sid:200005032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"downloadquickbook.ocafghan.com"; classtype:attempted-recon; sid:200005033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doyypixfto.duckdns.org"; classtype:attempted-recon; sid:200005034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpcpl.com"; classtype:attempted-recon; sid:200005035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpd-mobile.co.uk"; classtype:attempted-recon; sid:200005036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpd-redelivery-uk.com"; classtype:attempted-recon; sid:200005037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpd.depotservices.me"; classtype:attempted-recon; sid:200005038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpd.itemservice.me"; classtype:attempted-recon; sid:200005039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpd.survalyzer.swiss"; classtype:attempted-recon; sid:200005040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpfko-inv.web.app"; classtype:attempted-recon; sid:200005041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dphmxgksyq.duckdns.org"; classtype:attempted-recon; sid:200005042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpmasdaskj.pages.dev"; classtype:attempted-recon; sid:200005043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpncbxamrq.duckdns.org"; classtype:attempted-recon; sid:200005044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpqhcjnpkk.duckdns.org"; classtype:attempted-recon; sid:200005045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpqxnrshkh.duckdns.org"; classtype:attempted-recon; sid:200005046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpsyjmipjw.duckdns.org"; classtype:attempted-recon; sid:200005047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dptointerno9021.webcindario.com"; classtype:attempted-recon; sid:200005048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpuczctlta.duckdns.org"; classtype:attempted-recon; sid:200005049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dpxufnfuel.duckdns.org"; classtype:attempted-recon; sid:200005050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dq244x.hyperphp.com"; classtype:attempted-recon; sid:200005051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dqjvgjjfbz.duckdns.org"; classtype:attempted-recon; sid:200005052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dqnujvyghv.duckdns.org"; classtype:attempted-recon; sid:200005053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dqpfdmwqso.duckdns.org"; classtype:attempted-recon; sid:200005054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dqriybyduw.duckdns.org"; classtype:attempted-recon; sid:200005055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dqsfpyvljx.duckdns.org"; classtype:attempted-recon; sid:200005056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dragongroups.in"; classtype:attempted-recon; sid:200005057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dralilianamunevarv.com"; classtype:attempted-recon; sid:200005058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drbazzpinx.topijerami.workers.dev"; classtype:attempted-recon; sid:200005059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drdmnmmngz.duckdns.org"; classtype:attempted-recon; sid:200005060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dreamherbs.com.au"; classtype:attempted-recon; sid:200005061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dreamy-chandrasekhar.193-70-21-70.plesk.page"; classtype:attempted-recon; sid:200005062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dreamy-hawking.185-101-35-170.plesk.page"; classtype:attempted-recon; sid:200005063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drgf.dgrgrgdr.cn"; classtype:attempted-recon; sid:200005064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drgwmkeqvm.web.app"; classtype:attempted-recon; sid:200005065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drikxisjig.duckdns.org"; classtype:attempted-recon; sid:200005066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drittohub.com"; classtype:attempted-recon; sid:200005067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drive-file-device-local-disk.firebaseapp.com"; classtype:attempted-recon; sid:200005068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drive-file-device-local-disk.web.app"; classtype:attempted-recon; sid:200005069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drive.dataexpertservices.hu"; classtype:attempted-recon; sid:200005070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"driveequitypartners.com"; classtype:attempted-recon; sid:200005071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drlpcqiiay.duckdns.org"; classtype:attempted-recon; sid:200005072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"droits-service.fr"; classtype:attempted-recon; sid:200005073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"droits.typeform.com"; classtype:attempted-recon; sid:200005074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drqpdcjixl.duckdns.org"; classtype:attempted-recon; sid:200005075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drtmyyttva.firebaseapp.com"; classtype:attempted-recon; sid:200005076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drtmyyttva.web.app"; classtype:attempted-recon; sid:200005077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"drvapp.link"; classtype:attempted-recon; sid:200005078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dry-dawn-acf5.jgomez2482804.workers.dev"; classtype:attempted-recon; sid:200005079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dry-naha-4740.staba.jp"; classtype:attempted-recon; sid:200005080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dry-shape-0bbc.sophia-pipefittinghtxd7833.workers.dev"; classtype:attempted-recon; sid:200005081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dry-union-280f.diianekalll.workers.dev"; classtype:attempted-recon; sid:200005082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dry-violet-309b.project-pdf-assets.workers.dev"; classtype:attempted-recon; sid:200005083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ds.cczmlx.cn"; classtype:attempted-recon; sid:200005084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ds.nd5mj0s.cn"; classtype:attempted-recon; sid:200005085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ds.tdj32v8.cn"; classtype:attempted-recon; sid:200005086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ds4mh-myaaa-aaaad-qdw4q-cai.raw.ic0.app"; classtype:attempted-recon; sid:200005087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsacjrtmmt.duckdns.org"; classtype:attempted-recon; sid:200005088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsapgiotqu.duckdns.org"; classtype:attempted-recon; sid:200005089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsb.ubkexax.cn"; classtype:attempted-recon; sid:200005090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsbd.pypxfzj.cn"; classtype:attempted-recon; sid:200005091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsbfinancialservice.com"; classtype:attempted-recon; sid:200005092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dseerhqzzo.duckdns.org"; classtype:attempted-recon; sid:200005093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsegv.6m62feu.cn"; classtype:attempted-recon; sid:200005094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsf.vmrcukg.cn"; classtype:attempted-recon; sid:200005095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsff-100409.weeblysite.com"; classtype:attempted-recon; sid:200005096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsfnjpazgs.duckdns.org"; classtype:attempted-recon; sid:200005097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsgcbeonline.com"; classtype:attempted-recon; sid:200005098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsgd.7pdx69i.cn"; classtype:attempted-recon; sid:200005099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsimtlqyac.duckdns.org"; classtype:attempted-recon; sid:200005100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dskuk.org"; classtype:attempted-recon; sid:200005101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsv.gpyletf.cn"; classtype:attempted-recon; sid:200005102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsv.kuqhhzu.cn"; classtype:attempted-recon; sid:200005103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsv.pykzrdg.cn"; classtype:attempted-recon; sid:200005104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsv.ztqktec.cn"; classtype:attempted-recon; sid:200005105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsvf.n6wum7f.cn"; classtype:attempted-recon; sid:200005106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsvg.ctulrceo.cn"; classtype:attempted-recon; sid:200005107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsvrzyoaab.duckdns.org"; classtype:attempted-recon; sid:200005108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsygsgokmi.duckdns.org"; classtype:attempted-recon; sid:200005109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dszv.u32q9jn.cn"; classtype:attempted-recon; sid:200005110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtcxnhxyix.duckdns.org"; classtype:attempted-recon; sid:200005111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtkcsiyqit.duckdns.org"; classtype:attempted-recon; sid:200005112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtlkzevhju.duckdns.org"; classtype:attempted-recon; sid:200005113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtmejdtean.duckdns.org"; classtype:attempted-recon; sid:200005114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtnqgaswcx.duckdns.org"; classtype:attempted-recon; sid:200005115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtppqnveno.duckdns.org"; classtype:attempted-recon; sid:200005116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtxygsylrd.duckdns.org"; classtype:attempted-recon; sid:200005117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtzzgimmfs.duckdns.org"; classtype:attempted-recon; sid:200005118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duahatii.topijerami.workers.dev"; classtype:attempted-recon; sid:200005119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dubnnugmqu.duckdns.org"; classtype:attempted-recon; sid:200005120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duhrefalxm.duckdns.org"; classtype:attempted-recon; sid:200005121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duiksrrrmg.duckdns.org"; classtype:attempted-recon; sid:200005122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dujjiahkxs.duckdns.org"; classtype:attempted-recon; sid:200005123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dulluntriedwebmaster.prepaorprpaeor.repl.co"; classtype:attempted-recon; sid:200005124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dunescapital.ae"; classtype:attempted-recon; sid:200005125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duo-ange.com"; classtype:attempted-recon; sid:200005126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duozfntknj.duckdns.org"; classtype:attempted-recon; sid:200005127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duratechindia.in"; classtype:attempted-recon; sid:200005128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"durkle.com"; classtype:attempted-recon; sid:200005129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duvwqormul.duckdns.org"; classtype:attempted-recon; sid:200005130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duxwkyfqza.duckdns.org"; classtype:attempted-recon; sid:200005131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duyeadswyg.duckdns.org"; classtype:attempted-recon; sid:200005132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duykonisitme.com"; classtype:attempted-recon; sid:200005133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.0b6iqq9.cn"; classtype:attempted-recon; sid:200005134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.0ys79oj.cn"; classtype:attempted-recon; sid:200005135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.1670au3.cn"; classtype:attempted-recon; sid:200005136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.3zihxwf.cn"; classtype:attempted-recon; sid:200005137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.armhvbp.cn"; classtype:attempted-recon; sid:200005138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.bj0b8g1.cn"; classtype:attempted-recon; sid:200005139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.es68ld8.cn"; classtype:attempted-recon; sid:200005140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.fdohvtd.cn"; classtype:attempted-recon; sid:200005141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.hffuzxw.cn"; classtype:attempted-recon; sid:200005142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.hxo96c0.cn"; classtype:attempted-recon; sid:200005143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.j0rkb3xh.cn"; classtype:attempted-recon; sid:200005144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.lc0lf5l.cn"; classtype:attempted-recon; sid:200005145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.mmabive.cn"; classtype:attempted-recon; sid:200005146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.mwinsfo.cn"; classtype:attempted-recon; sid:200005147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.wbirbuq.cn"; classtype:attempted-recon; sid:200005148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.xzcxgnv.cn"; classtype:attempted-recon; sid:200005149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.xzqcp7q.cn"; classtype:attempted-recon; sid:200005150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.zgradmr.cn"; classtype:attempted-recon; sid:200005151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dv.zrebaxk.cn"; classtype:attempted-recon; sid:200005152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvassociates.co.in"; classtype:attempted-recon; sid:200005153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvbgwuhywc.duckdns.org"; classtype:attempted-recon; sid:200005154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvcd.sinpxmn.cn"; classtype:attempted-recon; sid:200005155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvd.djaojkd.cn"; classtype:attempted-recon; sid:200005156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvd.fpxrxicb.cn"; classtype:attempted-recon; sid:200005157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvd.iu0weyk.cn"; classtype:attempted-recon; sid:200005158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvdfh.75795.cn"; classtype:attempted-recon; sid:200005159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvdg.tjyafl.cn"; classtype:attempted-recon; sid:200005160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvds.uejobre.cn"; classtype:attempted-recon; sid:200005161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvdxmxhjaj.duckdns.org"; classtype:attempted-recon; sid:200005162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvfxgmbzpj.duckdns.org"; classtype:attempted-recon; sid:200005163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvhrvhdlbf.duckdns.org"; classtype:attempted-recon; sid:200005164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvmjpdiyqi.duckdns.org"; classtype:attempted-recon; sid:200005165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvoqctqjyh.duckdns.org"; classtype:attempted-recon; sid:200005166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvplhdhaek.duckdns.org"; classtype:attempted-recon; sid:200005167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.0ygs5da.cn"; classtype:attempted-recon; sid:200005168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.6nespp3.cn"; classtype:attempted-recon; sid:200005169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.apnqjy.cn"; classtype:attempted-recon; sid:200005170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.boumdba.cn"; classtype:attempted-recon; sid:200005171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.djgssib.cn"; classtype:attempted-recon; sid:200005172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.fidnrvhe.cn"; classtype:attempted-recon; sid:200005173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.hjjxmfl.cn"; classtype:attempted-recon; sid:200005174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.lhsewdc.cn"; classtype:attempted-recon; sid:200005175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.mosytjf.cn"; classtype:attempted-recon; sid:200005176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.qsfxkea.cn"; classtype:attempted-recon; sid:200005177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.sabfuhc.cn"; classtype:attempted-recon; sid:200005178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.scbjuhz.cn"; classtype:attempted-recon; sid:200005179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.vvr5zko.cn"; classtype:attempted-recon; sid:200005180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.xgrunrk.cn"; classtype:attempted-recon; sid:200005181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvs.yjkseus.cn"; classtype:attempted-recon; sid:200005182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvsgfcj.7by4i1.cn"; classtype:attempted-recon; sid:200005183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvtznpmbho.duckdns.org"; classtype:attempted-recon; sid:200005184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvx.1yf55vl.cn"; classtype:attempted-recon; sid:200005185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvx.naxunbs.cn"; classtype:attempted-recon; sid:200005186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvxvzhiwym.duckdns.org"; classtype:attempted-recon; sid:200005187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dvzwtyfuri.duckdns.org"; classtype:attempted-recon; sid:200005188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dwblxrjsii.duckdns.org"; classtype:attempted-recon; sid:200005189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dwgnfwwdja.duckdns.org"; classtype:attempted-recon; sid:200005190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dwlkgabtzh.duckdns.org"; classtype:attempted-recon; sid:200005191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dwqdoyaglt.duckdns.org"; classtype:attempted-recon; sid:200005192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dwvjxahsoe.duckdns.org"; classtype:attempted-recon; sid:200005193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dwziastplu.duckdns.org"; classtype:attempted-recon; sid:200005194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dx6b.com"; classtype:attempted-recon; sid:200005195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxb09.myportfolio.com"; classtype:attempted-recon; sid:200005196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxbmuxveao.duckdns.org"; classtype:attempted-recon; sid:200005197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxdxdxe.web.app"; classtype:attempted-recon; sid:200005198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxfcvg.ml"; classtype:attempted-recon; sid:200005199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxfrtuwdll.duckdns.org"; classtype:attempted-recon; sid:200005200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxg.inqvmei.cn"; classtype:attempted-recon; sid:200005201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxhcj.arwcbs7.cn"; classtype:attempted-recon; sid:200005202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxipusdeno.duckdns.org"; classtype:attempted-recon; sid:200005203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxjvoymhjl.duckdns.org"; classtype:attempted-recon; sid:200005204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxv.wjua5t2.cn"; classtype:attempted-recon; sid:200005205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxxamuxerd.duckdns.org"; classtype:attempted-recon; sid:200005206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxxmmyy.firebaseapp.com"; classtype:attempted-recon; sid:200005207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxxmmyy.web.app"; classtype:attempted-recon; sid:200005208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dxyjqggniy.duckdns.org"; classtype:attempted-recon; sid:200005209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dybstxjuzj.duckdns.org"; classtype:attempted-recon; sid:200005210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dyfesysrrp.duckdns.org"; classtype:attempted-recon; sid:200005211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dygsebmytf.duckdns.org"; classtype:attempted-recon; sid:200005212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dygwpkgrvd.duckdns.org"; classtype:attempted-recon; sid:200005213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dyilgcvbkk.duckdns.org"; classtype:attempted-recon; sid:200005214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dylsvnicue.duckdns.org"; classtype:attempted-recon; sid:200005215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dynastyclinic.ae"; classtype:attempted-recon; sid:200005216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dysvoxjqxz.duckdns.org"; classtype:attempted-recon; sid:200005217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dytljdzamj.duckdns.org"; classtype:attempted-recon; sid:200005218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dytsa2.gq"; classtype:attempted-recon; sid:200005219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dyuvstyfawecteraw.blogspot.de"; classtype:attempted-recon; sid:200005220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dyvkfizjux.duckdns.org"; classtype:attempted-recon; sid:200005221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dzebachonm.duckdns.org"; classtype:attempted-recon; sid:200005222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dzexdmedcy.duckdns.org"; classtype:attempted-recon; sid:200005223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dzhfh.goqaiib.cn"; classtype:attempted-recon; sid:200005224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e-cassare.org"; classtype:attempted-recon; sid:200005225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e-mail-idtrackx44156.4nmn.com"; classtype:attempted-recon; sid:200005226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e-smansa.sman1bdg.sch.id"; classtype:attempted-recon; sid:200005227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e-sport.bti-if.dk"; classtype:attempted-recon; sid:200005228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e-surat.kominfo.tabalongkab.go.id"; classtype:attempted-recon; sid:200005229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e0406.miraclerichs.com"; classtype:attempted-recon; sid:200005230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e1aae61c265532e4bd8a014d5391cde4-dot-office-352115.uk.r.appspot.com"; classtype:attempted-recon; sid:200005231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e2cq2vcqcq.weeblysite.com"; classtype:attempted-recon; sid:200005232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e41266ayuu.temp.swtest.ru"; classtype:attempted-recon; sid:200005233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e4ff557e.sso-secure-mail04wtwdw4.pages.dev"; classtype:attempted-recon; sid:200005234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e4ra.byethost8.com"; classtype:attempted-recon; sid:200005235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"e63q45f9h5fr.clickfunnels.com"; classtype:attempted-recon; sid:200005236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eager-fermi.104-152-223-140.plesk.page"; classtype:attempted-recon; sid:200005237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eagleeyeapparel.com"; classtype:attempted-recon; sid:200005238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eaglestar.com.myelf75irfhajtm3egepywelf75irfhajtm3egepywelf75irfhajtm3egepyw.servicecareireland.com"; classtype:attempted-recon; sid:200005239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eaglesvision.com.br"; classtype:attempted-recon; sid:200005240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eajbrqqggw.duckdns.org"; classtype:attempted-recon; sid:200005241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eajxvtkhax.duckdns.org"; classtype:attempted-recon; sid:200005242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eaki-crent.icu"; classtype:attempted-recon; sid:200005243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-ceurw.icu"; classtype:attempted-recon; sid:200005244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-ceuzw.icu"; classtype:attempted-recon; sid:200005245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-ncate.icu"; classtype:attempted-recon; sid:200005246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-ncta.icu"; classtype:attempted-recon; sid:200005247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-neatu.icu"; classtype:attempted-recon; sid:200005248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-nrctu.icu"; classtype:attempted-recon; sid:200005249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-nsure.icu"; classtype:attempted-recon; sid:200005250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-nsya.icu"; classtype:attempted-recon; sid:200005251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-nszre.icu"; classtype:attempted-recon; sid:200005252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-nucra.icu"; classtype:attempted-recon; sid:200005253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-nuena.icu"; classtype:attempted-recon; sid:200005254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-nueoa.icu"; classtype:attempted-recon; sid:200005255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-reuct.icu"; classtype:attempted-recon; sid:200005256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-reuow.icu"; classtype:attempted-recon; sid:200005257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-rsacz.icu"; classtype:attempted-recon; sid:200005258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-searw.icu"; classtype:attempted-recon; sid:200005259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-seasw.icu"; classtype:attempted-recon; sid:200005260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-seurw.icu"; classtype:attempted-recon; sid:200005261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eakl-zeuzw.icu"; classtype:attempted-recon; sid:200005262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"earninboxcash.com"; classtype:attempted-recon; sid:200005263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"easybit.z4od.in"; classtype:attempted-recon; sid:200005264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"easyweb-be.firebaseapp.com"; classtype:attempted-recon; sid:200005265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"easyweb-be.web.app"; classtype:attempted-recon; sid:200005266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eautkoyprd.duckdns.org"; classtype:attempted-recon; sid:200005267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eaxcdgpjio.duckdns.org"; classtype:attempted-recon; sid:200005268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebaknrseua.duckdns.org"; classtype:attempted-recon; sid:200005269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebanking-ch3-ubs-a3ab0.firebaseapp.com"; classtype:attempted-recon; sid:200005270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebanking-ch3-ubs-a3ab0.web.app"; classtype:attempted-recon; sid:200005271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebanking.pacifico.repl.co"; classtype:attempted-recon; sid:200005272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebbwwmsivb.duckdns.org"; classtype:attempted-recon; sid:200005273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eblkwagzmn.duckdns.org"; classtype:attempted-recon; sid:200005274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebonynexus.net"; classtype:attempted-recon; sid:200005275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebook-cover-designer.de"; classtype:attempted-recon; sid:200005276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebotany.1bankidinamcede.repl.co"; classtype:attempted-recon; sid:200005277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebroo.gto1.repl.co"; classtype:attempted-recon; sid:200005278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebrou.soportes.repl.co"; classtype:attempted-recon; sid:200005279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebrou.zs2001.repl.co"; classtype:attempted-recon; sid:200005280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebroubankinguyu.bsnking.repl.co"; classtype:attempted-recon; sid:200005281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebrousfastsd.valenyalfon344.repl.co"; classtype:attempted-recon; sid:200005282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebrruo.5homebkg.repl.co"; classtype:attempted-recon; sid:200005283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebtpntfllm.duckdns.org"; classtype:attempted-recon; sid:200005284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecaltatxpf.duckdns.org"; classtype:attempted-recon; sid:200005285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecatyytsio.duckdns.org"; classtype:attempted-recon; sid:200005286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecfmgcnafe.duckdns.org"; classtype:attempted-recon; sid:200005287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eciarjgojm.duckdns.org"; classtype:attempted-recon; sid:200005288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eclass.johnrobertpowers.co.id"; classtype:attempted-recon; sid:200005289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eclassrc.in"; classtype:attempted-recon; sid:200005290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eclfahksqh.duckdns.org"; classtype:attempted-recon; sid:200005291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eclfxduzrv.duckdns.org"; classtype:attempted-recon; sid:200005292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecngx318.inmotionhosting.com"; classtype:attempted-recon; sid:200005293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecolight4u.ru"; classtype:attempted-recon; sid:200005294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"economic-poet-b50.notion.site"; classtype:attempted-recon; sid:200005295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecphtdnior.duckdns.org"; classtype:attempted-recon; sid:200005296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecpxigvifz.duckdns.org"; classtype:attempted-recon; sid:200005297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecs-india.com"; classtype:attempted-recon; sid:200005298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecslqvrysy.duckdns.org"; classtype:attempted-recon; sid:200005299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecumsjtmgk.duckdns.org"; classtype:attempted-recon; sid:200005300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecusutixpi.duckdns.org"; classtype:attempted-recon; sid:200005301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ecvykmuxsq.duckdns.org"; classtype:attempted-recon; sid:200005302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edar.com"; classtype:attempted-recon; sid:200005303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edazeljtsv.duckdns.org"; classtype:attempted-recon; sid:200005304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edbnxsfptq.duckdns.org"; classtype:attempted-recon; sid:200005305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edbrooks.graphics"; classtype:attempted-recon; sid:200005306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eddhzhisqm.duckdns.org"; classtype:attempted-recon; sid:200005307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edeydfexef.duckdns.org"; classtype:attempted-recon; sid:200005308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edf-103103.weeblysite.com"; classtype:attempted-recon; sid:200005309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edfgpbehnp.duckdns.org"; classtype:attempted-recon; sid:200005310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edfujvnvje.duckdns.org"; classtype:attempted-recon; sid:200005311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edgecryptood.net"; classtype:attempted-recon; sid:200005312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edgh1.square.site"; classtype:attempted-recon; sid:200005313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"editingthatworks.com"; classtype:attempted-recon; sid:200005314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edlldyfwzn.duckdns.org"; classtype:attempted-recon; sid:200005315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edments.edments.workers.dev"; classtype:attempted-recon; sid:200005316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edmjfcngvb.duckdns.org"; classtype:attempted-recon; sid:200005317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edmqpiscde.duckdns.org"; classtype:attempted-recon; sid:200005318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edocuments18032022app-1310252903.cos.na-ashburn.myqcloud.com"; classtype:attempted-recon; sid:200005319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edpwuzretb.duckdns.org"; classtype:attempted-recon; sid:200005320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edrvereeix.duckdns.org"; classtype:attempted-recon; sid:200005321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eduassignmentshelp.co.uk"; classtype:attempted-recon; sid:200005322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"educafacso.facso.cl"; classtype:attempted-recon; sid:200005323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"educaresatkhira.com"; classtype:attempted-recon; sid:200005324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edufarm.com.np"; classtype:attempted-recon; sid:200005325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"edzkvdaisq.duckdns.org"; classtype:attempted-recon; sid:200005326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ee-check.info"; classtype:attempted-recon; sid:200005327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eehinruxrc.duckdns.org"; classtype:attempted-recon; sid:200005328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eejlxsycvp.duckdns.org"; classtype:attempted-recon; sid:200005329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eemdme966.hyperphp.com"; classtype:attempted-recon; sid:200005330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eeqjgbwtyr.duckdns.org"; classtype:attempted-recon; sid:200005331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eeushgzctw.duckdns.org"; classtype:attempted-recon; sid:200005332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eeuyfwihmz.duckdns.org"; classtype:attempted-recon; sid:200005333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eewaaoavgg.duckdns.org"; classtype:attempted-recon; sid:200005334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eexfjeiprc.duckdns.org"; classtype:attempted-recon; sid:200005335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eexperiencgame.tech"; classtype:attempted-recon; sid:200005336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eezfmhigys.duckdns.org"; classtype:attempted-recon; sid:200005337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efad-sa.com"; classtype:attempted-recon; sid:200005338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efalodyzhu.duckdns.org"; classtype:attempted-recon; sid:200005339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efanuhvflb.duckdns.org"; classtype:attempted-recon; sid:200005340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efax25042022-webapps1-1311433986.cos.ap-chengdu.myqcloud.com"; classtype:attempted-recon; sid:200005341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efaxdocu5932-riverwestchurch.myportfolio.com"; classtype:attempted-recon; sid:200005342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efcjzafyef.duckdns.org"; classtype:attempted-recon; sid:200005343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efeccmneum.duckdns.org"; classtype:attempted-recon; sid:200005344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efedgrayyw.duckdns.org"; classtype:attempted-recon; sid:200005345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"effism.com"; classtype:attempted-recon; sid:200005346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efgehbjnv.weebly.com"; classtype:attempted-recon; sid:200005347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efgtavegdc.duckdns.org"; classtype:attempted-recon; sid:200005348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eft-0ert-6jhg-hert-g9fhw-rfhn-wehrnf-hjwn-efr4erf.obs.ap-southeast-1.myhuaweicloud.com"; classtype:attempted-recon; sid:200005349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efvhaeabzt.duckdns.org"; classtype:attempted-recon; sid:200005350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"efygnuxrky.duckdns.org"; classtype:attempted-recon; sid:200005351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egdb.ppipi.cn"; classtype:attempted-recon; sid:200005352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eglhtfqttm.duckdns.org"; classtype:attempted-recon; sid:200005353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egniol.co.in"; classtype:attempted-recon; sid:200005354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egnitekobh.duckdns.org"; classtype:attempted-recon; sid:200005355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egojvhkjef.duckdns.org"; classtype:attempted-recon; sid:200005356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egqidftzqz.duckdns.org"; classtype:attempted-recon; sid:200005357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egqknpielq.duckdns.org"; classtype:attempted-recon; sid:200005358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egqzzurllh.duckdns.org"; classtype:attempted-recon; sid:200005359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egrewfvdsk-cvw0ore-jfg09wrjh-gf0jwed-fj0dfdf.obs.af-south-1.myhuaweicloud.com"; classtype:attempted-recon; sid:200005360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egszvitoxm.duckdns.org"; classtype:attempted-recon; sid:200005361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egulmrwuoy.duckdns.org"; classtype:attempted-recon; sid:200005362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egvldjcfxo.duckdns.org"; classtype:attempted-recon; sid:200005363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egvqxawzkg.duckdns.org"; classtype:attempted-recon; sid:200005364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"egwgbuvnzc.duckdns.org"; classtype:attempted-recon; sid:200005365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehclkbulff.duckdns.org"; classtype:attempted-recon; sid:200005366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehehnvfitc.duckdns.org"; classtype:attempted-recon; sid:200005367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehgrceighr.duckdns.org"; classtype:attempted-recon; sid:200005368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehkbkazanm.duckdns.org"; classtype:attempted-recon; sid:200005369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehlcyjlcdh.duckdns.org"; classtype:attempted-recon; sid:200005370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehoukcnfhn.duckdns.org"; classtype:attempted-recon; sid:200005371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehqileberj.duckdns.org"; classtype:attempted-recon; sid:200005372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehrkljxbxv.duckdns.org"; classtype:attempted-recon; sid:200005373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehsaaswomen.com"; classtype:attempted-recon; sid:200005374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehurzcxicz.duckdns.org"; classtype:attempted-recon; sid:200005375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehvbfskbis.duckdns.org"; classtype:attempted-recon; sid:200005376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehxdfqjbed.duckdns.org"; classtype:attempted-recon; sid:200005377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ehyrfculpd.duckdns.org"; classtype:attempted-recon; sid:200005378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eidiyrcyaf.duckdns.org"; classtype:attempted-recon; sid:200005379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eigamtjnou.duckdns.org"; classtype:attempted-recon; sid:200005380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eihcqdcqsl.duckdns.org"; classtype:attempted-recon; sid:200005381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eireformingtldqwew345436dhhdrethgfdwreterewrtr.myportfolio.com"; classtype:attempted-recon; sid:200005382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eirokcjemw.duckdns.org"; classtype:attempted-recon; sid:200005383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eiutmcpbri.duckdns.org"; classtype:attempted-recon; sid:200005384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eizhang.cn"; classtype:attempted-recon; sid:200005385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejgmjvimdb.duckdns.org"; classtype:attempted-recon; sid:200005386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejhtsjfjcw.duckdns.org"; classtype:attempted-recon; sid:200005387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejkzxzdlib.duckdns.org"; classtype:attempted-recon; sid:200005388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejlhopqtyw.duckdns.org"; classtype:attempted-recon; sid:200005389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejodsvgbuj.duckdns.org"; classtype:attempted-recon; sid:200005390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejovypfybk.duckdns.org"; classtype:attempted-recon; sid:200005391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejrlatbdux.duckdns.org"; classtype:attempted-recon; sid:200005392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejuwboxjvy.duckdns.org"; classtype:attempted-recon; sid:200005393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejvyhdbhwz.duckdns.org"; classtype:attempted-recon; sid:200005394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ek1-eknnetnm.xyz"; classtype:attempted-recon; sid:200005395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ek1-nep.3utilities.com"; classtype:attempted-recon; sid:200005396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekcjwlhubf.duckdns.org"; classtype:attempted-recon; sid:200005397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekcupfnlxv.duckdns.org"; classtype:attempted-recon; sid:200005398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekhaan.com"; classtype:attempted-recon; sid:200005399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekhzjdkvel.duckdns.org"; classtype:attempted-recon; sid:200005400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eki-ncare.icu"; classtype:attempted-recon; sid:200005401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eki-net.1miiei.co"; classtype:attempted-recon; sid:200005402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eki-net.com.steway.shop"; classtype:attempted-recon; sid:200005403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eki-net.nftalpine.com"; classtype:attempted-recon; sid:200005404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eki-nuere.icu"; classtype:attempted-recon; sid:200005405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekii-nuare.icu"; classtype:attempted-recon; sid:200005406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekirhen.gq"; classtype:attempted-recon; sid:200005407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekjcinjvaf.duckdns.org"; classtype:attempted-recon; sid:200005408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekttvgkkyf.duckdns.org"; classtype:attempted-recon; sid:200005409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ekuftllyxs.duckdns.org"; classtype:attempted-recon; sid:200005410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elcjqrhlht.duckdns.org"; classtype:attempted-recon; sid:200005411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elckrnzyhs.duckdns.org"; classtype:attempted-recon; sid:200005412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eldbvvgrzn.duckdns.org"; classtype:attempted-recon; sid:200005413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"electrocoolhvacr.com"; classtype:attempted-recon; sid:200005414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elektroonline.pl"; classtype:attempted-recon; sid:200005415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elele9696.hyperphp.com"; classtype:attempted-recon; sid:200005416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elfatnianass.github.io"; classtype:attempted-recon; sid:200005417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elfinanciero.org"; classtype:attempted-recon; sid:200005418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elimperiodeldesamparo.com.ar"; classtype:attempted-recon; sid:200005419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elissaalvey.com"; classtype:attempted-recon; sid:200005420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elitedentalofsi.com"; classtype:attempted-recon; sid:200005421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eliteskullsmilsimcwb.com.br"; classtype:attempted-recon; sid:200005422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elladabkfh.duckdns.org"; classtype:attempted-recon; sid:200005423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elmec4you.it"; classtype:attempted-recon; sid:200005424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elnicaptcha12.ml"; classtype:attempted-recon; sid:200005425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elnrpcchfd.duckdns.org"; classtype:attempted-recon; sid:200005426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elomo.ro"; classtype:attempted-recon; sid:200005427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elsewedy-td.com"; classtype:attempted-recon; sid:200005428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eluhrevmtu.duckdns.org"; classtype:attempted-recon; sid:200005429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elvgzqueyg.duckdns.org"; classtype:attempted-recon; sid:200005430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"email302.com"; classtype:attempted-recon; sid:200005431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailassistance-sfr.ddns.net"; classtype:attempted-recon; sid:200005432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailonedriveab5c802a62d5173498c6fff3674005c8ab5c802a62d5173498.newonemail2.workers.dev"; classtype:attempted-recon; sid:200005433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailservices-webprovide-41a6.wemovetesting.workers.dev"; classtype:attempted-recon; sid:200005434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailsettings.webflow.io"; classtype:attempted-recon; sid:200005435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailverificationupdate39.godaddysites.com"; classtype:attempted-recon; sid:200005436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailverificationupdate82.godaddysites.com"; classtype:attempted-recon; sid:200005437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailverificationupdate9.godaddysites.com"; classtype:attempted-recon; sid:200005438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailwebaccess.co.uk"; classtype:attempted-recon; sid:200005439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emconti.com"; classtype:attempted-recon; sid:200005440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emcwyqdehl.duckdns.org"; classtype:attempted-recon; sid:200005441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emdlbpxczj.duckdns.org"; classtype:attempted-recon; sid:200005442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emfossfhgk.duckdns.org"; classtype:attempted-recon; sid:200005443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emhsrtzons.duckdns.org"; classtype:attempted-recon; sid:200005444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eminengalicia.iniciositioweb.repl.co"; classtype:attempted-recon; sid:200005445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emissionebp-card.com"; classtype:attempted-recon; sid:200005446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emissionebpcard.com"; classtype:attempted-recon; sid:200005447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emissionebprcard.com"; classtype:attempted-recon; sid:200005448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emissionecarta.com"; classtype:attempted-recon; sid:200005449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emissionepay.com"; classtype:attempted-recon; sid:200005450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emlink.me"; classtype:attempted-recon; sid:200005451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emmemd99985.hyperphp.com"; classtype:attempted-recon; sid:200005452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emmgdfenhg.duckdns.org"; classtype:attempted-recon; sid:200005453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"employeecenters.com"; classtype:attempted-recon; sid:200005454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"employees.momentumgrps.workers.dev"; classtype:attempted-recon; sid:200005455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"empresarialsimsd.sytes.net"; classtype:attempted-recon; sid:200005456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"empty-paper-6486.on.fleek.co"; classtype:attempted-recon; sid:200005457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"empty-rice-4c1a.brian2495.workers.dev"; classtype:attempted-recon; sid:200005458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"empty-river-9729.qm4e2oon.workers.dev"; classtype:attempted-recon; sid:200005459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"empty-silence-fcc4.dfirst8877.workers.dev"; classtype:attempted-recon; sid:200005460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emtlstexzs.duckdns.org"; classtype:attempted-recon; sid:200005461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emunufgnvb.duckdns.org"; classtype:attempted-recon; sid:200005462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emxpiaiexm.duckdns.org"; classtype:attempted-recon; sid:200005463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emzafbbodq.duckdns.org"; classtype:attempted-recon; sid:200005464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"en.kprfn.workers.dev"; classtype:attempted-recon; sid:200005465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"en.livecosystem.com"; classtype:attempted-recon; sid:200005466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"en.vivuni.workers.dev"; classtype:attempted-recon; sid:200005467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enabyrdayw.duckdns.org"; classtype:attempted-recon; sid:200005468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enbolivia.com"; classtype:attempted-recon; sid:200005469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enchanted-efficient-cockatoo.glitch.me"; classtype:attempted-recon; sid:200005470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"encryptaiu.com"; classtype:attempted-recon; sid:200005471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"encryptbtck.com"; classtype:attempted-recon; sid:200005472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"encryptdrive.booogle.net"; classtype:attempted-recon; sid:200005473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"encrypteddocurnent.myportfolio.com"; classtype:attempted-recon; sid:200005474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"encrypthkpd.com"; classtype:attempted-recon; sid:200005475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"encryptodapps.pages.dev"; classtype:attempted-recon; sid:200005476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"encurtador.dev"; classtype:attempted-recon; sid:200005477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"energoservice.ge"; classtype:attempted-recon; sid:200005478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"energyshop-bitflyer.blogspot.com"; classtype:attempted-recon; sid:200005479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enfin-a457d.firebaseapp.com"; classtype:attempted-recon; sid:200005480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enfin-a457d.web.app"; classtype:attempted-recon; sid:200005481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enfrlbvkac.duckdns.org"; classtype:attempted-recon; sid:200005482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eng-transportation-document.myportfolio.com"; classtype:attempted-recon; sid:200005483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"engcamp.org"; classtype:attempted-recon; sid:200005484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"engidagraphics.com"; classtype:attempted-recon; sid:200005485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enhcapqslr.duckdns.org"; classtype:attempted-recon; sid:200005486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enjojmclco.duckdns.org"; classtype:attempted-recon; sid:200005487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enjoyapartments.com"; classtype:attempted-recon; sid:200005488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enkcfrkoqr.duckdns.org"; classtype:attempted-recon; sid:200005489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enmdcqetgw.duckdns.org"; classtype:attempted-recon; sid:200005490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enmodofeliz.com"; classtype:attempted-recon; sid:200005491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enoisdf.hyperphp.com"; classtype:attempted-recon; sid:200005492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"entbqnk.firebaseapp.com"; classtype:attempted-recon; sid:200005493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"entbqnk.web.app"; classtype:attempted-recon; sid:200005494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enuywdsaff.duckdns.org"; classtype:attempted-recon; sid:200005495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enxoeljxke.duckdns.org"; classtype:attempted-recon; sid:200005496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eoaekzmwtn.duckdns.org"; classtype:attempted-recon; sid:200005497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eoffice.bulungan.go.id"; classtype:attempted-recon; sid:200005498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eohnjoxurd.duckdns.org"; classtype:attempted-recon; sid:200005499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eoiksfzkyj.duckdns.org"; classtype:attempted-recon; sid:200005500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eomocsxbop.duckdns.org"; classtype:attempted-recon; sid:200005501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eonbdqhpwm.duckdns.org"; classtype:attempted-recon; sid:200005502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eoqhlidkcw.duckdns.org"; classtype:attempted-recon; sid:200005503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eoqrgeoiqn.duckdns.org"; classtype:attempted-recon; sid:200005504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eoslvyayvy.duckdns.org"; classtype:attempted-recon; sid:200005505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eovvzjoenm.duckdns.org"; classtype:attempted-recon; sid:200005506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eowlxxkeve.duckdns.org"; classtype:attempted-recon; sid:200005507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ep-2hv.pages.dev"; classtype:attempted-recon; sid:200005508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epazbhmkoj.duckdns.org"; classtype:attempted-recon; sid:200005509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epewdvdkqz.duckdns.org"; classtype:attempted-recon; sid:200005510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epihdcwksf.duckdns.org"; classtype:attempted-recon; sid:200005511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epizyszsiy.duckdns.org"; classtype:attempted-recon; sid:200005512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epjwttgelh.duckdns.org"; classtype:attempted-recon; sid:200005513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epllhtemve.duckdns.org"; classtype:attempted-recon; sid:200005514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epochfinancialus.com"; classtype:attempted-recon; sid:200005515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epoxqzauzy.duckdns.org"; classtype:attempted-recon; sid:200005516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epozikmzih.duckdns.org"; classtype:attempted-recon; sid:200005517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epqjcyqtvw.duckdns.org"; classtype:attempted-recon; sid:200005518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epqteeialy.duckdns.org"; classtype:attempted-recon; sid:200005519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epqzvlkqct.duckdns.org"; classtype:attempted-recon; sid:200005520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eptqoqfeze.duckdns.org"; classtype:attempted-recon; sid:200005521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epurndpzjq.duckdns.org"; classtype:attempted-recon; sid:200005522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epwrnmfivv.duckdns.org"; classtype:attempted-recon; sid:200005523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"epxpijajgh.duckdns.org"; classtype:attempted-recon; sid:200005524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eqaekzyoyw.duckdns.org"; classtype:attempted-recon; sid:200005525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eqjgppjnhi.duckdns.org"; classtype:attempted-recon; sid:200005526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eqovzgogjw.duckdns.org"; classtype:attempted-recon; sid:200005527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eqrhlslslv.duckdns.org"; classtype:attempted-recon; sid:200005528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"equalivet.org.ph"; classtype:attempted-recon; sid:200005529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"equipotecnicosoportedeerror.gaaliciierar.repl.co"; classtype:attempted-recon; sid:200005530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"equired.xr0e13.cn"; classtype:attempted-recon; sid:200005531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eqvcfzvnxw.duckdns.org"; classtype:attempted-recon; sid:200005532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eqximyyppm.duckdns.org"; classtype:attempted-recon; sid:200005533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eqywmbthcv.duckdns.org"; classtype:attempted-recon; sid:200005534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"er34jkgdla.club"; classtype:attempted-recon; sid:200005535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eramixpnab.duckdns.org"; classtype:attempted-recon; sid:200005536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erasff.hyperphp.com"; classtype:attempted-recon; sid:200005537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erc.defi-coin-mining.top"; classtype:attempted-recon; sid:200005538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erc20-coin.xyz"; classtype:attempted-recon; sid:200005539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ercdkosylt.duckdns.org"; classtype:attempted-recon; sid:200005540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eresnuestroganador.liveblog365.com"; classtype:attempted-recon; sid:200005541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eresnuestroganadorr.liveblog365.com"; classtype:attempted-recon; sid:200005542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ergambrummetre23.hostfree.pw"; classtype:attempted-recon; sid:200005543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ergusisialabie.co.vu"; classtype:attempted-recon; sid:200005544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erjhhntwtu.duckdns.org"; classtype:attempted-recon; sid:200005545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erl.com.de"; classtype:attempted-recon; sid:200005546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erlgh34klhklfg.club"; classtype:attempted-recon; sid:200005547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erqmjseyms.duckdns.org"; classtype:attempted-recon; sid:200005548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erqxnbyxjl.duckdns.org"; classtype:attempted-recon; sid:200005549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"errngbhpuh.duckdns.org"; classtype:attempted-recon; sid:200005550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"error.de.in.ingreso.nalumosovocationalinstitute.com"; classtype:attempted-recon; sid:200005551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"errxcghrza.duckdns.org"; classtype:attempted-recon; sid:200005552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ershamshad.github.io"; classtype:attempted-recon; sid:200005553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ervklzdcyv.duckdns.org"; classtype:attempted-recon; sid:200005554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erwkvyykuo.duckdns.org"; classtype:attempted-recon; sid:200005555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"es-sign-caixezyjagu-bb510e.ingress-erytho.ewp.live"; classtype:attempted-recon; sid:200005556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"escolar.family"; classtype:attempted-recon; sid:200005557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esdfg-108259.square.site"; classtype:attempted-recon; sid:200005558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eseowncsyj.duckdns.org"; classtype:attempted-recon; sid:200005559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esfdesentakip.com"; classtype:attempted-recon; sid:200005560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esfuqxulig.duckdns.org"; classtype:attempted-recon; sid:200005561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esig.co.kr"; classtype:attempted-recon; sid:200005562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esonlinesantanderspain.com.swtest.ru"; classtype:attempted-recon; sid:200005563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espace-client-facture.com"; classtype:attempted-recon; sid:200005564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espace-clientameli.fr"; classtype:attempted-recon; sid:200005565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espace-ma-vitale.com"; classtype:attempted-recon; sid:200005566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espace-securise.com"; classtype:attempted-recon; sid:200005567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espace-sfr.ddns.net"; classtype:attempted-recon; sid:200005568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espacevitale-ameli.com"; classtype:attempted-recon; sid:200005569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"espacevitale-cpam.com"; classtype:attempted-recon; sid:200005570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esperanzabravo.com"; classtype:attempted-recon; sid:200005571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"essdomijix.duckdns.org"; classtype:attempted-recon; sid:200005572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esszoqb.cn"; classtype:attempted-recon; sid:200005573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"estado-personas.website"; classtype:attempted-recon; sid:200005574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"estiempodeirpomas-agostope.77monkeys.com"; classtype:attempted-recon; sid:200005575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"estiempodeirpormas-ibkpenet.homebusinesses123.com"; classtype:attempted-recon; sid:200005576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"estorefixtures.net"; classtype:attempted-recon; sid:200005577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etac.co.jp-urasqun.armetaverse.club"; classtype:attempted-recon; sid:200005578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etapoena30.pages.dev"; classtype:attempted-recon; sid:200005579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etatrecharge.com"; classtype:attempted-recon; sid:200005580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etbjrecfyusrzkyncra-numzdpkoqlknozcrnce-n-rjcojwbjpltynatlsq.glitch.me"; classtype:attempted-recon; sid:200005581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etc-mieisais.ptxhge.cn"; classtype:attempted-recon; sid:200005582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etc01-jp.ml"; classtype:attempted-recon; sid:200005583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etcajkcs.xyz"; classtype:attempted-recon; sid:200005584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etcdt.etc.jp-qundasf.gdjtny.com.cn"; classtype:attempted-recon; sid:200005585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etgqbecxgf.duckdns.org"; classtype:attempted-recon; sid:200005586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eth-bit.life"; classtype:attempted-recon; sid:200005587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eth-mining016.com"; classtype:attempted-recon; sid:200005588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eth-pos.cc"; classtype:attempted-recon; sid:200005589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eth-wintermute.net"; classtype:attempted-recon; sid:200005590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethbw.net"; classtype:attempted-recon; sid:200005591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethdw.top"; classtype:attempted-recon; sid:200005592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethereum-16miningarea.com"; classtype:attempted-recon; sid:200005593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethereum-18miningarea.com"; classtype:attempted-recon; sid:200005594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethereum2pool.live"; classtype:attempted-recon; sid:200005595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethers-airdrops.io"; classtype:attempted-recon; sid:200005596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethersairdrops.io"; classtype:attempted-recon; sid:200005597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethhex.com"; classtype:attempted-recon; sid:200005598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethjq.xyz"; classtype:attempted-recon; sid:200005599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethjs.xyz"; classtype:attempted-recon; sid:200005600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethju.xyz"; classtype:attempted-recon; sid:200005601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethme.app"; classtype:attempted-recon; sid:200005602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethnictrendz.com"; classtype:attempted-recon; sid:200005603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethnldfbgp.duckdns.org"; classtype:attempted-recon; sid:200005604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethqz.top"; classtype:attempted-recon; sid:200005605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etloheszkl.duckdns.org"; classtype:attempted-recon; sid:200005606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etlte.com"; classtype:attempted-recon; sid:200005607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etnpclsynm.duckdns.org"; classtype:attempted-recon; sid:200005608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etqekhlnmx.duckdns.org"; classtype:attempted-recon; sid:200005609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etsodlfxuk.duckdns.org"; classtype:attempted-recon; sid:200005610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ettoyasqd.hyperphp.com"; classtype:attempted-recon; sid:200005611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etuyfjsfnu.duckdns.org"; classtype:attempted-recon; sid:200005612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etvdekoazh.duckdns.org"; classtype:attempted-recon; sid:200005613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etvdtvwtpe.duckdns.org"; classtype:attempted-recon; sid:200005614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"etwildhwtk.duckdns.org"; classtype:attempted-recon; sid:200005615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eubpgdhyut.duckdns.org"; classtype:attempted-recon; sid:200005616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eufbjymnmq.duckdns.org"; classtype:attempted-recon; sid:200005617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eugnerally-wixsite-com.filesusr.com"; classtype:attempted-recon; sid:200005618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eugsejliet.duckdns.org"; classtype:attempted-recon; sid:200005619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eulxugspof.duckdns.org"; classtype:attempted-recon; sid:200005620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eumcyckapo.duckdns.org"; classtype:attempted-recon; sid:200005621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eunnostpwx.duckdns.org"; classtype:attempted-recon; sid:200005622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eupbucajqc.duckdns.org"; classtype:attempted-recon; sid:200005623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"euppztmupy.duckdns.org"; classtype:attempted-recon; sid:200005624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eurobengal.com"; classtype:attempted-recon; sid:200005625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eutzlpqejl.duckdns.org"; classtype:attempted-recon; sid:200005626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"euvjggfbjl.duckdns.org"; classtype:attempted-recon; sid:200005627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"euzlhkgpwi.duckdns.org"; classtype:attempted-recon; sid:200005628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ev3db3.webwave.dev"; classtype:attempted-recon; sid:200005629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evbbagdsfw.duckdns.org"; classtype:attempted-recon; sid:200005630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eve-09rtgbv-hjenrtp9ngbonmvb9edt-0g-0eng.obs.na-mexico-1.myhuaweicloud.com"; classtype:attempted-recon; sid:200005631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"event-domino.cf"; classtype:attempted-recon; sid:200005632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"event-domino.ga"; classtype:attempted-recon; sid:200005633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"event-domino.tk"; classtype:attempted-recon; sid:200005634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eventchip2b.com"; classtype:attempted-recon; sid:200005635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eventkoindomino.com"; classtype:attempted-recon; sid:200005636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"everestmotors.com.np"; classtype:attempted-recon; sid:200005637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eveylxrhew.duckdns.org"; classtype:attempted-recon; sid:200005638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evg-tshop.com"; classtype:attempted-recon; sid:200005639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evmbwnpgmm.duckdns.org"; classtype:attempted-recon; sid:200005640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evnexreqgm.duckdns.org"; classtype:attempted-recon; sid:200005641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evolbithman.web.app"; classtype:attempted-recon; sid:200005642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evolutionsny.com"; classtype:attempted-recon; sid:200005643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evri-uk-package.firebaseapp.com"; classtype:attempted-recon; sid:200005644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evri-uk-package.web.app"; classtype:attempted-recon; sid:200005645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evrxcrhsue.duckdns.org"; classtype:attempted-recon; sid:200005646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evvnpbewxk.duckdns.org"; classtype:attempted-recon; sid:200005647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evwidcdbgi.duckdns.org"; classtype:attempted-recon; sid:200005648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evxhf.gssc1hc.cn"; classtype:attempted-recon; sid:200005649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evxigqaole.duckdns.org"; classtype:attempted-recon; sid:200005650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evziwxutwk.duckdns.org"; classtype:attempted-recon; sid:200005651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ewdvdyjcds.duckdns.org"; classtype:attempted-recon; sid:200005652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ewfzmlflxo.duckdns.org"; classtype:attempted-recon; sid:200005653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ewjdcvmubl.duckdns.org"; classtype:attempted-recon; sid:200005654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ewjptkwcfh.duckdns.org"; classtype:attempted-recon; sid:200005655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ewovstkldx.duckdns.org"; classtype:attempted-recon; sid:200005656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ewplay.se"; classtype:attempted-recon; sid:200005657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ewxyfhbxuw.duckdns.org"; classtype:attempted-recon; sid:200005658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exacgmykaa.duckdns.org"; classtype:attempted-recon; sid:200005659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"excelmanagementmali.com"; classtype:attempted-recon; sid:200005660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exch-093data0303.firebaseapp.com"; classtype:attempted-recon; sid:200005661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exch-093data0303.web.app"; classtype:attempted-recon; sid:200005662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exchange24x7.com"; classtype:attempted-recon; sid:200005663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exchange4free.com"; classtype:attempted-recon; sid:200005664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exchangebit.ru"; classtype:attempted-recon; sid:200005665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"excited00eeppinkmath3984.janssing.repl.co"; classtype:attempted-recon; sid:200005666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exdqmbnmuw.duckdns.org"; classtype:attempted-recon; sid:200005667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exdus-wallet.siterubix.com"; classtype:attempted-recon; sid:200005668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exfejmvbcs.duckdns.org"; classtype:attempted-recon; sid:200005669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exito-validation.260mb.net"; classtype:attempted-recon; sid:200005670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exitoapptuya.liveblog365.com"; classtype:attempted-recon; sid:200005671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exitoasesoresalcliente.liveblog365.com"; classtype:attempted-recon; sid:200005672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exitopaytuya.hostfree.pw"; classtype:attempted-recon; sid:200005673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exitotuyapayfmw.hostfree.pw"; classtype:attempted-recon; sid:200005674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exitoytuya.com"; classtype:attempted-recon; sid:200005675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exitsecutt.260mb.net"; classtype:attempted-recon; sid:200005676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exittopagosapp.hostfree.pw"; classtype:attempted-recon; sid:200005677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodos-wallett.com"; classtype:attempted-recon; sid:200005678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodus-phrase.com"; classtype:attempted-recon; sid:200005679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodus-wallet-us.siterubix.com"; classtype:attempted-recon; sid:200005680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodus-wallet.yolasite.com"; classtype:attempted-recon; sid:200005681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodus.com-wallets.com"; classtype:attempted-recon; sid:200005682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodus.com.download-wallet.arcticasfalt.com"; classtype:attempted-recon; sid:200005683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodus0.com"; classtype:attempted-recon; sid:200005684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodusswallet.siterubix.com"; classtype:attempted-recon; sid:200005685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exodusweb-pro.com"; classtype:attempted-recon; sid:200005686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exoxdsduds-walle.azurewebsites.net"; classtype:attempted-recon; sid:200005687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"expediapartnercentral.solemarnoronha.com.br"; classtype:attempted-recon; sid:200005688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"explorenewcreativeterritory.my.id"; classtype:attempted-recon; sid:200005689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"expoglobal.uk"; classtype:attempted-recon; sid:200005690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"expohogarcix.com"; classtype:attempted-recon; sid:200005691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"expressil-15323.firebaseapp.com"; classtype:attempted-recon; sid:200005692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"expressil-15323.web.app"; classtype:attempted-recon; sid:200005693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"expressil-a749b.firebaseapp.com"; classtype:attempted-recon; sid:200005694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"expressil-a749b.web.app"; classtype:attempted-recon; sid:200005695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exrjiqdhbn.duckdns.org"; classtype:attempted-recon; sid:200005696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exscdrrpofb.co.vu"; classtype:attempted-recon; sid:200005697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"extension-metamask.duia.us"; classtype:attempted-recon; sid:200005698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"extracashinterbankperu.com"; classtype:attempted-recon; sid:200005699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"extracloud.com.au"; classtype:attempted-recon; sid:200005700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"extractionfileweb425.ml"; classtype:attempted-recon; sid:200005701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"extrape-2022agosto.leslieesparza.com"; classtype:attempted-recon; sid:200005702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exwjbdsrfj.duckdns.org"; classtype:attempted-recon; sid:200005703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exxodus-wallet.siterubix.com"; classtype:attempted-recon; sid:200005704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exyiriuvot.duckdns.org"; classtype:attempted-recon; sid:200005705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyebayzulm.duckdns.org"; classtype:attempted-recon; sid:200005706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyebeyasvda.liveblog365.com"; classtype:attempted-recon; sid:200005707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eykmwvedgy.duckdns.org"; classtype:attempted-recon; sid:200005708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyuwptzoik.duckdns.org"; classtype:attempted-recon; sid:200005709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyvxqintki.duckdns.org"; classtype:attempted-recon; sid:200005710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ez.2ltza.serenalebbolo.it"; classtype:attempted-recon; sid:200005711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezblox.site"; classtype:attempted-recon; sid:200005712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezgsefmyrb.duckdns.org"; classtype:attempted-recon; sid:200005713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezonnuejhv.duckdns.org"; classtype:attempted-recon; sid:200005714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezrhr.jffly42.cn"; classtype:attempted-recon; sid:200005715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezrwveouys.duckdns.org"; classtype:attempted-recon; sid:200005716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezssausage.com"; classtype:attempted-recon; sid:200005717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eztfoludoq.duckdns.org"; classtype:attempted-recon; sid:200005718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezu-nft.com"; classtype:attempted-recon; sid:200005719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ezvsdkkasw.duckdns.org"; classtype:attempted-recon; sid:200005720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"f00228cb.sibforms.com"; classtype:attempted-recon; sid:200005721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"f2ax5-jqaaa-aaaad-qcutq-cai.ic0.app"; classtype:attempted-recon; sid:200005722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"f2pools.cc"; classtype:attempted-recon; sid:200005723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"f7b8870cd2801tau.hostfree.pw"; classtype:attempted-recon; sid:200005724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"f8put2prbcr1hfd.webcindario.com"; classtype:attempted-recon; sid:200005725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"f9w1lned0ruqblxi6jahwotak.filesusr.com"; classtype:attempted-recon; sid:200005726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fa-tu-ra-luiza-y.com"; classtype:attempted-recon; sid:200005727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-accts.pages-recovery.workers.dev"; classtype:attempted-recon; sid:200005728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-1001457954124101.web.app"; classtype:attempted-recon; sid:200005729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-10014887759101.firebaseapp.com"; classtype:attempted-recon; sid:200005730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-10014887759101.web.app"; classtype:attempted-recon; sid:200005731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-1001745724578101.firebaseapp.com"; classtype:attempted-recon; sid:200005732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-1001745724578101.web.app"; classtype:attempted-recon; sid:200005733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-200218456274202.web.app"; classtype:attempted-recon; sid:200005734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-20024145785202.firebaseapp.com"; classtype:attempted-recon; sid:200005735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-20024145785202.web.app"; classtype:attempted-recon; sid:200005736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-3003428746303.firebaseapp.com"; classtype:attempted-recon; sid:200005737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-3003428746303.web.app"; classtype:attempted-recon; sid:200005738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-300345768424303.firebaseapp.com"; classtype:attempted-recon; sid:200005739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-300345768424303.web.app"; classtype:attempted-recon; sid:200005740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-50051797424505.firebaseapp.com"; classtype:attempted-recon; sid:200005741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-50051797424505.web.app"; classtype:attempted-recon; sid:200005742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-50054245178505.firebaseapp.com"; classtype:attempted-recon; sid:200005743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-50054245178505.web.app"; classtype:attempted-recon; sid:200005744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-50054794210505.web.app"; classtype:attempted-recon; sid:200005745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-600645897241606.firebaseapp.com"; classtype:attempted-recon; sid:200005746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-600645897241606.web.app"; classtype:attempted-recon; sid:200005747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-7007124360521707.firebaseapp.com"; classtype:attempted-recon; sid:200005748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-7007124360521707.web.app"; classtype:attempted-recon; sid:200005749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-7007124495707.firebaseapp.com"; classtype:attempted-recon; sid:200005750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-70074128541707.firebaseapp.com"; classtype:attempted-recon; sid:200005751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-help-70074128541707.web.app"; classtype:attempted-recon; sid:200005752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta1.tk"; classtype:attempted-recon; sid:200005753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta10.tk"; classtype:attempted-recon; sid:200005754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta106.tk"; classtype:attempted-recon; sid:200005755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta112.tk"; classtype:attempted-recon; sid:200005756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta120.tk"; classtype:attempted-recon; sid:200005757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta125.tk"; classtype:attempted-recon; sid:200005758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta126.tk"; classtype:attempted-recon; sid:200005759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta128.tk"; classtype:attempted-recon; sid:200005760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta13.tk"; classtype:attempted-recon; sid:200005761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta132.tk"; classtype:attempted-recon; sid:200005762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta134.tk"; classtype:attempted-recon; sid:200005763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta138.tk"; classtype:attempted-recon; sid:200005764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta14.tk"; classtype:attempted-recon; sid:200005765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta150.tk"; classtype:attempted-recon; sid:200005766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta158.tk"; classtype:attempted-recon; sid:200005767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta16.tk"; classtype:attempted-recon; sid:200005768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta160.tk"; classtype:attempted-recon; sid:200005769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta171.tk"; classtype:attempted-recon; sid:200005770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta177.tk"; classtype:attempted-recon; sid:200005771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta179.tk"; classtype:attempted-recon; sid:200005772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta18.tk"; classtype:attempted-recon; sid:200005773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta20.tk"; classtype:attempted-recon; sid:200005774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta235.tk"; classtype:attempted-recon; sid:200005775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta241.tk"; classtype:attempted-recon; sid:200005776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta246.tk"; classtype:attempted-recon; sid:200005777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta248.tk"; classtype:attempted-recon; sid:200005778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta25.tk"; classtype:attempted-recon; sid:200005779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta252.tk"; classtype:attempted-recon; sid:200005780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta255.tk"; classtype:attempted-recon; sid:200005781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta262.tk"; classtype:attempted-recon; sid:200005782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta266.tk"; classtype:attempted-recon; sid:200005783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta268.tk"; classtype:attempted-recon; sid:200005784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta27.tk"; classtype:attempted-recon; sid:200005785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta270.tk"; classtype:attempted-recon; sid:200005786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta271.tk"; classtype:attempted-recon; sid:200005787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta272.tk"; classtype:attempted-recon; sid:200005788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta279.tk"; classtype:attempted-recon; sid:200005789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta287.tk"; classtype:attempted-recon; sid:200005790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta288.tk"; classtype:attempted-recon; sid:200005791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta290.tk"; classtype:attempted-recon; sid:200005792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta294.tk"; classtype:attempted-recon; sid:200005793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta296.tk"; classtype:attempted-recon; sid:200005794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta30.tk"; classtype:attempted-recon; sid:200005795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta301.tk"; classtype:attempted-recon; sid:200005796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta302.tk"; classtype:attempted-recon; sid:200005797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta303.tk"; classtype:attempted-recon; sid:200005798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta305.tk"; classtype:attempted-recon; sid:200005799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta31.tk"; classtype:attempted-recon; sid:200005800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta310.tk"; classtype:attempted-recon; sid:200005801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta311.tk"; classtype:attempted-recon; sid:200005802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta33.tk"; classtype:attempted-recon; sid:200005803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta34.tk"; classtype:attempted-recon; sid:200005804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta35.tk"; classtype:attempted-recon; sid:200005805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta36.tk"; classtype:attempted-recon; sid:200005806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta40.tk"; classtype:attempted-recon; sid:200005807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta50.tk"; classtype:attempted-recon; sid:200005808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta52.tk"; classtype:attempted-recon; sid:200005809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta53.tk"; classtype:attempted-recon; sid:200005810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta55.tk"; classtype:attempted-recon; sid:200005811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta56.tk"; classtype:attempted-recon; sid:200005812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta57.tk"; classtype:attempted-recon; sid:200005813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta60.tk"; classtype:attempted-recon; sid:200005814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta62.tk"; classtype:attempted-recon; sid:200005815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta64.tk"; classtype:attempted-recon; sid:200005816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta7.tk"; classtype:attempted-recon; sid:200005817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta72.tk"; classtype:attempted-recon; sid:200005818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta74.tk"; classtype:attempted-recon; sid:200005819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta76.tk"; classtype:attempted-recon; sid:200005820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta77.tk"; classtype:attempted-recon; sid:200005821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta80.tk"; classtype:attempted-recon; sid:200005822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta82.tk"; classtype:attempted-recon; sid:200005823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta89.tk"; classtype:attempted-recon; sid:200005824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta9.tk"; classtype:attempted-recon; sid:200005825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta94.tk"; classtype:attempted-recon; sid:200005826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta96.tk"; classtype:attempted-recon; sid:200005827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-verifyissue-meta97.tk"; classtype:attempted-recon; sid:200005828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook.help-metadeskappeal.com"; classtype:attempted-recon; sid:200005829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facenboollogin.blogspot.com"; classtype:attempted-recon; sid:200005830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facetime-com.000webhostapp.com"; classtype:attempted-recon; sid:200005831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facilyrapidohastutramite.notasdeinteres.click"; classtype:attempted-recon; sid:200005832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facjxzemia.duckdns.org"; classtype:attempted-recon; sid:200005833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facobook.host20.uk"; classtype:attempted-recon; sid:200005834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"factgrading.com"; classtype:attempted-recon; sid:200005835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"factm30.com"; classtype:attempted-recon; sid:200005836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fafugoiftb.duckdns.org"; classtype:attempted-recon; sid:200005837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faihownhiu.duckdns.org"; classtype:attempted-recon; sid:200005838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faioomfmrg.duckdns.org"; classtype:attempted-recon; sid:200005839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faithfamilyintl.org"; classtype:attempted-recon; sid:200005840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faizankhan0408.github.io"; classtype:attempted-recon; sid:200005841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fajafvpjmc.duckdns.org"; classtype:attempted-recon; sid:200005842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faleballe.com"; classtype:attempted-recon; sid:200005843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"falling-brook-b2a0.althaf30.workers.dev"; classtype:attempted-recon; sid:200005844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"falling-disk.1zofvddx.workers.dev"; classtype:attempted-recon; sid:200005845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"falling-resonance-9f91.westernroad.workers.dev"; classtype:attempted-recon; sid:200005846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"falniienrw.duckdns.org"; classtype:attempted-recon; sid:200005847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"falspomat.lastfotud.repl.co"; classtype:attempted-recon; sid:200005848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"falvk54lkhvfl.club"; classtype:attempted-recon; sid:200005849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"famjevhxbo.duckdns.org"; classtype:attempted-recon; sid:200005850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"famsuzsaln.duckdns.org"; classtype:attempted-recon; sid:200005851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fancy-pine-7418.ach7481982.workers.dev"; classtype:attempted-recon; sid:200005852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fancy-rain-22bf.vakagew948.workers.dev"; classtype:attempted-recon; sid:200005853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fancy.bibirgadangdicipok.workers.dev"; classtype:attempted-recon; sid:200005854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fancyexpeditions.com"; classtype:attempted-recon; sid:200005855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fancysassyvogue.com"; classtype:attempted-recon; sid:200005856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faqesslncf.duckdns.org"; classtype:attempted-recon; sid:200005857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"farconavenue.com"; classtype:attempted-recon; sid:200005858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faroltiweb.com.br"; classtype:attempted-recon; sid:200005859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faruq.boxmode.io"; classtype:attempted-recon; sid:200005860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fasbrmbfmr.duckdns.org"; classtype:attempted-recon; sid:200005861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fasessfotu.duckdns.org"; classtype:attempted-recon; sid:200005862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fashionrc.com"; classtype:attempted-recon; sid:200005863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fashshein.com"; classtype:attempted-recon; sid:200005864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fast-onedrive.yuanhaha.workers.dev"; classtype:attempted-recon; sid:200005865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fast.for-orders.com"; classtype:attempted-recon; sid:200005866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fastrectifier.com"; classtype:attempted-recon; sid:200005867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fatura.life"; classtype:attempted-recon; sid:200005868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faturafechadadown.xyz"; classtype:attempted-recon; sid:200005869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faturalivebrasil.xyz"; classtype:attempted-recon; sid:200005870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faturaluiza-hoje-7kzx.com"; classtype:attempted-recon; sid:200005871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fauci.xyz"; classtype:attempted-recon; sid:200005872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"favedgyyxq.duckdns.org"; classtype:attempted-recon; sid:200005873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fawltxfkac.duckdns.org"; classtype:attempted-recon; sid:200005874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fax-doc25042022webfax-1311433986.cos.ap-nanjing.myqcloud.com"; classtype:attempted-recon; sid:200005875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fax07032022doc1-1310019602.cos.na-siliconvalley.myqcloud.com"; classtype:attempted-recon; sid:200005876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fax07042022fax498apps58-1310726006.cos.ap-seoul.myqcloud.com"; classtype:attempted-recon; sid:200005877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fazfuyskpm.duckdns.org"; classtype:attempted-recon; sid:200005878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fazkeokhrr.duckdns.org"; classtype:attempted-recon; sid:200005879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fb-case-id-28031803-fcdc-48af.web.app"; classtype:attempted-recon; sid:200005880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fb-community-standards-344255.firebaseapp.com"; classtype:attempted-recon; sid:200005881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fb-community-standards-344255.web.app"; classtype:attempted-recon; sid:200005882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fb-pages.proteksion-help.workers.dev"; classtype:attempted-recon; sid:200005883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fb1010001.gq"; classtype:attempted-recon; sid:200005884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fb7927.bget.ru"; classtype:attempted-recon; sid:200005885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbansrbmlk.duckdns.org"; classtype:attempted-recon; sid:200005886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbdf.jdzszyy.cn"; classtype:attempted-recon; sid:200005887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbkbboayen.duckdns.org"; classtype:attempted-recon; sid:200005888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbnjkaxuiq.duckdns.org"; classtype:attempted-recon; sid:200005889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbnvqfirhr.duckdns.org"; classtype:attempted-recon; sid:200005890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbookhelpsupport.firebaseapp.com"; classtype:attempted-recon; sid:200005891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbookhelpsupport.web.app"; classtype:attempted-recon; sid:200005892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbpage-id259191.web.app"; classtype:attempted-recon; sid:200005893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbqguegbaa.duckdns.org"; classtype:attempted-recon; sid:200005894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbrge.tk"; classtype:attempted-recon; sid:200005895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbtylqtith.duckdns.org"; classtype:attempted-recon; sid:200005896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fbxhzyzkfw.duckdns.org"; classtype:attempted-recon; sid:200005897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcbzaxrmhq.duckdns.org"; classtype:attempted-recon; sid:200005898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fccfc.org"; classtype:attempted-recon; sid:200005899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcdsxfkmrt.duckdns.org"; classtype:attempted-recon; sid:200005900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcferbzeco.duckdns.org"; classtype:attempted-recon; sid:200005901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcin.ddnss.org"; classtype:attempted-recon; sid:200005902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcjgsnjtmj.duckdns.org"; classtype:attempted-recon; sid:200005903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcmsoyfzwd.duckdns.org"; classtype:attempted-recon; sid:200005904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcnmczvkni.duckdns.org"; classtype:attempted-recon; sid:200005905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcvkstafjg.duckdns.org"; classtype:attempted-recon; sid:200005906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcwjuxryei.duckdns.org"; classtype:attempted-recon; sid:200005907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fcyyzuueru.duckdns.org"; classtype:attempted-recon; sid:200005908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fd.b8jgj0s.cn"; classtype:attempted-recon; sid:200005909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fddcegylod.duckdns.org"; classtype:attempted-recon; sid:200005910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdevfdefvedfedfeatt.godaddysites.com"; classtype:attempted-recon; sid:200005911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdfcspgcdz.duckdns.org"; classtype:attempted-recon; sid:200005912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdg56.onlinebg0.repl.co"; classtype:attempted-recon; sid:200005913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdhf.lpszyy.cn"; classtype:attempted-recon; sid:200005914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdiyzdtgwi.duckdns.org"; classtype:attempted-recon; sid:200005915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdjvcrbkkv.duckdns.org"; classtype:attempted-recon; sid:200005916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdn.38961.cn"; classtype:attempted-recon; sid:200005917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdn.xkchtgn.cn"; classtype:attempted-recon; sid:200005918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdpcgcgqhr.duckdns.org"; classtype:attempted-recon; sid:200005919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdqffohfji.duckdns.org"; classtype:attempted-recon; sid:200005920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdscs.aldtqy.cn"; classtype:attempted-recon; sid:200005921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdscx.zb4i4i.cn"; classtype:attempted-recon; sid:200005922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdscx.zfgqvtx.cn"; classtype:attempted-recon; sid:200005923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdsxc.xuezishop.cn"; classtype:attempted-recon; sid:200005924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fduepdtvvx.duckdns.org"; classtype:attempted-recon; sid:200005925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdx17.hyperphp.com"; classtype:attempted-recon; sid:200005926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fdzvwdhwev.duckdns.org"; classtype:attempted-recon; sid:200005927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fearful.78p55.repl.co"; classtype:attempted-recon; sid:200005928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"featjhbokh.duckdns.org"; classtype:attempted-recon; sid:200005929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"febkrbqcsb.duckdns.org"; classtype:attempted-recon; sid:200005930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fecmexrcge.duckdns.org"; classtype:attempted-recon; sid:200005931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fedaslumel.duckdns.org"; classtype:attempted-recon; sid:200005932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"federales.validacionoficial.com"; classtype:attempted-recon; sid:200005933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fedsc.dsyinleai.cn"; classtype:attempted-recon; sid:200005934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"feelbons.com"; classtype:attempted-recon; sid:200005935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fefrhf-s-school.thinkific.com"; classtype:attempted-recon; sid:200005936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fefwkoaced.duckdns.org"; classtype:attempted-recon; sid:200005937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fegfiqzrwn.duckdns.org"; classtype:attempted-recon; sid:200005938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"feldmangaleweber.com"; classtype:attempted-recon; sid:200005939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"felicids.hostfree.pw"; classtype:attempted-recon; sid:200005940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"femaagfizj.duckdns.org"; classtype:attempted-recon; sid:200005941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"femmaterparaguay.x10.mx"; classtype:attempted-recon; sid:200005942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"femzxqavka.duckdns.org"; classtype:attempted-recon; sid:200005943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fepigvkdty.duckdns.org"; classtype:attempted-recon; sid:200005944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"feqxsifjsk.duckdns.org"; classtype:attempted-recon; sid:200005945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fetuchini97.dgfhh5.repl.co"; classtype:attempted-recon; sid:200005946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fevjasqhnl.duckdns.org"; classtype:attempted-recon; sid:200005947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"feytviweft.duckdns.org"; classtype:attempted-recon; sid:200005948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffcnunpvcu.duckdns.org"; classtype:attempted-recon; sid:200005949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffcxfphcco.duckdns.org"; classtype:attempted-recon; sid:200005950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffd.smiqwt.cn"; classtype:attempted-recon; sid:200005951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffeiisfuwe.duckdns.org"; classtype:attempted-recon; sid:200005952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffghh.onqkpmc.cn"; classtype:attempted-recon; sid:200005953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffiwdobobm.duckdns.org"; classtype:attempted-recon; sid:200005954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffiyjsavsn.duckdns.org"; classtype:attempted-recon; sid:200005955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffmnocjdje.duckdns.org"; classtype:attempted-recon; sid:200005956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffmrpunweq.duckdns.org"; classtype:attempted-recon; sid:200005957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffmugbrmcs.duckdns.org"; classtype:attempted-recon; sid:200005958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffqwmneabf.duckdns.org"; classtype:attempted-recon; sid:200005959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fftwmmkrbk.duckdns.org"; classtype:attempted-recon; sid:200005960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffysmuojox.duckdns.org"; classtype:attempted-recon; sid:200005961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ffzmwugudb.duckdns.org"; classtype:attempted-recon; sid:200005962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgajnreumf.duckdns.org"; classtype:attempted-recon; sid:200005963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgaqrhphkc.duckdns.org"; classtype:attempted-recon; sid:200005964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgdrh.dhrrnr.cn"; classtype:attempted-recon; sid:200005965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgdsv.nimniow.cn"; classtype:attempted-recon; sid:200005966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgdsxc.miles087.cn"; classtype:attempted-recon; sid:200005967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgenm-6qaaa-aaaad-qcurq-cai.ic.fleek.co"; classtype:attempted-recon; sid:200005968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fghdskjhgjhkljg.ihostfull.com"; classtype:attempted-recon; sid:200005969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fghhh.3viaay.cn"; classtype:attempted-recon; sid:200005970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fghjj.unbpw3w.cn"; classtype:attempted-recon; sid:200005971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fghjr74rhudfguhtfguji.blogspot.com"; classtype:attempted-recon; sid:200005972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgkqldspzz.duckdns.org"; classtype:attempted-recon; sid:200005973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fglomphntf.duckdns.org"; classtype:attempted-recon; sid:200005974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgm47k6.hyperphp.com"; classtype:attempted-recon; sid:200005975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgnngffhdgd43.liveblog365.com"; classtype:attempted-recon; sid:200005976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgopfpxkys.duckdns.org"; classtype:attempted-recon; sid:200005977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgqjsixsne.duckdns.org"; classtype:attempted-recon; sid:200005978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgrhhh.ericnothing.cn"; classtype:attempted-recon; sid:200005979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgrpwvnqgg.duckdns.org"; classtype:attempted-recon; sid:200005980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fgtlhpazsx.duckdns.org"; classtype:attempted-recon; sid:200005981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fguvjeklvh.duckdns.org"; classtype:attempted-recon; sid:200005982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhbffg.72912.cn"; classtype:attempted-recon; sid:200005983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhciazuhfu.duckdns.org"; classtype:attempted-recon; sid:200005984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhduf.pfucali.cn"; classtype:attempted-recon; sid:200005985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhdyjnfyxx.duckdns.org"; classtype:attempted-recon; sid:200005986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhfgj.lxxrmyy.cn"; classtype:attempted-recon; sid:200005987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhfysdlokk.duckdns.org"; classtype:attempted-recon; sid:200005988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhg.79176.cn"; classtype:attempted-recon; sid:200005989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhibwtzvqm.duckdns.org"; classtype:attempted-recon; sid:200005990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhjlbcvsep.duckdns.org"; classtype:attempted-recon; sid:200005991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhlesicbva.duckdns.org"; classtype:attempted-recon; sid:200005992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhooqygjkz.duckdns.org"; classtype:attempted-recon; sid:200005993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhtdpqydav.duckdns.org"; classtype:attempted-recon; sid:200005994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhxmmoqeqr.duckdns.org"; classtype:attempted-recon; sid:200005995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhyhsppmui.duckdns.org"; classtype:attempted-recon; sid:200005996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fi-neearwallet.blogspot.com"; classtype:attempted-recon; sid:200005997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fi.noncustodiallabre.com"; classtype:attempted-recon; sid:200005998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fibffskqvg.duckdns.org"; classtype:attempted-recon; sid:200005999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fibreglass.co.mz"; classtype:attempted-recon; sid:200006000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fidelitybank-ng.online"; classtype:attempted-recon; sid:200006001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fightagainstcriminal.com"; classtype:attempted-recon; sid:200006002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fighting40s.com"; classtype:attempted-recon; sid:200006003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"figkstjsxs.duckdns.org"; classtype:attempted-recon; sid:200006004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fihuytdzos.duckdns.org"; classtype:attempted-recon; sid:200006005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fikecihmti.duckdns.org"; classtype:attempted-recon; sid:200006006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fiknixmrvo.duckdns.org"; classtype:attempted-recon; sid:200006007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-annual-project.cesfulenter.workers.dev"; classtype:attempted-recon; sid:200006008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-cloud-download.remit-advance.workers.dev"; classtype:attempted-recon; sid:200006009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-clouds-pdf.list-chats.workers.dev"; classtype:attempted-recon; sid:200006010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-connect-shared.loading-chats.workers.dev"; classtype:attempted-recon; sid:200006011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-pdf-cloud.voicee-pre.workers.dev"; classtype:attempted-recon; sid:200006012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-project-shared.init-datings.workers.dev"; classtype:attempted-recon; sid:200006013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-device-storage.firebaseapp.com"; classtype:attempted-recon; sid:200006014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-device-storage.web.app"; classtype:attempted-recon; sid:200006015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-drive-folder.firebaseapp.com"; classtype:attempted-recon; sid:200006016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-drive-folder.web.app"; classtype:attempted-recon; sid:200006017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-login-folder-local.firebaseapp.com"; classtype:attempted-recon; sid:200006018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-login-folder-local.web.app"; classtype:attempted-recon; sid:200006019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-secu-doc.firebaseapp.com"; classtype:attempted-recon; sid:200006020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-share-secu-doc.web.app"; classtype:attempted-recon; sid:200006021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-shared-cloud.lepoyanecalt.workers.dev"; classtype:attempted-recon; sid:200006022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file-shared-clouds.data-shared.workers.dev"; classtype:attempted-recon; sid:200006023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file.pancakesvqp.com"; classtype:attempted-recon; sid:200006024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"file0z.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200006025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"files-secure-folder.ansimapreg.workers.dev"; classtype:attempted-recon; sid:200006026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"files.landing-invoice.workers.dev"; classtype:attempted-recon; sid:200006027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"files.recloud-shared.workers.dev"; classtype:attempted-recon; sid:200006028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"filex.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200006029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"filex001.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200006030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fileyellowelite.com"; classtype:attempted-recon; sid:200006031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"film.jaheshguilan.com"; classtype:attempted-recon; sid:200006032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"finalsolutions.eu"; classtype:attempted-recon; sid:200006033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"financeapp.xyz"; classtype:attempted-recon; sid:200006034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"financeguidelaunchpad.com"; classtype:attempted-recon; sid:200006035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"financialaggravatingoutput.yoursegcity9875.repl.co"; classtype:attempted-recon; sid:200006036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"findlak-investing.pro"; classtype:attempted-recon; sid:200006037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"finfutureonliup.firebaseapp.com"; classtype:attempted-recon; sid:200006038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"finfutureonliup.web.app"; classtype:attempted-recon; sid:200006039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"finleylrzc.duckdns.org"; classtype:attempted-recon; sid:200006040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"finulasante.lasanteactive.com"; classtype:attempted-recon; sid:200006041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fiqgwhozjh.duckdns.org"; classtype:attempted-recon; sid:200006042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fiqsrxmlgm.duckdns.org"; classtype:attempted-recon; sid:200006043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fir-8da4d.firebaseapp.com"; classtype:attempted-recon; sid:200006044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fir-8da4d.web.app"; classtype:attempted-recon; sid:200006045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fir41109.firebaseapp.com"; classtype:attempted-recon; sid:200006046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fir41109.web.app"; classtype:attempted-recon; sid:200006047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fire.martobang.workers.dev"; classtype:attempted-recon; sid:200006048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"firenaci0n4llogc.webcindario.com"; classtype:attempted-recon; sid:200006049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"firstalert.in"; classtype:attempted-recon; sid:200006050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"firstsourcesbus.com"; classtype:attempted-recon; sid:200006051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fitzherbert.xyz"; classtype:attempted-recon; sid:200006052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fiverrespana.com"; classtype:attempted-recon; sid:200006053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fivesplash.in"; classtype:attempted-recon; sid:200006054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fivhroafjc.duckdns.org"; classtype:attempted-recon; sid:200006055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fivkosxxnm.duckdns.org"; classtype:attempted-recon; sid:200006056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fixi.rest"; classtype:attempted-recon; sid:200006057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjbbyodxzg.duckdns.org"; classtype:attempted-recon; sid:200006058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjbzlmokvq.duckdns.org"; classtype:attempted-recon; sid:200006059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjfgfieugr.duckdns.org"; classtype:attempted-recon; sid:200006060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjhkjkuli.000webhostapp.com"; classtype:attempted-recon; sid:200006061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjjfjdf.sitey.me"; classtype:attempted-recon; sid:200006062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjpbfhzrpx.duckdns.org"; classtype:attempted-recon; sid:200006063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjrlkxtsot.duckdns.org"; classtype:attempted-recon; sid:200006064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjvnejotwz.duckdns.org"; classtype:attempted-recon; sid:200006065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjvtobqwtn.duckdns.org"; classtype:attempted-recon; sid:200006066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkcyuwraeh.duckdns.org"; classtype:attempted-recon; sid:200006067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkhcbcocpj.duckdns.org"; classtype:attempted-recon; sid:200006068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkkccxmixw.duckdns.org"; classtype:attempted-recon; sid:200006069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkkwlwmtjp.duckdns.org"; classtype:attempted-recon; sid:200006070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fknouknnud.duckdns.org"; classtype:attempted-recon; sid:200006071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkwmgcxvxh.duckdns.org"; classtype:attempted-recon; sid:200006072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkwxjxptdd.duckdns.org"; classtype:attempted-recon; sid:200006073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkxnprbqzx.duckdns.org"; classtype:attempted-recon; sid:200006074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkyzwemvoh.duckdns.org"; classtype:attempted-recon; sid:200006075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fkzsgdvawa.duckdns.org"; classtype:attempted-recon; sid:200006076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flamboyantbrisktriangle.galicia2020.repl.co"; classtype:attempted-recon; sid:200006077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flamulousw.famolous90.repl.co"; classtype:attempted-recon; sid:200006078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flashpushportal.myportfolio.com"; classtype:attempted-recon; sid:200006079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flat-9be3.marpuasabentar.workers.dev"; classtype:attempted-recon; sid:200006080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flat-grass-5595.fo4ih28x.workers.dev"; classtype:attempted-recon; sid:200006081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flbhwlbern.duckdns.org"; classtype:attempted-recon; sid:200006082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flcancer39-px.rtrk.com"; classtype:attempted-recon; sid:200006083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flddzeekiy.duckdns.org"; classtype:attempted-recon; sid:200006084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flintandtinder.org"; classtype:attempted-recon; sid:200006085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flir.pages.dev"; classtype:attempted-recon; sid:200006086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flkr66.hyperphp.com"; classtype:attempted-recon; sid:200006087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"floatingbootnet294.ml"; classtype:attempted-recon; sid:200006088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"floral-glade-f27c.do050.workers.dev"; classtype:attempted-recon; sid:200006089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"floral-sea-7b73.westernboy.workers.dev"; classtype:attempted-recon; sid:200006090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"floranostra.hu"; classtype:attempted-recon; sid:200006091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"florejackie.fr"; classtype:attempted-recon; sid:200006092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flowserve-us.com"; classtype:attempted-recon; sid:200006093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flppbrhaai.duckdns.org"; classtype:attempted-recon; sid:200006094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flslidingdoorservice.com"; classtype:attempted-recon; sid:200006095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fluksrv.mycpanel.rs"; classtype:attempted-recon; sid:200006096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fluttergirl.com"; classtype:attempted-recon; sid:200006097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flwckbxwlc.duckdns.org"; classtype:attempted-recon; sid:200006098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flyairprestige.com"; classtype:attempted-recon; sid:200006099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flyvfrontier.net"; classtype:attempted-recon; sid:200006100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmiipvdbxk.duckdns.org"; classtype:attempted-recon; sid:200006101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmnugkohed.duckdns.org"; classtype:attempted-recon; sid:200006102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmosyppbjg.duckdns.org"; classtype:attempted-recon; sid:200006103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmp.wordpressmlm.com"; classtype:attempted-recon; sid:200006104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmrestclient.whileofone.com"; classtype:attempted-recon; sid:200006105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmrtaypmql.duckdns.org"; classtype:attempted-recon; sid:200006106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmzdonwnpq.duckdns.org"; classtype:attempted-recon; sid:200006107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fmztydbsus.duckdns.org"; classtype:attempted-recon; sid:200006108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnabxlzypg.duckdns.org"; classtype:attempted-recon; sid:200006109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fndwltpvkj.duckdns.org"; classtype:attempted-recon; sid:200006110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnjhjqkddu.duckdns.org"; classtype:attempted-recon; sid:200006111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnlbyoykso.duckdns.org"; classtype:attempted-recon; sid:200006112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnywmpdhmn.duckdns.org"; classtype:attempted-recon; sid:200006113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"focxcdohmg.duckdns.org"; classtype:attempted-recon; sid:200006114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fogqmtdchn.duckdns.org"; classtype:attempted-recon; sid:200006115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fohfeouvlb.duckdns.org"; classtype:attempted-recon; sid:200006116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fohssbxigc.duckdns.org"; classtype:attempted-recon; sid:200006117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fohtgquncv.duckdns.org"; classtype:attempted-recon; sid:200006118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"folder-documet-files.glitch.me"; classtype:attempted-recon; sid:200006119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"folder-preview-project.privatee-inv.workers.dev"; classtype:attempted-recon; sid:200006120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"folder-private-pdf.auth-gear.workers.dev"; classtype:attempted-recon; sid:200006121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"folder-private-project.important-chat.workers.dev"; classtype:attempted-recon; sid:200006122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"folder-private.erinlemono.workers.dev"; classtype:attempted-recon; sid:200006123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"folder-shared-file.voice-chatt.workers.dev"; classtype:attempted-recon; sid:200006124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"folder.verify-files.workers.dev"; classtype:attempted-recon; sid:200006125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fomalitysary.com"; classtype:attempted-recon; sid:200006126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"foodcarry.co.in"; classtype:attempted-recon; sid:200006127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"foofeqxluc.duckdns.org"; classtype:attempted-recon; sid:200006128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"foppgbatfh.duckdns.org"; classtype:attempted-recon; sid:200006129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"foratech.ca"; classtype:attempted-recon; sid:200006130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forexabc.net"; classtype:attempted-recon; sid:200006131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forextradingtruth.com"; classtype:attempted-recon; sid:200006132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forhereclick.work.gd"; classtype:attempted-recon; sid:200006133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form.submit.q31l.live"; classtype:attempted-recon; sid:200006134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form.submit.q73s.live"; classtype:attempted-recon; sid:200006135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form.submit.r27b.live"; classtype:attempted-recon; sid:200006136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form.submit.s02i.live"; classtype:attempted-recon; sid:200006137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form.tax.s23i.live"; classtype:attempted-recon; sid:200006138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form.tax.s51h.live"; classtype:attempted-recon; sid:200006139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"formbuddy.com"; classtype:attempted-recon; sid:200006140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"formez-vous.eligibilite-web.com"; classtype:attempted-recon; sid:200006141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forms.formium.io"; classtype:attempted-recon; sid:200006142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forms.sendpulse.com"; classtype:attempted-recon; sid:200006143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forms.zoho.eu"; classtype:attempted-recon; sid:200006144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forms.zohopublic.in"; classtype:attempted-recon; sid:200006145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"formtools.com"; classtype:attempted-recon; sid:200006146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"formtoupdateatt.square.site"; classtype:attempted-recon; sid:200006147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"formularze.sarp.katowice.pl"; classtype:attempted-recon; sid:200006148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fornewsgroup.run.place"; classtype:attempted-recon; sid:200006149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fortandpgssprts432.co.vu"; classtype:attempted-recon; sid:200006150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fortul.com"; classtype:attempted-recon; sid:200006151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fortus.cl"; classtype:attempted-recon; sid:200006152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"forums.pancakesvqp.com"; classtype:attempted-recon; sid:200006153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"foudanlir.space"; classtype:attempted-recon; sid:200006154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"foulauth-2logosyx.mom"; classtype:attempted-recon; sid:200006155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fountion-285475632568954207.tk"; classtype:attempted-recon; sid:200006156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fountion-285475632568954209.tk"; classtype:attempted-recon; sid:200006157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fountion-285475632568954210.tk"; classtype:attempted-recon; sid:200006158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fouridmaniensem569.page.link"; classtype:attempted-recon; sid:200006159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"foxshareportal.myportfolio.com"; classtype:attempted-recon; sid:200006160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpalpha.myportfolio.com"; classtype:attempted-recon; sid:200006161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpbleitidh.duckdns.org"; classtype:attempted-recon; sid:200006162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpcxvwznjb.duckdns.org"; classtype:attempted-recon; sid:200006163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpgparwhhm.duckdns.org"; classtype:attempted-recon; sid:200006164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpidqmrjua.duckdns.org"; classtype:attempted-recon; sid:200006165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpjziacoda.duckdns.org"; classtype:attempted-recon; sid:200006166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpkwqnjmnm.duckdns.org"; classtype:attempted-recon; sid:200006167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpnxxsxydw.duckdns.org"; classtype:attempted-recon; sid:200006168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpxgapfwuj.duckdns.org"; classtype:attempted-recon; sid:200006169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fpywiepcxw.duckdns.org"; classtype:attempted-recon; sid:200006170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqaxmmwtiz.duckdns.org"; classtype:attempted-recon; sid:200006171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqayponwpe.duckdns.org"; classtype:attempted-recon; sid:200006172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqctlypvll.duckdns.org"; classtype:attempted-recon; sid:200006173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqcxfasjdq.duckdns.org"; classtype:attempted-recon; sid:200006174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqdwlomcoe.duckdns.org"; classtype:attempted-recon; sid:200006175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqgwffljpl.duckdns.org"; classtype:attempted-recon; sid:200006176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqmcelhzmb.duckdns.org"; classtype:attempted-recon; sid:200006177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqrjhaxhrn.duckdns.org"; classtype:attempted-recon; sid:200006178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqujqxykyz.duckdns.org"; classtype:attempted-recon; sid:200006179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqvubrzuid.duckdns.org"; classtype:attempted-recon; sid:200006180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fqziatvqtd.duckdns.org"; classtype:attempted-recon; sid:200006181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fr-contact.web.app"; classtype:attempted-recon; sid:200006182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fr-europe564598-com.filesusr.com"; classtype:attempted-recon; sid:200006183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fr443.liv2454.repl.co"; classtype:attempted-recon; sid:200006184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fragrant-dew-337b.orgetjot183.workers.dev"; classtype:attempted-recon; sid:200006185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fragrant-grass-5770.scrtygdjahg.workers.dev"; classtype:attempted-recon; sid:200006186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frances-onlines.com"; classtype:attempted-recon; sid:200006187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frankedu.com"; classtype:attempted-recon; sid:200006188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frankfurtertsparkasse.web.app"; classtype:attempted-recon; sid:200006189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frbribqrmk.duckdns.org"; classtype:attempted-recon; sid:200006190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frecwqdnwy.duckdns.org"; classtype:attempted-recon; sid:200006191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freeclicknowsandshare.work.gd"; classtype:attempted-recon; sid:200006192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freedrop.ru"; classtype:attempted-recon; sid:200006193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freeliker.net"; classtype:attempted-recon; sid:200006194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freemlclicknews.line.pm"; classtype:attempted-recon; sid:200006195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freeprocrack.co"; classtype:attempted-recon; sid:200006196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freesolana.app"; classtype:attempted-recon; sid:200006197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freesolanamining.com"; classtype:attempted-recon; sid:200006198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freetopdomino.com"; classtype:attempted-recon; sid:200006199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freewareinfonet029.ga"; classtype:attempted-recon; sid:200006200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freg-nine.pt"; classtype:attempted-recon; sid:200006201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freij.com"; classtype:attempted-recon; sid:200006202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freim-regulation.hostfree.pw"; classtype:attempted-recon; sid:200006203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fresno.afdgasfg.repl.co"; classtype:attempted-recon; sid:200006204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"friendsofnechockey.com"; classtype:attempted-recon; sid:200006205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frigidrealisticrepositories.bancolombiatoc2.repl.co"; classtype:attempted-recon; sid:200006206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frimleyflyers.co.uk"; classtype:attempted-recon; sid:200006207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"friss.com.ec"; classtype:attempted-recon; sid:200006208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frnnrlwdec.duckdns.org"; classtype:attempted-recon; sid:200006209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frontier-airlinesreservations.com"; classtype:attempted-recon; sid:200006210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frontier.invoicegua.com"; classtype:attempted-recon; sid:200006211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frosty-credit-9294.on.fleek.co"; classtype:attempted-recon; sid:200006212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frosty-lab-d5f8.source0542-mail-docxs.workers.dev"; classtype:attempted-recon; sid:200006213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frosty-leaf-b2cd.onos.workers.dev"; classtype:attempted-recon; sid:200006214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frosty-mountain-332d.moldthread7435.workers.dev"; classtype:attempted-recon; sid:200006215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frosty-satoshi.45-88-108-231.plesk.page"; classtype:attempted-recon; sid:200006216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frr45l9.hyperphp.com"; classtype:attempted-recon; sid:200006217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frsh3-b6f75c.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200006218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frvkznjrby.duckdns.org"; classtype:attempted-recon; sid:200006219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"frvwmhlkks.duckdns.org"; classtype:attempted-recon; sid:200006220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fschwuftxx.duckdns.org"; classtype:attempted-recon; sid:200006221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fsfssfgedehehehe.000webhostapp.com"; classtype:attempted-recon; sid:200006222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fsgoydmkbz.duckdns.org"; classtype:attempted-recon; sid:200006223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fsjuqrmjyk.duckdns.org"; classtype:attempted-recon; sid:200006224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fskcaevcpe.duckdns.org"; classtype:attempted-recon; sid:200006225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fskocbjtov.duckdns.org"; classtype:attempted-recon; sid:200006226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fslyjdlzki.duckdns.org"; classtype:attempted-recon; sid:200006227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fszdvcwglu.duckdns.org"; classtype:attempted-recon; sid:200006228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftaenxnhnm.duckdns.org"; classtype:attempted-recon; sid:200006229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftaktus.ga"; classtype:attempted-recon; sid:200006230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftbiwknoiv.duckdns.org"; classtype:attempted-recon; sid:200006231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftdggz.hyperphp.com"; classtype:attempted-recon; sid:200006232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftfjrjspmt.duckdns.org"; classtype:attempted-recon; sid:200006233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftiotsrdqd.duckdns.org"; classtype:attempted-recon; sid:200006234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftmgbmaqoe.duckdns.org"; classtype:attempted-recon; sid:200006235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftohekgkrd.duckdns.org"; classtype:attempted-recon; sid:200006236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftp.cnc.fr"; classtype:attempted-recon; sid:200006237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftqzjaiztf.duckdns.org"; classtype:attempted-recon; sid:200006238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftsrgvibtr.duckdns.org"; classtype:attempted-recon; sid:200006239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftszllaibb.duckdns.org"; classtype:attempted-recon; sid:200006240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx-ca.com"; classtype:attempted-recon; sid:200006241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx-pro-register.pro"; classtype:attempted-recon; sid:200006242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx-register-pro.world"; classtype:attempted-recon; sid:200006243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx-register.biz"; classtype:attempted-recon; sid:200006244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx-register.website"; classtype:attempted-recon; sid:200006245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx.cool"; classtype:attempted-recon; sid:200006246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx.work"; classtype:attempted-recon; sid:200006247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx012.com"; classtype:attempted-recon; sid:200006248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx6.vip"; classtype:attempted-recon; sid:200006249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftx666888123ftxapp.com"; classtype:attempted-recon; sid:200006250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftxbonus.site"; classtype:attempted-recon; sid:200006251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftxcprotocol.xyz"; classtype:attempted-recon; sid:200006252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftxgb.com"; classtype:attempted-recon; sid:200006253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ftxghayydq.duckdns.org"; classtype:attempted-recon; sid:200006254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fufaxh84js39fj2.webcindario.com"; classtype:attempted-recon; sid:200006255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fufkvzqmpb.duckdns.org"; classtype:attempted-recon; sid:200006256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fui.ai"; classtype:attempted-recon; sid:200006257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"full.mailboxs.workers.dev"; classtype:attempted-recon; sid:200006258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fullpromo.cl"; classtype:attempted-recon; sid:200006259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fundacionmontesinai.cl"; classtype:attempted-recon; sid:200006260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"funholidaycrafts.com"; classtype:attempted-recon; sid:200006261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"funiswap.exchange"; classtype:attempted-recon; sid:200006262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fupddlnxok.duckdns.org"; classtype:attempted-recon; sid:200006263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fuqsgrfuai.duckdns.org"; classtype:attempted-recon; sid:200006264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"furryvengeancefve1.blogspot.com"; classtype:attempted-recon; sid:200006265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"futec.futminna.edu.ng"; classtype:attempted-recon; sid:200006266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"futurama-ex.com"; classtype:attempted-recon; sid:200006267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fuxtwadzam.duckdns.org"; classtype:attempted-recon; sid:200006268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fuzhqisipf.duckdns.org"; classtype:attempted-recon; sid:200006269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fuzvwbmree.duckdns.org"; classtype:attempted-recon; sid:200006270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fvd.ioq7afs.cn"; classtype:attempted-recon; sid:200006271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fvdjgzclxq.duckdns.org"; classtype:attempted-recon; sid:200006272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fvhbjaxugntcsrrkzox-gqktepkafsyfsvocpwj-f-hzbglmuvzwsobpvwgt.glitch.me"; classtype:attempted-recon; sid:200006273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fvnjkxfaor.duckdns.org"; classtype:attempted-recon; sid:200006274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fvoikttecw.duckdns.org"; classtype:attempted-recon; sid:200006275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fvwxavqpyb.duckdns.org"; classtype:attempted-recon; sid:200006276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fwcvvqcegd.duckdns.org"; classtype:attempted-recon; sid:200006277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fwgvotxbez.duckdns.org"; classtype:attempted-recon; sid:200006278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fwjzdqnhat.duckdns.org"; classtype:attempted-recon; sid:200006279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fwpxymskyo.duckdns.org"; classtype:attempted-recon; sid:200006280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fwsgyndddq.duckdns.org"; classtype:attempted-recon; sid:200006281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fwzf322.hyperphp.com"; classtype:attempted-recon; sid:200006282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fwzlunlqnu.duckdns.org"; classtype:attempted-recon; sid:200006283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fx164fax08022022fax-1310019602.cos.eu-frankfurt.myqcloud.com"; classtype:attempted-recon; sid:200006284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fx22082022fxx9830fx08-1312962597.cos.ap-nanjing.myqcloud.com"; classtype:attempted-recon; sid:200006285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fx23032022fx1apps87-1310418193.cos.eu-frankfurt.myqcloud.com"; classtype:attempted-recon; sid:200006286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fx406543docs4580246-1309906520.cos.eu-frankfurt.myqcloud.com"; classtype:attempted-recon; sid:200006287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fx8822fax768fx7webs-1312962597.cos.ap-chongqing.myqcloud.com"; classtype:attempted-recon; sid:200006288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fxbkyhgpmf.duckdns.org"; classtype:attempted-recon; sid:200006289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fxcvzcrzzu.duckdns.org"; classtype:attempted-recon; sid:200006290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fxhalifax.com"; classtype:attempted-recon; sid:200006291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fxkiufubit.duckdns.org"; classtype:attempted-recon; sid:200006292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fxybalktzd.duckdns.org"; classtype:attempted-recon; sid:200006293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fxzblpybxp.duckdns.org"; classtype:attempted-recon; sid:200006294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fycxgaimrc.duckdns.org"; classtype:attempted-recon; sid:200006295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyihhgtrqy.duckdns.org"; classtype:attempted-recon; sid:200006296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyjsvz.webwave.dev"; classtype:attempted-recon; sid:200006297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyndiqaq.cc"; classtype:attempted-recon; sid:200006298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyowofdgqi.duckdns.org"; classtype:attempted-recon; sid:200006299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fypmyisjqc.duckdns.org"; classtype:attempted-recon; sid:200006300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyqjrznsie.duckdns.org"; classtype:attempted-recon; sid:200006301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyqvdluamu.duckdns.org"; classtype:attempted-recon; sid:200006302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyrdmpjuom.duckdns.org"; classtype:attempted-recon; sid:200006303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyvgnrduje.duckdns.org"; classtype:attempted-recon; sid:200006304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyvgwe.ml"; classtype:attempted-recon; sid:200006305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fyxceyoofd.duckdns.org"; classtype:attempted-recon; sid:200006306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzbocfcpre.duckdns.org"; classtype:attempted-recon; sid:200006307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzeadalwkm.duckdns.org"; classtype:attempted-recon; sid:200006308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzjirpixsl.duckdns.org"; classtype:attempted-recon; sid:200006309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzqzwpszik.duckdns.org"; classtype:attempted-recon; sid:200006310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzuoliogzj.duckdns.org"; classtype:attempted-recon; sid:200006311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzvmskikiz.duckdns.org"; classtype:attempted-recon; sid:200006312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzvnbbezbd.duckdns.org"; classtype:attempted-recon; sid:200006313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fzvyneamuk.duckdns.org"; classtype:attempted-recon; sid:200006314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"g-mtcc.com"; classtype:attempted-recon; sid:200006315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"g6beb-cqaaa-aaaad-qd2ma-cai.raw.ic0.app"; classtype:attempted-recon; sid:200006316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gafonline.mil.gh"; classtype:attempted-recon; sid:200006317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gaitnonmhr.duckdns.org"; classtype:attempted-recon; sid:200006318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gajsya.com"; classtype:attempted-recon; sid:200006319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galerieharmonia.com"; classtype:attempted-recon; sid:200006320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gali68364356542546.9865353.repl.co"; classtype:attempted-recon; sid:200006321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiarg.arias20.repl.co"; classtype:attempted-recon; sid:200006322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galicia-home.rester874.repl.co"; classtype:attempted-recon; sid:200006323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galicia.98gl77.repl.co"; classtype:attempted-recon; sid:200006324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciaaopear.galiciopen.repl.co"; classtype:attempted-recon; sid:200006325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciadatainfor103.sdsdasdsdsdsa.repl.co"; classtype:attempted-recon; sid:200006326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciam.server1.trinchera.dev"; classtype:attempted-recon; sid:200006327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciaonl1nebankingver1fy.bughakin.repl.co"; classtype:attempted-recon; sid:200006328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciasuport.galiciaaaa.repl.co"; classtype:attempted-recon; sid:200006329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciasuupporrt.galiciaaaa.repl.co"; classtype:attempted-recon; sid:200006330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciaweb.josemicho.repl.co"; classtype:attempted-recon; sid:200006331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciaxxc.galiciaxxc.repl.co"; classtype:attempted-recon; sid:200006332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciquebe.webcindario.com"; classtype:attempted-recon; sid:200006333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiclabanckingonlinhb.activiodaviv.repl.co"; classtype:attempted-recon; sid:200006334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiicaa.galiia.repl.co"; classtype:attempted-recon; sid:200006335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galil5.55565.repl.co"; classtype:attempted-recon; sid:200006336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galipersoas2022.ajua8uh.repl.co"; classtype:attempted-recon; sid:200006337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"game-defiknidgoms.com"; classtype:attempted-recon; sid:200006338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"game.hicage.com"; classtype:attempted-recon; sid:200006339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gaming-experience.tech"; classtype:attempted-recon; sid:200006340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ganeo55.pages.dev"; classtype:attempted-recon; sid:200006341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ganhbnseyf.duckdns.org"; classtype:attempted-recon; sid:200006342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ganjnkpglv.duckdns.org"; classtype:attempted-recon; sid:200006343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ganvugpvle.duckdns.org"; classtype:attempted-recon; sid:200006344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gapabboynd.duckdns.org"; classtype:attempted-recon; sid:200006345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"garenaquafree.com"; classtype:attempted-recon; sid:200006346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"garmon.com.ar"; classtype:attempted-recon; sid:200006347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"garpwleqgc.duckdns.org"; classtype:attempted-recon; sid:200006348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gasjoqtudy.duckdns.org"; classtype:attempted-recon; sid:200006349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gasoktnhhf.duckdns.org"; classtype:attempted-recon; sid:200006350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gatewaytechitservices.com"; classtype:attempted-recon; sid:200006351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gatlinburg-cabins-now.com"; classtype:attempted-recon; sid:200006352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gatvyfzpxw.duckdns.org"; classtype:attempted-recon; sid:200006353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gausnow.uno"; classtype:attempted-recon; sid:200006354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gayrpqmeop.duckdns.org"; classtype:attempted-recon; sid:200006355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gb-apple-id.firebaseapp.com"; classtype:attempted-recon; sid:200006356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gb-evri-package.firebaseapp.com"; classtype:attempted-recon; sid:200006357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gb-evri-package.web.app"; classtype:attempted-recon; sid:200006358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbbmzgaepd.duckdns.org"; classtype:attempted-recon; sid:200006359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbhdhrozzy.duckdns.org"; classtype:attempted-recon; sid:200006360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbnybqxijh.duckdns.org"; classtype:attempted-recon; sid:200006361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbrusgaxiu.duckdns.org"; classtype:attempted-recon; sid:200006362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbsmndymxe.duckdns.org"; classtype:attempted-recon; sid:200006363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbsqkmocpi.duckdns.org"; classtype:attempted-recon; sid:200006364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbujausknu.duckdns.org"; classtype:attempted-recon; sid:200006365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gbyezqjuqc.duckdns.org"; classtype:attempted-recon; sid:200006366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gc.elin.co.za"; classtype:attempted-recon; sid:200006367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcdj.urcypai.cn"; classtype:attempted-recon; sid:200006368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcdkvoqoat.duckdns.org"; classtype:attempted-recon; sid:200006369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gckbirqynm.duckdns.org"; classtype:attempted-recon; sid:200006370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcotykbfji.duckdns.org"; classtype:attempted-recon; sid:200006371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcourdefraind.mom"; classtype:attempted-recon; sid:200006372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcroauthmf.duckdns.org"; classtype:attempted-recon; sid:200006373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcvhrqqmgg.duckdns.org"; classtype:attempted-recon; sid:200006374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcvnuahwzk.duckdns.org"; classtype:attempted-recon; sid:200006375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcxmmtwxnb.duckdns.org"; classtype:attempted-recon; sid:200006376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gcybrzcgiu.duckdns.org"; classtype:attempted-recon; sid:200006377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdelements.com"; classtype:attempted-recon; sid:200006378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdqvebnbte.duckdns.org"; classtype:attempted-recon; sid:200006379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdqzhgxxfp.duckdns.org"; classtype:attempted-recon; sid:200006380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdrh.hjszyy.cn"; classtype:attempted-recon; sid:200006381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdsdc.yg0i2qa.cn"; classtype:attempted-recon; sid:200006382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdsfoundationtrust.com"; classtype:attempted-recon; sid:200006383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdtvksmwbo.duckdns.org"; classtype:attempted-recon; sid:200006384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gdudqxdwlf.duckdns.org"; classtype:attempted-recon; sid:200006385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geekd.live"; classtype:attempted-recon; sid:200006386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gefcryedet.duckdns.org"; classtype:attempted-recon; sid:200006387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gefdilxxmk.duckdns.org"; classtype:attempted-recon; sid:200006388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geftdeyzmd.duckdns.org"; classtype:attempted-recon; sid:200006389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geg.li"; classtype:attempted-recon; sid:200006390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geizuacxsb.duckdns.org"; classtype:attempted-recon; sid:200006391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gemini-00e.blogspot.com"; classtype:attempted-recon; sid:200006392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geminimobimovel.blogspot.com"; classtype:attempted-recon; sid:200006393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gemkcxdyps.duckdns.org"; classtype:attempted-recon; sid:200006394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gene.d3blxfshqg4512.amplifyapp.com"; classtype:attempted-recon; sid:200006395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"genehmigencorner.com"; classtype:attempted-recon; sid:200006396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"general.general-auth.workers.dev"; classtype:attempted-recon; sid:200006397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"generalaa-e69f4.firebaseapp.com"; classtype:attempted-recon; sid:200006398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"generalaa-e69f4.web.app"; classtype:attempted-recon; sid:200006399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"generateethereum.com"; classtype:attempted-recon; sid:200006400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"genie-alba.firebaseapp.com"; classtype:attempted-recon; sid:200006401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geniusinu.net"; classtype:attempted-recon; sid:200006402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"genoeggs.me"; classtype:attempted-recon; sid:200006403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gentl.bibirkumaumeletus.workers.dev"; classtype:attempted-recon; sid:200006404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geoakavfrn.duckdns.org"; classtype:attempted-recon; sid:200006405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"georgehysmith.com"; classtype:attempted-recon; sid:200006406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gepogcxnoj.duckdns.org"; classtype:attempted-recon; sid:200006407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geqcowinec.duckdns.org"; classtype:attempted-recon; sid:200006408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geqytnjpdr.duckdns.org"; classtype:attempted-recon; sid:200006409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gerenciador-caixa-gov-login-th1.blogspot.com"; classtype:attempted-recon; sid:200006410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gergesirtl.duckdns.org"; classtype:attempted-recon; sid:200006411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gerlanguages-serverde.de"; classtype:attempted-recon; sid:200006412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gestion-ameli-fr.com"; classtype:attempted-recon; sid:200006413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gestionarcitadaviviendaenlinea.com"; classtype:attempted-recon; sid:200006414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gestionsigwebchile.com"; classtype:attempted-recon; sid:200006415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"get-myfind.com"; classtype:attempted-recon; sid:200006416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"get.freetopdomino.com"; classtype:attempted-recon; sid:200006417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"getapps.vip"; classtype:attempted-recon; sid:200006418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"getartd.co.vu"; classtype:attempted-recon; sid:200006419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"getbper.com"; classtype:attempted-recon; sid:200006420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"getfremlbb.com"; classtype:attempted-recon; sid:200006421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"getlikesfree.com"; classtype:attempted-recon; sid:200006422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"getmyg.duckdns.org"; classtype:attempted-recon; sid:200006423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"getmyoffercheck.ga"; classtype:attempted-recon; sid:200006424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geuntacqhl.duckdns.org"; classtype:attempted-recon; sid:200006425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gevmara.com"; classtype:attempted-recon; sid:200006426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gevnitureluft029-b93464.ingress-baronn.ewp.live"; classtype:attempted-recon; sid:200006427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfaxtpuanf.duckdns.org"; classtype:attempted-recon; sid:200006428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfazsosiji.duckdns.org"; classtype:attempted-recon; sid:200006429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfbxdykpjy.duckdns.org"; classtype:attempted-recon; sid:200006430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfcvn.bjckam.cn"; classtype:attempted-recon; sid:200006431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfcyogxdhj.duckdns.org"; classtype:attempted-recon; sid:200006432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfdcxb.jzszux.cn"; classtype:attempted-recon; sid:200006433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfdhb.etykbzg.cn"; classtype:attempted-recon; sid:200006434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfdscx.pdxlel.cn"; classtype:attempted-recon; sid:200006435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfjwzmkoql.duckdns.org"; classtype:attempted-recon; sid:200006436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gflkvrgqum.duckdns.org"; classtype:attempted-recon; sid:200006437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfspimgvei.duckdns.org"; classtype:attempted-recon; sid:200006438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfthc.surveysparrow.com"; classtype:attempted-recon; sid:200006439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfxsehghkc.duckdns.org"; classtype:attempted-recon; sid:200006440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfymhsuqtx.duckdns.org"; classtype:attempted-recon; sid:200006441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gfzcqxblwq.duckdns.org"; classtype:attempted-recon; sid:200006442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggclolvzwg.duckdns.org"; classtype:attempted-recon; sid:200006443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggdbhimywg.firebaseapp.com"; classtype:attempted-recon; sid:200006444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggdbhimywg.web.app"; classtype:attempted-recon; sid:200006445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggdfdfd.mfs.gg"; classtype:attempted-recon; sid:200006446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggffftfhhfft.byethost5.com"; classtype:attempted-recon; sid:200006447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gggrtzbxyk.duckdns.org"; classtype:attempted-recon; sid:200006448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gghjj.edvjayw.cn"; classtype:attempted-recon; sid:200006449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gglflfgvxt.duckdns.org"; classtype:attempted-recon; sid:200006450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gglssivgbt.duckdns.org"; classtype:attempted-recon; sid:200006451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggnhfwbxho.duckdns.org"; classtype:attempted-recon; sid:200006452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggpakqungi.duckdns.org"; classtype:attempted-recon; sid:200006453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggtlqrlzyq.duckdns.org"; classtype:attempted-recon; sid:200006454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggyceljtna.duckdns.org"; classtype:attempted-recon; sid:200006455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggyysxjypd.duckdns.org"; classtype:attempted-recon; sid:200006456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghadtiklyf.duckdns.org"; classtype:attempted-recon; sid:200006457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghbkvmrxka.duckdns.org"; classtype:attempted-recon; sid:200006458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghcptsfqdk.duckdns.org"; classtype:attempted-recon; sid:200006459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghfaqgdvbo.duckdns.org"; classtype:attempted-recon; sid:200006460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghfdc.x9130w7.cn"; classtype:attempted-recon; sid:200006461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghfdcv.owydwj.cn"; classtype:attempted-recon; sid:200006462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghfdd.ajoipk.cn"; classtype:attempted-recon; sid:200006463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghfn.gaxrmyy.cn"; classtype:attempted-recon; sid:200006464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghggmhlgpo.duckdns.org"; classtype:attempted-recon; sid:200006465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghgjhhhhhghjjggjjhghjhgjjhgghjghhjghjjg.myportfolio.com"; classtype:attempted-recon; sid:200006466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghivine.it"; classtype:attempted-recon; sid:200006467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghjjk.uistage.cn"; classtype:attempted-recon; sid:200006468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghjtasgkhl.duckdns.org"; classtype:attempted-recon; sid:200006469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghl9uc.webwave.dev"; classtype:attempted-recon; sid:200006470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghorana.com"; classtype:attempted-recon; sid:200006471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghostwhitecluelessdegree.homepagega.repl.co"; classtype:attempted-recon; sid:200006472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghpdugbyyn.duckdns.org"; classtype:attempted-recon; sid:200006473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghqsmcfugi.duckdns.org"; classtype:attempted-recon; sid:200006474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghrjj.bcy0vsl.cn"; classtype:attempted-recon; sid:200006475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghsbafhdtf.duckdns.org"; classtype:attempted-recon; sid:200006476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghtyaischl.duckdns.org"; classtype:attempted-recon; sid:200006477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghxgvnheyq.duckdns.org"; classtype:attempted-recon; sid:200006478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghzxyxlxfd.duckdns.org"; classtype:attempted-recon; sid:200006479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giflstdilscowr.link"; classtype:attempted-recon; sid:200006480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giflztdilscowf.com"; classtype:attempted-recon; sid:200006481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giflztdilscowr.com"; classtype:attempted-recon; sid:200006482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gifted-euclid.185-101-35-170.plesk.page"; classtype:attempted-recon; sid:200006483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giganticvaguepipeline.babybancolombia.repl.co"; classtype:attempted-recon; sid:200006484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gigvpqiupa.duckdns.org"; classtype:attempted-recon; sid:200006485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giirnmmpjz.duckdns.org"; classtype:attempted-recon; sid:200006486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gijgpary.liveblog365.com"; classtype:attempted-recon; sid:200006487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gilbertolopez.com"; classtype:attempted-recon; sid:200006488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ginsikzsvn.duckdns.org"; classtype:attempted-recon; sid:200006489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giovadadzn.duckdns.org"; classtype:attempted-recon; sid:200006490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"girkhgicox.duckdns.org"; classtype:attempted-recon; sid:200006491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"girls-tube.mobi"; classtype:attempted-recon; sid:200006492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giroud-biblesemiotique.com"; classtype:attempted-recon; sid:200006493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gisclxunil.duckdns.org"; classtype:attempted-recon; sid:200006494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gite53-larimonniere.fr"; classtype:attempted-recon; sid:200006495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gitep.com.ar"; classtype:attempted-recon; sid:200006496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giveaway-darwinia.com"; classtype:attempted-recon; sid:200006497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gixdxffehr.duckdns.org"; classtype:attempted-recon; sid:200006498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"giyvzwzmlm.duckdns.org"; classtype:attempted-recon; sid:200006499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjbnvxgval.duckdns.org"; classtype:attempted-recon; sid:200006500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjcnbxeyaxlrmycpwke-lzjgljgjmqapmtlgvnl-d-kqfyinxpoenwiouwal.glitch.me"; classtype:attempted-recon; sid:200006501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjeycfantx.duckdns.org"; classtype:attempted-recon; sid:200006502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjkgmrhvml.duckdns.org"; classtype:attempted-recon; sid:200006503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjljikqerr.duckdns.org"; classtype:attempted-recon; sid:200006504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjoycrbzgd.duckdns.org"; classtype:attempted-recon; sid:200006505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjozfebafp.duckdns.org"; classtype:attempted-recon; sid:200006506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjryijpuny.duckdns.org"; classtype:attempted-recon; sid:200006507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjuvlzjchy.duckdns.org"; classtype:attempted-recon; sid:200006508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gjyasprlvq.duckdns.org"; classtype:attempted-recon; sid:200006509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkbcijdebp.duckdns.org"; classtype:attempted-recon; sid:200006510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkiadlbdkg.duckdns.org"; classtype:attempted-recon; sid:200006511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkisszwioo.duckdns.org"; classtype:attempted-recon; sid:200006512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gklytdpzwp.duckdns.org"; classtype:attempted-recon; sid:200006513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkndqjhace.duckdns.org"; classtype:attempted-recon; sid:200006514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkqpmjulhe.duckdns.org"; classtype:attempted-recon; sid:200006515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkrcqcbahx.duckdns.org"; classtype:attempted-recon; sid:200006516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkrghoofpu.duckdns.org"; classtype:attempted-recon; sid:200006517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkrxtqrioc.duckdns.org"; classtype:attempted-recon; sid:200006518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkvqkozeal.duckdns.org"; classtype:attempted-recon; sid:200006519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gkydvbnqwr.duckdns.org"; classtype:attempted-recon; sid:200006520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gladbachnasen.de"; classtype:attempted-recon; sid:200006521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gladysjohnny.com"; classtype:attempted-recon; sid:200006522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glbohevsds.duckdns.org"; classtype:attempted-recon; sid:200006523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glbqseopze.duckdns.org"; classtype:attempted-recon; sid:200006524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glbxvyp.top"; classtype:attempted-recon; sid:200006525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gldcmedjfg.duckdns.org"; classtype:attempted-recon; sid:200006526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glennrothenberg.com"; classtype:attempted-recon; sid:200006527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glfnuagfwl.duckdns.org"; classtype:attempted-recon; sid:200006528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glitter-wondergriam.4bcm6f0c.workers.dev"; classtype:attempted-recon; sid:200006529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gllgqqzsar.duckdns.org"; classtype:attempted-recon; sid:200006530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gllraauvmm.duckdns.org"; classtype:attempted-recon; sid:200006531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glltefllnanclal.com"; classtype:attempted-recon; sid:200006532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"globovidrosss.blogspot.com"; classtype:attempted-recon; sid:200006533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glogo.org"; classtype:attempted-recon; sid:200006534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glsword.com"; classtype:attempted-recon; sid:200006535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gltkiufwfa.duckdns.org"; classtype:attempted-recon; sid:200006536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"glvgttheht.duckdns.org"; classtype:attempted-recon; sid:200006537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmfbxkfjio.duckdns.org"; classtype:attempted-recon; sid:200006538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmgroupllc.co"; classtype:attempted-recon; sid:200006539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmjzkhpyjv.duckdns.org"; classtype:attempted-recon; sid:200006540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmsocrates.online"; classtype:attempted-recon; sid:200006541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmstudio.netlify.app"; classtype:attempted-recon; sid:200006542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmtckzxlog.duckdns.org"; classtype:attempted-recon; sid:200006543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmxlitt.yolasite.com"; classtype:attempted-recon; sid:200006544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmxnetsupport.weebly.com"; classtype:attempted-recon; sid:200006545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmycmnkfgd.duckdns.org"; classtype:attempted-recon; sid:200006546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmycmviiss.duckdns.org"; classtype:attempted-recon; sid:200006547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gmzszfhgcj.duckdns.org"; classtype:attempted-recon; sid:200006548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gn415v.webwave.dev"; classtype:attempted-recon; sid:200006549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gnbecrckng.duckdns.org"; classtype:attempted-recon; sid:200006550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gnckjyfroh.duckdns.org"; classtype:attempted-recon; sid:200006551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gnfd.bajiaofunction.cn"; classtype:attempted-recon; sid:200006552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gnflmeccbz.duckdns.org"; classtype:attempted-recon; sid:200006553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gnosis-sefe.com"; classtype:attempted-recon; sid:200006554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gntntxhagn.duckdns.org"; classtype:attempted-recon; sid:200006555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"go-indies.com"; classtype:attempted-recon; sid:200006556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"go.ly"; classtype:attempted-recon; sid:200006557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"go24link.com"; classtype:attempted-recon; sid:200006558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"go2travelmalaysia.com"; classtype:attempted-recon; sid:200006559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goafpclfbz.duckdns.org"; classtype:attempted-recon; sid:200006560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gobwlccdwu.duckdns.org"; classtype:attempted-recon; sid:200006561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"godocusign-login.rackapp.workers.dev"; classtype:attempted-recon; sid:200006562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gofreenew.run.place"; classtype:attempted-recon; sid:200006563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gohbvwsiil.duckdns.org"; classtype:attempted-recon; sid:200006564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goikevitek.duckdns.org"; classtype:attempted-recon; sid:200006565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goiopwyaoa.duckdns.org"; classtype:attempted-recon; sid:200006566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gold.zoomcolle.com"; classtype:attempted-recon; sid:200006567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goldcorpinvestment.online"; classtype:attempted-recon; sid:200006568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goldengold.mom"; classtype:attempted-recon; sid:200006569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"golittlebig.com"; classtype:attempted-recon; sid:200006570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gonzaleztransformacion.com.mx"; classtype:attempted-recon; sid:200006571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"good12345.tripod.com"; classtype:attempted-recon; sid:200006572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"google.pancakesvqp.com"; classtype:attempted-recon; sid:200006573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"google.schreinerei-wohlfart.de"; classtype:attempted-recon; sid:200006574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goprxeplht.duckdns.org"; classtype:attempted-recon; sid:200006575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goqcwwkynj.duckdns.org"; classtype:attempted-recon; sid:200006576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gotbglcvbe.duckdns.org"; classtype:attempted-recon; sid:200006577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"govedu-auth-0ffice365-folder.firebaseapp.com"; classtype:attempted-recon; sid:200006578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"govedu-auth-0ffice365-folder.web.app"; classtype:attempted-recon; sid:200006579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gowmsqnynk.duckdns.org"; classtype:attempted-recon; sid:200006580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpbpztmzht.duckdns.org"; classtype:attempted-recon; sid:200006581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpcarautocenter-web-sand-home.blogspot.com"; classtype:attempted-recon; sid:200006582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpcssmmmgy.duckdns.org"; classtype:attempted-recon; sid:200006583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpflltsojg.duckdns.org"; classtype:attempted-recon; sid:200006584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpgmljtbee.duckdns.org"; classtype:attempted-recon; sid:200006585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpkirbbfjw.duckdns.org"; classtype:attempted-recon; sid:200006586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpkkvfygdp.duckdns.org"; classtype:attempted-recon; sid:200006587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpofwcomfk5.top"; classtype:attempted-recon; sid:200006588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpusuldgcc.duckdns.org"; classtype:attempted-recon; sid:200006589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gpwxlwaiol.duckdns.org"; classtype:attempted-recon; sid:200006590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqakpgqzjf.duckdns.org"; classtype:attempted-recon; sid:200006591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqdjj-zaaaa-aaaad-qd2na-cai.raw.ic0.app"; classtype:attempted-recon; sid:200006592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqjpyklkar.duckdns.org"; classtype:attempted-recon; sid:200006593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqouuicjqt.duckdns.org"; classtype:attempted-recon; sid:200006594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqpejlstxf.duckdns.org"; classtype:attempted-recon; sid:200006595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqpfpnpbiy.duckdns.org"; classtype:attempted-recon; sid:200006596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqrmkbudbq.duckdns.org"; classtype:attempted-recon; sid:200006597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqrvqrknfp.duckdns.org"; classtype:attempted-recon; sid:200006598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqsjsfbiuk.duckdns.org"; classtype:attempted-recon; sid:200006599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqtluuaouj.duckdns.org"; classtype:attempted-recon; sid:200006600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gquhpsxeoo.duckdns.org"; classtype:attempted-recon; sid:200006601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqupxmeobh.duckdns.org"; classtype:attempted-recon; sid:200006602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gqutfmrjfm.duckdns.org"; classtype:attempted-recon; sid:200006603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gquvhvhojj.duckdns.org"; classtype:attempted-recon; sid:200006604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gracioussupermall.com"; classtype:attempted-recon; sid:200006605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grand-faceted-sodium.glitch.me"; classtype:attempted-recon; sid:200006606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"graphic-boulder-301015.web.app"; classtype:attempted-recon; sid:200006607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"graysonwarlick.myportfolio.com"; classtype:attempted-recon; sid:200006608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grceywnluy.duckdns.org"; classtype:attempted-recon; sid:200006609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grcslnbqeu.duckdns.org"; classtype:attempted-recon; sid:200006610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"green--dream--6331-on-fleek-co.translate.goog"; classtype:attempted-recon; sid:200006611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"green-pine-7fe7.do020.workers.dev"; classtype:attempted-recon; sid:200006612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"green-surf-5642.5pi4f9jl.workers.dev"; classtype:attempted-recon; sid:200006613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"greenland.co.mz"; classtype:attempted-recon; sid:200006614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"greenlifeconcierge.com"; classtype:attempted-recon; sid:200006615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"greenvonline.com"; classtype:attempted-recon; sid:200006616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"greenwayweb.com"; classtype:attempted-recon; sid:200006617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grfe.723k3s.cn"; classtype:attempted-recon; sid:200006618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grgxjlslkf.duckdns.org"; classtype:attempted-recon; sid:200006619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grhaxflrwh.duckdns.org"; classtype:attempted-recon; sid:200006620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grhvpuoxog.duckdns.org"; classtype:attempted-recon; sid:200006621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grhwutzvuz.duckdns.org"; classtype:attempted-recon; sid:200006622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gripxnagei.duckdns.org"; classtype:attempted-recon; sid:200006623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grivylndbm.duckdns.org"; classtype:attempted-recon; sid:200006624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grknxplylt.duckdns.org"; classtype:attempted-recon; sid:200006625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grlkllljdw.duckdns.org"; classtype:attempted-recon; sid:200006626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"groupesuseg.com.br"; classtype:attempted-recon; sid:200006627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grouptravellady.com"; classtype:attempted-recon; sid:200006628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grove-5bd0a.firebaseapp.com"; classtype:attempted-recon; sid:200006629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grove-5bd0a.web.app"; classtype:attempted-recon; sid:200006630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grst.com"; classtype:attempted-recon; sid:200006631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grtoykmfgj.duckdns.org"; classtype:attempted-recon; sid:200006632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gruop18.tk"; classtype:attempted-recon; sid:200006633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupn2k.com"; classtype:attempted-recon; sid:200006634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupo.ultimatefreehost.in"; classtype:attempted-recon; sid:200006635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupoaguilarguevara.com"; classtype:attempted-recon; sid:200006636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupobancogaliciainforma.galiciaateinfor.repl.co"; classtype:attempted-recon; sid:200006637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupobancolo.grupobancolo.repl.co"; classtype:attempted-recon; sid:200006638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupobancolombia.alertabancolom.repl.co"; classtype:attempted-recon; sid:200006639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupodetrabajo.hostfree.pw"; classtype:attempted-recon; sid:200006640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupoelectorial.hostfree.pw"; classtype:attempted-recon; sid:200006641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupoexitopaya.hostfree.pw"; classtype:attempted-recon; sid:200006642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupoonix.cong.com.br"; classtype:attempted-recon; sid:200006643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grupoosinez.hostfree.pw"; classtype:attempted-recon; sid:200006644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gruposanisidro.mx"; classtype:attempted-recon; sid:200006645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gruppobperbanca.sefar-news.com"; classtype:attempted-recon; sid:200006646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gruppobprweb-com.preview-domain.com"; classtype:attempted-recon; sid:200006647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grvagspjvj.duckdns.org"; classtype:attempted-recon; sid:200006648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"grxgplcpjg.duckdns.org"; classtype:attempted-recon; sid:200006649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gsfxmekbjq.duckdns.org"; classtype:attempted-recon; sid:200006650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gsmpublisher.in"; classtype:attempted-recon; sid:200006651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gsobazlvze.duckdns.org"; classtype:attempted-recon; sid:200006652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gsrl90.hyperphp.com"; classtype:attempted-recon; sid:200006653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gsvmyyemjw.duckdns.org"; classtype:attempted-recon; sid:200006654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gsx2ut-new-apple.com"; classtype:attempted-recon; sid:200006655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtdnhuavqn.duckdns.org"; classtype:attempted-recon; sid:200006656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gteemuezox.duckdns.org"; classtype:attempted-recon; sid:200006657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtgustline.duckdns.org"; classtype:attempted-recon; sid:200006658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtiabwjarw.duckdns.org"; classtype:attempted-recon; sid:200006659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtigrovvs.com"; classtype:attempted-recon; sid:200006660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtixnfxudi.duckdns.org"; classtype:attempted-recon; sid:200006661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtmpkvvcnz.duckdns.org"; classtype:attempted-recon; sid:200006662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtquzybxbo.duckdns.org"; classtype:attempted-recon; sid:200006663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtuwfldwxi.duckdns.org"; classtype:attempted-recon; sid:200006664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtyaner.com"; classtype:attempted-recon; sid:200006665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gtyudrszlc.duckdns.org"; classtype:attempted-recon; sid:200006666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guepparting.mom"; classtype:attempted-recon; sid:200006667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guftoirora.duckdns.org"; classtype:attempted-recon; sid:200006668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guidesrv-infode.de"; classtype:attempted-recon; sid:200006669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guli.onlinebg0.repl.co"; classtype:attempted-recon; sid:200006670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guowpjubcj.duckdns.org"; classtype:attempted-recon; sid:200006671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gupisgxzbm.duckdns.org"; classtype:attempted-recon; sid:200006672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guprosselecto.hostfree.pw"; classtype:attempted-recon; sid:200006673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guqgcxutjn.duckdns.org"; classtype:attempted-recon; sid:200006674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gurukanth.com"; classtype:attempted-recon; sid:200006675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guttercatgang.free-drop.live"; classtype:attempted-recon; sid:200006676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guvhkvzncu.duckdns.org"; classtype:attempted-recon; sid:200006677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guvsxabvrc.duckdns.org"; classtype:attempted-recon; sid:200006678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guxnumsvne.duckdns.org"; classtype:attempted-recon; sid:200006679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvatrgsguy.duckdns.org"; classtype:attempted-recon; sid:200006680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvblrczjuv.duckdns.org"; classtype:attempted-recon; sid:200006681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvbwrpbvjz.duckdns.org"; classtype:attempted-recon; sid:200006682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvesdfrw.duckdns.org"; classtype:attempted-recon; sid:200006683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvhepfrgcq.duckdns.org"; classtype:attempted-recon; sid:200006684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvkdssrzgz.duckdns.org"; classtype:attempted-recon; sid:200006685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvqdwrfgpr.duckdns.org"; classtype:attempted-recon; sid:200006686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvvrmvslex.duckdns.org"; classtype:attempted-recon; sid:200006687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvvymuyaae.duckdns.org"; classtype:attempted-recon; sid:200006688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gvxsdavint.duckdns.org"; classtype:attempted-recon; sid:200006689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwcxsqftjy.duckdns.org"; classtype:attempted-recon; sid:200006690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000001.firebaseapp.com"; classtype:attempted-recon; sid:200006691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000001.web.app"; classtype:attempted-recon; sid:200006692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000002.firebaseapp.com"; classtype:attempted-recon; sid:200006693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000002.web.app"; classtype:attempted-recon; sid:200006694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000003.firebaseapp.com"; classtype:attempted-recon; sid:200006695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000003.web.app"; classtype:attempted-recon; sid:200006696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000004.firebaseapp.com"; classtype:attempted-recon; sid:200006697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000004.web.app"; classtype:attempted-recon; sid:200006698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000005.firebaseapp.com"; classtype:attempted-recon; sid:200006699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000005.web.app"; classtype:attempted-recon; sid:200006700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000006.firebaseapp.com"; classtype:attempted-recon; sid:200006701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000006.web.app"; classtype:attempted-recon; sid:200006702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000007.firebaseapp.com"; classtype:attempted-recon; sid:200006703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000007.web.app"; classtype:attempted-recon; sid:200006704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000008.firebaseapp.com"; classtype:attempted-recon; sid:200006705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000008.web.app"; classtype:attempted-recon; sid:200006706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000009.firebaseapp.com"; classtype:attempted-recon; sid:200006707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwen00000009.web.app"; classtype:attempted-recon; sid:200006708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwfaxpnjjo.duckdns.org"; classtype:attempted-recon; sid:200006709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwijipoekb.duckdns.org"; classtype:attempted-recon; sid:200006710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwocnzmmlp.duckdns.org"; classtype:attempted-recon; sid:200006711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwoxlxhihr.duckdns.org"; classtype:attempted-recon; sid:200006712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwpzbavidg.duckdns.org"; classtype:attempted-recon; sid:200006713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwqnknvssj.duckdns.org"; classtype:attempted-recon; sid:200006714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwubskcnmb.duckdns.org"; classtype:attempted-recon; sid:200006715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gwzwrdkuqu.duckdns.org"; classtype:attempted-recon; sid:200006716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxa1ij.webwave.dev"; classtype:attempted-recon; sid:200006717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxaedzkwal.duckdns.org"; classtype:attempted-recon; sid:200006718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxapxxdvky.duckdns.org"; classtype:attempted-recon; sid:200006719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxhch.gnux2q6.cn"; classtype:attempted-recon; sid:200006720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxhrdbikqc.duckdns.org"; classtype:attempted-recon; sid:200006721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxilehjofv.duckdns.org"; classtype:attempted-recon; sid:200006722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxjjejqwjl.duckdns.org"; classtype:attempted-recon; sid:200006723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxukvfgtzd.duckdns.org"; classtype:attempted-recon; sid:200006724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gxzpajhrpl.duckdns.org"; classtype:attempted-recon; sid:200006725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gykhhmnvjz.duckdns.org"; classtype:attempted-recon; sid:200006726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gykjnhpkgu.duckdns.org"; classtype:attempted-recon; sid:200006727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gymafsfsfp.duckdns.org"; classtype:attempted-recon; sid:200006728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gyoocdsfyt.duckdns.org"; classtype:attempted-recon; sid:200006729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gysfmzvdqz.duckdns.org"; classtype:attempted-recon; sid:200006730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gywlolxnic.duckdns.org"; classtype:attempted-recon; sid:200006731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gyyewocfmn.duckdns.org"; classtype:attempted-recon; sid:200006732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gyzccsnwgj.duckdns.org"; classtype:attempted-recon; sid:200006733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzagxorpeg.duckdns.org"; classtype:attempted-recon; sid:200006734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzcmikdcwq.duckdns.org"; classtype:attempted-recon; sid:200006735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzdoihugbq.duckdns.org"; classtype:attempted-recon; sid:200006736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzdrgfsnkw.duckdns.org"; classtype:attempted-recon; sid:200006737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzhhfjgdeu.duckdns.org"; classtype:attempted-recon; sid:200006738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzkgwwleqf.duckdns.org"; classtype:attempted-recon; sid:200006739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzknnvwemt.duckdns.org"; classtype:attempted-recon; sid:200006740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzkquffapk.duckdns.org"; classtype:attempted-recon; sid:200006741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzmzqjupwn.duckdns.org"; classtype:attempted-recon; sid:200006742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gznkbzluug.duckdns.org"; classtype:attempted-recon; sid:200006743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzveuhmurr.duckdns.org"; classtype:attempted-recon; sid:200006744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzwmqevfdw.duckdns.org"; classtype:attempted-recon; sid:200006745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzxsipvsgh.duckdns.org"; classtype:attempted-recon; sid:200006746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gzzwnhaguq.duckdns.org"; classtype:attempted-recon; sid:200006747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.b2bxjea.com"; classtype:attempted-recon; sid:200006748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.biupqoc.com"; classtype:attempted-recon; sid:200006749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.coinbaive.com"; classtype:attempted-recon; sid:200006750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.croknqp.top"; classtype:attempted-recon; sid:200006751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.fxzqpgl.top"; classtype:attempted-recon; sid:200006752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.gefun18732.top"; classtype:attempted-recon; sid:200006753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.gefun37352.top"; classtype:attempted-recon; sid:200006754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.gefun58122.top"; classtype:attempted-recon; sid:200006755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.gefun68299.top"; classtype:attempted-recon; sid:200006756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.gefun79595.top"; classtype:attempted-recon; sid:200006757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.gefun93676.top"; classtype:attempted-recon; sid:200006758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.gobsaym.top"; classtype:attempted-recon; sid:200006759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.hiflyk28075.top"; classtype:attempted-recon; sid:200006760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.jhafrwo.top"; classtype:attempted-recon; sid:200006761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.jkozclh.top"; classtype:attempted-recon; sid:200006762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.kgoumav.top"; classtype:attempted-recon; sid:200006763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.mhevtwo.top"; classtype:attempted-recon; sid:200006764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.miaycel.top"; classtype:attempted-recon; sid:200006765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.tmaeqcr.top"; classtype:attempted-recon; sid:200006766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.zxgiqvb.top"; classtype:attempted-recon; sid:200006767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h9is92.webwave.dev"; classtype:attempted-recon; sid:200006768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"habbocreditosparati.blogspot.com"; classtype:attempted-recon; sid:200006769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"habi10100200.liveblog365.com"; classtype:attempted-recon; sid:200006770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"habilit-atu.tokem.repl.co"; classtype:attempted-recon; sid:200006771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"habilita-tu.tokemm.repl.co"; classtype:attempted-recon; sid:200006772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hacedordeaventuras.com"; classtype:attempted-recon; sid:200006773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hacof.com"; classtype:attempted-recon; sid:200006774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hadiahchip.com"; classtype:attempted-recon; sid:200006775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hagora-investimentos.com"; classtype:attempted-recon; sid:200006776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hahdaeupdate.es.tl"; classtype:attempted-recon; sid:200006777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"halaman.zyrosite.com"; classtype:attempted-recon; sid:200006778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"halibotton.in"; classtype:attempted-recon; sid:200006779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hall-arch.com"; classtype:attempted-recon; sid:200006780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"handakai.github.io"; classtype:attempted-recon; sid:200006781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"handvina.com"; classtype:attempted-recon; sid:200006782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hangovertest1.blogspot.com"; classtype:attempted-recon; sid:200006783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"harochngpw.duckdns.org"; classtype:attempted-recon; sid:200006784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"haroldhazard1-wixsite-com.filesusr.com"; classtype:attempted-recon; sid:200006785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"harqegtppq.duckdns.org"; classtype:attempted-recon; sid:200006786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"harshdimimplementation.bancoloinf.repl.co"; classtype:attempted-recon; sid:200006787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hatencioncliente.webcindario.com"; classtype:attempted-recon; sid:200006788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hatocorozal.com"; classtype:attempted-recon; sid:200006789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hatrisinstruments.com"; classtype:attempted-recon; sid:200006790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"haxeowmlbf.duckdns.org"; classtype:attempted-recon; sid:200006791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hbdmxlaxci.duckdns.org"; classtype:attempted-recon; sid:200006792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hbkfcbycyv.duckdns.org"; classtype:attempted-recon; sid:200006793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hbkqhfucso.duckdns.org"; classtype:attempted-recon; sid:200006794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hbmjhtzkus.duckdns.org"; classtype:attempted-recon; sid:200006795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcefhnxyqs.duckdns.org"; classtype:attempted-recon; sid:200006796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcfzwxlenl.duckdns.org"; classtype:attempted-recon; sid:200006797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcgodkrqqa.duckdns.org"; classtype:attempted-recon; sid:200006798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcnwdxerby.duckdns.org"; classtype:attempted-recon; sid:200006799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcplbsmotd.duckdns.org"; classtype:attempted-recon; sid:200006800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hctedmsvta.duckdns.org"; classtype:attempted-recon; sid:200006801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcykvwfhvb.duckdns.org"; classtype:attempted-recon; sid:200006802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcyrwozlin.duckdns.org"; classtype:attempted-recon; sid:200006803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdbbgqvasw.duckdns.org"; classtype:attempted-recon; sid:200006804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdeqjqgubh.duckdns.org"; classtype:attempted-recon; sid:200006805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdfliowthr.duckdns.org"; classtype:attempted-recon; sid:200006806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdinfxttzp.duckdns.org"; classtype:attempted-recon; sid:200006807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdmfwxadfa.duckdns.org"; classtype:attempted-recon; sid:200006808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdojbedyqf.duckdns.org"; classtype:attempted-recon; sid:200006809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdrpqiwxpo.duckdns.org"; classtype:attempted-recon; sid:200006810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdvidbhiru.duckdns.org"; classtype:attempted-recon; sid:200006811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdxiiqcvwa.duckdns.org"; classtype:attempted-recon; sid:200006812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hdzrovzxnu.duckdns.org"; classtype:attempted-recon; sid:200006813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"healthatlums.web.app"; classtype:attempted-recon; sid:200006814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heartflo.health"; classtype:attempted-recon; sid:200006815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heartysophisticatedprolog.anjoreor.repl.co"; classtype:attempted-recon; sid:200006816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hebkruksgi.duckdns.org"; classtype:attempted-recon; sid:200006817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hechoparati.hostfree.pw"; classtype:attempted-recon; sid:200006818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hechosoloparati.byethost3.com"; classtype:attempted-recon; sid:200006819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hedefpanel.net"; classtype:attempted-recon; sid:200006820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hegyakqneh.duckdns.org"; classtype:attempted-recon; sid:200006821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heinthu1.github.io"; classtype:attempted-recon; sid:200006822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hejapuddhi.duckdns.org"; classtype:attempted-recon; sid:200006823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hellenic-post.firebaseapp.com"; classtype:attempted-recon; sid:200006824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hellenic-post.web.app"; classtype:attempted-recon; sid:200006825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"help-vystarcu.com"; classtype:attempted-recon; sid:200006826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"help.insecur.saftyalert.workers.dev"; classtype:attempted-recon; sid:200006827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"help.validation-page.workers.dev"; classtype:attempted-recon; sid:200006828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpcase.service10545216541.com"; classtype:attempted-recon; sid:200006829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpcaseid.128793234256.com"; classtype:attempted-recon; sid:200006830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpdeskserv1.duckdns.org"; classtype:attempted-recon; sid:200006831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpdeskserv21.duckdns.org"; classtype:attempted-recon; sid:200006832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpdeskserv25.duckdns.org"; classtype:attempted-recon; sid:200006833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpdeskzimbra.cliven.cl"; classtype:attempted-recon; sid:200006834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpmettaa.firebaseapp.com"; classtype:attempted-recon; sid:200006835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpmettaa.web.app"; classtype:attempted-recon; sid:200006836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpmettacase1000.firebaseapp.com"; classtype:attempted-recon; sid:200006837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpmettacase1000.web.app"; classtype:attempted-recon; sid:200006838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helppadrestricteed.firebaseapp.com"; classtype:attempted-recon; sid:200006839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helppadrestricteed.web.app"; classtype:attempted-recon; sid:200006840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpsecure20224574646.co.vu"; classtype:attempted-recon; sid:200006841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helpsecure5687485198.co.vu"; classtype:attempted-recon; sid:200006842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hendaklahengkau.martulangsore.workers.dev"; classtype:attempted-recon; sid:200006843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"henry.tiny.us"; classtype:attempted-recon; sid:200006844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heqiuvtpel.duckdns.org"; classtype:attempted-recon; sid:200006845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heqywy.ga"; classtype:attempted-recon; sid:200006846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hercarresf.firebaseapp.com"; classtype:attempted-recon; sid:200006847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hertzclubdk.com"; classtype:attempted-recon; sid:200006848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hervochapiteaux.blogspot.com"; classtype:attempted-recon; sid:200006849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hesdrzztka.duckdns.org"; classtype:attempted-recon; sid:200006850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heuagkbgcy.duckdns.org"; classtype:attempted-recon; sid:200006851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hf-hf-hf.com"; classtype:attempted-recon; sid:200006852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfbanjlaud.duckdns.org"; classtype:attempted-recon; sid:200006853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfcxd.bzequa.cn"; classtype:attempted-recon; sid:200006854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfdcv.prnncdu.cn"; classtype:attempted-recon; sid:200006855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfdcv.todqyd.cn"; classtype:attempted-recon; sid:200006856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfdcx.h1h9f03.cn"; classtype:attempted-recon; sid:200006857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfdvc.yj6p41y.cn"; classtype:attempted-recon; sid:200006858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hffyububvk.duckdns.org"; classtype:attempted-recon; sid:200006859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfgcv.nlidsz.cn"; classtype:attempted-recon; sid:200006860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfgdc.djiguyk.cn"; classtype:attempted-recon; sid:200006861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfgdcv.xxl1exy.cn"; classtype:attempted-recon; sid:200006862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfgdv.agmebm.cn"; classtype:attempted-recon; sid:200006863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfgdv.mvjarhs.cn"; classtype:attempted-recon; sid:200006864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfmiehrpxz.duckdns.org"; classtype:attempted-recon; sid:200006865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfqjmefvwl.duckdns.org"; classtype:attempted-recon; sid:200006866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfyohnidhj.duckdns.org"; classtype:attempted-recon; sid:200006867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfzhalzije.duckdns.org"; classtype:attempted-recon; sid:200006868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hg5566dh.com"; classtype:attempted-recon; sid:200006869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hg5566gx.com"; classtype:attempted-recon; sid:200006870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgcxd.zmouil7.cn"; classtype:attempted-recon; sid:200006871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgdkwwzvej.duckdns.org"; classtype:attempted-recon; sid:200006872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgfcv.zlytuu.cn"; classtype:attempted-recon; sid:200006873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgfdjhegyudusz-5nsgrscxl6364789.codeanyapp.com"; classtype:attempted-recon; sid:200006874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hggqnsydhn.duckdns.org"; classtype:attempted-recon; sid:200006875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hghfd.qd6i0b.cn"; classtype:attempted-recon; sid:200006876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hghjhkjjgg.vfgjkkhglkl.workers.dev"; classtype:attempted-recon; sid:200006877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgiyurk.ml"; classtype:attempted-recon; sid:200006878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgjnoualjx.duckdns.org"; classtype:attempted-recon; sid:200006879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hglpxkvkut.duckdns.org"; classtype:attempted-recon; sid:200006880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgpohhmxbp.duckdns.org"; classtype:attempted-recon; sid:200006881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgppzhcnkj.duckdns.org"; classtype:attempted-recon; sid:200006882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgukrmgizf.duckdns.org"; classtype:attempted-recon; sid:200006883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hguoacbejq.duckdns.org"; classtype:attempted-recon; sid:200006884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgyjkoxnwx.duckdns.org"; classtype:attempted-recon; sid:200006885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hh7n2-5yaaa-aaaad-qdrza-cai.ic0.app"; classtype:attempted-recon; sid:200006886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhfggtghxz.firebaseapp.com"; classtype:attempted-recon; sid:200006887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhiroonfrc.com"; classtype:attempted-recon; sid:200006888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhjkk.txydihu.cn"; classtype:attempted-recon; sid:200006889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhjlkbuyum.duckdns.org"; classtype:attempted-recon; sid:200006890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhlznazcwu.duckdns.org"; classtype:attempted-recon; sid:200006891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhmibuscfp.duckdns.org"; classtype:attempted-recon; sid:200006892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhmwdupluz.duckdns.org"; classtype:attempted-recon; sid:200006893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiazwyqiqg.duckdns.org"; classtype:attempted-recon; sid:200006894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hidden-mud-9b49.offiice.workers.dev"; classtype:attempted-recon; sid:200006895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hidelsxziy.duckdns.org"; classtype:attempted-recon; sid:200006896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hidrdxrsfc.duckdns.org"; classtype:attempted-recon; sid:200006897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hifly10365.top"; classtype:attempted-recon; sid:200006898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hifly21173.top"; classtype:attempted-recon; sid:200006899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hifly27702.top"; classtype:attempted-recon; sid:200006900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hifly62556.top"; classtype:attempted-recon; sid:200006901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hifly85295.top"; classtype:attempted-recon; sid:200006902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hifly96975.top"; classtype:attempted-recon; sid:200006903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiflyk47344.top"; classtype:attempted-recon; sid:200006904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiflyk66656.top"; classtype:attempted-recon; sid:200006905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"higgs6b.gq"; classtype:attempted-recon; sid:200006906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hijihpepow.duckdns.org"; classtype:attempted-recon; sid:200006907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiklqcwfgp.duckdns.org"; classtype:attempted-recon; sid:200006908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"himalayansherpa.com.au"; classtype:attempted-recon; sid:200006909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"himbauane.blogspot.com"; classtype:attempted-recon; sid:200006910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"himvnjbujt.duckdns.org"; classtype:attempted-recon; sid:200006911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hingehealths.com"; classtype:attempted-recon; sid:200006912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiper2m.taplink.ws"; classtype:attempted-recon; sid:200006913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiper2pdf.com"; classtype:attempted-recon; sid:200006914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiperconsultamaio.com"; classtype:attempted-recon; sid:200006915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hipersexta2m.com"; classtype:attempted-recon; sid:200006916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiperxz.com"; classtype:attempted-recon; sid:200006917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hisoftsxwnf.web.app"; classtype:attempted-recon; sid:200006918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hissfmablw.duckdns.org"; classtype:attempted-recon; sid:200006919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hitman71hd-wixsite-com.filesusr.com"; classtype:attempted-recon; sid:200006920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiwqnrhamd.duckdns.org"; classtype:attempted-recon; sid:200006921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hiy.mlbb-candylands.my.id"; classtype:attempted-recon; sid:200006922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hizuvotcnz.duckdns.org"; classtype:attempted-recon; sid:200006923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hj52rs.hyperphp.com"; classtype:attempted-recon; sid:200006924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjcyxaorvl.duckdns.org"; classtype:attempted-recon; sid:200006925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjdgfgdh.hostfree.pw"; classtype:attempted-recon; sid:200006926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjepsifkbn.duckdns.org"; classtype:attempted-recon; sid:200006927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjfgc.xsqnoij.cn"; classtype:attempted-recon; sid:200006928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjfgcv.tj0wtkr.cn"; classtype:attempted-recon; sid:200006929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjfgcv.vxrxqz.cn"; classtype:attempted-recon; sid:200006930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjfgv.ximogi.cn"; classtype:attempted-recon; sid:200006931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjgsgjsfhsut.webcindario.com"; classtype:attempted-recon; sid:200006932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjhadveurx231.dynssl.com"; classtype:attempted-recon; sid:200006933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjhjhgjkhjk.vfgjkkhglkl.workers.dev"; classtype:attempted-recon; sid:200006934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjjpsyucpd.duckdns.org"; classtype:attempted-recon; sid:200006935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjncvgviaw.duckdns.org"; classtype:attempted-recon; sid:200006936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjnezmjtxh.duckdns.org"; classtype:attempted-recon; sid:200006937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjnybdgiau.duckdns.org"; classtype:attempted-recon; sid:200006938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjnztiybdl.duckdns.org"; classtype:attempted-recon; sid:200006939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjrftzfkhn.duckdns.org"; classtype:attempted-recon; sid:200006940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjrwosxvxb.duckdns.org"; classtype:attempted-recon; sid:200006941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjy87hjy87.hyperphp.com"; classtype:attempted-recon; sid:200006942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkcewbyczi.duckdns.org"; classtype:attempted-recon; sid:200006943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkdshtkrgb.duckdns.org"; classtype:attempted-recon; sid:200006944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hklbxnaprx.duckdns.org"; classtype:attempted-recon; sid:200006945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkmnqctrze.duckdns.org"; classtype:attempted-recon; sid:200006946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkqtwxgcvf.duckdns.org"; classtype:attempted-recon; sid:200006947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkqyegrqqf.duckdns.org"; classtype:attempted-recon; sid:200006948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkrlmryajw.duckdns.org"; classtype:attempted-recon; sid:200006949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkrxiscpvg.duckdns.org"; classtype:attempted-recon; sid:200006950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hksjwytsgg.duckdns.org"; classtype:attempted-recon; sid:200006951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hksraktvjy.duckdns.org"; classtype:attempted-recon; sid:200006952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkxygmpjhf.duckdns.org"; classtype:attempted-recon; sid:200006953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hkyslixhgp.duckdns.org"; classtype:attempted-recon; sid:200006954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hldeeqfwqu.duckdns.org"; classtype:attempted-recon; sid:200006955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hleapnugob.duckdns.org"; classtype:attempted-recon; sid:200006956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hlguxuzsqq.duckdns.org"; classtype:attempted-recon; sid:200006957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hlhzzgqhlt.duckdns.org"; classtype:attempted-recon; sid:200006958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hlqxfxjmpd.duckdns.org"; classtype:attempted-recon; sid:200006959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hlvzcdhtfs.duckdns.org"; classtype:attempted-recon; sid:200006960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hlwnaoppmf.duckdns.org"; classtype:attempted-recon; sid:200006961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hm.ru"; classtype:attempted-recon; sid:200006962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmahio.cf"; classtype:attempted-recon; sid:200006963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmclixvoqg.duckdns.org"; classtype:attempted-recon; sid:200006964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmhgolmtqx.duckdns.org"; classtype:attempted-recon; sid:200006965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmncsojrkf.duckdns.org"; classtype:attempted-recon; sid:200006966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmnwkcdeir.duckdns.org"; classtype:attempted-recon; sid:200006967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmpxelzriu.duckdns.org"; classtype:attempted-recon; sid:200006968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmrgaqphji.duckdns.org"; classtype:attempted-recon; sid:200006969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hmzblxzgqb.duckdns.org"; classtype:attempted-recon; sid:200006970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hnbaypbhvw.duckdns.org"; classtype:attempted-recon; sid:200006971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hngq2b.webwave.dev"; classtype:attempted-recon; sid:200006972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hnjpyftvfb.duckdns.org"; classtype:attempted-recon; sid:200006973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hnnhaxebwx.duckdns.org"; classtype:attempted-recon; sid:200006974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hnpgiawikn.duckdns.org"; classtype:attempted-recon; sid:200006975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hnvcodmdxh.duckdns.org"; classtype:attempted-recon; sid:200006976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hoaqnvzczy.duckdns.org"; classtype:attempted-recon; sid:200006977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hobvernewus.itsaol.com"; classtype:attempted-recon; sid:200006978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hodseqverd.duckdns.org"; classtype:attempted-recon; sid:200006979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hoem-fute-784.firebaseapp.com"; classtype:attempted-recon; sid:200006980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hoem-fute-784.web.app"; classtype:attempted-recon; sid:200006981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hoje-temos-solucoes.com"; classtype:attempted-recon; sid:200006982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hokshasotre.com"; classtype:attempted-recon; sid:200006983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hokxdqvxcj.duckdns.org"; classtype:attempted-recon; sid:200006984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"holding-energy.ru"; classtype:attempted-recon; sid:200006985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"holidaysinkerala.org"; classtype:attempted-recon; sid:200006986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"holnkbrktg.duckdns.org"; classtype:attempted-recon; sid:200006987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"holy-brook-fe7c.set1s511135.workers.dev"; classtype:attempted-recon; sid:200006988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"holy-disk-fe09.valeracooper00.workers.dev"; classtype:attempted-recon; sid:200006989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"holy-pine-586f.mariosa5862.workers.dev"; classtype:attempted-recon; sid:200006990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"holy-wind-f028.vgreengolf8866.workers.dev"; classtype:attempted-recon; sid:200006991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homadecook.com"; classtype:attempted-recon; sid:200006992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home.babysswap.com"; classtype:attempted-recon; sid:200006993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home.ojwqdo.repl.co"; classtype:attempted-recon; sid:200006994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home.revisiongalicia.repl.co"; classtype:attempted-recon; sid:200006995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homebanking.homebg.repl.co"; classtype:attempted-recon; sid:200006996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homebanking.pacinet.repl.co"; classtype:attempted-recon; sid:200006997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homebankingcom.online-bankingb.repl.co"; classtype:attempted-recon; sid:200006998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homebnking.krbro.repl.co"; classtype:attempted-recon; sid:200006999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homebt.myportfolio.com"; classtype:attempted-recon; sid:200007000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homeeminetbanking.ingresoonline.repl.co"; classtype:attempted-recon; sid:200007001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homemade.school"; classtype:attempted-recon; sid:200007002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homenbanking45.ddns.net"; classtype:attempted-recon; sid:200007003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homeoffice365login.myportfolio.com"; classtype:attempted-recon; sid:200007004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homeofloveclt.com"; classtype:attempted-recon; sid:200007005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homepersonasita7u.0989000.repl.co"; classtype:attempted-recon; sid:200007006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homesquareyard.com"; classtype:attempted-recon; sid:200007007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homijqvkcn.duckdns.org"; classtype:attempted-recon; sid:200007008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hongpham.com.vn"; classtype:attempted-recon; sid:200007009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"honosglobalcorp.com"; classtype:attempted-recon; sid:200007010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"honounced.com"; classtype:attempted-recon; sid:200007011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hopeful-roentgen.209-127-178-48.plesk.page"; classtype:attempted-recon; sid:200007012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hopxgroup.com"; classtype:attempted-recon; sid:200007013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hostings.kilinkis.me"; classtype:attempted-recon; sid:200007014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hostnix.net"; classtype:attempted-recon; sid:200007015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hotel-pontos.gr"; classtype:attempted-recon; sid:200007016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hotelbooking-saydabad-jatrabari.com"; classtype:attempted-recon; sid:200007017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hotelxcaretrivieramaya.com"; classtype:attempted-recon; sid:200007018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hotn-immutable.blogspot.com"; classtype:attempted-recon; sid:200007019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hotwufsvny.duckdns.org"; classtype:attempted-recon; sid:200007020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hounbvc-c7661.web.app"; classtype:attempted-recon; sid:200007021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"house18.info"; classtype:attempted-recon; sid:200007022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"housebase.hercobuly.biz"; classtype:attempted-recon; sid:200007023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"houseofscotland.com.au"; classtype:attempted-recon; sid:200007024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"howslife.com.tw"; classtype:attempted-recon; sid:200007025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hoytcuptdl.duckdns.org"; classtype:attempted-recon; sid:200007026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpdpautbqp.duckdns.org"; classtype:attempted-recon; sid:200007027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpfihqystw.duckdns.org"; classtype:attempted-recon; sid:200007028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpicyrfunv.duckdns.org"; classtype:attempted-recon; sid:200007029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hplikormuk.duckdns.org"; classtype:attempted-recon; sid:200007030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpmncjloie.duckdns.org"; classtype:attempted-recon; sid:200007031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpplotters.in"; classtype:attempted-recon; sid:200007032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hprt-4kvuhtyw.webcindario.com"; classtype:attempted-recon; sid:200007033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpsqccegga.duckdns.org"; classtype:attempted-recon; sid:200007034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hptaqciyyr.duckdns.org"; classtype:attempted-recon; sid:200007035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpubzomwrg.duckdns.org"; classtype:attempted-recon; sid:200007036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpwlfchihq.duckdns.org"; classtype:attempted-recon; sid:200007037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpxhvtawxl.duckdns.org"; classtype:attempted-recon; sid:200007038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpzgvylybn.duckdns.org"; classtype:attempted-recon; sid:200007039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hqdgunggvn.duckdns.org"; classtype:attempted-recon; sid:200007040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hqpzyzrwis.duckdns.org"; classtype:attempted-recon; sid:200007041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hqwfmppvpd.firebaseapp.com"; classtype:attempted-recon; sid:200007042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hqwfmppvpd.web.app"; classtype:attempted-recon; sid:200007043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrcwgbwyth.duckdns.org"; classtype:attempted-recon; sid:200007044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrhrhrttjtjtr.000webhostapp.com"; classtype:attempted-recon; sid:200007045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrippzfwhv.duckdns.org"; classtype:attempted-recon; sid:200007046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrmclrvjzz.duckdns.org"; classtype:attempted-recon; sid:200007047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrndzjdmwp.duckdns.org"; classtype:attempted-recon; sid:200007048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrrnfgdahi.duckdns.org"; classtype:attempted-recon; sid:200007049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrrnghgell.duckdns.org"; classtype:attempted-recon; sid:200007050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrrodmqcrm.duckdns.org"; classtype:attempted-recon; sid:200007051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrxhnuujpf.duckdns.org"; classtype:attempted-recon; sid:200007052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrytbhbseo.duckdns.org"; classtype:attempted-recon; sid:200007053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hrzrciodfi.duckdns.org"; classtype:attempted-recon; sid:200007054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hsfiqhxtgq.duckdns.org"; classtype:attempted-recon; sid:200007055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hshjzexeee.duckdns.org"; classtype:attempted-recon; sid:200007056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hsifcvzcko.duckdns.org"; classtype:attempted-recon; sid:200007057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hsjpenmsrr.duckdns.org"; classtype:attempted-recon; sid:200007058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hsoggftcme.duckdns.org"; classtype:attempted-recon; sid:200007059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hszc168.com"; classtype:attempted-recon; sid:200007060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ht.booking-hk-agoda.com"; classtype:attempted-recon; sid:200007061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htalflttnm.duckdns.org"; classtype:attempted-recon; sid:200007062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htkeyetuqg.duckdns.org"; classtype:attempted-recon; sid:200007063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"html-update-okay99.firebaseapp.com"; classtype:attempted-recon; sid:200007064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"html-update-okay99.web.app"; classtype:attempted-recon; sid:200007065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htnfebbtur.duckdns.org"; classtype:attempted-recon; sid:200007066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htpnsyoyzz.duckdns.org"; classtype:attempted-recon; sid:200007067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htrh.ytxzyy.cn"; classtype:attempted-recon; sid:200007068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"httpeugnerally-wixsite-com.filesusr.com"; classtype:attempted-recon; sid:200007069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"https-ernail-business-ionoscom.glitch.me"; classtype:attempted-recon; sid:200007070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"httpswwwbienlineabicomgtiniciosesioninicioautentic.bienlinea.repl.co"; classtype:attempted-recon; sid:200007071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htulwoylry.duckdns.org"; classtype:attempted-recon; sid:200007072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htuxdpwzqb.duckdns.org"; classtype:attempted-recon; sid:200007073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huagema20.pages.dev"; classtype:attempted-recon; sid:200007074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huainamkhun.ac.th"; classtype:attempted-recon; sid:200007075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huangxc.com"; classtype:attempted-recon; sid:200007076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hubfalcfnj.duckdns.org"; classtype:attempted-recon; sid:200007077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hubfileshareoffice365.myportfolio.com"; classtype:attempted-recon; sid:200007078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hublifefinancials.com"; classtype:attempted-recon; sid:200007079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hufcbrakil.duckdns.org"; classtype:attempted-recon; sid:200007080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hugmhtnmbq.duckdns.org"; classtype:attempted-recon; sid:200007081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hukwqqtdpl.duckdns.org"; classtype:attempted-recon; sid:200007082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hulu-com-activate.sitey.me"; classtype:attempted-recon; sid:200007083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hulu-hulu-com-activate.sitey.me"; classtype:attempted-recon; sid:200007084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hulu.sitey.me"; classtype:attempted-recon; sid:200007085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hungarianjewishtribe.com"; classtype:attempted-recon; sid:200007086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hunzabazaar.com"; classtype:attempted-recon; sid:200007087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huog3-aaaaa-aaaad-qd2la-cai.raw.ic0.app"; classtype:attempted-recon; sid:200007088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"husiwei8.top"; classtype:attempted-recon; sid:200007089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"husodipyjb.duckdns.org"; classtype:attempted-recon; sid:200007090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hutans.uno"; classtype:attempted-recon; sid:200007091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hutgtrmgqp.duckdns.org"; classtype:attempted-recon; sid:200007092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hutkwhhavh.duckdns.org"; classtype:attempted-recon; sid:200007093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hutoknepper.de"; classtype:attempted-recon; sid:200007094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huuhwshcln.duckdns.org"; classtype:attempted-recon; sid:200007095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huusrhqtqd.duckdns.org"; classtype:attempted-recon; sid:200007096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huxioihzlg.duckdns.org"; classtype:attempted-recon; sid:200007097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huxvnnalur.duckdns.org"; classtype:attempted-recon; sid:200007098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huxycvrsni.duckdns.org"; classtype:attempted-recon; sid:200007099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huynguyen2k.github.io"; classtype:attempted-recon; sid:200007100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huzicimbcg.duckdns.org"; classtype:attempted-recon; sid:200007101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huzjizhhmg.duckdns.org"; classtype:attempted-recon; sid:200007102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvcgeqqdjv.duckdns.org"; classtype:attempted-recon; sid:200007103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvcjocqkbh.duckdns.org"; classtype:attempted-recon; sid:200007104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvdarnqvvr.duckdns.org"; classtype:attempted-recon; sid:200007105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvekjpnnci.duckdns.org"; classtype:attempted-recon; sid:200007106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvhbfzypul.duckdns.org"; classtype:attempted-recon; sid:200007107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvillpzyot.duckdns.org"; classtype:attempted-recon; sid:200007108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvkkasbcqr.duckdns.org"; classtype:attempted-recon; sid:200007109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvmzoykobg.duckdns.org"; classtype:attempted-recon; sid:200007110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvohtdclei.duckdns.org"; classtype:attempted-recon; sid:200007111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvricogdku.duckdns.org"; classtype:attempted-recon; sid:200007112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvsdutyump.duckdns.org"; classtype:attempted-recon; sid:200007113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvvpfkyftz.duckdns.org"; classtype:attempted-recon; sid:200007114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvxefdtvfv.duckdns.org"; classtype:attempted-recon; sid:200007115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hvyofpalql.duckdns.org"; classtype:attempted-recon; sid:200007116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwatgecgqc.duckdns.org"; classtype:attempted-recon; sid:200007117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwblleetml.duckdns.org"; classtype:attempted-recon; sid:200007118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwefjprqik.duckdns.org"; classtype:attempted-recon; sid:200007119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwfcymjnaj.duckdns.org"; classtype:attempted-recon; sid:200007120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwfrwyutdz.duckdns.org"; classtype:attempted-recon; sid:200007121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwfveihoxk.duckdns.org"; classtype:attempted-recon; sid:200007122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwjphdypyh.duckdns.org"; classtype:attempted-recon; sid:200007123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwmpcqebxs.duckdns.org"; classtype:attempted-recon; sid:200007124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwnxsvosqy.duckdns.org"; classtype:attempted-recon; sid:200007125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwotskaanw.duckdns.org"; classtype:attempted-recon; sid:200007126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwuypqahpu.duckdns.org"; classtype:attempted-recon; sid:200007127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwwqezbzie.duckdns.org"; classtype:attempted-recon; sid:200007128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwxzpffyvp.duckdns.org"; classtype:attempted-recon; sid:200007129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hwyfqenpav.duckdns.org"; classtype:attempted-recon; sid:200007130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxaxysjjzi.duckdns.org"; classtype:attempted-recon; sid:200007131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxfarhhejn.duckdns.org"; classtype:attempted-recon; sid:200007132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxmjklejrs.duckdns.org"; classtype:attempted-recon; sid:200007133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxmpsrhsno.duckdns.org"; classtype:attempted-recon; sid:200007134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxooojrnaa.duckdns.org"; classtype:attempted-recon; sid:200007135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxtyptzhmc.duckdns.org"; classtype:attempted-recon; sid:200007136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxwhhbkugr.duckdns.org"; classtype:attempted-recon; sid:200007137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxwrraxerr.duckdns.org"; classtype:attempted-recon; sid:200007138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxxcjmktct.duckdns.org"; classtype:attempted-recon; sid:200007139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hxybuphssh.duckdns.org"; classtype:attempted-recon; sid:200007140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hydnocrpwf.duckdns.org"; classtype:attempted-recon; sid:200007141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hydro-globe-industrie.com"; classtype:attempted-recon; sid:200007142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hygfcbkjhmmm.weeblysite.com"; classtype:attempted-recon; sid:200007143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyhssfqrzd.duckdns.org"; classtype:attempted-recon; sid:200007144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hynsejssff.duckdns.org"; classtype:attempted-recon; sid:200007145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyp.ae"; classtype:attempted-recon; sid:200007146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hype-primates-embassy.monkelabs.cf"; classtype:attempted-recon; sid:200007147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyperx82hdas9o.liveblog365.com"; classtype:attempted-recon; sid:200007148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hypnobirthinggta.com"; classtype:attempted-recon; sid:200007149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyqiye.com"; classtype:attempted-recon; sid:200007150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyrdqwobtw.duckdns.org"; classtype:attempted-recon; sid:200007151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyusindkgv.duckdns.org"; classtype:attempted-recon; sid:200007152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyvjhcczbl.duckdns.org"; classtype:attempted-recon; sid:200007153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyvnzhhvuu.duckdns.org"; classtype:attempted-recon; sid:200007154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hyxgsasydj.duckdns.org"; classtype:attempted-recon; sid:200007155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hzagyentof.duckdns.org"; classtype:attempted-recon; sid:200007156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hzbtxdotqs.duckdns.org"; classtype:attempted-recon; sid:200007157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hzehamesqa.duckdns.org"; classtype:attempted-recon; sid:200007158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hzeylzzqpw.duckdns.org"; classtype:attempted-recon; sid:200007159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hzgtftiwni.duckdns.org"; classtype:attempted-recon; sid:200007160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hznsldmjyn.duckdns.org"; classtype:attempted-recon; sid:200007161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hzvooubgpx.duckdns.org"; classtype:attempted-recon; sid:200007162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"i-ask332.dga.jp"; classtype:attempted-recon; sid:200007163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"i-auth.ga"; classtype:attempted-recon; sid:200007164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"i-rea.com"; classtype:attempted-recon; sid:200007165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"i-tps.cam"; classtype:attempted-recon; sid:200007166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"i.violationspage.validationspege.workers.dev"; classtype:attempted-recon; sid:200007167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"i8.ae"; classtype:attempted-recon; sid:200007168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iaccess-login.thaigemmart.com"; classtype:attempted-recon; sid:200007169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iaeoni.shusxzr.cn"; classtype:attempted-recon; sid:200007170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iaeoni.smowjng.cn"; classtype:attempted-recon; sid:200007171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iaeoni.wsksfna.cn"; classtype:attempted-recon; sid:200007172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iagfswrhkk.duckdns.org"; classtype:attempted-recon; sid:200007173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ialixgrctn.duckdns.org"; classtype:attempted-recon; sid:200007174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ianlmptwwd.duckdns.org"; classtype:attempted-recon; sid:200007175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iayjamfvvo.duckdns.org"; classtype:attempted-recon; sid:200007176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibashr.site"; classtype:attempted-recon; sid:200007177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibbmhymers.duckdns.org"; classtype:attempted-recon; sid:200007178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibcivklhls.duckdns.org"; classtype:attempted-recon; sid:200007179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iberostarhotelsresorts.com"; classtype:attempted-recon; sid:200007180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibgfsgcaim.duckdns.org"; classtype:attempted-recon; sid:200007181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibhkmxvtun.duckdns.org"; classtype:attempted-recon; sid:200007182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibkluwoebn.duckdns.org"; classtype:attempted-recon; sid:200007183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibkzqefhcq.duckdns.org"; classtype:attempted-recon; sid:200007184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iblujrkxsd.duckdns.org"; classtype:attempted-recon; sid:200007185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibpm.ru"; classtype:attempted-recon; sid:200007186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibpobaqltg.duckdns.org"; classtype:attempted-recon; sid:200007187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibraibraa170.42web.io"; classtype:attempted-recon; sid:200007188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibsrbwmfoh.duckdns.org"; classtype:attempted-recon; sid:200007189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibvztdqbdl.duckdns.org"; classtype:attempted-recon; sid:200007190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibwshqdelr.duckdns.org"; classtype:attempted-recon; sid:200007191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ibxlkajvzr.duckdns.org"; classtype:attempted-recon; sid:200007192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icat.tg"; classtype:attempted-recon; sid:200007193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icccokbrcb.duckdns.org"; classtype:attempted-recon; sid:200007194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iccevxvlvh.duckdns.org"; classtype:attempted-recon; sid:200007195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iccu-2fa.firebaseapp.com"; classtype:attempted-recon; sid:200007196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iccu-2fa.web.app"; classtype:attempted-recon; sid:200007197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iccu-a.web.app"; classtype:attempted-recon; sid:200007198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iccu-ie.firebaseapp.com"; classtype:attempted-recon; sid:200007199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iccu-ie.web.app"; classtype:attempted-recon; sid:200007200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icexxumqdb.duckdns.org"; classtype:attempted-recon; sid:200007201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ichosenimports.com"; classtype:attempted-recon; sid:200007202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icloud.ubicado-es.info"; classtype:attempted-recon; sid:200007203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icloudfind-id.info"; classtype:attempted-recon; sid:200007204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icloudfind-my.info"; classtype:attempted-recon; sid:200007205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icoicfhtsv.duckdns.org"; classtype:attempted-recon; sid:200007206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icon.hyqkyrz.cn"; classtype:attempted-recon; sid:200007207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iconmuzikworldwide.com"; classtype:attempted-recon; sid:200007208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icpwyokxcv.duckdns.org"; classtype:attempted-recon; sid:200007209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icrrczgbbl.duckdns.org"; classtype:attempted-recon; sid:200007210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icsconsultant.net"; classtype:attempted-recon; sid:200007211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icwmxwspqq.duckdns.org"; classtype:attempted-recon; sid:200007212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icy-block-93df.edrees368.workers.dev"; classtype:attempted-recon; sid:200007213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icy-lab-beb.ukc904io.workers.dev"; classtype:attempted-recon; sid:200007214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"id-000064updatenow.weebly.com"; classtype:attempted-recon; sid:200007215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"id-64300000-updatenow.weebly.com"; classtype:attempted-recon; sid:200007216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"id-optus-verify.firebaseapp.com"; classtype:attempted-recon; sid:200007217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"id-optus-verify.web.app"; classtype:attempted-recon; sid:200007218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"id682141.click"; classtype:attempted-recon; sid:200007219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"id9658.de"; classtype:attempted-recon; sid:200007220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idealli.fun"; classtype:attempted-recon; sid:200007221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idedzsrsmh.duckdns.org"; classtype:attempted-recon; sid:200007222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ideomaker.cl"; classtype:attempted-recon; sid:200007223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idfafxdhbj.duckdns.org"; classtype:attempted-recon; sid:200007224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idnrqwkhxm.duckdns.org"; classtype:attempted-recon; sid:200007225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idobeamolax.com"; classtype:attempted-recon; sid:200007226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idolnutrition.com"; classtype:attempted-recon; sid:200007227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idqlhzyoni.duckdns.org"; classtype:attempted-recon; sid:200007228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idribmrezp.duckdns.org"; classtype:attempted-recon; sid:200007229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ids-s.de"; classtype:attempted-recon; sid:200007230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"idyvldqswe.duckdns.org"; classtype:attempted-recon; sid:200007231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ieddevbcid.duckdns.org"; classtype:attempted-recon; sid:200007232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iehkyrkzzw.duckdns.org"; classtype:attempted-recon; sid:200007233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ieljxqntrk.duckdns.org"; classtype:attempted-recon; sid:200007234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ieluisfelipecenteno.edu.co"; classtype:attempted-recon; sid:200007235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ieolbazxzc.duckdns.org"; classtype:attempted-recon; sid:200007236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iepsanjosemiguia.edu.pe"; classtype:attempted-recon; sid:200007237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iepwrwnsll.duckdns.org"; classtype:attempted-recon; sid:200007238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iezmskjblb.duckdns.org"; classtype:attempted-recon; sid:200007239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ifaxdwtmsa.duckdns.org"; classtype:attempted-recon; sid:200007240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ifibybo.cluster028.hosting.ovh.net"; classtype:attempted-recon; sid:200007241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ifilgglvbp.duckdns.org"; classtype:attempted-recon; sid:200007242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ifkoorofxk.duckdns.org"; classtype:attempted-recon; sid:200007243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iframejld.avent-media.fr"; classtype:attempted-recon; sid:200007244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ifufbrofle.duckdns.org"; classtype:attempted-recon; sid:200007245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ifysgymvhn.duckdns.org"; classtype:attempted-recon; sid:200007246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igdfapnnpf.duckdns.org"; classtype:attempted-recon; sid:200007247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igftgbxauu.duckdns.org"; classtype:attempted-recon; sid:200007248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ighierapft.duckdns.org"; classtype:attempted-recon; sid:200007249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igokocejgh.duckdns.org"; classtype:attempted-recon; sid:200007250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igopjfiyqa.duckdns.org"; classtype:attempted-recon; sid:200007251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igotinnovative.com"; classtype:attempted-recon; sid:200007252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igqokg.webwave.dev"; classtype:attempted-recon; sid:200007253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igsolthermsolar.blogspot.com"; classtype:attempted-recon; sid:200007254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igxsybykct.duckdns.org"; classtype:attempted-recon; sid:200007255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"igzgqaagvu.duckdns.org"; classtype:attempted-recon; sid:200007256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihasrqxmfl.duckdns.org"; classtype:attempted-recon; sid:200007257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihblhkrveu.duckdns.org"; classtype:attempted-recon; sid:200007258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihdflwpvsg.duckdns.org"; classtype:attempted-recon; sid:200007259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihfrgzvtgb.duckdns.org"; classtype:attempted-recon; sid:200007260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihispekcax.duckdns.org"; classtype:attempted-recon; sid:200007261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihmhwuotka.duckdns.org"; classtype:attempted-recon; sid:200007262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihueuyekcc.duckdns.org"; classtype:attempted-recon; sid:200007263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ihxhyfjfwz.duckdns.org"; classtype:attempted-recon; sid:200007264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iibyurlchu.duckdns.org"; classtype:attempted-recon; sid:200007265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iicconsulting.com"; classtype:attempted-recon; sid:200007266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iigitcnhfm.duckdns.org"; classtype:attempted-recon; sid:200007267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iigwxxlzwo.duckdns.org"; classtype:attempted-recon; sid:200007268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iihcqxdjdy.duckdns.org"; classtype:attempted-recon; sid:200007269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iiink.d2if7qfe6ye8b8.amplifyapp.com"; classtype:attempted-recon; sid:200007270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iilaznpldw.duckdns.org"; classtype:attempted-recon; sid:200007271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iiplhkfqtw.duckdns.org"; classtype:attempted-recon; sid:200007272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iiqzldkzee.duckdns.org"; classtype:attempted-recon; sid:200007273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iitauverifypy.hostfree.pw"; classtype:attempted-recon; sid:200007274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iiutefdfau.duckdns.org"; classtype:attempted-recon; sid:200007275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iizvhuyrja.duckdns.org"; classtype:attempted-recon; sid:200007276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijbothaxso.duckdns.org"; classtype:attempted-recon; sid:200007277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijdzsbqspp.duckdns.org"; classtype:attempted-recon; sid:200007278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijihugwrhm.duckdns.org"; classtype:attempted-recon; sid:200007279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijirhxruht.duckdns.org"; classtype:attempted-recon; sid:200007280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijjnveopkm.duckdns.org"; classtype:attempted-recon; sid:200007281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijkdrvljsa.duckdns.org"; classtype:attempted-recon; sid:200007282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijowypqsxk.duckdns.org"; classtype:attempted-recon; sid:200007283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijpaipkpuh.duckdns.org"; classtype:attempted-recon; sid:200007284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijppr.com"; classtype:attempted-recon; sid:200007285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijrmmzjgzv.duckdns.org"; classtype:attempted-recon; sid:200007286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijxjdjncvo.duckdns.org"; classtype:attempted-recon; sid:200007287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijzekujkmw.duckdns.org"; classtype:attempted-recon; sid:200007288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikdvwetovi.duckdns.org"; classtype:attempted-recon; sid:200007289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikghxwjoth.duckdns.org"; classtype:attempted-recon; sid:200007290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikkhrmanox.duckdns.org"; classtype:attempted-recon; sid:200007291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikko-pkobp.com"; classtype:attempted-recon; sid:200007292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikncrpfodz.duckdns.org"; classtype:attempted-recon; sid:200007293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikqgldcqqo.duckdns.org"; classtype:attempted-recon; sid:200007294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ikrknhggnj.duckdns.org"; classtype:attempted-recon; sid:200007295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iktlthvzdv.duckdns.org"; classtype:attempted-recon; sid:200007296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilghvcyrsq.duckdns.org"; classtype:attempted-recon; sid:200007297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilhabvrvxg.duckdns.org"; classtype:attempted-recon; sid:200007298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilkswttecz.duckdns.org"; classtype:attempted-recon; sid:200007299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"illmqutnla.duckdns.org"; classtype:attempted-recon; sid:200007300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilnjceoqdb.duckdns.org"; classtype:attempted-recon; sid:200007301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilpeyeree.com"; classtype:attempted-recon; sid:200007302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilrulbwdze.duckdns.org"; classtype:attempted-recon; sid:200007303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilsqgqgozt.duckdns.org"; classtype:attempted-recon; sid:200007304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilvhuzcggy.duckdns.org"; classtype:attempted-recon; sid:200007305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ilvmcuftnj.duckdns.org"; classtype:attempted-recon; sid:200007306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"image-apparel-solutions90389.pages.dev"; classtype:attempted-recon; sid:200007307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imageduke.com"; classtype:attempted-recon; sid:200007308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imawxkqjud.duckdns.org"; classtype:attempted-recon; sid:200007309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imb.manantialdebendicion.com"; classtype:attempted-recon; sid:200007310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imbibetechnologies.co.in"; classtype:attempted-recon; sid:200007311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imcwhljgsv.duckdns.org"; classtype:attempted-recon; sid:200007312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imflaevfrl.duckdns.org"; classtype:attempted-recon; sid:200007313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imgeweb.com"; classtype:attempted-recon; sid:200007314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imicrosoftoffice365.myportfolio.com"; classtype:attempted-recon; sid:200007315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imndehiyll.duckdns.org"; classtype:attempted-recon; sid:200007316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imobiliaria-cardinali-com-br.blogspot.com"; classtype:attempted-recon; sid:200007317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"importvalidator.org"; classtype:attempted-recon; sid:200007318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"impotsgouv-france.com"; classtype:attempted-recon; sid:200007319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imrzunuooe.duckdns.org"; classtype:attempted-recon; sid:200007320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imsuydfqvf.duckdns.org"; classtype:attempted-recon; sid:200007321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imtokenmart.com"; classtype:attempted-recon; sid:200007322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imxwfqrcdw.duckdns.org"; classtype:attempted-recon; sid:200007323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imyrjtcpcd.duckdns.org"; classtype:attempted-recon; sid:200007324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"in-post-pl-myid272xs.yemi.life"; classtype:attempted-recon; sid:200007325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"in4ou567twch.ru"; classtype:attempted-recon; sid:200007326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inanhd.com"; classtype:attempted-recon; sid:200007327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inapptech.ca"; classtype:attempted-recon; sid:200007328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inchirieri-limuzinebucuresti.ro"; classtype:attempted-recon; sid:200007329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"incomeviaonline.com"; classtype:attempted-recon; sid:200007330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"incoming-fax-document.myportfolio.com"; classtype:attempted-recon; sid:200007331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"incort-5458789856234508.tk"; classtype:attempted-recon; sid:200007332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"incort-5458789856234509.tk"; classtype:attempted-recon; sid:200007333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"indianajons.com"; classtype:attempted-recon; sid:200007334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"indigoswap.io"; classtype:attempted-recon; sid:200007335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"indmobilelegends.com"; classtype:attempted-recon; sid:200007336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"indphgdovj.duckdns.org"; classtype:attempted-recon; sid:200007337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"industrious-deep-ankle.glitch.me"; classtype:attempted-recon; sid:200007338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infallible-chaum.109-206-241-201.plesk.page"; classtype:attempted-recon; sid:200007339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infinidadefaturashyper.xyz"; classtype:attempted-recon; sid:200007340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infinitycleaningpro.com"; classtype:attempted-recon; sid:200007341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inflixty.rf.gd"; classtype:attempted-recon; sid:200007342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-aave.com"; classtype:attempted-recon; sid:200007343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-cpam.fr"; classtype:attempted-recon; sid:200007344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-spk.app"; classtype:attempted-recon; sid:200007345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-update-78432.firebaseapp.com"; classtype:attempted-recon; sid:200007346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info-update-78432.web.app"; classtype:attempted-recon; sid:200007347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info.dnb.no"; classtype:attempted-recon; sid:200007348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info1226.systeme.io"; classtype:attempted-recon; sid:200007349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infogalicserv.galiservs.repl.co"; classtype:attempted-recon; sid:200007350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infomaniak-support.arroyodelsol.net"; classtype:attempted-recon; sid:200007351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infopostalecodeifo.com"; classtype:attempted-recon; sid:200007352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inform-01.firebaseapp.com"; classtype:attempted-recon; sid:200007353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inform-01.web.app"; classtype:attempted-recon; sid:200007354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informacionesdaviplata.daviplinfor.repl.co"; classtype:attempted-recon; sid:200007355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informations.recovery.confiryourpage.workers.dev"; classtype:attempted-recon; sid:200007356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informationtaxcase.page.link"; classtype:attempted-recon; sid:200007357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"infos-novobanco.com"; classtype:attempted-recon; sid:200007358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ingeswebs.com"; classtype:attempted-recon; sid:200007359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ingreestuyaa1463.hostfree.pw"; classtype:attempted-recon; sid:200007360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ingreestuyaa212s.hostfree.pw"; classtype:attempted-recon; sid:200007361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ingreestuyaa2213.hostfree.pw"; classtype:attempted-recon; sid:200007362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ingreestuyphet3654.0hi.me"; classtype:attempted-recon; sid:200007363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ingres11loshf.ingresbankhome.repl.co"; classtype:attempted-recon; sid:200007364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inhbeyzzbc.duckdns.org"; classtype:attempted-recon; sid:200007365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"injfykvotl.duckdns.org"; classtype:attempted-recon; sid:200007366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inkqsplork.duckdns.org"; classtype:attempted-recon; sid:200007367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inmediatoes.fftampa.com"; classtype:attempted-recon; sid:200007368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inmobiliariaalfa.cl"; classtype:attempted-recon; sid:200007369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inmtpqxvjd.duckdns.org"; classtype:attempted-recon; sid:200007370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"innate.es"; classtype:attempted-recon; sid:200007371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"innovation-evotik.web.app"; classtype:attempted-recon; sid:200007372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-asiw.order709.info"; classtype:attempted-recon; sid:200007373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-delivery.084521.xyz"; classtype:attempted-recon; sid:200007374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-delivery.97656522.xyz"; classtype:attempted-recon; sid:200007375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-iswu.order442.info"; classtype:attempted-recon; sid:200007376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-jcyu.order941.info"; classtype:attempted-recon; sid:200007377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-hid226ks.limello.live"; classtype:attempted-recon; sid:200007378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-my-id2g3ys.meiren1.top"; classtype:attempted-recon; sid:200007379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-my-id2g3ys.oferta.us"; classtype:attempted-recon; sid:200007380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-mynid2ihxa.juntos.live"; classtype:attempted-recon; sid:200007381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-mynid2ihxa.sawadee.life"; classtype:attempted-recon; sid:200007382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-xz5512.meaghan.life"; classtype:attempted-recon; sid:200007383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-xz5512.sanbds.top"; classtype:attempted-recon; sid:200007384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl-zai.accept8145.me"; classtype:attempted-recon; sid:200007385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-pl.payment003452.xyz"; classtype:attempted-recon; sid:200007386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-bd.order946.info"; classtype:attempted-recon; sid:200007387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-dk.order442.info"; classtype:attempted-recon; sid:200007388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-dm.order442.info"; classtype:attempted-recon; sid:200007389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-hzl.order268.info"; classtype:attempted-recon; sid:200007390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-kko.order946.info"; classtype:attempted-recon; sid:200007391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-mo.order943.info"; classtype:attempted-recon; sid:200007392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-nnb.order708.info"; classtype:attempted-recon; sid:200007393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-xjj.order682.info"; classtype:attempted-recon; sid:200007394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-polska-xm.order943.info"; classtype:attempted-recon; sid:200007395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-purchase.33212728.xyz"; classtype:attempted-recon; sid:200007396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-rghl.2584902.me"; classtype:attempted-recon; sid:200007397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpost-xepk.order674.info"; classtype:attempted-recon; sid:200007398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inps-ep.com"; classtype:attempted-recon; sid:200007399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inpxewoshm.duckdns.org"; classtype:attempted-recon; sid:200007400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"insetti.com.mx"; classtype:attempted-recon; sid:200007401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inshredirects.tk"; classtype:attempted-recon; sid:200007402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"insidious.007sbw.cn"; classtype:attempted-recon; sid:200007403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inskjfjlwe.duckdns.org"; classtype:attempted-recon; sid:200007404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inspirepropertymgmtllc.myportfolio.com"; classtype:attempted-recon; sid:200007405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inspiring-dirac.135-181-37-51.plesk.page"; classtype:attempted-recon; sid:200007406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"insta-login.zerolinky.my.id"; classtype:attempted-recon; sid:200007407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"instabuilder.com"; classtype:attempted-recon; sid:200007408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"instagram-support-service.terrbarux2022.my.id"; classtype:attempted-recon; sid:200007409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"instintosuperior.com.br"; classtype:attempted-recon; sid:200007410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"insurancetrader.gr"; classtype:attempted-recon; sid:200007411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"int3eractivebrokers.com"; classtype:attempted-recon; sid:200007412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"integratenftpads.com"; classtype:attempted-recon; sid:200007413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inter.prestamosper-sonales.com"; classtype:attempted-recon; sid:200007414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interactive829a.liveblog365.com"; classtype:attempted-recon; sid:200007415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interactivebrokers.co.za"; classtype:attempted-recon; sid:200007416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interactivebrokrers.com"; classtype:attempted-recon; sid:200007417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interactivebrolkers.com"; classtype:attempted-recon; sid:200007418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interadtivebrokers.com"; classtype:attempted-recon; sid:200007419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interbank-ingresa.web.app"; classtype:attempted-recon; sid:200007420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interbank-personas.web.app"; classtype:attempted-recon; sid:200007421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interbank-peru.web.app"; classtype:attempted-recon; sid:200007422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interbank.banca-digital.net"; classtype:attempted-recon; sid:200007423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interbankempresahomeweb.gemsaweb.com"; classtype:attempted-recon; sid:200007424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interbankpe.net"; classtype:attempted-recon; sid:200007425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interline-asia.com"; classtype:attempted-recon; sid:200007426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"intermatic.pacifi004.repl.co"; classtype:attempted-recon; sid:200007427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"international-c.hostfree.pw"; classtype:attempted-recon; sid:200007428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"internetprofitscoach.com"; classtype:attempted-recon; sid:200007429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"internetservicetech.com"; classtype:attempted-recon; sid:200007430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interspar.at"; classtype:attempted-recon; sid:200007431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interworkavios.liommasterhome.repl.co"; classtype:attempted-recon; sid:200007432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"intl-ppyal-securedata.github.io"; classtype:attempted-recon; sid:200007433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"invisiblefriendsnft.in"; classtype:attempted-recon; sid:200007434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"invoice-norwestengineering.myportfolio.com"; classtype:attempted-recon; sid:200007435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"invoice-production.chat-verify.workers.dev"; classtype:attempted-recon; sid:200007436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"invoiceoffice365microsoftwvjzgqyqaqapni05ymqwltc5yjuznuqouvu1i5.myportfolio.com"; classtype:attempted-recon; sid:200007437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"invoiceoffice365microsoftxghjdshgjbgbfjxbbhxhxbhbxhjnxgjxhvxxx.myportfolio.com"; classtype:attempted-recon; sid:200007438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inzizi.com"; classtype:attempted-recon; sid:200007439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inzwkedbkp.duckdns.org"; classtype:attempted-recon; sid:200007440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iodtsjknns.duckdns.org"; classtype:attempted-recon; sid:200007441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ioidkvqtks.duckdns.org"; classtype:attempted-recon; sid:200007442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iokakrjudb.duckdns.org"; classtype:attempted-recon; sid:200007443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ionos-mein.webmail.de.flick-fix.de"; classtype:attempted-recon; sid:200007444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ionos.com.ng"; classtype:attempted-recon; sid:200007445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ionos.zimapp.workers.dev"; classtype:attempted-recon; sid:200007446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ionosionos3.firebaseapp.com"; classtype:attempted-recon; sid:200007447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ionosionos3.web.app"; classtype:attempted-recon; sid:200007448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ionroyazz.hyperphp.com"; classtype:attempted-recon; sid:200007449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ioumpfvzja.duckdns.org"; classtype:attempted-recon; sid:200007450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ioxiduegrl.duckdns.org"; classtype:attempted-recon; sid:200007451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ioxksjtwnh.duckdns.org"; classtype:attempted-recon; sid:200007452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipanul.cl"; classtype:attempted-recon; sid:200007453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipevfsygcd.duckdns.org"; classtype:attempted-recon; sid:200007454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipfs-fleek-co.translate.goog"; classtype:attempted-recon; sid:200007455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iphiybykol.duckdns.org"; classtype:attempted-recon; sid:200007456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipixacademy.com"; classtype:attempted-recon; sid:200007457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iplogger.info"; classtype:attempted-recon; sid:200007458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iplyqxrsvo.duckdns.org"; classtype:attempted-recon; sid:200007459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipnfrnzylh.duckdns.org"; classtype:attempted-recon; sid:200007460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipoaegomgk.duckdns.org"; classtype:attempted-recon; sid:200007461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipppkcmakz.duckdns.org"; classtype:attempted-recon; sid:200007462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iprjfaegaz.duckdns.org"; classtype:attempted-recon; sid:200007463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipvpn055172.netvigator.com"; classtype:attempted-recon; sid:200007464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipynjkmmlv.duckdns.org"; classtype:attempted-recon; sid:200007465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iqbvnnuyqc.duckdns.org"; classtype:attempted-recon; sid:200007466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iqccunhzvi.duckdns.org"; classtype:attempted-recon; sid:200007467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iqcu.4dq.com"; classtype:attempted-recon; sid:200007468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iqqvfbnwvz.duckdns.org"; classtype:attempted-recon; sid:200007469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iquluetwmo.duckdns.org"; classtype:attempted-recon; sid:200007470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iqvvhyfmjw.duckdns.org"; classtype:attempted-recon; sid:200007471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iqwknxnauf.duckdns.org"; classtype:attempted-recon; sid:200007472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iraudzsq.hyperphp.com"; classtype:attempted-recon; sid:200007473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irelandsissuesmagazine.com"; classtype:attempted-recon; sid:200007474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irexpnplrz.duckdns.org"; classtype:attempted-recon; sid:200007475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irqlibxoyk.duckdns.org"; classtype:attempted-recon; sid:200007476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irs-claim-onlinetax.com"; classtype:attempted-recon; sid:200007477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irs-confirmation-tax-federal.com"; classtype:attempted-recon; sid:200007478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irs-federal-taxus-information.com"; classtype:attempted-recon; sid:200007479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irs.tarhposh.shanliweb.ir"; classtype:attempted-recon; sid:200007480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irsgov.myportfolio.com"; classtype:attempted-recon; sid:200007481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irsgovca.myportfolio.com"; classtype:attempted-recon; sid:200007482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irshome-manage-financialtax.americanunfinished.com"; classtype:attempted-recon; sid:200007483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irsprofile-taxmanage.com"; classtype:attempted-recon; sid:200007484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irstaxlaw.net"; classtype:attempted-recon; sid:200007485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irtbkjotkb.duckdns.org"; classtype:attempted-recon; sid:200007486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irtpolytvl.org"; classtype:attempted-recon; sid:200007487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"isaacanicama.pe"; classtype:attempted-recon; sid:200007488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"isdmastrazeneca.com"; classtype:attempted-recon; sid:200007489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"isguypmzwq.duckdns.org"; classtype:attempted-recon; sid:200007490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ishr.cm"; classtype:attempted-recon; sid:200007491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"isjijlrcds.duckdns.org"; classtype:attempted-recon; sid:200007492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iskmjznstb.duckdns.org"; classtype:attempted-recon; sid:200007493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"islvyydejs.duckdns.org"; classtype:attempted-recon; sid:200007494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ismvangplz.duckdns.org"; classtype:attempted-recon; sid:200007495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"isnzforfwn.duckdns.org"; classtype:attempted-recon; sid:200007496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"issugmgtlh.duckdns.org"; classtype:attempted-recon; sid:200007497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iswokfvlbz.duckdns.org"; classtype:attempted-recon; sid:200007498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"isxykfokg84r.martincaldeyro.com"; classtype:attempted-recon; sid:200007499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"it-europe564598-com.filesusr.com"; classtype:attempted-recon; sid:200007500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itau.conectcar.com"; classtype:attempted-recon; sid:200007501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itau.segurancacliente.com"; classtype:attempted-recon; sid:200007502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itaudd2.itu439paragu.repl.co"; classtype:attempted-recon; sid:200007503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itauparaguay.hostfree.pw"; classtype:attempted-recon; sid:200007504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itaupy-clavedeacceso.itaup.repl.co"; classtype:attempted-recon; sid:200007505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itauseguranca.com"; classtype:attempted-recon; sid:200007506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itauseguridad.hostfree.pw"; classtype:attempted-recon; sid:200007507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itauvalidar55.hostfree.pw"; classtype:attempted-recon; sid:200007508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itc-cargo.com"; classtype:attempted-recon; sid:200007509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itcccgmwns.duckdns.org"; classtype:attempted-recon; sid:200007510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itdounmowf.duckdns.org"; classtype:attempted-recon; sid:200007511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itdzenjyoc.duckdns.org"; classtype:attempted-recon; sid:200007512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itoscop.com"; classtype:attempted-recon; sid:200007513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itqdavalcm.duckdns.org"; classtype:attempted-recon; sid:200007514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itrbyhpuhn.duckdns.org"; classtype:attempted-recon; sid:200007515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsmdshahin.github.io"; classtype:attempted-recon; sid:200007516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsme-be-7ade2.firebaseapp.com"; classtype:attempted-recon; sid:200007517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsme-be-7ade2.web.app"; classtype:attempted-recon; sid:200007518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsme-be-d12d7.firebaseapp.com"; classtype:attempted-recon; sid:200007519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsme-be-d12d7.web.app"; classtype:attempted-recon; sid:200007520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsme-carte-730f8.firebaseapp.com"; classtype:attempted-recon; sid:200007521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsme-carte-730f8.web.app"; classtype:attempted-recon; sid:200007522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsssl.com"; classtype:attempted-recon; sid:200007523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsweblook.com"; classtype:attempted-recon; sid:200007524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ituadhbmld.duckdns.org"; classtype:attempted-recon; sid:200007525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itujdoypri.duckdns.org"; classtype:attempted-recon; sid:200007526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itzdjpfabl.duckdns.org"; classtype:attempted-recon; sid:200007527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iuayljuqpd.duckdns.org"; classtype:attempted-recon; sid:200007528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iubtdnplab.duckdns.org"; classtype:attempted-recon; sid:200007529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iudrvupawd.duckdns.org"; classtype:attempted-recon; sid:200007530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iulspncqrj.duckdns.org"; classtype:attempted-recon; sid:200007531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iunzdvzeyh.duckdns.org"; classtype:attempted-recon; sid:200007532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iuppfaybvy.duckdns.org"; classtype:attempted-recon; sid:200007533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iuppi-pontos.com"; classtype:attempted-recon; sid:200007534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ivbjbtsvun.duckdns.org"; classtype:attempted-recon; sid:200007535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ivfcentreinindia.com"; classtype:attempted-recon; sid:200007536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ivfdjfjdalsfjk.top"; classtype:attempted-recon; sid:200007537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ivpdtayrth.duckdns.org"; classtype:attempted-recon; sid:200007538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ivpottgirp.duckdns.org"; classtype:attempted-recon; sid:200007539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ivvoeicobm.duckdns.org"; classtype:attempted-recon; sid:200007540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ivzdbyvoug.duckdns.org"; classtype:attempted-recon; sid:200007541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwactrnomm.duckdns.org"; classtype:attempted-recon; sid:200007542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwesrnljzl.duckdns.org"; classtype:attempted-recon; sid:200007543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwhafwwiur.duckdns.org"; classtype:attempted-recon; sid:200007544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwjanijchr.duckdns.org"; classtype:attempted-recon; sid:200007545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwoydsyxyv.duckdns.org"; classtype:attempted-recon; sid:200007546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwpqusqlkc.duckdns.org"; classtype:attempted-recon; sid:200007547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwqdzcjbzn.duckdns.org"; classtype:attempted-recon; sid:200007548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwqodvsetf.duckdns.org"; classtype:attempted-recon; sid:200007549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwshqcbmcp.duckdns.org"; classtype:attempted-recon; sid:200007550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwtmzlcqak.duckdns.org"; classtype:attempted-recon; sid:200007551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwuawmvqiz.duckdns.org"; classtype:attempted-recon; sid:200007552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwvbtfzvyk.duckdns.org"; classtype:attempted-recon; sid:200007553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwvzbevypg.duckdns.org"; classtype:attempted-recon; sid:200007554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwxvzbogqy.duckdns.org"; classtype:attempted-recon; sid:200007555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixbldbscux.duckdns.org"; classtype:attempted-recon; sid:200007556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixeabpqglr.duckdns.org"; classtype:attempted-recon; sid:200007557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixfdwgzcmx.duckdns.org"; classtype:attempted-recon; sid:200007558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixgovkraxv.duckdns.org"; classtype:attempted-recon; sid:200007559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixqusbeaik.duckdns.org"; classtype:attempted-recon; sid:200007560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixsypgbfxn.duckdns.org"; classtype:attempted-recon; sid:200007561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixtcxeqgmo.duckdns.org"; classtype:attempted-recon; sid:200007562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixuinplscf.duckdns.org"; classtype:attempted-recon; sid:200007563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixzuoqmobi.duckdns.org"; classtype:attempted-recon; sid:200007564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixzwssckmd.duckdns.org"; classtype:attempted-recon; sid:200007565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iychqasljs.duckdns.org"; classtype:attempted-recon; sid:200007566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iyczbsiyba.duckdns.org"; classtype:attempted-recon; sid:200007567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iydvokgsup.duckdns.org"; classtype:attempted-recon; sid:200007568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iyedofnpev.duckdns.org"; classtype:attempted-recon; sid:200007569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iyfnxsqlut.duckdns.org"; classtype:attempted-recon; sid:200007570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iyfqzhyohh.duckdns.org"; classtype:attempted-recon; sid:200007571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iyfwmqllzo.duckdns.org"; classtype:attempted-recon; sid:200007572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iylkwrexki.duckdns.org"; classtype:attempted-recon; sid:200007573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iypavaxvhd.duckdns.org"; classtype:attempted-recon; sid:200007574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izmvleuviv.duckdns.org"; classtype:attempted-recon; sid:200007575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iznfpuvcst.duckdns.org"; classtype:attempted-recon; sid:200007576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izpllttxbr.duckdns.org"; classtype:attempted-recon; sid:200007577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izqaorvwac.duckdns.org"; classtype:attempted-recon; sid:200007578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izqigkzgld.duckdns.org"; classtype:attempted-recon; sid:200007579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izspwxryhs.duckdns.org"; classtype:attempted-recon; sid:200007580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iztgtcjjni.duckdns.org"; classtype:attempted-recon; sid:200007581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izvmmhydyb.duckdns.org"; classtype:attempted-recon; sid:200007582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izxrnaqhpw.duckdns.org"; classtype:attempted-recon; sid:200007583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izyinktattoo.de"; classtype:attempted-recon; sid:200007584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"izymzfysnr.duckdns.org"; classtype:attempted-recon; sid:200007585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"j2219sfrgm.temp.swtest.ru"; classtype:attempted-recon; sid:200007586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"j24mo.app.link"; classtype:attempted-recon; sid:200007587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jabadeleste.com"; classtype:attempted-recon; sid:200007588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jabvylmsnz.duckdns.org"; classtype:attempted-recon; sid:200007589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jacksoncountytalenthub.com"; classtype:attempted-recon; sid:200007590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jacobliston.com"; classtype:attempted-recon; sid:200007591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jade-alpaca-76dd70.netlify.app"; classtype:attempted-recon; sid:200007592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jagufvwacc.duckdns.org"; classtype:attempted-recon; sid:200007593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jahdove.website"; classtype:attempted-recon; sid:200007594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jajaja2121.byethost31.com"; classtype:attempted-recon; sid:200007595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jam-023d.gitlab.io"; classtype:attempted-recon; sid:200007596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"james8.aidaform.com"; classtype:attempted-recon; sid:200007597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"janbochnia.pl"; classtype:attempted-recon; sid:200007598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"janex.ir"; classtype:attempted-recon; sid:200007599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jaowdqpvvv.duckdns.org"; classtype:attempted-recon; sid:200007600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jasa-antar-jemput-laundry-sukses.web.id"; classtype:attempted-recon; sid:200007601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jasa-bg-kakon-keman-aj-45676748767.web.id"; classtype:attempted-recon; sid:200007602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jauvwflugo.duckdns.org"; classtype:attempted-recon; sid:200007603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbcvyaegqd.duckdns.org"; classtype:attempted-recon; sid:200007604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbdjgcbzbr.duckdns.org"; classtype:attempted-recon; sid:200007605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbejwpmqzk.duckdns.org"; classtype:attempted-recon; sid:200007606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbgdsjkbll.duckdns.org"; classtype:attempted-recon; sid:200007607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbgkkxkzty.duckdns.org"; classtype:attempted-recon; sid:200007608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbhedwnudy.duckdns.org"; classtype:attempted-recon; sid:200007609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbheimtkrf.duckdns.org"; classtype:attempted-recon; sid:200007610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbjhsrgbhj.duckdns.org"; classtype:attempted-recon; sid:200007611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbmpsfrxen.duckdns.org"; classtype:attempted-recon; sid:200007612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbmugeuoyj.duckdns.org"; classtype:attempted-recon; sid:200007613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbrefrigeracao.co.mz"; classtype:attempted-recon; sid:200007614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbsfbqeuhc.duckdns.org"; classtype:attempted-recon; sid:200007615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbtsfnsqsd.duckdns.org"; classtype:attempted-recon; sid:200007616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbwehfwbif.duckdns.org"; classtype:attempted-recon; sid:200007617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbxkvdczmi.duckdns.org"; classtype:attempted-recon; sid:200007618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jbxzzjgpwr.duckdns.org"; classtype:attempted-recon; sid:200007619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcaioijvru.duckdns.org"; classtype:attempted-recon; sid:200007620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcbxbsffsf.duckdns.org"; classtype:attempted-recon; sid:200007621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcdkuhgvdu.duckdns.org"; classtype:attempted-recon; sid:200007622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcdulinjjo.duckdns.org"; classtype:attempted-recon; sid:200007623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcfoaqnyup.duckdns.org"; classtype:attempted-recon; sid:200007624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jckfirs.punctulcentral.org"; classtype:attempted-recon; sid:200007625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcnbnoiahq.duckdns.org"; classtype:attempted-recon; sid:200007626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcpropertiesmalta.com"; classtype:attempted-recon; sid:200007627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jcvclguqgp.duckdns.org"; classtype:attempted-recon; sid:200007628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jczgybntox.duckdns.org"; classtype:attempted-recon; sid:200007629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jczjviomtf.duckdns.org"; classtype:attempted-recon; sid:200007630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jdapjstymi.duckdns.org"; classtype:attempted-recon; sid:200007631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jddzafxcyc.duckdns.org"; classtype:attempted-recon; sid:200007632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jdogbhuekc.duckdns.org"; classtype:attempted-recon; sid:200007633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jdtttllcnd.duckdns.org"; classtype:attempted-recon; sid:200007634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jdwqfenvic.duckdns.org"; classtype:attempted-recon; sid:200007635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jdxsbvkkiy.duckdns.org"; classtype:attempted-recon; sid:200007636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jebhezxjhc.duckdns.org"; classtype:attempted-recon; sid:200007637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jedqfswzdg.duckdns.org"; classtype:attempted-recon; sid:200007638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jehykdhlsi.duckdns.org"; classtype:attempted-recon; sid:200007639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jeifrtuaen.duckdns.org"; classtype:attempted-recon; sid:200007640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jelink.id"; classtype:attempted-recon; sid:200007641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jelqdtcqio.duckdns.org"; classtype:attempted-recon; sid:200007642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jenny-fcc.com"; classtype:attempted-recon; sid:200007643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jensdahlin.com"; classtype:attempted-recon; sid:200007644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jeoxmfmpwn.duckdns.org"; classtype:attempted-recon; sid:200007645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jeplhfbgrq.duckdns.org"; classtype:attempted-recon; sid:200007646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jerryscaringhandsofdc.jerryscaringhands.com"; classtype:attempted-recon; sid:200007647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jetser-electrical-supply.business.site"; classtype:attempted-recon; sid:200007648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jett.gator.site"; classtype:attempted-recon; sid:200007649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfgbv.bvjlip.cn"; classtype:attempted-recon; sid:200007650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfgoenzcpl.duckdns.org"; classtype:attempted-recon; sid:200007651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfhgsjggsa.duckdns.org"; classtype:attempted-recon; sid:200007652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jflkp.csb.app"; classtype:attempted-recon; sid:200007653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfojpjqntu.duckdns.org"; classtype:attempted-recon; sid:200007654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfowewbqcb.duckdns.org"; classtype:attempted-recon; sid:200007655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfpinpwpyo.duckdns.org"; classtype:attempted-recon; sid:200007656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfqdmkwcuf.duckdns.org"; classtype:attempted-recon; sid:200007657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfrmymzwgg.duckdns.org"; classtype:attempted-recon; sid:200007658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jftfucvzbv.duckdns.org"; classtype:attempted-recon; sid:200007659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jftllkqlgx.duckdns.org"; classtype:attempted-recon; sid:200007660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfyelmnfmx.duckdns.org"; classtype:attempted-recon; sid:200007661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgadnzarlf.duckdns.org"; classtype:attempted-recon; sid:200007662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgfcvf.klauqxr.cn"; classtype:attempted-recon; sid:200007663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgfhueisfg.duckdns.org"; classtype:attempted-recon; sid:200007664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jghjasfxjahxgkvy.hostfree.pw"; classtype:attempted-recon; sid:200007665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgielqbygb.duckdns.org"; classtype:attempted-recon; sid:200007666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgjrzyedgw.duckdns.org"; classtype:attempted-recon; sid:200007667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgkynuhiwl.duckdns.org"; classtype:attempted-recon; sid:200007668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgoiyxcxgb.duckdns.org"; classtype:attempted-recon; sid:200007669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgqtkegtsk.duckdns.org"; classtype:attempted-recon; sid:200007670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jgvmfnhbgl.duckdns.org"; classtype:attempted-recon; sid:200007671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhahnews.com"; classtype:attempted-recon; sid:200007672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhaniracapital.net"; classtype:attempted-recon; sid:200007673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhbgfkslrj.duckdns.org"; classtype:attempted-recon; sid:200007674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhbhtupebe.duckdns.org"; classtype:attempted-recon; sid:200007675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhcexumvre.duckdns.org"; classtype:attempted-recon; sid:200007676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhfkhvnmnifhj.weeblysite.com"; classtype:attempted-recon; sid:200007677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhfmpeaxwz.duckdns.org"; classtype:attempted-recon; sid:200007678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhgbv.cquotxv.cn"; classtype:attempted-recon; sid:200007679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhgrtyoliutry.liveblog365.com"; classtype:attempted-recon; sid:200007680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhgwdhtsqb.duckdns.org"; classtype:attempted-recon; sid:200007681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhhgrxutjm.duckdns.org"; classtype:attempted-recon; sid:200007682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhnzgpswoc.duckdns.org"; classtype:attempted-recon; sid:200007683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhonxblvmo.duckdns.org"; classtype:attempted-recon; sid:200007684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhprrrhknx.duckdns.org"; classtype:attempted-recon; sid:200007685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhrlpridwa.duckdns.org"; classtype:attempted-recon; sid:200007686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhsnatfszc.duckdns.org"; classtype:attempted-recon; sid:200007687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhsvalbvs.hostfree.pw"; classtype:attempted-recon; sid:200007688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhuciktnnz.duckdns.org"; classtype:attempted-recon; sid:200007689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhvuxxhdjo.duckdns.org"; classtype:attempted-recon; sid:200007690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jiegjxmsrq.duckdns.org"; classtype:attempted-recon; sid:200007691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jifsnvjlvn.duckdns.org"; classtype:attempted-recon; sid:200007692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jiggsicrbg.duckdns.org"; classtype:attempted-recon; sid:200007693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jii.li"; classtype:attempted-recon; sid:200007694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jikapremny.duckdns.org"; classtype:attempted-recon; sid:200007695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jio-giga-fiber-scale-repair-service.business.site"; classtype:attempted-recon; sid:200007696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jio.hungama.com"; classtype:attempted-recon; sid:200007697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jio.network"; classtype:attempted-recon; sid:200007698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jiokbclotterywinnerlist.com"; classtype:attempted-recon; sid:200007699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jiosms.in"; classtype:attempted-recon; sid:200007700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jiostore.digitalhubstore.in"; classtype:attempted-recon; sid:200007701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jiqkymttzh.duckdns.org"; classtype:attempted-recon; sid:200007702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jjqbnrzrtr.duckdns.org"; classtype:attempted-recon; sid:200007703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jjrpvfflhs.duckdns.org"; classtype:attempted-recon; sid:200007704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jjthrf.ldemyvw.cn"; classtype:attempted-recon; sid:200007705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jjukmrptmu.duckdns.org"; classtype:attempted-recon; sid:200007706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jjxapnatsj.duckdns.org"; classtype:attempted-recon; sid:200007707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jjyxwjohfp.duckdns.org"; classtype:attempted-recon; sid:200007708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jjzpjqdqza.duckdns.org"; classtype:attempted-recon; sid:200007709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkaclmwwpa.duckdns.org"; classtype:attempted-recon; sid:200007710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkamevijmg.duckdns.org"; classtype:attempted-recon; sid:200007711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkcybyjosc.duckdns.org"; classtype:attempted-recon; sid:200007712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkdjdkekeke.square.site"; classtype:attempted-recon; sid:200007713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkgfhrhvh.hostfree.pw"; classtype:attempted-recon; sid:200007714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkgvkpvbpi.duckdns.org"; classtype:attempted-recon; sid:200007715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkjdnoxapq.duckdns.org"; classtype:attempted-recon; sid:200007716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkjmkikows.duckdns.org"; classtype:attempted-recon; sid:200007717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkkposiegv.duckdns.org"; classtype:attempted-recon; sid:200007718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jknmfzsoap.duckdns.org"; classtype:attempted-recon; sid:200007719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jknmqubtky.duckdns.org"; classtype:attempted-recon; sid:200007720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkolawnservice.com"; classtype:attempted-recon; sid:200007721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkrnspnhgq.duckdns.org"; classtype:attempted-recon; sid:200007722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkrxkuatzz.duckdns.org"; classtype:attempted-recon; sid:200007723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jkuhaxlmav.duckdns.org"; classtype:attempted-recon; sid:200007724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jlasungxoj.duckdns.org"; classtype:attempted-recon; sid:200007725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jlcyiaubbf.duckdns.org"; classtype:attempted-recon; sid:200007726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jljmaunwmp.duckdns.org"; classtype:attempted-recon; sid:200007727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jlkmxiujlv.duckdns.org"; classtype:attempted-recon; sid:200007728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jloozavzaw.duckdns.org"; classtype:attempted-recon; sid:200007729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jluterf.asdocobat.repl.co"; classtype:attempted-recon; sid:200007730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jlvqkcoovw.duckdns.org"; classtype:attempted-recon; sid:200007731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jlzdipzgyp.duckdns.org"; classtype:attempted-recon; sid:200007732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmefbfdedw.duckdns.org"; classtype:attempted-recon; sid:200007733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmfgbbuwnk.duckdns.org"; classtype:attempted-recon; sid:200007734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmhytvtkfg.duckdns.org"; classtype:attempted-recon; sid:200007735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmibhpylbr.duckdns.org"; classtype:attempted-recon; sid:200007736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmnpmcwprc.duckdns.org"; classtype:attempted-recon; sid:200007737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmnxagzzlu.duckdns.org"; classtype:attempted-recon; sid:200007738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmoegzgekw.duckdns.org"; classtype:attempted-recon; sid:200007739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmqrnwcxje.duckdns.org"; classtype:attempted-recon; sid:200007740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmtrtqpend.duckdns.org"; classtype:attempted-recon; sid:200007741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmv.2p0kt9y.cn"; classtype:attempted-recon; sid:200007742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmvatnyduv.duckdns.org"; classtype:attempted-recon; sid:200007743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmvgabtxhe.duckdns.org"; classtype:attempted-recon; sid:200007744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jmvhknvfdx.duckdns.org"; classtype:attempted-recon; sid:200007745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jncoser.tk"; classtype:attempted-recon; sid:200007746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnfute.com"; classtype:attempted-recon; sid:200007747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnhotupgjg.duckdns.org"; classtype:attempted-recon; sid:200007748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnlmubowny.duckdns.org"; classtype:attempted-recon; sid:200007749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnnvbzcqqf.duckdns.org"; classtype:attempted-recon; sid:200007750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnpejryicq.duckdns.org"; classtype:attempted-recon; sid:200007751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnwxjncyfl.duckdns.org"; classtype:attempted-recon; sid:200007752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnxytowmqn.duckdns.org"; classtype:attempted-recon; sid:200007753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jnzgtpmuig.duckdns.org"; classtype:attempted-recon; sid:200007754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jo-dead-ho-gay-that-3.obs.la-south-2.myhuaweicloud.com"; classtype:attempted-recon; sid:200007755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jobhubindia.co.in"; classtype:attempted-recon; sid:200007756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jobjlkbbud.duckdns.org"; classtype:attempted-recon; sid:200007757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jocatlneut.duckdns.org"; classtype:attempted-recon; sid:200007758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"joecamera.net"; classtype:attempted-recon; sid:200007759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"joefoxphoto.co.uk"; classtype:attempted-recon; sid:200007760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"johannabraun.com"; classtype:attempted-recon; sid:200007761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"john-ashley.de"; classtype:attempted-recon; sid:200007762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jopjydiqyw.duckdns.org"; classtype:attempted-recon; sid:200007763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jopmzjzwlr.duckdns.org"; classtype:attempted-recon; sid:200007764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"joqhahenxd.duckdns.org"; classtype:attempted-recon; sid:200007765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jorgemontano9206e226.myportfolio.com"; classtype:attempted-recon; sid:200007766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jornaldobairrodesapopemba.com.br"; classtype:attempted-recon; sid:200007767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"josfyxbhyf.duckdns.org"; classtype:attempted-recon; sid:200007768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"josorfgvya.duckdns.org"; classtype:attempted-recon; sid:200007769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jotdtyamup.duckdns.org"; classtype:attempted-recon; sid:200007770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jovial-pegasus-7a2558.netlify.app"; classtype:attempted-recon; sid:200007771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jovkycstae.duckdns.org"; classtype:attempted-recon; sid:200007772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jow-japan.or.jp"; classtype:attempted-recon; sid:200007773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jowpbjccel.duckdns.org"; classtype:attempted-recon; sid:200007774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"joysjubilee.com"; classtype:attempted-recon; sid:200007775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jozodqhgzn.duckdns.org"; classtype:attempted-recon; sid:200007776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jp-isama1zon.ml"; classtype:attempted-recon; sid:200007777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpagmfevtl.duckdns.org"; classtype:attempted-recon; sid:200007778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpcgjeesdv.duckdns.org"; classtype:attempted-recon; sid:200007779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpedrofernandes.com"; classtype:attempted-recon; sid:200007780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpgbrcymoi.duckdns.org"; classtype:attempted-recon; sid:200007781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpkgymgoqj.duckdns.org"; classtype:attempted-recon; sid:200007782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpkypokhef.duckdns.org"; classtype:attempted-recon; sid:200007783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jplwzztyqz.duckdns.org"; classtype:attempted-recon; sid:200007784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpmc-unification-uat.eventfarm.com"; classtype:attempted-recon; sid:200007785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jporsfmuxi.duckdns.org"; classtype:attempted-recon; sid:200007786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpraayjeww.duckdns.org"; classtype:attempted-recon; sid:200007787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpxhsuiqum.duckdns.org"; classtype:attempted-recon; sid:200007788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqffdsmmvt.duckdns.org"; classtype:attempted-recon; sid:200007789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqhypfrxuj.duckdns.org"; classtype:attempted-recon; sid:200007790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqnajfoflp.duckdns.org"; classtype:attempted-recon; sid:200007791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqoxeonbgk.duckdns.org"; classtype:attempted-recon; sid:200007792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqrxrqnrej.duckdns.org"; classtype:attempted-recon; sid:200007793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqtrndbvsr.duckdns.org"; classtype:attempted-recon; sid:200007794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqvsmdlwfd.duckdns.org"; classtype:attempted-recon; sid:200007795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jqxiyioppt.duckdns.org"; classtype:attempted-recon; sid:200007796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jrakjfxyky.duckdns.org"; classtype:attempted-recon; sid:200007797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jrnjbfhcgb.duckdns.org"; classtype:attempted-recon; sid:200007798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jrtinnoscj.duckdns.org"; classtype:attempted-recon; sid:200007799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsddrovijj.duckdns.org"; classtype:attempted-recon; sid:200007800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsgjvwrqeq.duckdns.org"; classtype:attempted-recon; sid:200007801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsgngimfuy.duckdns.org"; classtype:attempted-recon; sid:200007802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jshzatnmhl.duckdns.org"; classtype:attempted-recon; sid:200007803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsmjhjqrrf.duckdns.org"; classtype:attempted-recon; sid:200007804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsnnraxcvz.duckdns.org"; classtype:attempted-recon; sid:200007805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsvgemibwt.duckdns.org"; classtype:attempted-recon; sid:200007806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jsvskwixdm.duckdns.org"; classtype:attempted-recon; sid:200007807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jswhmcxdoi.duckdns.org"; classtype:attempted-recon; sid:200007808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jszduanfuf.duckdns.org"; classtype:attempted-recon; sid:200007809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtbdghypmz.duckdns.org"; classtype:attempted-recon; sid:200007810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtdnzltohh.duckdns.org"; classtype:attempted-recon; sid:200007811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jti.com.petergariepy.com"; classtype:attempted-recon; sid:200007812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtiqrychmt.duckdns.org"; classtype:attempted-recon; sid:200007813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtjcsuigsp.duckdns.org"; classtype:attempted-recon; sid:200007814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtktykykykytluy.000webhostapp.com"; classtype:attempted-recon; sid:200007815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtlknwgsjh.duckdns.org"; classtype:attempted-recon; sid:200007816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtplrcuils.duckdns.org"; classtype:attempted-recon; sid:200007817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtqwpucwid.duckdns.org"; classtype:attempted-recon; sid:200007818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtsisgnmtx.duckdns.org"; classtype:attempted-recon; sid:200007819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtuevfdbsj.duckdns.org"; classtype:attempted-recon; sid:200007820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtvtesrorn.duckdns.org"; classtype:attempted-recon; sid:200007821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtxkgkdxxr.duckdns.org"; classtype:attempted-recon; sid:200007822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jtyrg.tl1sc905y2.workers.dev"; classtype:attempted-recon; sid:200007823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ju0.duckdns.org"; classtype:attempted-recon; sid:200007824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juanesteba.xiaopangkj.space"; classtype:attempted-recon; sid:200007825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"judppamuel.duckdns.org"; classtype:attempted-recon; sid:200007826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juevdmohtz.duckdns.org"; classtype:attempted-recon; sid:200007827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jufghb.ekv6deq.cn"; classtype:attempted-recon; sid:200007828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juialaq1819.liveblog365.com"; classtype:attempted-recon; sid:200007829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juicywiryscientificcomputing.appitauservicio.repl.co"; classtype:attempted-recon; sid:200007830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juiwrjgkgg.duckdns.org"; classtype:attempted-recon; sid:200007831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jujubklucy.duckdns.org"; classtype:attempted-recon; sid:200007832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juliegr.com"; classtype:attempted-recon; sid:200007833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"june.document-project-list.workers.dev"; classtype:attempted-recon; sid:200007834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juridaois892nba.liveblog365.com"; classtype:attempted-recon; sid:200007835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jurnalistik.uinjkt.ac.id"; classtype:attempted-recon; sid:200007836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"justsayingbro.com"; classtype:attempted-recon; sid:200007837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jusvpuyzdo.duckdns.org"; classtype:attempted-recon; sid:200007838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jutyuaye378ahsd.liveblog365.com"; classtype:attempted-recon; sid:200007839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juyxsypjlz.duckdns.org"; classtype:attempted-recon; sid:200007840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvbayqzxnz.duckdns.org"; classtype:attempted-recon; sid:200007841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvbivcqzba.duckdns.org"; classtype:attempted-recon; sid:200007842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvdbfklkvs.duckdns.org"; classtype:attempted-recon; sid:200007843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jveudufuii.duckdns.org"; classtype:attempted-recon; sid:200007844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvfnkuxndw.duckdns.org"; classtype:attempted-recon; sid:200007845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvnbhrwdju.duckdns.org"; classtype:attempted-recon; sid:200007846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvnqrosusq.duckdns.org"; classtype:attempted-recon; sid:200007847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvnyjdvljs.duckdns.org"; classtype:attempted-recon; sid:200007848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvqqvhtirv.duckdns.org"; classtype:attempted-recon; sid:200007849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvuvihfjot.duckdns.org"; classtype:attempted-recon; sid:200007850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvvccfxhjh.duckdns.org"; classtype:attempted-recon; sid:200007851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvxkcszbsp.duckdns.org"; classtype:attempted-recon; sid:200007852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvxomxomgj.duckdns.org"; classtype:attempted-recon; sid:200007853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jvyhewqnbg.duckdns.org"; classtype:attempted-recon; sid:200007854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwbkbiudte.duckdns.org"; classtype:attempted-recon; sid:200007855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jweemljzlc.duckdns.org"; classtype:attempted-recon; sid:200007856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwfibfjteb.duckdns.org"; classtype:attempted-recon; sid:200007857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwfnbumuqa.duckdns.org"; classtype:attempted-recon; sid:200007858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwfpqxgrnm.duckdns.org"; classtype:attempted-recon; sid:200007859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwfthmkdzn.duckdns.org"; classtype:attempted-recon; sid:200007860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwiflgobof.duckdns.org"; classtype:attempted-recon; sid:200007861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwjygjxvbb.duckdns.org"; classtype:attempted-recon; sid:200007862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwlullsgcl.duckdns.org"; classtype:attempted-recon; sid:200007863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwpsslzfix.duckdns.org"; classtype:attempted-recon; sid:200007864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwrpqmawau.duckdns.org"; classtype:attempted-recon; sid:200007865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jwstpzmygp.duckdns.org"; classtype:attempted-recon; sid:200007866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxbiqfoisi.duckdns.org"; classtype:attempted-recon; sid:200007867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxcxcjxvcjcvjcv-invoice.devnotes.co.in"; classtype:attempted-recon; sid:200007868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxfsdcvbgb.duckdns.org"; classtype:attempted-recon; sid:200007869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxirimijuy.duckdns.org"; classtype:attempted-recon; sid:200007870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxlwjoxnop.duckdns.org"; classtype:attempted-recon; sid:200007871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxoykxmycf.duckdns.org"; classtype:attempted-recon; sid:200007872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxqvpfktat.duckdns.org"; classtype:attempted-recon; sid:200007873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jyeue43rm95p.clickfunnels.com"; classtype:attempted-recon; sid:200007874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jyhpglpjyo.duckdns.org"; classtype:attempted-recon; sid:200007875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jysnmojfhn.duckdns.org"; classtype:attempted-recon; sid:200007876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jywufsoyoq.duckdns.org"; classtype:attempted-recon; sid:200007877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jz2bab.webwave.dev"; classtype:attempted-recon; sid:200007878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzbhyxfykc.duckdns.org"; classtype:attempted-recon; sid:200007879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzcnnjtugi.duckdns.org"; classtype:attempted-recon; sid:200007880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzdtcnekqs.duckdns.org"; classtype:attempted-recon; sid:200007881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzfocmwskc.duckdns.org"; classtype:attempted-recon; sid:200007882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzicxjykls.duckdns.org"; classtype:attempted-recon; sid:200007883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzjpxaiqcd.duckdns.org"; classtype:attempted-recon; sid:200007884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzmfrxsoge.duckdns.org"; classtype:attempted-recon; sid:200007885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jznmnaaamz.duckdns.org"; classtype:attempted-recon; sid:200007886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jznsbzebcr.duckdns.org"; classtype:attempted-recon; sid:200007887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzqmnipwov.duckdns.org"; classtype:attempted-recon; sid:200007888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzrhcnvygs.duckdns.org"; classtype:attempted-recon; sid:200007889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jztypldghf.duckdns.org"; classtype:attempted-recon; sid:200007890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzuhdommej.duckdns.org"; classtype:attempted-recon; sid:200007891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzvprvwesd.duckdns.org"; classtype:attempted-recon; sid:200007892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzwetrczrf.duckdns.org"; classtype:attempted-recon; sid:200007893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"k.axsct.xyz"; classtype:attempted-recon; sid:200007894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"k3ja6d.webwave.dev"; classtype:attempted-recon; sid:200007895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"k7dj3-ziaaa-aaaad-qdiia-cai.ic.fleek.co"; classtype:attempted-recon; sid:200007896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kaamwalibais.co.in"; classtype:attempted-recon; sid:200007897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kabayo.ru"; classtype:attempted-recon; sid:200007898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kabmpxcsja.duckdns.org"; classtype:attempted-recon; sid:200007899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kadokmxjvk.duckdns.org"; classtype:attempted-recon; sid:200007900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kaehzhujgh.duckdns.org"; classtype:attempted-recon; sid:200007901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kafkasariotel.com"; classtype:attempted-recon; sid:200007902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kaharaerad.web.app"; classtype:attempted-recon; sid:200007903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kalyzyrdud.duckdns.org"; classtype:attempted-recon; sid:200007904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kantor.myappaccount.net"; classtype:attempted-recon; sid:200007905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kaokbzlkkq.duckdns.org"; classtype:attempted-recon; sid:200007906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"karafuuru.xyz"; classtype:attempted-recon; sid:200007907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kardiologiebadkissingen.clickfunnels.com"; classtype:attempted-recon; sid:200007908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kargonova.com"; classtype:attempted-recon; sid:200007909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"karllagerfeldshop.com"; classtype:attempted-recon; sid:200007910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"karllagfr.com"; classtype:attempted-recon; sid:200007911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kartaltepespor.com"; classtype:attempted-recon; sid:200007912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kasarqfwsf.duckdns.org"; classtype:attempted-recon; sid:200007913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kasba.in"; classtype:attempted-recon; sid:200007914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kasepokrvk.duckdns.org"; classtype:attempted-recon; sid:200007915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kastersoy.space"; classtype:attempted-recon; sid:200007916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"katabitc.go.ug"; classtype:attempted-recon; sid:200007917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"katana-dex.com"; classtype:attempted-recon; sid:200007918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kathyw444.wixsite.com"; classtype:attempted-recon; sid:200007919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kayyessvirall-17.duckdns.org"; classtype:attempted-recon; sid:200007920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbaredesigns.com"; classtype:attempted-recon; sid:200007921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbefjeupzv.duckdns.org"; classtype:attempted-recon; sid:200007922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbiijflrph.duckdns.org"; classtype:attempted-recon; sid:200007923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbkhucmnqs.duckdns.org"; classtype:attempted-recon; sid:200007924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbpswajohu.duckdns.org"; classtype:attempted-recon; sid:200007925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbpujfhlir.duckdns.org"; classtype:attempted-recon; sid:200007926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbqocfcbpb.duckdns.org"; classtype:attempted-recon; sid:200007927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbqvwzjgcf.duckdns.org"; classtype:attempted-recon; sid:200007928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kbuhycpjot.duckdns.org"; classtype:attempted-recon; sid:200007929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kccfserzux.duckdns.org"; classtype:attempted-recon; sid:200007930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kcldzeqwsa.duckdns.org"; classtype:attempted-recon; sid:200007931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kcnqrcdgab.duckdns.org"; classtype:attempted-recon; sid:200007932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kcpwr.com"; classtype:attempted-recon; sid:200007933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kctnkcrewf.duckdns.org"; classtype:attempted-recon; sid:200007934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kdanuzyzht.duckdns.org"; classtype:attempted-recon; sid:200007935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kdbduljnhw.duckdns.org"; classtype:attempted-recon; sid:200007936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kddwmmvyye.duckdns.org"; classtype:attempted-recon; sid:200007937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kdlscaffolding.co.uk"; classtype:attempted-recon; sid:200007938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kdnjjqeenw.duckdns.org"; classtype:attempted-recon; sid:200007939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kdsxjrpbwf.duckdns.org"; classtype:attempted-recon; sid:200007940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keadaancus.topijerami.workers.dev"; classtype:attempted-recon; sid:200007941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kebsukmceu.duckdns.org"; classtype:attempted-recon; sid:200007942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kecc.com"; classtype:attempted-recon; sid:200007943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kecmanijada.com"; classtype:attempted-recon; sid:200007944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keddwusqnq.duckdns.org"; classtype:attempted-recon; sid:200007945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keepingregular.com"; classtype:attempted-recon; sid:200007946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keezgharsj.duckdns.org"; classtype:attempted-recon; sid:200007947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kejeswzjjz.duckdns.org"; classtype:attempted-recon; sid:200007948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kek-technik.com"; classtype:attempted-recon; sid:200007949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kemlidarti.flazio.com"; classtype:attempted-recon; sid:200007950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kenalred.com"; classtype:attempted-recon; sid:200007951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kenpong.com"; classtype:attempted-recon; sid:200007952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kenxpiegah.duckdns.org"; classtype:attempted-recon; sid:200007953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keogpdtvol.duckdns.org"; classtype:attempted-recon; sid:200007954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keojmjpfkv.duckdns.org"; classtype:attempted-recon; sid:200007955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kepmajpzup.duckdns.org"; classtype:attempted-recon; sid:200007956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keqjabmicn.duckdns.org"; classtype:attempted-recon; sid:200007957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kevilsvjno.duckdns.org"; classtype:attempted-recon; sid:200007958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kewbnssupo.duckdns.org"; classtype:attempted-recon; sid:200007959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kexmtvmgpo.duckdns.org"; classtype:attempted-recon; sid:200007960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kexupakhxw.duckdns.org"; classtype:attempted-recon; sid:200007961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kexximcpxj.duckdns.org"; classtype:attempted-recon; sid:200007962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keybolivia.com"; classtype:attempted-recon; sid:200007963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keysnowdisassembly.gaalicoa3.repl.co"; classtype:attempted-recon; sid:200007964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"keznltiqiy.duckdns.org"; classtype:attempted-recon; sid:200007965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfdpvirjtv.duckdns.org"; classtype:attempted-recon; sid:200007966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfeppnchfz.duckdns.org"; classtype:attempted-recon; sid:200007967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfhixpflae.duckdns.org"; classtype:attempted-recon; sid:200007968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfiyhqgkqs.duckdns.org"; classtype:attempted-recon; sid:200007969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfpigpdotr.duckdns.org"; classtype:attempted-recon; sid:200007970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfpzcjsdzp.duckdns.org"; classtype:attempted-recon; sid:200007971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfqxlqehny.duckdns.org"; classtype:attempted-recon; sid:200007972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfqyrjakvd.duckdns.org"; classtype:attempted-recon; sid:200007973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kfvsxtgqfh.duckdns.org"; classtype:attempted-recon; sid:200007974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgafmlyxny.duckdns.org"; classtype:attempted-recon; sid:200007975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgengineering.qa"; classtype:attempted-recon; sid:200007976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgfoundation.qa"; classtype:attempted-recon; sid:200007977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kghtxcriho.duckdns.org"; classtype:attempted-recon; sid:200007978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kghvb.jhvjfj3.cn"; classtype:attempted-recon; sid:200007979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgiehrgrmq.duckdns.org"; classtype:attempted-recon; sid:200007980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgiiybypon.duckdns.org"; classtype:attempted-recon; sid:200007981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgincdtonc.duckdns.org"; classtype:attempted-recon; sid:200007982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgmdobwrkg.duckdns.org"; classtype:attempted-recon; sid:200007983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgnbpkxpgl.duckdns.org"; classtype:attempted-recon; sid:200007984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgofbewnzz.duckdns.org"; classtype:attempted-recon; sid:200007985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgpnqidvxm.duckdns.org"; classtype:attempted-recon; sid:200007986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgyujkfesw.duckdns.org"; classtype:attempted-recon; sid:200007987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgzjkoperp.duckdns.org"; classtype:attempted-recon; sid:200007988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kgzkoksloj.duckdns.org"; classtype:attempted-recon; sid:200007989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kh-biztonsagos-hely-ba00ac.ingress-erytho.ewp.live"; classtype:attempted-recon; sid:200007990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khalidouhdane.com"; classtype:attempted-recon; sid:200007991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khbanjcdrs.duckdns.org"; classtype:attempted-recon; sid:200007992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khfvvcpwge.duckdns.org"; classtype:attempted-recon; sid:200007993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khjilyfqni.duckdns.org"; classtype:attempted-recon; sid:200007994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khlwhylysr.duckdns.org"; classtype:attempted-recon; sid:200007995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khnampowsa.duckdns.org"; classtype:attempted-recon; sid:200007996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khndqkmrse.duckdns.org"; classtype:attempted-recon; sid:200007997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khnpifocmf.duckdns.org"; classtype:attempted-recon; sid:200007998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khpgzvbogq.duckdns.org"; classtype:attempted-recon; sid:200007999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khqgwsuwak.duckdns.org"; classtype:attempted-recon; sid:200008000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khsgqgymjf.duckdns.org"; classtype:attempted-recon; sid:200008001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khtahwckcp.duckdns.org"; classtype:attempted-recon; sid:200008002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khvnwefbfj.duckdns.org"; classtype:attempted-recon; sid:200008003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kiafzovfhf.duckdns.org"; classtype:attempted-recon; sid:200008004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kibony.duckdns.org"; classtype:attempted-recon; sid:200008005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kichengate1.com"; classtype:attempted-recon; sid:200008006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kichpbaubz.duckdns.org"; classtype:attempted-recon; sid:200008007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kicksmandu.com"; classtype:attempted-recon; sid:200008008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kidzeepune.com"; classtype:attempted-recon; sid:200008009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kil.pages.dev"; classtype:attempted-recon; sid:200008010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kiltifwaxa.duckdns.org"; classtype:attempted-recon; sid:200008011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kimixeanbk.duckdns.org"; classtype:attempted-recon; sid:200008012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kimprhhbte.duckdns.org"; classtype:attempted-recon; sid:200008013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kinbpcdqpp.duckdns.org"; classtype:attempted-recon; sid:200008014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kindmarvelouscomputing.ebrout.repl.co"; classtype:attempted-recon; sid:200008015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kiovad.uno"; classtype:attempted-recon; sid:200008016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kiqqfcyxxi.duckdns.org"; classtype:attempted-recon; sid:200008017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kishwifi.com"; classtype:attempted-recon; sid:200008018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kisnrmumgm.duckdns.org"; classtype:attempted-recon; sid:200008019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kissapps.io"; classtype:attempted-recon; sid:200008020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kissmyball.com"; classtype:attempted-recon; sid:200008021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kithocivilengineering.com"; classtype:attempted-recon; sid:200008022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kivxyyqrde.duckdns.org"; classtype:attempted-recon; sid:200008023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kjezzxfubp.duckdns.org"; classtype:attempted-recon; sid:200008024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kjifrehady.duckdns.org"; classtype:attempted-recon; sid:200008025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kjkujedtee.duckdns.org"; classtype:attempted-recon; sid:200008026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kjljvxurpv.duckdns.org"; classtype:attempted-recon; sid:200008027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kjnqubqdmk.duckdns.org"; classtype:attempted-recon; sid:200008028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kjqnympukv.duckdns.org"; classtype:attempted-recon; sid:200008029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kk-asobu.com"; classtype:attempted-recon; sid:200008030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kkbhmnjxve.duckdns.org"; classtype:attempted-recon; sid:200008031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kkbiaergki.duckdns.org"; classtype:attempted-recon; sid:200008032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kkgnzwjvac.duckdns.org"; classtype:attempted-recon; sid:200008033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kkllxddqvo.duckdns.org"; classtype:attempted-recon; sid:200008034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kklyqmwqsy.duckdns.org"; classtype:attempted-recon; sid:200008035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kkqgapkpyp.duckdns.org"; classtype:attempted-recon; sid:200008036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kkszbxsqnl.duckdns.org"; classtype:attempted-recon; sid:200008037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kkwkcbhqxi.duckdns.org"; classtype:attempted-recon; sid:200008038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klaimchipgratis.com"; classtype:attempted-recon; sid:200008039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kldttbwwoh.duckdns.org"; classtype:attempted-recon; sid:200008040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klfdufnlbn.duckdns.org"; classtype:attempted-recon; sid:200008041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klfglnfavt.duckdns.org"; classtype:attempted-recon; sid:200008042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klgabbedba.duckdns.org"; classtype:attempted-recon; sid:200008043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klglejbsur.duckdns.org"; classtype:attempted-recon; sid:200008044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klgmnuscev.duckdns.org"; classtype:attempted-recon; sid:200008045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kljfdtstrlnnv.hostfree.pw"; classtype:attempted-recon; sid:200008046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kljpehwvya.duckdns.org"; classtype:attempted-recon; sid:200008047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klockorochsmycken.se"; classtype:attempted-recon; sid:200008048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klogrkatpa.duckdns.org"; classtype:attempted-recon; sid:200008049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kloqphgjxr.duckdns.org"; classtype:attempted-recon; sid:200008050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klos89.lajsop78.repl.co"; classtype:attempted-recon; sid:200008051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klqguvpcxj.duckdns.org"; classtype:attempted-recon; sid:200008052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klqkoserml.duckdns.org"; classtype:attempted-recon; sid:200008053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klxphiogdy.duckdns.org"; classtype:attempted-recon; sid:200008054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"klywunodwe.duckdns.org"; classtype:attempted-recon; sid:200008055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmakeitonline.com"; classtype:attempted-recon; sid:200008056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmct.edu.in"; classtype:attempted-recon; sid:200008057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmctayurvedacollege.org"; classtype:attempted-recon; sid:200008058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmhdnphmgv.duckdns.org"; classtype:attempted-recon; sid:200008059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmhetcjrip.duckdns.org"; classtype:attempted-recon; sid:200008060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmosuqpmdv.duckdns.org"; classtype:attempted-recon; sid:200008061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmqpmmmlsz.duckdns.org"; classtype:attempted-recon; sid:200008062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmsxmmktfw.duckdns.org"; classtype:attempted-recon; sid:200008063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmtdjnvmqo.duckdns.org"; classtype:attempted-recon; sid:200008064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmyljueoni.duckdns.org"; classtype:attempted-recon; sid:200008065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kmzgzgcsmb.duckdns.org"; classtype:attempted-recon; sid:200008066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"knbfsefrdb.duckdns.org"; classtype:attempted-recon; sid:200008067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"knbgv.ituqfhz.cn"; classtype:attempted-recon; sid:200008068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"knclzoptqu.duckdns.org"; classtype:attempted-recon; sid:200008069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"knerqyjucw.duckdns.org"; classtype:attempted-recon; sid:200008070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kngawcwdzd.duckdns.org"; classtype:attempted-recon; sid:200008071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"knqpkhgjpm.duckdns.org"; classtype:attempted-recon; sid:200008072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"knuibloxib.duckdns.org"; classtype:attempted-recon; sid:200008073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kobe-denki.co.jp"; classtype:attempted-recon; sid:200008074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kobuflrjld.duckdns.org"; classtype:attempted-recon; sid:200008075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kodencherycollege.ac.in"; classtype:attempted-recon; sid:200008076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kodera.jp"; classtype:attempted-recon; sid:200008077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"koerich-c-empresarial.com"; classtype:attempted-recon; sid:200008078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"koitlzguxp.duckdns.org"; classtype:attempted-recon; sid:200008079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kokhdczgme.duckdns.org"; classtype:attempted-recon; sid:200008080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kolachristwealth.com"; classtype:attempted-recon; sid:200008081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kolve.cl"; classtype:attempted-recon; sid:200008082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kone-ali123-mon-site-web-cheetah-5.cheetah.builderall.com"; classtype:attempted-recon; sid:200008083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"konenkglml.duckdns.org"; classtype:attempted-recon; sid:200008084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"konfirmasi-identitas-facebook2022.webnode.page"; classtype:attempted-recon; sid:200008085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"konfirmasipemulihanakunn.weeblysite.com"; classtype:attempted-recon; sid:200008086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kopetojupo.duckdns.org"; classtype:attempted-recon; sid:200008087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"koteng.odoo.com"; classtype:attempted-recon; sid:200008088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kowlaung.go.th"; classtype:attempted-recon; sid:200008089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"koypes.gr"; classtype:attempted-recon; sid:200008090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kozhwkxhkf.duckdns.org"; classtype:attempted-recon; sid:200008091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kozrhoswcl.duckdns.org"; classtype:attempted-recon; sid:200008092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpavlmxnxh.duckdns.org"; classtype:attempted-recon; sid:200008093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpegnouubr.duckdns.org"; classtype:attempted-recon; sid:200008094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpojxyurhz.duckdns.org"; classtype:attempted-recon; sid:200008095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpoomquske.duckdns.org"; classtype:attempted-recon; sid:200008096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpqphsxvge.duckdns.org"; classtype:attempted-recon; sid:200008097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpsaoxpqbc.duckdns.org"; classtype:attempted-recon; sid:200008098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpswtpjalj.duckdns.org"; classtype:attempted-recon; sid:200008099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpszkqvang.duckdns.org"; classtype:attempted-recon; sid:200008100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kptbwahyoj.duckdns.org"; classtype:attempted-recon; sid:200008101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kptstjgbmk.duckdns.org"; classtype:attempted-recon; sid:200008102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kputfrvlum.duckdns.org"; classtype:attempted-recon; sid:200008103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kpvhqtnjjn.duckdns.org"; classtype:attempted-recon; sid:200008104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqalumwafh.duckdns.org"; classtype:attempted-recon; sid:200008105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqbcoddjjq.duckdns.org"; classtype:attempted-recon; sid:200008106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqcqzzbzqc.duckdns.org"; classtype:attempted-recon; sid:200008107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqiywnnioo.duckdns.org"; classtype:attempted-recon; sid:200008108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqlaefxatj.duckdns.org"; classtype:attempted-recon; sid:200008109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqlaqmvemj.duckdns.org"; classtype:attempted-recon; sid:200008110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqlfddsbwl.duckdns.org"; classtype:attempted-recon; sid:200008111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqnyfrjqzm.duckdns.org"; classtype:attempted-recon; sid:200008112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqpfrgreuv.duckdns.org"; classtype:attempted-recon; sid:200008113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqsxqxbpxt.duckdns.org"; classtype:attempted-recon; sid:200008114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqtjccqelb.duckdns.org"; classtype:attempted-recon; sid:200008115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqucsihdhr.duckdns.org"; classtype:attempted-recon; sid:200008116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kqxlzppiyp.duckdns.org"; classtype:attempted-recon; sid:200008117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kr-bithumb.web.app"; classtype:attempted-recon; sid:200008118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krcmrspwkv.duckdns.org"; classtype:attempted-recon; sid:200008119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krdrpyfgkf.duckdns.org"; classtype:attempted-recon; sid:200008120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krhqyqxrha.duckdns.org"; classtype:attempted-recon; sid:200008121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krjcjpesfq.duckdns.org"; classtype:attempted-recon; sid:200008122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krnwnxklkg.duckdns.org"; classtype:attempted-recon; sid:200008123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krqlcqcnmq.duckdns.org"; classtype:attempted-recon; sid:200008124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krsnhbgltl.duckdns.org"; classtype:attempted-recon; sid:200008125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krujmhrdab.duckdns.org"; classtype:attempted-recon; sid:200008126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krukkeouqq.duckdns.org"; classtype:attempted-recon; sid:200008127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"krwshpqicu.duckdns.org"; classtype:attempted-recon; sid:200008128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ks-fcu.firebaseapp.com"; classtype:attempted-recon; sid:200008129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ks-fcu.web.app"; classtype:attempted-recon; sid:200008130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ksap.org"; classtype:attempted-recon; sid:200008131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kseaxlhgob.duckdns.org"; classtype:attempted-recon; sid:200008132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kshehqhekx.duckdns.org"; classtype:attempted-recon; sid:200008133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ksiqywahlf.duckdns.org"; classtype:attempted-recon; sid:200008134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ksk-koeln-aktualisierung.com"; classtype:attempted-recon; sid:200008135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ksk-stades.net"; classtype:attempted-recon; sid:200008136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ksmoura.com.br"; classtype:attempted-recon; sid:200008137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ksojhpxhch.duckdns.org"; classtype:attempted-recon; sid:200008138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kspcrjqqcw.duckdns.org"; classtype:attempted-recon; sid:200008139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kswcxcrrkt.duckdns.org"; classtype:attempted-recon; sid:200008140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ksyofhboig.duckdns.org"; classtype:attempted-recon; sid:200008141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ktdhqxiewv.duckdns.org"; classtype:attempted-recon; sid:200008142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kteyvjwdgy.duckdns.org"; classtype:attempted-recon; sid:200008143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ktgvvnkhow.duckdns.org"; classtype:attempted-recon; sid:200008144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ktkfafvrzx.duckdns.org"; classtype:attempted-recon; sid:200008145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ktlgzupgkc.duckdns.org"; classtype:attempted-recon; sid:200008146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ktmphlahrg.duckdns.org"; classtype:attempted-recon; sid:200008147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kttsacfbtw.duckdns.org"; classtype:attempted-recon; sid:200008148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ktvewoqtip.duckdns.org"; classtype:attempted-recon; sid:200008149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ktyllstajh.duckdns.org"; classtype:attempted-recon; sid:200008150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kubaxqdvon.duckdns.org"; classtype:attempted-recon; sid:200008151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kuchkuchnights.com"; classtype:attempted-recon; sid:200008152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kucoin-auth.web.app"; classtype:attempted-recon; sid:200008153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kucolnmyapis.com"; classtype:attempted-recon; sid:200008154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kucukturizmci.com"; classtype:attempted-recon; sid:200008155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kugtesyiec.duckdns.org"; classtype:attempted-recon; sid:200008156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kujgxrgzzt.duckdns.org"; classtype:attempted-recon; sid:200008157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kujzcdpzic.duckdns.org"; classtype:attempted-recon; sid:200008158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kukgwqugxp.duckdns.org"; classtype:attempted-recon; sid:200008159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kulgn.weblium.site"; classtype:attempted-recon; sid:200008160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kulmjpdhkv.duckdns.org"; classtype:attempted-recon; sid:200008161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kumceequvx.duckdns.org"; classtype:attempted-recon; sid:200008162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kunden-konto.mymom.info"; classtype:attempted-recon; sid:200008163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kundenkonto.mymom.info"; classtype:attempted-recon; sid:200008164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kundenservice-okayupdate2022.firebaseapp.com"; classtype:attempted-recon; sid:200008165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kundenservice-okayupdate2022.web.app"; classtype:attempted-recon; sid:200008166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kundin-lieferung-paket-ch.mikesavino.com"; classtype:attempted-recon; sid:200008167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kurdainyrk.duckdns.org"; classtype:attempted-recon; sid:200008168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kushfly.co"; classtype:attempted-recon; sid:200008169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kuwgxwwfdr.duckdns.org"; classtype:attempted-recon; sid:200008170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kv-e09jr5-0ghj-ewhn5r-gnhw-esrhng-9hjr-9grgr.obs.sa-brazil-1.myhuaweicloud.com"; classtype:attempted-recon; sid:200008171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kvbelurwdl.duckdns.org"; classtype:attempted-recon; sid:200008172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kvfsubiejl.duckdns.org"; classtype:attempted-recon; sid:200008173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kvihtdxcfh.duckdns.org"; classtype:attempted-recon; sid:200008174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kvrajuoakj.duckdns.org"; classtype:attempted-recon; sid:200008175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwblubptzc.duckdns.org"; classtype:attempted-recon; sid:200008176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwcinyrdgo.duckdns.org"; classtype:attempted-recon; sid:200008177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwduvxjdce.duckdns.org"; classtype:attempted-recon; sid:200008178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwezgtojgp.duckdns.org"; classtype:attempted-recon; sid:200008179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwh3ba6dy7.9xc7zyurk2.waitforthetruck.com"; classtype:attempted-recon; sid:200008180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwhvsgluuc.duckdns.org"; classtype:attempted-recon; sid:200008181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwjazrbsof.duckdns.org"; classtype:attempted-recon; sid:200008182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwjmsnmcvh.duckdns.org"; classtype:attempted-recon; sid:200008183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwjxiffhvr.duckdns.org"; classtype:attempted-recon; sid:200008184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwlcqyqcfj.duckdns.org"; classtype:attempted-recon; sid:200008185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwlfogktgg.duckdns.org"; classtype:attempted-recon; sid:200008186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwmnpyrxvp.duckdns.org"; classtype:attempted-recon; sid:200008187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwnhyknblq.duckdns.org"; classtype:attempted-recon; sid:200008188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwnsponbpq.duckdns.org"; classtype:attempted-recon; sid:200008189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwuhgoqhcc.duckdns.org"; classtype:attempted-recon; sid:200008190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwuyogiwnq.duckdns.org"; classtype:attempted-recon; sid:200008191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwvunylqxb.duckdns.org"; classtype:attempted-recon; sid:200008192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwwoshauax.duckdns.org"; classtype:attempted-recon; sid:200008193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kwxrsoknjz.duckdns.org"; classtype:attempted-recon; sid:200008194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxarjbisqr.duckdns.org"; classtype:attempted-recon; sid:200008195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxbtctoopa.duckdns.org"; classtype:attempted-recon; sid:200008196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxnfokodhy.duckdns.org"; classtype:attempted-recon; sid:200008197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxpukvfige.duckdns.org"; classtype:attempted-recon; sid:200008198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxsptbvyfq.duckdns.org"; classtype:attempted-recon; sid:200008199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxsqoxgdia.duckdns.org"; classtype:attempted-recon; sid:200008200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxutjwvpze.duckdns.org"; classtype:attempted-recon; sid:200008201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxwyxvhxnl.duckdns.org"; classtype:attempted-recon; sid:200008202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxxyebepwb.duckdns.org"; classtype:attempted-recon; sid:200008203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxxzxdlorf.duckdns.org"; classtype:attempted-recon; sid:200008204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kybersvap.com"; classtype:attempted-recon; sid:200008205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kyblvpyqpv.duckdns.org"; classtype:attempted-recon; sid:200008206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kyccsgpyfq.duckdns.org"; classtype:attempted-recon; sid:200008207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kyeqbyfgea.duckdns.org"; classtype:attempted-recon; sid:200008208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kyfiifhnki.duckdns.org"; classtype:attempted-recon; sid:200008209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kygmbqgfig.duckdns.org"; classtype:attempted-recon; sid:200008210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kygntwawfy.duckdns.org"; classtype:attempted-recon; sid:200008211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kygrnpwesv.duckdns.org"; classtype:attempted-recon; sid:200008212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kyjjsxtuhu.duckdns.org"; classtype:attempted-recon; sid:200008213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kyleosburn.com"; classtype:attempted-recon; sid:200008214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kylofjakzw.duckdns.org"; classtype:attempted-recon; sid:200008215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kymtmryfbv.duckdns.org"; classtype:attempted-recon; sid:200008216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kynxpfwkat.duckdns.org"; classtype:attempted-recon; sid:200008217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kypuutwcnn.duckdns.org"; classtype:attempted-recon; sid:200008218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kyrpwffaht.duckdns.org"; classtype:attempted-recon; sid:200008219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzdzyscnaw.duckdns.org"; classtype:attempted-recon; sid:200008220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzgkbotfkh.duckdns.org"; classtype:attempted-recon; sid:200008221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzhezwokqt.duckdns.org"; classtype:attempted-recon; sid:200008222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzilrckqvf.duckdns.org"; classtype:attempted-recon; sid:200008223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzitzitzmb.duckdns.org"; classtype:attempted-recon; sid:200008224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzjnvaeeoj.duckdns.org"; classtype:attempted-recon; sid:200008225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzpffntsga.duckdns.org"; classtype:attempted-recon; sid:200008226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzsszouvde.duckdns.org"; classtype:attempted-recon; sid:200008227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzuchetxdi.duckdns.org"; classtype:attempted-recon; sid:200008228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzufrhiolh.duckdns.org"; classtype:attempted-recon; sid:200008229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzwmowjhew.duckdns.org"; classtype:attempted-recon; sid:200008230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzyxbiifsq.duckdns.org"; classtype:attempted-recon; sid:200008231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kzzlmxcxlm.duckdns.org"; classtype:attempted-recon; sid:200008232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"l0g0n-1654546-ve.hostfree.pw"; classtype:attempted-recon; sid:200008233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"la.messagerie.vocale.orange.idsc.fr"; classtype:attempted-recon; sid:200008234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laaphqpktv.duckdns.org"; classtype:attempted-recon; sid:200008235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"labanque-postale-9e516.firebaseapp.com"; classtype:attempted-recon; sid:200008236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"labanque-postale-9e516.web.app"; classtype:attempted-recon; sid:200008237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"labreport.lk"; classtype:attempted-recon; sid:200008238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lackedbootweb245.ga"; classtype:attempted-recon; sid:200008239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lacmduxgoj.duckdns.org"; classtype:attempted-recon; sid:200008240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laconciergeriesablaise.com"; classtype:attempted-recon; sid:200008241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lacwdokgnx.duckdns.org"; classtype:attempted-recon; sid:200008242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laeruzoflj.duckdns.org"; classtype:attempted-recon; sid:200008243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lafise.co"; classtype:attempted-recon; sid:200008244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lagaleria.digital"; classtype:attempted-recon; sid:200008245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laier-p02w9ju34-hfrjn-werhngvfi9wnjfv-0whjrf-0r4ef.obs.ap-southeast-2.myhuaweicloud.com"; classtype:attempted-recon; sid:200008246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laiserhillacademy.com"; classtype:attempted-recon; sid:200008247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lakegraham.buzz"; classtype:attempted-recon; sid:200008248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lakemandyays.buzz"; classtype:attempted-recon; sid:200008249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lakossagi-mkb-hu.com"; classtype:attempted-recon; sid:200008250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lakossagi-mkbhu.com"; classtype:attempted-recon; sid:200008251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lakrmsmkal.duckdns.org"; classtype:attempted-recon; sid:200008252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lambdaweb.info"; classtype:attempted-recon; sid:200008253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lamehopes.tk"; classtype:attempted-recon; sid:200008254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lamkisarnasia.co.vu"; classtype:attempted-recon; sid:200008255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lamourreception.com.au"; classtype:attempted-recon; sid:200008256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"landbank.authorizepage.com"; classtype:attempted-recon; sid:200008257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"landcredi.com"; classtype:attempted-recon; sid:200008258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lapbxekkxg.duckdns.org"; classtype:attempted-recon; sid:200008259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laptopservicecenterhyderabad.in"; classtype:attempted-recon; sid:200008260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laqghsldol.duckdns.org"; classtype:attempted-recon; sid:200008261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"larenouvelle.mom"; classtype:attempted-recon; sid:200008262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lasecuriterduserviceregionaleca.contactinbio.com"; classtype:attempted-recon; sid:200008263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lasucursalnotificaenlineasm.site"; classtype:attempted-recon; sid:200008264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lasyaja.github.io"; classtype:attempted-recon; sid:200008265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"late-haze3a7.q79jkl81.workers.dev"; classtype:attempted-recon; sid:200008266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"late-hill-6d97.microonedrivelive.workers.dev"; classtype:attempted-recon; sid:200008267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"late-rice-0fc8.regan21.workers.dev"; classtype:attempted-recon; sid:200008268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"late-sun-545c.cruisecontrol1002473358.workers.dev"; classtype:attempted-recon; sid:200008269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"latinotravel.cz"; classtype:attempted-recon; sid:200008270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lattassq.hyperphp.com"; classtype:attempted-recon; sid:200008271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laubros.com"; classtype:attempted-recon; sid:200008272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lauchnyntf.com"; classtype:attempted-recon; sid:200008273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"launchnyntf.com"; classtype:attempted-recon; sid:200008274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"launchpad.marketmaking.pro"; classtype:attempted-recon; sid:200008275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"launchpadavalaunch.app"; classtype:attempted-recon; sid:200008276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lavaligiadimimi.it"; classtype:attempted-recon; sid:200008277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lavggkpvqo.duckdns.org"; classtype:attempted-recon; sid:200008278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lavishfamiliarnumerator.educaionfree.repl.co"; classtype:attempted-recon; sid:200008279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laxmrourrm.duckdns.org"; classtype:attempted-recon; sid:200008280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"laxqsojllu.duckdns.org"; classtype:attempted-recon; sid:200008281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lazhyguedm.duckdns.org"; classtype:attempted-recon; sid:200008282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lazndtasmr.duckdns.org"; classtype:attempted-recon; sid:200008283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbancaporinternet-netinterbank.pe.subarubrasov.ro"; classtype:attempted-recon; sid:200008284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbancaporlnternetextracashpe.com"; classtype:attempted-recon; sid:200008285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbavlpbjll.duckdns.org"; classtype:attempted-recon; sid:200008286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbazgqcgpv.duckdns.org"; classtype:attempted-recon; sid:200008287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbbforlifj.page.link"; classtype:attempted-recon; sid:200008288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbc-leboncoin.20-111-18-98.plesk.page"; classtype:attempted-recon; sid:200008289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbcpaiement-com.ru"; classtype:attempted-recon; sid:200008290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbdyowxgaf.duckdns.org"; classtype:attempted-recon; sid:200008291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbfdgnodte.duckdns.org"; classtype:attempted-recon; sid:200008292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbgafszqpc.duckdns.org"; classtype:attempted-recon; sid:200008293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbhpzioouc.duckdns.org"; classtype:attempted-recon; sid:200008294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbidnpgvfx.duckdns.org"; classtype:attempted-recon; sid:200008295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lblgjmiegv.duckdns.org"; classtype:attempted-recon; sid:200008296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbliaccess.victor-marquez.com"; classtype:attempted-recon; sid:200008297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbncgxpbqo.duckdns.org"; classtype:attempted-recon; sid:200008298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbpiaccess.run-ap-south1.goorm.io"; classtype:attempted-recon; sid:200008299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lbuyqakqkg.duckdns.org"; classtype:attempted-recon; sid:200008300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lc.com.pk"; classtype:attempted-recon; sid:200008301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcjkbypdct.duckdns.org"; classtype:attempted-recon; sid:200008302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcloud.ifind-ios.com"; classtype:attempted-recon; sid:200008303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcmevyirzf.duckdns.org"; classtype:attempted-recon; sid:200008304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcmrwbyrqt.duckdns.org"; classtype:attempted-recon; sid:200008305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcq-mangef.ga"; classtype:attempted-recon; sid:200008306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcqfyvsyrq.duckdns.org"; classtype:attempted-recon; sid:200008307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcrbzqzwmu.duckdns.org"; classtype:attempted-recon; sid:200008308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lculemglzu.duckdns.org"; classtype:attempted-recon; sid:200008309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcuzxppqrg.duckdns.org"; classtype:attempted-recon; sid:200008310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lcvvxifdnf.duckdns.org"; classtype:attempted-recon; sid:200008311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lczrzkpkwn.duckdns.org"; classtype:attempted-recon; sid:200008312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ldditkwvik.duckdns.org"; classtype:attempted-recon; sid:200008313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ldjsaydhbd.duckdns.org"; classtype:attempted-recon; sid:200008314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ldkcdhvuuj.duckdns.org"; classtype:attempted-recon; sid:200008315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ldnpbqtkex.duckdns.org"; classtype:attempted-recon; sid:200008316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ldrfguhgqi.duckdns.org"; classtype:attempted-recon; sid:200008317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ldspqiljqj.duckdns.org"; classtype:attempted-recon; sid:200008318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lduwdukgho.duckdns.org"; classtype:attempted-recon; sid:200008319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ldzrlxqang.duckdns.org"; classtype:attempted-recon; sid:200008320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"le-diablotin-rouen.com"; classtype:attempted-recon; sid:200008321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"le-site-web-de-postlu1.yolasite.com"; classtype:attempted-recon; sid:200008322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leadspro.com.br"; classtype:attempted-recon; sid:200008323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lear-corps.com"; classtype:attempted-recon; sid:200008324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"learn.maicro.net"; classtype:attempted-recon; sid:200008325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"learncricut.top"; classtype:attempted-recon; sid:200008326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leblancbrothers.leblancbrothers.workers.dev"; classtype:attempted-recon; sid:200008327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leboncon-sale-transaction-2926503910.fr"; classtype:attempted-recon; sid:200008328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lec21h6.hyperphp.com"; classtype:attempted-recon; sid:200008329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leccaagirz.duckdns.org"; classtype:attempted-recon; sid:200008330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leda-hotel.de"; classtype:attempted-recon; sid:200008331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"legend-decoration.cn"; classtype:attempted-recon; sid:200008332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leiifxnqsi.duckdns.org"; classtype:attempted-recon; sid:200008333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leilaopatiodetran-sp.org"; classtype:attempted-recon; sid:200008334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lejztwimgq.duckdns.org"; classtype:attempted-recon; sid:200008335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lenepweuwl.duckdns.org"; classtype:attempted-recon; sid:200008336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lenkaspares.com"; classtype:attempted-recon; sid:200008337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leslfwqgaz.duckdns.org"; classtype:attempted-recon; sid:200008338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lesuqmhigm.duckdns.org"; classtype:attempted-recon; sid:200008339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"letsgothursdayworkdd0909933.square.site"; classtype:attempted-recon; sid:200008340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"letzeglcce.duckdns.org"; classtype:attempted-recon; sid:200008341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leviathandesign.com.au"; classtype:attempted-recon; sid:200008342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lew.la"; classtype:attempted-recon; sid:200008343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lexedkuunx.duckdns.org"; classtype:attempted-recon; sid:200008344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lexy.pages.dev"; classtype:attempted-recon; sid:200008345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lfakvnhcia.duckdns.org"; classtype:attempted-recon; sid:200008346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lfcqdybyqb.duckdns.org"; classtype:attempted-recon; sid:200008347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lfetfrlgda.duckdns.org"; classtype:attempted-recon; sid:200008348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lffdsuwfiq.duckdns.org"; classtype:attempted-recon; sid:200008349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lffnmgrarn.duckdns.org"; classtype:attempted-recon; sid:200008350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lfgbeifzgg.duckdns.org"; classtype:attempted-recon; sid:200008351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lfksnalsdnlasdjl.hostfree.pw"; classtype:attempted-recon; sid:200008352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lflqooxoud.duckdns.org"; classtype:attempted-recon; sid:200008353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lfmuwjpqbp.duckdns.org"; classtype:attempted-recon; sid:200008354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lfrvftixcb.duckdns.org"; classtype:attempted-recon; sid:200008355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lg-comerica.firebaseapp.com"; classtype:attempted-recon; sid:200008356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lg-comerica.web.app"; classtype:attempted-recon; sid:200008357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lg-onecom-io.web.app"; classtype:attempted-recon; sid:200008358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgaythkago.duckdns.org"; classtype:attempted-recon; sid:200008359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgbgbfvpvr.duckdns.org"; classtype:attempted-recon; sid:200008360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgcqijzjbu.duckdns.org"; classtype:attempted-recon; sid:200008361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgdyimlxuf.duckdns.org"; classtype:attempted-recon; sid:200008362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgebvdifgn.duckdns.org"; classtype:attempted-recon; sid:200008363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgesnroolp.duckdns.org"; classtype:attempted-recon; sid:200008364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lggjpjqymb.duckdns.org"; classtype:attempted-recon; sid:200008365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgkqkuplai.duckdns.org"; classtype:attempted-recon; sid:200008366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgkvtbgrsz.duckdns.org"; classtype:attempted-recon; sid:200008367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgnghpfxns.duckdns.org"; classtype:attempted-recon; sid:200008368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgpihyelxc.duckdns.org"; classtype:attempted-recon; sid:200008369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgqelyvdds.duckdns.org"; classtype:attempted-recon; sid:200008370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgqndsmhxb.duckdns.org"; classtype:attempted-recon; sid:200008371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lguelbqmoa.duckdns.org"; classtype:attempted-recon; sid:200008372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgwukufliu.duckdns.org"; classtype:attempted-recon; sid:200008373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lgzheetxki.duckdns.org"; classtype:attempted-recon; sid:200008374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhdifuwrnk.duckdns.org"; classtype:attempted-recon; sid:200008375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhficgriym.duckdns.org"; classtype:attempted-recon; sid:200008376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhijfobmpd.duckdns.org"; classtype:attempted-recon; sid:200008377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhisneqrmb.duckdns.org"; classtype:attempted-recon; sid:200008378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhkvczjhkm.duckdns.org"; classtype:attempted-recon; sid:200008379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhllqdakun.duckdns.org"; classtype:attempted-recon; sid:200008380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhmamcrvck.duckdns.org"; classtype:attempted-recon; sid:200008381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhpqztufgy.duckdns.org"; classtype:attempted-recon; sid:200008382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhwqydjvfn.duckdns.org"; classtype:attempted-recon; sid:200008383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhxinzxajn.duckdns.org"; classtype:attempted-recon; sid:200008384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lhxxtvqfgo.duckdns.org"; classtype:attempted-recon; sid:200008385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liberacion-de-transferencias-a-c-h.webnode.es"; classtype:attempted-recon; sid:200008386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lienquan.garenia.vn"; classtype:attempted-recon; sid:200008387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"life-aid.in"; classtype:attempted-recon; sid:200008388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lifeschoolkashmir.com"; classtype:attempted-recon; sid:200008389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liff-gateway.lineml.jp"; classtype:attempted-recon; sid:200008390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"light-office.web.app"; classtype:attempted-recon; sid:200008391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lightequine.com"; classtype:attempted-recon; sid:200008392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ligneauthenpostale.firebaseapp.com"; classtype:attempted-recon; sid:200008393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ligneauthenpostale.web.app"; classtype:attempted-recon; sid:200008394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liibero.financial"; classtype:attempted-recon; sid:200008395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"limit-orders-v2.onrender.com"; classtype:attempted-recon; sid:200008396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"limjsoaybx.duckdns.org"; classtype:attempted-recon; sid:200008397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lingering-sun-f560.servicedeck.workers.dev"; classtype:attempted-recon; sid:200008398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lingiuini299.c1.biz"; classtype:attempted-recon; sid:200008399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"linguini773.c1.biz"; classtype:attempted-recon; sid:200008400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"linio.applytojob.com"; classtype:attempted-recon; sid:200008401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"linio68.com"; classtype:attempted-recon; sid:200008402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"link.gmreg5.net"; classtype:attempted-recon; sid:200008403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lipnmwypzw.duckdns.org"; classtype:attempted-recon; sid:200008404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lisa.unmuha.ac.id"; classtype:attempted-recon; sid:200008405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"little-math-4e76.m-santiago3317.workers.dev"; classtype:attempted-recon; sid:200008406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"little-sun-c135.woodedrose.workers.dev"; classtype:attempted-recon; sid:200008407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"little-wood-23ca.abssupdatedlogin.workers.dev"; classtype:attempted-recon; sid:200008408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liusanchuan.github.io"; classtype:attempted-recon; sid:200008409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"live-site.hopto.me"; classtype:attempted-recon; sid:200008410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"live.outlook22.workers.dev"; classtype:attempted-recon; sid:200008411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"live.pancakesvqp.com"; classtype:attempted-recon; sid:200008412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liveconnectfix.com"; classtype:attempted-recon; sid:200008413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"livecricketworldcup.com"; classtype:attempted-recon; sid:200008414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lively.marbauttulo.workers.dev"; classtype:attempted-recon; sid:200008415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"livsioogou.duckdns.org"; classtype:attempted-recon; sid:200008416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lixvjacyce.duckdns.org"; classtype:attempted-recon; sid:200008417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liyfatywdu.duckdns.org"; classtype:attempted-recon; sid:200008418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"liypgdmvhv.duckdns.org"; classtype:attempted-recon; sid:200008419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lizziguerra.com"; classtype:attempted-recon; sid:200008420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljakxpdlfo.duckdns.org"; classtype:attempted-recon; sid:200008421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljbhwcriry.duckdns.org"; classtype:attempted-recon; sid:200008422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljegdgzwin.duckdns.org"; classtype:attempted-recon; sid:200008423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljkkakpkvy.duckdns.org"; classtype:attempted-recon; sid:200008424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljluppmrjw.duckdns.org"; classtype:attempted-recon; sid:200008425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljnonibduc.duckdns.org"; classtype:attempted-recon; sid:200008426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljowzwmbqt.duckdns.org"; classtype:attempted-recon; sid:200008427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljqqaskixq.duckdns.org"; classtype:attempted-recon; sid:200008428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljsznlwuhs.duckdns.org"; classtype:attempted-recon; sid:200008429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljxffadrcd.duckdns.org"; classtype:attempted-recon; sid:200008430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkcwvfzwlu.duckdns.org"; classtype:attempted-recon; sid:200008431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkdgkugbwc.duckdns.org"; classtype:attempted-recon; sid:200008432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkdzlhnk.tk"; classtype:attempted-recon; sid:200008433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkgccupwtg.duckdns.org"; classtype:attempted-recon; sid:200008434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkltburmma.duckdns.org"; classtype:attempted-recon; sid:200008435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkqphgglpr.duckdns.org"; classtype:attempted-recon; sid:200008436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkyoylufzy.duckdns.org"; classtype:attempted-recon; sid:200008437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lkztrmdmwg.duckdns.org"; classtype:attempted-recon; sid:200008438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llbduqdznc.duckdns.org"; classtype:attempted-recon; sid:200008439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llhkjzwvdh.duckdns.org"; classtype:attempted-recon; sid:200008440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llilll.web.app"; classtype:attempted-recon; sid:200008441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lllll9999.hyperphp.com"; classtype:attempted-recon; sid:200008442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llmjutjcjy.duckdns.org"; classtype:attempted-recon; sid:200008443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llmwbuvnoz.duckdns.org"; classtype:attempted-recon; sid:200008444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lloydsbank.secure-personal-device-login.com"; classtype:attempted-recon; sid:200008445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llpnqdsawg.duckdns.org"; classtype:attempted-recon; sid:200008446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llukjscisj.duckdns.org"; classtype:attempted-recon; sid:200008447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llwhblnmrl.duckdns.org"; classtype:attempted-recon; sid:200008448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llybbhnwra.duckdns.org"; classtype:attempted-recon; sid:200008449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llyhugx.cluster028.hosting.ovh.net"; classtype:attempted-recon; sid:200008450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llzytq.cn"; classtype:attempted-recon; sid:200008451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmagsvyrxk.duckdns.org"; classtype:attempted-recon; sid:200008452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmbmibncyd.duckdns.org"; classtype:attempted-recon; sid:200008453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmdudsqahf.duckdns.org"; classtype:attempted-recon; sid:200008454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmhblpsxsc.duckdns.org"; classtype:attempted-recon; sid:200008455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmkfirhsnd.duckdns.org"; classtype:attempted-recon; sid:200008456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmkpkwylkn.duckdns.org"; classtype:attempted-recon; sid:200008457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmmqrgmlkd.duckdns.org"; classtype:attempted-recon; sid:200008458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmnaqzvxkw.duckdns.org"; classtype:attempted-recon; sid:200008459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmnintikzh.duckdns.org"; classtype:attempted-recon; sid:200008460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmpdbmagjt.duckdns.org"; classtype:attempted-recon; sid:200008461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmqvjslriu.duckdns.org"; classtype:attempted-recon; sid:200008462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lmwfjpvrtn.duckdns.org"; classtype:attempted-recon; sid:200008463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lnieqgsfie.duckdns.org"; classtype:attempted-recon; sid:200008464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lnkllidfnf.duckdns.org"; classtype:attempted-recon; sid:200008465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lnlinamlnh.duckdns.org"; classtype:attempted-recon; sid:200008466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lnmbzdxdqa.duckdns.org"; classtype:attempted-recon; sid:200008467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lnnpcbajfq.duckdns.org"; classtype:attempted-recon; sid:200008468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lnxydlrngg.duckdns.org"; classtype:attempted-recon; sid:200008469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loadunghol.jose909009.repl.co"; classtype:attempted-recon; sid:200008470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loan365applican.top"; classtype:attempted-recon; sid:200008471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loansidemed.com"; classtype:attempted-recon; sid:200008472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"local-helpdesk.com"; classtype:attempted-recon; sid:200008473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"localso.com"; classtype:attempted-recon; sid:200008474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"locewmnjpy.duckdns.org"; classtype:attempted-recon; sid:200008475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"locurdx.ga"; classtype:attempted-recon; sid:200008476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"log-defikingdams.com"; classtype:attempted-recon; sid:200008477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"log-deikifngsdoms.com"; classtype:attempted-recon; sid:200008478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"log44.caso33b5j.repl.co"; classtype:attempted-recon; sid:200008479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loghost.pancakesvqp.com"; classtype:attempted-recon; sid:200008480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-doc-share.firebaseapp.com"; classtype:attempted-recon; sid:200008481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-doc-share.web.app"; classtype:attempted-recon; sid:200008482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-doc-view.firebaseapp.com"; classtype:attempted-recon; sid:200008483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-doc-view.web.app"; classtype:attempted-recon; sid:200008484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-folder.web.app"; classtype:attempted-recon; sid:200008485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-share-1.firebaseapp.com"; classtype:attempted-recon; sid:200008486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-share-4.firebaseapp.com"; classtype:attempted-recon; sid:200008487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-share-4.web.app"; classtype:attempted-recon; sid:200008488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-drive-file-share-5.web.app"; classtype:attempted-recon; sid:200008489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-share-folder-view.web.app"; classtype:attempted-recon; sid:200008490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-share.firebaseapp.com"; classtype:attempted-recon; sid:200008491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-view-folder-1.web.app"; classtype:attempted-recon; sid:200008492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-view-folder-2.firebaseapp.com"; classtype:attempted-recon; sid:200008493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-view-folder-2.web.app"; classtype:attempted-recon; sid:200008494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-view-folder-3.firebaseapp.com"; classtype:attempted-recon; sid:200008495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-view-folder-4.firebaseapp.com"; classtype:attempted-recon; sid:200008496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-view-folder.firebaseapp.com"; classtype:attempted-recon; sid:200008497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-file-view-folder.web.app"; classtype:attempted-recon; sid:200008498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-folder-agl-coa.web.app"; classtype:attempted-recon; sid:200008499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-id-file-storage.web.app"; classtype:attempted-recon; sid:200008500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-power-share-file1.firebaseapp.com"; classtype:attempted-recon; sid:200008501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-power-share-file1.web.app"; classtype:attempted-recon; sid:200008502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-power-share-view.firebaseapp.com"; classtype:attempted-recon; sid:200008503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micro-power-share-view.web.app"; classtype:attempted-recon; sid:200008504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-microsoftonlineghhjjuigg.myportfolio.com"; classtype:attempted-recon; sid:200008505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-micrsoft-onedrive-signin.sansiro324wnet.ru"; classtype:attempted-recon; sid:200008506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-net-micro-inv-folder.firebaseapp.com"; classtype:attempted-recon; sid:200008507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-net-micro-inv-folder.web.app"; classtype:attempted-recon; sid:200008508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-prodx-att.com"; classtype:attempted-recon; sid:200008509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-review-uk.firebaseapp.com"; classtype:attempted-recon; sid:200008510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-review-uk.web.app"; classtype:attempted-recon; sid:200008511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-share-file-folder-view.web.app"; classtype:attempted-recon; sid:200008512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-share-file-folder.firebaseapp.com"; classtype:attempted-recon; sid:200008513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-share-file-folder.web.app"; classtype:attempted-recon; sid:200008514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-view-share-folder-file.firebaseapp.com"; classtype:attempted-recon; sid:200008515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login.bitkub.gq"; classtype:attempted-recon; sid:200008516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login.ibpiacess.com"; classtype:attempted-recon; sid:200008517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login.info.poste.decizia.ro"; classtype:attempted-recon; sid:200008518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login.mizuhobanke-co-jp.cc"; classtype:attempted-recon; sid:200008519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login.mizuhobankg.top"; classtype:attempted-recon; sid:200008520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login.portal-bancochlle.cl.dolphinguesthouse.in"; classtype:attempted-recon; sid:200008521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login1.sitelio.me"; classtype:attempted-recon; sid:200008522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginbncr1.webcindario.com"; classtype:attempted-recon; sid:200008523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginform.co"; classtype:attempted-recon; sid:200008524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginmicrosoftonline-remittancedeposit.myportfolio.com"; classtype:attempted-recon; sid:200008525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginmicrosoftonlinens.myportfolio.com"; classtype:attempted-recon; sid:200008526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginmicrosoftonlineproposal.myportfolio.com"; classtype:attempted-recon; sid:200008527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginprim2.sslblindado.com"; classtype:attempted-recon; sid:200008528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginscreenattinc.boxmode.io"; classtype:attempted-recon; sid:200008529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"logistik.bpbd.boyolali.go.id"; classtype:attempted-recon; sid:200008530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"logmedo.com"; classtype:attempted-recon; sid:200008531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"logn-microsofton.shared8.workers.dev"; classtype:attempted-recon; sid:200008532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"logn-mtb-online.firebaseapp.com"; classtype:attempted-recon; sid:200008533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"logn-mtb-online.web.app"; classtype:attempted-recon; sid:200008534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"logon-review-uk.firebaseapp.com"; classtype:attempted-recon; sid:200008535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"logon-review-uk.web.app"; classtype:attempted-recon; sid:200008536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lojasmagalu.com"; classtype:attempted-recon; sid:200008537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lojasvirtualon.com"; classtype:attempted-recon; sid:200008538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lokgrever.mlobero9.repl.co"; classtype:attempted-recon; sid:200008539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lomadesarrollos.mx"; classtype:attempted-recon; sid:200008540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loneincredibleembed.suppurt4sw.repl.co"; classtype:attempted-recon; sid:200008541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"long-disk-7d27.jonhayp.workers.dev"; classtype:attempted-recon; sid:200008542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"long-mouse-deaf.silentsunrise3109.workers.dev"; classtype:attempted-recon; sid:200008543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lonos-auth.de"; classtype:attempted-recon; sid:200008544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lonoss.azurewebsites.net"; classtype:attempted-recon; sid:200008545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lookatmynewphotos.com"; classtype:attempted-recon; sid:200008546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lookinqatar.com"; classtype:attempted-recon; sid:200008547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"looksrare.cx"; classtype:attempted-recon; sid:200008548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"looksrare.org.0xb646f4fa47a16309bf603fd805ecd222a5cd.co"; classtype:attempted-recon; sid:200008549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"looksraremarkets.com"; classtype:attempted-recon; sid:200008550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loopedcupes.com"; classtype:attempted-recon; sid:200008551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lopiuyt.bcpbansesion.repl.co"; classtype:attempted-recon; sid:200008552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lorhcjtanj.duckdns.org"; classtype:attempted-recon; sid:200008553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lost.lostincovid.org"; classtype:attempted-recon; sid:200008554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lot-lp-x.web.app"; classtype:attempted-recon; sid:200008555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lotericainterestadual.com.br"; classtype:attempted-recon; sid:200008556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lotosarcondicionado.com.br"; classtype:attempted-recon; sid:200008557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lotusoutsourcinginc.com"; classtype:attempted-recon; sid:200008558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loungebot.net.ru"; classtype:attempted-recon; sid:200008559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lp2maray.com"; classtype:attempted-recon; sid:200008560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpaoformqm.duckdns.org"; classtype:attempted-recon; sid:200008561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpayxxrttl.duckdns.org"; classtype:attempted-recon; sid:200008562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpcsbsulrq.duckdns.org"; classtype:attempted-recon; sid:200008563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpkzngcrpv.duckdns.org"; classtype:attempted-recon; sid:200008564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lplbgwkjsr.duckdns.org"; classtype:attempted-recon; sid:200008565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lplusd.com"; classtype:attempted-recon; sid:200008566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpngsrcvry.duckdns.org"; classtype:attempted-recon; sid:200008567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpqacbuaqj.duckdns.org"; classtype:attempted-recon; sid:200008568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lprsfurvas.duckdns.org"; classtype:attempted-recon; sid:200008569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpudqhchgu.duckdns.org"; classtype:attempted-recon; sid:200008570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpwsjdflya.duckdns.org"; classtype:attempted-recon; sid:200008571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpymmkdsfo.duckdns.org"; classtype:attempted-recon; sid:200008572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqcnahqevc.duckdns.org"; classtype:attempted-recon; sid:200008573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqhcctrrvs.duckdns.org"; classtype:attempted-recon; sid:200008574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqlcxfxxaa.duckdns.org"; classtype:attempted-recon; sid:200008575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqniwgpdvv.duckdns.org"; classtype:attempted-recon; sid:200008576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqofjmucff.duckdns.org"; classtype:attempted-recon; sid:200008577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqqrrmyrbg.duckdns.org"; classtype:attempted-recon; sid:200008578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqsktkrjmx.duckdns.org"; classtype:attempted-recon; sid:200008579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqsowwvyqv.duckdns.org"; classtype:attempted-recon; sid:200008580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lqwzrwxbrp.duckdns.org"; classtype:attempted-recon; sid:200008581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrcreunoeb.duckdns.org"; classtype:attempted-recon; sid:200008582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrdhrxukkd.duckdns.org"; classtype:attempted-recon; sid:200008583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrfzgrtawe.duckdns.org"; classtype:attempted-recon; sid:200008584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrgoxrzyaz.duckdns.org"; classtype:attempted-recon; sid:200008585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrgqswmifb.duckdns.org"; classtype:attempted-recon; sid:200008586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrkgqvdwwn.duckdns.org"; classtype:attempted-recon; sid:200008587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrqvrfpnpz.duckdns.org"; classtype:attempted-recon; sid:200008588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrs-office-tax-aids-finance-gov.com"; classtype:attempted-recon; sid:200008589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lrxjzrimub.duckdns.org"; classtype:attempted-recon; sid:200008590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsdaeszzxsa.hostfree.pw"; classtype:attempted-recon; sid:200008591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsdxztzrx.liveblog365.com"; classtype:attempted-recon; sid:200008592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsewdacfkx.duckdns.org"; classtype:attempted-recon; sid:200008593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsgdhhnyge.duckdns.org"; classtype:attempted-recon; sid:200008594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsggoppdui.duckdns.org"; classtype:attempted-recon; sid:200008595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsjmdwyhdm.duckdns.org"; classtype:attempted-recon; sid:200008596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsjpiz1.hyperphp.com"; classtype:attempted-recon; sid:200008597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lslpybmthz.duckdns.org"; classtype:attempted-recon; sid:200008598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsuerjotiz.duckdns.org"; classtype:attempted-recon; sid:200008599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsvppucljy.duckdns.org"; classtype:attempted-recon; sid:200008600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsxgudjwcz.duckdns.org"; classtype:attempted-recon; sid:200008601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsxlddmakj.duckdns.org"; classtype:attempted-recon; sid:200008602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lszhowqwcg.duckdns.org"; classtype:attempted-recon; sid:200008603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ltau.guardiao-22.com"; classtype:attempted-recon; sid:200008604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ltaucard-f.c1.biz"; classtype:attempted-recon; sid:200008605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lthneejzwi.duckdns.org"; classtype:attempted-recon; sid:200008606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ltivbkpoko.duckdns.org"; classtype:attempted-recon; sid:200008607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ltmgurlwlw.duckdns.org"; classtype:attempted-recon; sid:200008608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ltmpzlyroc.duckdns.org"; classtype:attempted-recon; sid:200008609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ltpmcyniio.duckdns.org"; classtype:attempted-recon; sid:200008610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ltvxvbpcgn.duckdns.org"; classtype:attempted-recon; sid:200008611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luavbybpap.duckdns.org"; classtype:attempted-recon; sid:200008612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lub-supply.com"; classtype:attempted-recon; sid:200008613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luciavent.com"; classtype:attempted-recon; sid:200008614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lucindablackwell.com"; classtype:attempted-recon; sid:200008615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lucky-hill-75b5.ryoung8760.workers.dev"; classtype:attempted-recon; sid:200008616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lucky-rice-73a8.bizd134.workers.dev"; classtype:attempted-recon; sid:200008617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luckybblock.com"; classtype:attempted-recon; sid:200008618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lucy-walker.com"; classtype:attempted-recon; sid:200008619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ludo14.com"; classtype:attempted-recon; sid:200008620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luialvvtre.duckdns.org"; classtype:attempted-recon; sid:200008621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luisgc21.github.io"; classtype:attempted-recon; sid:200008622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luixabablf.duckdns.org"; classtype:attempted-recon; sid:200008623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lujrrifzjd.duckdns.org"; classtype:attempted-recon; sid:200008624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lumhyfbntt.duckdns.org"; classtype:attempted-recon; sid:200008625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lunacgrowstaking.trade"; classtype:attempted-recon; sid:200008626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luquecartera.com"; classtype:attempted-recon; sid:200008627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lusaeouzhe.duckdns.org"; classtype:attempted-recon; sid:200008628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lusbgonagy.duckdns.org"; classtype:attempted-recon; sid:200008629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luvafurjsq.duckdns.org"; classtype:attempted-recon; sid:200008630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luxtrustapp-data-balaoui973911.codeanyapp.com"; classtype:attempted-recon; sid:200008631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luxuriousamusingdefragment.assamaasama.repl.co"; classtype:attempted-recon; sid:200008632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luzqjkxnyo.duckdns.org"; classtype:attempted-recon; sid:200008633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvayaklhwn.duckdns.org"; classtype:attempted-recon; sid:200008634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvdlqmlrib.duckdns.org"; classtype:attempted-recon; sid:200008635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvlsllecdi.duckdns.org"; classtype:attempted-recon; sid:200008636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvndvqtexo.duckdns.org"; classtype:attempted-recon; sid:200008637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvrmyizvfg.duckdns.org"; classtype:attempted-recon; sid:200008638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvsjrzrukn.duckdns.org"; classtype:attempted-recon; sid:200008639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvumpucvex.duckdns.org"; classtype:attempted-recon; sid:200008640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvwupwffut.duckdns.org"; classtype:attempted-recon; sid:200008641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lvyixbnjfh.duckdns.org"; classtype:attempted-recon; sid:200008642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwbvloabiz.duckdns.org"; classtype:attempted-recon; sid:200008643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwjjwxonaa.duckdns.org"; classtype:attempted-recon; sid:200008644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwmeghakeq.duckdns.org"; classtype:attempted-recon; sid:200008645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwprrvqfwk.duckdns.org"; classtype:attempted-recon; sid:200008646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwqj.qqea.cryptosex.me"; classtype:attempted-recon; sid:200008647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwtlmeuteq.duckdns.org"; classtype:attempted-recon; sid:200008648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwushexsqu.duckdns.org"; classtype:attempted-recon; sid:200008649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lwxagidggk.duckdns.org"; classtype:attempted-recon; sid:200008650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxadgreqld.duckdns.org"; classtype:attempted-recon; sid:200008651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxbzzcldtm.duckdns.org"; classtype:attempted-recon; sid:200008652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxdhuvgpko.duckdns.org"; classtype:attempted-recon; sid:200008653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxguibnozm.duckdns.org"; classtype:attempted-recon; sid:200008654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxlswzxrsu.duckdns.org"; classtype:attempted-recon; sid:200008655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxnwzsstov.web.app"; classtype:attempted-recon; sid:200008656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxqbxxcoju.duckdns.org"; classtype:attempted-recon; sid:200008657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxqlyurxid.duckdns.org"; classtype:attempted-recon; sid:200008658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxtpeqvoyb.duckdns.org"; classtype:attempted-recon; sid:200008659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxvrogbavn.duckdns.org"; classtype:attempted-recon; sid:200008660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxweiukcuk.duckdns.org"; classtype:attempted-recon; sid:200008661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxxthhuhss.duckdns.org"; classtype:attempted-recon; sid:200008662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lxyagvvfkq.duckdns.org"; classtype:attempted-recon; sid:200008663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lyaazjbgyz.duckdns.org"; classtype:attempted-recon; sid:200008664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lyanlgmofz.duckdns.org"; classtype:attempted-recon; sid:200008665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lydab.com"; classtype:attempted-recon; sid:200008666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lyhgeoyomc.duckdns.org"; classtype:attempted-recon; sid:200008667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lyixvsgfpt.duckdns.org"; classtype:attempted-recon; sid:200008668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lyllwaqwxj.duckdns.org"; classtype:attempted-recon; sid:200008669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lzdghtbace.duckdns.org"; classtype:attempted-recon; sid:200008670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lzdrwlzauu.duckdns.org"; classtype:attempted-recon; sid:200008671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lzfxpmzlmi.duckdns.org"; classtype:attempted-recon; sid:200008672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lzgbmqdcqw.duckdns.org"; classtype:attempted-recon; sid:200008673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lzpjrhe.top"; classtype:attempted-recon; sid:200008674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lzpkyjksuc.duckdns.org"; classtype:attempted-recon; sid:200008675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m-gov-au.firebaseapp.com"; classtype:attempted-recon; sid:200008676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m-gov-au.web.app"; classtype:attempted-recon; sid:200008677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m-sip.com"; classtype:attempted-recon; sid:200008678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.fancy-bush-cf01.marhabitas.workers.dev"; classtype:attempted-recon; sid:200008679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.help.insecurpage.workers.dev"; classtype:attempted-recon; sid:200008680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.licenseplates.tv"; classtype:attempted-recon; sid:200008681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.protc.safty-pege.workers.dev"; classtype:attempted-recon; sid:200008682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.recovery.safetyacount.workers.dev"; classtype:attempted-recon; sid:200008683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.recovery.saftypageupdate.workers.dev"; classtype:attempted-recon; sid:200008684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.still-band-a6a6.saftyalrt.workers.dev"; classtype:attempted-recon; sid:200008685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.super-recipe-d45d.sombodysad.workers.dev"; classtype:attempted-recon; sid:200008686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m0it1b.com"; classtype:attempted-recon; sid:200008687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m1bzz8.csb.app"; classtype:attempted-recon; sid:200008688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m3agence.firebaseapp.com"; classtype:attempted-recon; sid:200008689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m3agence.web.app"; classtype:attempted-recon; sid:200008690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m42club.com"; classtype:attempted-recon; sid:200008691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m4agence.firebaseapp.com"; classtype:attempted-recon; sid:200008692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m4agence.web.app"; classtype:attempted-recon; sid:200008693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m5.lt"; classtype:attempted-recon; sid:200008694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m9bvnr.webwave.dev"; classtype:attempted-recon; sid:200008695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"macbgdbkop.duckdns.org"; classtype:attempted-recon; sid:200008696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"macria.repl.co"; classtype:attempted-recon; sid:200008697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"macrocenter.repl.co"; classtype:attempted-recon; sid:200008698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"macst.cc"; classtype:attempted-recon; sid:200008699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"madens.com.pl"; classtype:attempted-recon; sid:200008700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"madhkpnjtf.duckdns.org"; classtype:attempted-recon; sid:200008701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"madrid-web-home.blogspot.com"; classtype:attempted-recon; sid:200008702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maestro.my.prod.dfg152.ru"; classtype:attempted-recon; sid:200008703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magaduzela.co.za"; classtype:attempted-recon; sid:200008704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magento.shoeroom.shoes"; classtype:attempted-recon; sid:200008705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maggyarevalo.com"; classtype:attempted-recon; sid:200008706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magiamgiashopee.com"; classtype:attempted-recon; sid:200008707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magiceden-drops.com"; classtype:attempted-recon; sid:200008708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magicedendrop.shop"; classtype:attempted-recon; sid:200008709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magicnftbox.name"; classtype:attempted-recon; sid:200008710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magicvelocityrating.com"; classtype:attempted-recon; sid:200008711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magikedene.work"; classtype:attempted-recon; sid:200008712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magnumforces.com"; classtype:attempted-recon; sid:200008713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"magredsmtttm.servegame.com"; classtype:attempted-recon; sid:200008714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mahikapur.in"; classtype:attempted-recon; sid:200008715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mahwsgflit.duckdns.org"; classtype:attempted-recon; sid:200008716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maidmcierdco.icu"; classtype:attempted-recon; sid:200008717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maidmcierdco.top"; classtype:attempted-recon; sid:200008718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maikacordmay.top"; classtype:attempted-recon; sid:200008719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail-10361at.square.site"; classtype:attempted-recon; sid:200008720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail-ovhcloud.web.app"; classtype:attempted-recon; sid:200008721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail-ssocloud-srvr67yhguh.pages.dev"; classtype:attempted-recon; sid:200008722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.beauser.com"; classtype:attempted-recon; sid:200008723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.clamps.jp"; classtype:attempted-recon; sid:200008724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.derbyde.ae"; classtype:attempted-recon; sid:200008725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.energoservice.ge"; classtype:attempted-recon; sid:200008726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.estartupchallenge-egabon.org"; classtype:attempted-recon; sid:200008727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.icosort.com"; classtype:attempted-recon; sid:200008728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.ims-fe.com"; classtype:attempted-recon; sid:200008729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.lolwhoa.com"; classtype:attempted-recon; sid:200008730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.mksc.co.tz"; classtype:attempted-recon; sid:200008731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.pdc13.com"; classtype:attempted-recon; sid:200008732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail01.moncompte.f.appsuite.default.folder.ugc.umc.edu.np"; classtype:attempted-recon; sid:200008733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail04.appsuite.app.portail.pcvegas-hospice.com"; classtype:attempted-recon; sid:200008734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail1.goggle.workers.dev"; classtype:attempted-recon; sid:200008735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail1.googlle.workers.dev"; classtype:attempted-recon; sid:200008736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail11.goggle.workers.dev"; classtype:attempted-recon; sid:200008737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail2.goggle.workers.dev"; classtype:attempted-recon; sid:200008738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail2.googlle.workers.dev"; classtype:attempted-recon; sid:200008739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail3.goggle.workers.dev"; classtype:attempted-recon; sid:200008740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailbtinternet.github.io"; classtype:attempted-recon; sid:200008741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailer7.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200008742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailinc.yolasite.com"; classtype:attempted-recon; sid:200008743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailpagesupport13.duckdns.org"; classtype:attempted-recon; sid:200008744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailplusrolerequestedprivatemailupdates.pages.dev"; classtype:attempted-recon; sid:200008745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailpreviewpoint.myportfolio.com"; classtype:attempted-recon; sid:200008746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailserver7656566.blob.core.windows.net"; classtype:attempted-recon; sid:200008747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailvilopas.square.site"; classtype:attempted-recon; sid:200008748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"main.d3uaudwaivwhhk.amplifyapp.com"; classtype:attempted-recon; sid:200008749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mainbibanres.store"; classtype:attempted-recon; sid:200008750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maindappsweb.com"; classtype:attempted-recon; sid:200008751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mainetportals.org"; classtype:attempted-recon; sid:200008752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mainnetdappbot.net"; classtype:attempted-recon; sid:200008753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mainoffersonline.online"; classtype:attempted-recon; sid:200008754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maio-106296.weeblysite.com"; classtype:attempted-recon; sid:200008755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"majesticmeads.com"; classtype:attempted-recon; sid:200008756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"makeshort.link"; classtype:attempted-recon; sid:200008757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"makstcs-go.ru"; classtype:attempted-recon; sid:200008758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"malaprontaargentina.com.br"; classtype:attempted-recon; sid:200008759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"malgritrarkna.com"; classtype:attempted-recon; sid:200008760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mamavapes.com"; classtype:attempted-recon; sid:200008761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mamifoundation.org"; classtype:attempted-recon; sid:200008762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mamkefu.kanuomei.com"; classtype:attempted-recon; sid:200008763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"manage.hexateron.io"; classtype:attempted-recon; sid:200008764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"managearubas.com"; classtype:attempted-recon; sid:200008765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"managementsupports6519819651.co.vu"; classtype:attempted-recon; sid:200008766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"managementsupports95651918.co.vu"; classtype:attempted-recon; sid:200008767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"managementsupports984951996.co.vu"; classtype:attempted-recon; sid:200008768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"managerpaketinfo.com"; classtype:attempted-recon; sid:200008769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mancataconsegnacard.com"; classtype:attempted-recon; sid:200008770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mandatorydeal.co.za"; classtype:attempted-recon; sid:200008771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mangoad.gq"; classtype:attempted-recon; sid:200008772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mangoad.ml"; classtype:attempted-recon; sid:200008773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mannixing.com"; classtype:attempted-recon; sid:200008774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"manskxvowc.duckdns.org"; classtype:attempted-recon; sid:200008775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mapos.us"; classtype:attempted-recon; sid:200008776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mapsa.com.pe"; classtype:attempted-recon; sid:200008777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maqmoldprecision.com"; classtype:attempted-recon; sid:200008778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marcelotoledo.net"; classtype:attempted-recon; sid:200008779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marcorals.com"; classtype:attempted-recon; sid:200008780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marcygelko.myportfolio.com"; classtype:attempted-recon; sid:200008781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marjumatmaladak.my.id"; classtype:attempted-recon; sid:200008782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marjunirtas.co.vu"; classtype:attempted-recon; sid:200008783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mark2design.com"; classtype:attempted-recon; sid:200008784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"market-mcsgo.ru"; classtype:attempted-recon; sid:200008785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"market.immutable.com.co"; classtype:attempted-recon; sid:200008786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marketplace-axieinfinity.io"; classtype:attempted-recon; sid:200008787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marketplace.axieinfinity.gq"; classtype:attempted-recon; sid:200008788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"markos.cc"; classtype:attempted-recon; sid:200008789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marlonmedia.de"; classtype:attempted-recon; sid:200008790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marodncpab.duckdns.org"; classtype:attempted-recon; sid:200008791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marshfamilyhistory.com"; classtype:attempted-recon; sid:200008792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"martinfernando.org"; classtype:attempted-recon; sid:200008793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masaeli2.cf"; classtype:attempted-recon; sid:200008794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masceaesnccsaaserd.maseccceaoooearescooosesaserd.rinlvb.top"; classtype:attempted-recon; sid:200008795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masceaesnccsaaserd.maseccceaoooearescoooseserd.mfwrsg.top"; classtype:attempted-recon; sid:200008796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masceaesnccsaaserd.masecocsaeorearescoooseccsod.mfwrsg.top"; classtype:attempted-recon; sid:200008797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masceaesnccsaaserd.masecocsaeorearescooosed.mfwrsg.top"; classtype:attempted-recon; sid:200008798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascoosoerd.mascesccrerd.mgjuxa.top"; classtype:attempted-recon; sid:200008799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascoosoerd.mascesccrerd.mojnlk.top"; classtype:attempted-recon; sid:200008800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascosoerd.mascescrerd.mgjuxa.top"; classtype:attempted-recon; sid:200008801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascosoerd.mascescrerd.msnwrh.top"; classtype:attempted-recon; sid:200008802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascosoerd.mascescrerd.qxkahc.top"; classtype:attempted-recon; sid:200008803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascososoerd.maseccescrerd.qxkahc.top"; classtype:attempted-recon; sid:200008804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascsosoerd.masecescrerd.mecozi.top"; classtype:attempted-recon; sid:200008805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mascsosoerd.masecescrerd.rkbxko.top"; classtype:attempted-recon; sid:200008806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masecoocsoersd.moasecsecsccrerd.gnpais.top"; classtype:attempted-recon; sid:200008807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maseecooscseoerrsd.cmoeasieocsecencaseosccrerccesoed.lhss.co"; classtype:attempted-recon; sid:200008808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maseseoicsocsoersd.emsoacseueosccescrerd.gnpais.top"; classtype:attempted-recon; sid:200008809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mashraqisteel.com"; classtype:attempted-recon; sid:200008810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masleevetunisie.com"; classtype:attempted-recon; sid:200008811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"masteracademy.mn"; classtype:attempted-recon; sid:200008812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mastologia.cl"; classtype:attempted-recon; sid:200008813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"match.lookatmynewphotos.com"; classtype:attempted-recon; sid:200008814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"matchnc.com"; classtype:attempted-recon; sid:200008815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mathelin-teinture-tissus.com"; classtype:attempted-recon; sid:200008816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"matketlaceaxelndinide.com"; classtype:attempted-recon; sid:200008817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"matsostsey.duckdns.org"; classtype:attempted-recon; sid:200008818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"matumculwj.duckdns.org"; classtype:attempted-recon; sid:200008819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"matxhzoyop.duckdns.org"; classtype:attempted-recon; sid:200008820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maupzhchwp.duckdns.org"; classtype:attempted-recon; sid:200008821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mawang.entungdalam.my.id"; classtype:attempted-recon; sid:200008822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maxchemicals.com.np"; classtype:attempted-recon; sid:200008823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maximazer-inv.firebaseapp.com"; classtype:attempted-recon; sid:200008824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maximazer-inv.web.app"; classtype:attempted-recon; sid:200008825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maximus-hiperzinha.com"; classtype:attempted-recon; sid:200008826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maxvaloan.com"; classtype:attempted-recon; sid:200008827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maya.in.ua"; classtype:attempted-recon; sid:200008828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mayfairlogistics.com"; classtype:attempted-recon; sid:200008829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maygolnotice.boxmode.io"; classtype:attempted-recon; sid:200008830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbambabeachmalawi.com"; classtype:attempted-recon; sid:200008831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbarquitecto.cl"; classtype:attempted-recon; sid:200008832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbcljggatn.duckdns.org"; classtype:attempted-recon; sid:200008833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbdecmukee.duckdns.org"; classtype:attempted-recon; sid:200008834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbfvxoipgj.duckdns.org"; classtype:attempted-recon; sid:200008835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbgqbzrgml.duckdns.org"; classtype:attempted-recon; sid:200008836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mblfumajxq.duckdns.org"; classtype:attempted-recon; sid:200008837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbmlocvbwe.duckdns.org"; classtype:attempted-recon; sid:200008838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbnern.webcindario.com"; classtype:attempted-recon; sid:200008839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbsroepiqi.duckdns.org"; classtype:attempted-recon; sid:200008840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbubpinjbi.duckdns.org"; classtype:attempted-recon; sid:200008841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbuqiadslu.duckdns.org"; classtype:attempted-recon; sid:200008842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbwhcjkail.duckdns.org"; classtype:attempted-recon; sid:200008843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbxqyrcwea.duckdns.org"; classtype:attempted-recon; sid:200008844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mbysxlsjgm.duckdns.org"; classtype:attempted-recon; sid:200008845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mc-003.pages.dev"; classtype:attempted-recon; sid:200008846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mccapkdpzk.duckdns.org"; classtype:attempted-recon; sid:200008847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mccarthyelectrical.com"; classtype:attempted-recon; sid:200008848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mcconcep.cluster005.ovh.net"; classtype:attempted-recon; sid:200008849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mcconivcya.duckdns.org"; classtype:attempted-recon; sid:200008850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mchganistore.solofolio.net"; classtype:attempted-recon; sid:200008851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mcmjqtimpl.duckdns.org"; classtype:attempted-recon; sid:200008852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mcqeqyiein.duckdns.org"; classtype:attempted-recon; sid:200008853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mcsr.co"; classtype:attempted-recon; sid:200008854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mcucdxzgou.duckdns.org"; classtype:attempted-recon; sid:200008855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"md-3.whb.tempwebhost.net"; classtype:attempted-recon; sid:200008856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdbxqbndym.duckdns.org"; classtype:attempted-recon; sid:200008857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdbyufxmqm.duckdns.org"; classtype:attempted-recon; sid:200008858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdhplrgnrr.duckdns.org"; classtype:attempted-recon; sid:200008859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdjrwgi2091e.kjf289.repl.co"; classtype:attempted-recon; sid:200008860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdkqcercnu.duckdns.org"; classtype:attempted-recon; sid:200008861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdlmvuxtud.duckdns.org"; classtype:attempted-recon; sid:200008862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdnpbzohci.duckdns.org"; classtype:attempted-recon; sid:200008863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdoilfmxyp.duckdns.org"; classtype:attempted-recon; sid:200008864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdqwhaaqzl.duckdns.org"; classtype:attempted-recon; sid:200008865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdsbftstmd.duckdns.org"; classtype:attempted-recon; sid:200008866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdurucan.com"; classtype:attempted-recon; sid:200008867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdzxpodz.com"; classtype:attempted-recon; sid:200008868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"me-sys-design.com"; classtype:attempted-recon; sid:200008869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mebtzcnvcd.duckdns.org"; classtype:attempted-recon; sid:200008870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mechatronic.unimap.edu.my"; classtype:attempted-recon; sid:200008871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"medelinahealth.com"; classtype:attempted-recon; sid:200008872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mediafire-smk-crot-dikelas.duckdns.org"; classtype:attempted-recon; sid:200008873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"medicare-gov-au.firebaseapp.com"; classtype:attempted-recon; sid:200008874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"medicare-gov-au.web.app"; classtype:attempted-recon; sid:200008875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mediterraneanholding.com"; classtype:attempted-recon; sid:200008876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"medo.world"; classtype:attempted-recon; sid:200008877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meeps.special-mint.com"; classtype:attempted-recon; sid:200008878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meeting-23900123090123.bitbucket.io"; classtype:attempted-recon; sid:200008879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"megaparseonalse.com"; classtype:attempted-recon; sid:200008880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"megaprasonels.net"; classtype:attempted-recon; sid:200008881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"megkjqjegd.duckdns.org"; classtype:attempted-recon; sid:200008882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meicredmyid.buzz"; classtype:attempted-recon; sid:200008883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meine-postbank-de.com"; classtype:attempted-recon; sid:200008884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meiocredmyid.icu"; classtype:attempted-recon; sid:200008885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meiocredmyid.top"; classtype:attempted-recon; sid:200008886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"melfpstvge.duckdns.org"; classtype:attempted-recon; sid:200008887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"melissaneub.myportfolio.com"; classtype:attempted-recon; sid:200008888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mellxudkoy.duckdns.org"; classtype:attempted-recon; sid:200008889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"member.doyajimo.com"; classtype:attempted-recon; sid:200008890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"members.har.com"; classtype:attempted-recon; sid:200008891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"membersiberostartheclub.com.mx"; classtype:attempted-recon; sid:200008892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"memelandofficial.com"; classtype:attempted-recon; sid:200008893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"memorablefarflungrecursion.galiiciia4.repl.co"; classtype:attempted-recon; sid:200008894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"memoriamapu.cl"; classtype:attempted-recon; sid:200008895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mendami.com"; classtype:attempted-recon; sid:200008896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mens.vn"; classtype:attempted-recon; sid:200008897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mepcwhfiiw.duckdns.org"; classtype:attempted-recon; sid:200008898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mercari-cardc.com"; classtype:attempted-recon; sid:200008899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mercari-cardo.com"; classtype:attempted-recon; sid:200008900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"merdas.ir"; classtype:attempted-recon; sid:200008901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mesacanada.com"; classtype:attempted-recon; sid:200008902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"message-webapp2242022-1311426938.cos.ap-nanjing.myqcloud.com"; classtype:attempted-recon; sid:200008903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"messagecenter.com.br"; classtype:attempted-recon; sid:200008904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"messagerie-orange210.yolasite.com"; classtype:attempted-recon; sid:200008905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"messari.cx"; classtype:attempted-recon; sid:200008906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"messengerverifyaccess.elementor.cloud"; classtype:attempted-recon; sid:200008907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mestertignseekjet4.blogspot.com"; classtype:attempted-recon; sid:200008908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mestertignseekjet5.blogspot.com"; classtype:attempted-recon; sid:200008909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mestertignseekjet6.blogspot.com"; classtype:attempted-recon; sid:200008910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mestredaobra.com"; classtype:attempted-recon; sid:200008911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-adaccount-support13904.firebaseapp.com"; classtype:attempted-recon; sid:200008912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-adaccount-support13904.web.app"; classtype:attempted-recon; sid:200008913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-advertise-center102957.web.app"; classtype:attempted-recon; sid:200008914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-business-settings700122.web.app"; classtype:attempted-recon; sid:200008915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-11-20985212.firebaseapp.com"; classtype:attempted-recon; sid:200008916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-11-20985212.web.app"; classtype:attempted-recon; sid:200008917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-11352-326332.firebaseapp.com"; classtype:attempted-recon; sid:200008918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-11352-326332.web.app"; classtype:attempted-recon; sid:200008919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-122-1093681.firebaseapp.com"; classtype:attempted-recon; sid:200008920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-122-1093681.web.app"; classtype:attempted-recon; sid:200008921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1221-02198691.firebaseapp.com"; classtype:attempted-recon; sid:200008922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1221-02198691.web.app"; classtype:attempted-recon; sid:200008923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1260-622065.firebaseapp.com"; classtype:attempted-recon; sid:200008924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1260-622065.web.app"; classtype:attempted-recon; sid:200008925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1262-19869012.web.app"; classtype:attempted-recon; sid:200008926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-12646-52152.firebaseapp.com"; classtype:attempted-recon; sid:200008927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-12646-52152.web.app"; classtype:attempted-recon; sid:200008928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-12677-429186.firebaseapp.com"; classtype:attempted-recon; sid:200008929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-12677-429186.web.app"; classtype:attempted-recon; sid:200008930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-12678-6322162.firebaseapp.com"; classtype:attempted-recon; sid:200008931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-12678-6322162.web.app"; classtype:attempted-recon; sid:200008932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-12705-2256126.firebaseapp.com"; classtype:attempted-recon; sid:200008933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-13125-316364.firebaseapp.com"; classtype:attempted-recon; sid:200008934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-13125-316364.web.app"; classtype:attempted-recon; sid:200008935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1318-52189.web.app"; classtype:attempted-recon; sid:200008936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1396-37618.web.app"; classtype:attempted-recon; sid:200008937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-14856-426364.firebaseapp.com"; classtype:attempted-recon; sid:200008938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-14856-426364.web.app"; classtype:attempted-recon; sid:200008939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-150-259182691.firebaseapp.com"; classtype:attempted-recon; sid:200008940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-150-259182691.web.app"; classtype:attempted-recon; sid:200008941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1526-21609812.firebaseapp.com"; classtype:attempted-recon; sid:200008942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-1526-21609812.web.app"; classtype:attempted-recon; sid:200008943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-15391-717501.firebaseapp.com"; classtype:attempted-recon; sid:200008944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-15391-717501.web.app"; classtype:attempted-recon; sid:200008945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-16349-14749.firebaseapp.com"; classtype:attempted-recon; sid:200008946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-16349-14749.web.app"; classtype:attempted-recon; sid:200008947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-41693-19744.firebaseapp.com"; classtype:attempted-recon; sid:200008948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-41693-19744.web.app"; classtype:attempted-recon; sid:200008949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-42413-11614.firebaseapp.com"; classtype:attempted-recon; sid:200008950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-page-appeal-42413-11614.web.app"; classtype:attempted-recon; sid:200008951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta.accountscenternotification.com"; classtype:attempted-recon; sid:200008952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metacase106524672.firebaseapp.com"; classtype:attempted-recon; sid:200008953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metacase106524672.web.app"; classtype:attempted-recon; sid:200008954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metacaseid.128793234256.com"; classtype:attempted-recon; sid:200008955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metaciteacn.noisy-scene-1d5c.rcvrypegsfty.workers.dev"; classtype:attempted-recon; sid:200008956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metafbhelpp1.firebaseapp.com"; classtype:attempted-recon; sid:200008957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metafbhelpp1.web.app"; classtype:attempted-recon; sid:200008958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metahelp.454654321131.com"; classtype:attempted-recon; sid:200008959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metahelpsupp.firebaseapp.com"; classtype:attempted-recon; sid:200008960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metahelpsupp.web.app"; classtype:attempted-recon; sid:200008961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamakwallet.unaux.com"; classtype:attempted-recon; sid:200008962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamarkkyc.net"; classtype:attempted-recon; sid:200008963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-2au.pages.dev"; classtype:attempted-recon; sid:200008964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-br.jhone.link"; classtype:attempted-recon; sid:200008965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-extension-official.blogspot.com"; classtype:attempted-recon; sid:200008966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-extension-web3-dapps.blogspot.com"; classtype:attempted-recon; sid:200008967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-extension.com.hsurge.com"; classtype:attempted-recon; sid:200008968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-nft.io"; classtype:attempted-recon; sid:200008969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-partenaires.com"; classtype:attempted-recon; sid:200008970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-r.jhone.link"; classtype:attempted-recon; sid:200008971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-wallet-security.com"; classtype:attempted-recon; sid:200008972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-wallet-verification.com"; classtype:attempted-recon; sid:200008973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-wallet.ru"; classtype:attempted-recon; sid:200008974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask.cash"; classtype:attempted-recon; sid:200008975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask.cm"; classtype:attempted-recon; sid:200008976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask.en.download.it"; classtype:attempted-recon; sid:200008977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask.financial"; classtype:attempted-recon; sid:200008978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask.io-defi-web3-dapps-and-nfts.eugeneareahomevalue.com"; classtype:attempted-recon; sid:200008979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask.io.community-support.in"; classtype:attempted-recon; sid:200008980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask.study"; classtype:attempted-recon; sid:200008981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask004.com"; classtype:attempted-recon; sid:200008982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask2.bar"; classtype:attempted-recon; sid:200008983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskaa.io"; classtype:attempted-recon; sid:200008984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskab.io"; classtype:attempted-recon; sid:200008985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskb.cc"; classtype:attempted-recon; sid:200008986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskc.cc"; classtype:attempted-recon; sid:200008987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskchat.com"; classtype:attempted-recon; sid:200008988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskcommunity.org"; classtype:attempted-recon; sid:200008989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskey.com"; classtype:attempted-recon; sid:200008990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskgiveaways.wixsite.com"; classtype:attempted-recon; sid:200008991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskr.cc"; classtype:attempted-recon; sid:200008992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamasks-validate.com"; classtype:attempted-recon; sid:200008993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamasks.vip"; classtype:attempted-recon; sid:200008994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskwallet.com.cn"; classtype:attempted-recon; sid:200008995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskwallet.easy.co"; classtype:attempted-recon; sid:200008996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskwebvalidator.com"; classtype:attempted-recon; sid:200008997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamaskwebwallet.com"; classtype:attempted-recon; sid:200008998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metarnesk.com"; classtype:attempted-recon; sid:200008999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metaverifizaiona.firebaseapp.com"; classtype:attempted-recon; sid:200009000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metaverifizaiona.web.app"; classtype:attempted-recon; sid:200009001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meufgts.app.br"; classtype:attempted-recon; sid:200009002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meusabor.com.br"; classtype:attempted-recon; sid:200009003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mevueezjjs.duckdns.org"; classtype:attempted-recon; sid:200009004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mewlrxbmit.duckdns.org"; classtype:attempted-recon; sid:200009005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mewscc09.pages.dev"; classtype:attempted-recon; sid:200009006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mewwallet.me"; classtype:attempted-recon; sid:200009007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfacebook-help-100029455684702.firebaseapp.com"; classtype:attempted-recon; sid:200009008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfacebook-help-100029455684702.web.app"; classtype:attempted-recon; sid:200009009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfacebook.blogspot.com.cy"; classtype:attempted-recon; sid:200009010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfacebook.blogspot.lt"; classtype:attempted-recon; sid:200009011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfacebook.blogspot.rs"; classtype:attempted-recon; sid:200009012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfcp-bid.myportfolio.com"; classtype:attempted-recon; sid:200009013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfcsjoupve.duckdns.org"; classtype:attempted-recon; sid:200009014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfelrzzkoi.duckdns.org"; classtype:attempted-recon; sid:200009015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfetywrbod.duckdns.org"; classtype:attempted-recon; sid:200009016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mffhpngqlg.duckdns.org"; classtype:attempted-recon; sid:200009017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfiylbhsmk.duckdns.org"; classtype:attempted-recon; sid:200009018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfjhptbcuh.duckdns.org"; classtype:attempted-recon; sid:200009019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfnybwsuef.duckdns.org"; classtype:attempted-recon; sid:200009020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfoazoqeju.duckdns.org"; classtype:attempted-recon; sid:200009021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfpbxzrjmz.duckdns.org"; classtype:attempted-recon; sid:200009022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mfskfhwdzd.duckdns.org"; classtype:attempted-recon; sid:200009023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mftndwxmki.duckdns.org"; classtype:attempted-recon; sid:200009024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mgecpfjsqr.duckdns.org"; classtype:attempted-recon; sid:200009025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mgfqkmirvj.duckdns.org"; classtype:attempted-recon; sid:200009026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mggbtwiups.duckdns.org"; classtype:attempted-recon; sid:200009027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mgkfhvvejr.duckdns.org"; classtype:attempted-recon; sid:200009028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mgmfhjwckh.duckdns.org"; classtype:attempted-recon; sid:200009029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mgpbwilfgl.duckdns.org"; classtype:attempted-recon; sid:200009030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mgpnyxemtd.duckdns.org"; classtype:attempted-recon; sid:200009031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhblcnsbfy.duckdns.org"; classtype:attempted-recon; sid:200009032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhlbqaosca.duckdns.org"; classtype:attempted-recon; sid:200009033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhnktgqxov.duckdns.org"; classtype:attempted-recon; sid:200009034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhpitrqnze.duckdns.org"; classtype:attempted-recon; sid:200009035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhpkbauybk.duckdns.org"; classtype:attempted-recon; sid:200009036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhpykmemev.duckdns.org"; classtype:attempted-recon; sid:200009037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhukzidefh.duckdns.org"; classtype:attempted-recon; sid:200009038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhvfvwvawf.duckdns.org"; classtype:attempted-recon; sid:200009039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mhyingshi.com"; classtype:attempted-recon; sid:200009040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miasuke.net"; classtype:attempted-recon; sid:200009041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mibancocrece.com.co"; classtype:attempted-recon; sid:200009042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mic-cinautheticate.pages.dev"; classtype:attempted-recon; sid:200009043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miccrosoftoffice365.myportfolio.com"; classtype:attempted-recon; sid:200009044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"michelearris.com"; classtype:attempted-recon; sid:200009045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micoedmyid.buzz"; classtype:attempted-recon; sid:200009046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micoedmyid.icu"; classtype:attempted-recon; sid:200009047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micoedmyid.top"; classtype:attempted-recon; sid:200009048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micoedmyidjp.buzz"; classtype:attempted-recon; sid:200009049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micoedmyidjp.icu"; classtype:attempted-recon; sid:200009050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micoedmyidjp.top"; classtype:attempted-recon; sid:200009051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micoerdmyid.icu"; classtype:attempted-recon; sid:200009052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-file-share-folder-dbtc.firebaseapp.com"; classtype:attempted-recon; sid:200009053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-file-share-folder-detc.firebaseapp.com"; classtype:attempted-recon; sid:200009054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-file-share-folder-mctc.firebaseapp.com"; classtype:attempted-recon; sid:200009055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-file-share-folder-mctc.web.app"; classtype:attempted-recon; sid:200009056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-file-share-folder-shtc.firebaseapp.com"; classtype:attempted-recon; sid:200009057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-file-share-folder-shtc.web.app"; classtype:attempted-recon; sid:200009058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-login-share-file-device.firebaseapp.com"; classtype:attempted-recon; sid:200009059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-login-share-file-device.web.app"; classtype:attempted-recon; sid:200009060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro-power-share-file-doc.firebaseapp.com"; classtype:attempted-recon; sid:200009061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro50495045045.firebaseapp.com"; classtype:attempted-recon; sid:200009062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micro50495045045.web.app"; classtype:attempted-recon; sid:200009063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microadobe.myportfolio.com"; classtype:attempted-recon; sid:200009064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microcav.square.site"; classtype:attempted-recon; sid:200009065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsfotoffice86572.jogengineerin.workers.dev"; classtype:attempted-recon; sid:200009066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoft-azuresecurelogin.myportfolio.com"; classtype:attempted-recon; sid:200009067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoft-mail-outlook.myportfolio.com"; classtype:attempted-recon; sid:200009068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoft-outlook365.myportfolio.com"; classtype:attempted-recon; sid:200009069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoft2210.yolasite.com"; classtype:attempted-recon; sid:200009070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoft365onedrivexxrtgfgreer.myportfolio.com"; classtype:attempted-recon; sid:200009071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftcloud-azure.myportfolio.com"; classtype:attempted-recon; sid:200009072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftoffice365credentials.myportfolio.com"; classtype:attempted-recon; sid:200009073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftoffice365ttvcom.myportfolio.com"; classtype:attempted-recon; sid:200009074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftofficesecure.myportfolio.com"; classtype:attempted-recon; sid:200009075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftonlineonedrive.myportfolio.com"; classtype:attempted-recon; sid:200009076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftsharepointportal.myportfolio.com"; classtype:attempted-recon; sid:200009077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftvoffice.myportfolio.com"; classtype:attempted-recon; sid:200009078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftwebserver.mfs.gg"; classtype:attempted-recon; sid:200009079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoftxxxxxxxxjdhgdhjxhghjdhhgonedrivejhgfghjskxxx.myportfolio.com"; classtype:attempted-recon; sid:200009080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micuenta01.github.io"; classtype:attempted-recon; sid:200009081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micuernjpv.duckdns.org"; classtype:attempted-recon; sid:200009082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"midwesthomesinc.com"; classtype:attempted-recon; sid:200009083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mierxbwvsh.duckdns.org"; classtype:attempted-recon; sid:200009084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mig.pp.ua"; classtype:attempted-recon; sid:200009085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"migrateapp.live"; classtype:attempted-recon; sid:200009086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miiniihiper.com"; classtype:attempted-recon; sid:200009087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miizuhobansk.co"; classtype:attempted-recon; sid:200009088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mijfsbbicp.duckdns.org"; classtype:attempted-recon; sid:200009089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mijnkvkwebdesk.ddns.net"; classtype:attempted-recon; sid:200009090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"milonsquashclub.synergeelabs.com"; classtype:attempted-recon; sid:200009091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"milton-exhibits.com"; classtype:attempted-recon; sid:200009092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"milwaukee8.com"; classtype:attempted-recon; sid:200009093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"milyoner.me"; classtype:attempted-recon; sid:200009094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mimkyuoyru.duckdns.org"; classtype:attempted-recon; sid:200009095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"minerlee.topijerami.workers.dev"; classtype:attempted-recon; sid:200009096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mingming20160152.github.io"; classtype:attempted-recon; sid:200009097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mingshouxin.com"; classtype:attempted-recon; sid:200009098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"minha-fatura-acessar-asd4asdzx.com"; classtype:attempted-recon; sid:200009099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"minha-fatura-agora-z5i3d6f.com"; classtype:attempted-recon; sid:200009100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"minha-fatura-setembro-f5-br0.com"; classtype:attempted-recon; sid:200009101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"minhaclaronetresidencialapp.com"; classtype:attempted-recon; sid:200009102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miniurl.ws"; classtype:attempted-recon; sid:200009103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mint.liquidity.claim.skuylivining.xyz"; classtype:attempted-recon; sid:200009104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mintbot.art"; classtype:attempted-recon; sid:200009105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miranjint.com"; classtype:attempted-recon; sid:200009106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mircosoft365onedrivexxxxnnnnmmmmmsssssx.myportfolio.com"; classtype:attempted-recon; sid:200009107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mircosoftdocsign.myportfolio.com"; classtype:attempted-recon; sid:200009108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mircrosofti.myportfolio.com"; classtype:attempted-recon; sid:200009109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mirrorfamily-ak.ru"; classtype:attempted-recon; sid:200009110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"missionshashank.org"; classtype:attempted-recon; sid:200009111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mistabadseed.com"; classtype:attempted-recon; sid:200009112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mistorei.top"; classtype:attempted-recon; sid:200009113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"misty-band-34a2.bizd134.workers.dev"; classtype:attempted-recon; sid:200009114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"misty-band-9f1c.driveloadve.workers.dev"; classtype:attempted-recon; sid:200009115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"misty-base-2a16.dappy0542-mails-files1101.workers.dev"; classtype:attempted-recon; sid:200009116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"misty-credit-a641.george72972323.workers.dev"; classtype:attempted-recon; sid:200009117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mit-alert01a.firebaseapp.com"; classtype:attempted-recon; sid:200009118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mit-alert01a.web.app"; classtype:attempted-recon; sid:200009119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mitbvrynow.com"; classtype:attempted-recon; sid:200009120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mityurl.com"; classtype:attempted-recon; sid:200009121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miurausa.com"; classtype:attempted-recon; sid:200009122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mixup201104.com"; classtype:attempted-recon; sid:200009123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miziha-basnk.com"; classtype:attempted-recon; sid:200009124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mizihubosaek.com"; classtype:attempted-recon; sid:200009125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mizihubsaek.com"; classtype:attempted-recon; sid:200009126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mizuho-bask.ccdgi.com"; classtype:attempted-recon; sid:200009127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mizuho-bask.xlwyc.com"; classtype:attempted-recon; sid:200009128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mizuhobansk.com"; classtype:attempted-recon; sid:200009129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mizuhu-bask.cc"; classtype:attempted-recon; sid:200009130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjayme9jdg9izxixmjeydgg.filesusr.com"; classtype:attempted-recon; sid:200009131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjayme9jdg9izxiymjnyza.filesusr.com"; classtype:attempted-recon; sid:200009132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu1heta1dgg.filesusr.com"; classtype:attempted-recon; sid:200009133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu1hetezmtj0aa.filesusr.com"; classtype:attempted-recon; sid:200009134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu1hetgym3jk.filesusr.com"; classtype:attempted-recon; sid:200009135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu1hetizmtl0aa.filesusr.com"; classtype:attempted-recon; sid:200009136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu1hetqymhro.filesusr.com"; classtype:attempted-recon; sid:200009137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu1hetu3dgg.filesusr.com"; classtype:attempted-recon; sid:200009138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu1hetuymhro.filesusr.com"; classtype:attempted-recon; sid:200009139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu5vdmvtymvymji5dgg.filesusr.com"; classtype:attempted-recon; sid:200009140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymu5vdmvtymvymtexdgg.filesusr.com"; classtype:attempted-recon; sid:200009141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymuf1z3vzdde4mtf0aa.filesusr.com"; classtype:attempted-recon; sid:200009142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymufwcmlsmde5dgg.filesusr.com"; classtype:attempted-recon; sid:200009143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymup1bhk0mtf0aa.filesusr.com"; classtype:attempted-recon; sid:200009144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymup1bhk1mtr0aa.filesusr.com"; classtype:attempted-recon; sid:200009145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymup1bhkzmtn0aa.filesusr.com"; classtype:attempted-recon; sid:200009146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymup1bmu0mtf0aa.filesusr.com"; classtype:attempted-recon; sid:200009147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymup1bmuymzfzda.filesusr.com"; classtype:attempted-recon; sid:200009148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymuphbnvhcnkxmzv0aa.filesusr.com"; classtype:attempted-recon; sid:200009149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymurly2vtymvymjiyn3ro.filesusr.com"; classtype:attempted-recon; sid:200009150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjaymvnlchrlbwjlcjizmxn0.filesusr.com"; classtype:attempted-recon; sid:200009151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjdeainssd.duckdns.org"; classtype:attempted-recon; sid:200009152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjdrelvpou.duckdns.org"; classtype:attempted-recon; sid:200009153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjfyfyhyzg.duckdns.org"; classtype:attempted-recon; sid:200009154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjjxjuwomc.duckdns.org"; classtype:attempted-recon; sid:200009155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjmcuyzduk.duckdns.org"; classtype:attempted-recon; sid:200009156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjpojpkuan.duckdns.org"; classtype:attempted-recon; sid:200009157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjvjwjlslo.duckdns.org"; classtype:attempted-recon; sid:200009158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mjzzf-fqaaa-aaaad-qddma-cai.raw.ic0.app"; classtype:attempted-recon; sid:200009159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkctlyqcem.duckdns.org"; classtype:attempted-recon; sid:200009160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkdpipiuwn.duckdns.org"; classtype:attempted-recon; sid:200009161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkhodmjrvr.duckdns.org"; classtype:attempted-recon; sid:200009162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkhwhgqlpv.duckdns.org"; classtype:attempted-recon; sid:200009163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkmiofecwt.duckdns.org"; classtype:attempted-recon; sid:200009164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mksdmdhali.duckdns.org"; classtype:attempted-recon; sid:200009165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mksjtedlhf.duckdns.org"; classtype:attempted-recon; sid:200009166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha1.ml"; classtype:attempted-recon; sid:200009167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha10.ml"; classtype:attempted-recon; sid:200009168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha12.ml"; classtype:attempted-recon; sid:200009169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha13.ml"; classtype:attempted-recon; sid:200009170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha14.ml"; classtype:attempted-recon; sid:200009171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha15.ml"; classtype:attempted-recon; sid:200009172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha16.ml"; classtype:attempted-recon; sid:200009173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha17.ml"; classtype:attempted-recon; sid:200009174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha18.ml"; classtype:attempted-recon; sid:200009175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha19.ml"; classtype:attempted-recon; sid:200009176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha2.ml"; classtype:attempted-recon; sid:200009177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha20.ml"; classtype:attempted-recon; sid:200009178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha6.ml"; classtype:attempted-recon; sid:200009179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha7.ml"; classtype:attempted-recon; sid:200009180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha8.ml"; classtype:attempted-recon; sid:200009181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvacaptcha9.ml"; classtype:attempted-recon; sid:200009182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvjune22.ml"; classtype:attempted-recon; sid:200009183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects10.ml"; classtype:attempted-recon; sid:200009184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects2.ml"; classtype:attempted-recon; sid:200009185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects3.ml"; classtype:attempted-recon; sid:200009186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects4.ml"; classtype:attempted-recon; sid:200009187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects5.ml"; classtype:attempted-recon; sid:200009188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects6.ml"; classtype:attempted-recon; sid:200009189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects7.ml"; classtype:attempted-recon; sid:200009190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects8.ml"; classtype:attempted-recon; sid:200009191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkvredirects9.ml"; classtype:attempted-recon; sid:200009192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkwuvggavo.duckdns.org"; classtype:attempted-recon; sid:200009193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkzjvlwlnh.duckdns.org"; classtype:attempted-recon; sid:200009194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlbyqzayot.duckdns.org"; classtype:attempted-recon; sid:200009195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlcheckclaim.run.place"; classtype:attempted-recon; sid:200009196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlcsvoyqbh.duckdns.org"; classtype:attempted-recon; sid:200009197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mli-lb.s3.us-west-002.backblazeb2.com"; classtype:attempted-recon; sid:200009198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlkhgdeken.duckdns.org"; classtype:attempted-recon; sid:200009199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mloroonjxf.duckdns.org"; classtype:attempted-recon; sid:200009200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlpvxjgsez.duckdns.org"; classtype:attempted-recon; sid:200009201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlrtghbudv.duckdns.org"; classtype:attempted-recon; sid:200009202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mltpoebxko.duckdns.org"; classtype:attempted-recon; sid:200009203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlujonibvo.duckdns.org"; classtype:attempted-recon; sid:200009204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlvvjwjpik.duckdns.org"; classtype:attempted-recon; sid:200009205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlyvcpwaxt.duckdns.org"; classtype:attempted-recon; sid:200009206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mlyvwaijzt.duckdns.org"; classtype:attempted-recon; sid:200009207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mm-finance.shop"; classtype:attempted-recon; sid:200009208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mm88icon.bet"; classtype:attempted-recon; sid:200009209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mma99a.hyperphp.com"; classtype:attempted-recon; sid:200009210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmfg.cn"; classtype:attempted-recon; sid:200009211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmkc.seguridadp3.com"; classtype:attempted-recon; sid:200009212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmmejjgrhn.duckdns.org"; classtype:attempted-recon; sid:200009213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmoemoappz.pages.dev"; classtype:attempted-recon; sid:200009214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmqmfiepid.duckdns.org"; classtype:attempted-recon; sid:200009215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmsnoreplysms.flazio.com"; classtype:attempted-recon; sid:200009216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmtzlnacrz.duckdns.org"; classtype:attempted-recon; sid:200009217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmubqgrjwx.duckdns.org"; classtype:attempted-recon; sid:200009218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mn-finamce.com"; classtype:attempted-recon; sid:200009219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnaxiczigj.duckdns.org"; classtype:attempted-recon; sid:200009220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnbdviqyyj.duckdns.org"; classtype:attempted-recon; sid:200009221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnbwkivjiq.duckdns.org"; classtype:attempted-recon; sid:200009222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mncziwccvb.duckdns.org"; classtype:attempted-recon; sid:200009223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnesirjfxi.duckdns.org"; classtype:attempted-recon; sid:200009224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mngbkbvffi.duckdns.org"; classtype:attempted-recon; sid:200009225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnkgracingteam.com"; classtype:attempted-recon; sid:200009226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnmblsfbjp.duckdns.org"; classtype:attempted-recon; sid:200009227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnojromynm.duckdns.org"; classtype:attempted-recon; sid:200009228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnosvfnwyb.duckdns.org"; classtype:attempted-recon; sid:200009229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnqdwnjqyw.duckdns.org"; classtype:attempted-recon; sid:200009230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnsgdehbtt.duckdns.org"; classtype:attempted-recon; sid:200009231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mntfrdrvld.duckdns.org"; classtype:attempted-recon; sid:200009232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnvh9304.odns.fr"; classtype:attempted-recon; sid:200009233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mnxhgxdrfa.duckdns.org"; classtype:attempted-recon; sid:200009234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mo.cu.edu.eg"; classtype:attempted-recon; sid:200009235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobiadvanced.net"; classtype:attempted-recon; sid:200009236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobile-account-au.firebaseapp.com"; classtype:attempted-recon; sid:200009237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobile-account-au.web.app"; classtype:attempted-recon; sid:200009238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobile.meta-pages.workers.dev"; classtype:attempted-recon; sid:200009239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobile.revenue.services.6ud6w.us"; classtype:attempted-recon; sid:200009240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobileaccessoportale.com"; classtype:attempted-recon; sid:200009241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobilepage.revenue.services.241t9.us"; classtype:attempted-recon; sid:200009242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moblepzisfrl.t.justns.ru"; classtype:attempted-recon; sid:200009243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mod-formulary-welcome.tk"; classtype:attempted-recon; sid:200009244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"modernkidsociety.com"; classtype:attempted-recon; sid:200009245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"modxmatkai.duckdns.org"; classtype:attempted-recon; sid:200009246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moelink.org"; classtype:attempted-recon; sid:200009247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mofafgncex.duckdns.org"; classtype:attempted-recon; sid:200009248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mofgzazczm.duckdns.org"; classtype:attempted-recon; sid:200009249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moftlfwxwe.duckdns.org"; classtype:attempted-recon; sid:200009250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moicerbarbyco.icu"; classtype:attempted-recon; sid:200009251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moicerbarbyco.top"; classtype:attempted-recon; sid:200009252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moicerbmayco.icu"; classtype:attempted-recon; sid:200009253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moicerbmayco.top"; classtype:attempted-recon; sid:200009254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moja-paczka-pl-myid576xs.adisetiawan.xyz"; classtype:attempted-recon; sid:200009255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moja-paczka-pl-myid576xs.zlagu.life"; classtype:attempted-recon; sid:200009256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"molalasa.ga"; classtype:attempted-recon; sid:200009257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"molalasq.ml"; classtype:attempted-recon; sid:200009258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"momyrbzwms.duckdns.org"; classtype:attempted-recon; sid:200009259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mon-easy.firebaseapp.com"; classtype:attempted-recon; sid:200009260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mon-easy.web.app"; classtype:attempted-recon; sid:200009261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mon-token.com"; classtype:attempted-recon; sid:200009262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monapigoogle000.page.link"; classtype:attempted-recon; sid:200009263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monespaca.blogspot.com"; classtype:attempted-recon; sid:200009264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monespacecartevitale.fr"; classtype:attempted-recon; sid:200009265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monirshouvo.github.io"; classtype:attempted-recon; sid:200009266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monitorpopular.hostfree.pw"; classtype:attempted-recon; sid:200009267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"montessorinttc.com"; classtype:attempted-recon; sid:200009268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monumaning.mom"; classtype:attempted-recon; sid:200009269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monyeward.com"; classtype:attempted-recon; sid:200009270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monzo.login-cancel.net"; classtype:attempted-recon; sid:200009271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moozatech.com"; classtype:attempted-recon; sid:200009272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moqmxyhbty.duckdns.org"; classtype:attempted-recon; sid:200009273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"morning-glitter-2e87.filedownjs.workers.dev"; classtype:attempted-recon; sid:200009274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"morning-limit-8833.on.fleek.co"; classtype:attempted-recon; sid:200009275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"morning-river-261d.img-datings.workers.dev"; classtype:attempted-recon; sid:200009276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"motostationpro.com"; classtype:attempted-recon; sid:200009277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moveislojinha-app.blogspot.com"; classtype:attempted-recon; sid:200009278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"movelsantajustina.shop"; classtype:attempted-recon; sid:200009279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moverselectronics.com"; classtype:attempted-recon; sid:200009280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mozyhwwlrp.duckdns.org"; classtype:attempted-recon; sid:200009281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mp-logincliente.siteprofissional.com"; classtype:attempted-recon; sid:200009282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpdnylnmxl.duckdns.org"; classtype:attempted-recon; sid:200009283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpexxngknz.duckdns.org"; classtype:attempted-recon; sid:200009284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpjkwfhwpd.duckdns.org"; classtype:attempted-recon; sid:200009285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpljqhqeub.duckdns.org"; classtype:attempted-recon; sid:200009286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mps-it.13-230-168-173.cprapid.com"; classtype:attempted-recon; sid:200009287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpsienaprotezionefrodi.com"; classtype:attempted-recon; sid:200009288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpsienaserviziostorno.com"; classtype:attempted-recon; sid:200009289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpvkvpaymi.duckdns.org"; classtype:attempted-recon; sid:200009290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpwdkaccna.duckdns.org"; classtype:attempted-recon; sid:200009291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mpwxjjujhi.duckdns.org"; classtype:attempted-recon; sid:200009292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqavuqgegp.duckdns.org"; classtype:attempted-recon; sid:200009293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqjwialsvk.duckdns.org"; classtype:attempted-recon; sid:200009294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqmsretgwz.duckdns.org"; classtype:attempted-recon; sid:200009295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqnvkdwktw.duckdns.org"; classtype:attempted-recon; sid:200009296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqrpobmlho.duckdns.org"; classtype:attempted-recon; sid:200009297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqsaduiyyd.duckdns.org"; classtype:attempted-recon; sid:200009298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqxfxqankv.duckdns.org"; classtype:attempted-recon; sid:200009299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mqxylgelac.duckdns.org"; classtype:attempted-recon; sid:200009300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrdon.myportfolio.com"; classtype:attempted-recon; sid:200009301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrecaawning.com.my"; classtype:attempted-recon; sid:200009302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mreqimasmv.duckdns.org"; classtype:attempted-recon; sid:200009303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrjxcaydjf.duckdns.org"; classtype:attempted-recon; sid:200009304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrlaotefvz.duckdns.org"; classtype:attempted-recon; sid:200009305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrmjvnbmmv.duckdns.org"; classtype:attempted-recon; sid:200009306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrpmwpfizn.duckdns.org"; classtype:attempted-recon; sid:200009307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrqtgfwslx.duckdns.org"; classtype:attempted-recon; sid:200009308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mrzcbrxxfy.duckdns.org"; classtype:attempted-recon; sid:200009309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ms-sharedfile-nd.firebaseapp.com"; classtype:attempted-recon; sid:200009310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ms-sharedfile-nd.web.app"; classtype:attempted-recon; sid:200009311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msbhzrsnys.duckdns.org"; classtype:attempted-recon; sid:200009312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msbwrgcraz.duckdns.org"; classtype:attempted-recon; sid:200009313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msc-doelsach.at"; classtype:attempted-recon; sid:200009314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mscqsgtbuk.duckdns.org"; classtype:attempted-recon; sid:200009315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msfqgxchfd.duckdns.org"; classtype:attempted-recon; sid:200009316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msjetlmgdv.duckdns.org"; classtype:attempted-recon; sid:200009317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msjodbcipm.duckdns.org"; classtype:attempted-recon; sid:200009318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msmnohdcwi.duckdns.org"; classtype:attempted-recon; sid:200009319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msmvpgvcoo.duckdns.org"; classtype:attempted-recon; sid:200009320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msmxcdfjvk.duckdns.org"; classtype:attempted-recon; sid:200009321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msn-security-project.firebaseapp.com"; classtype:attempted-recon; sid:200009322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msn-security-project.web.app"; classtype:attempted-recon; sid:200009323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msngalicia.msngalicia.repl.co"; classtype:attempted-recon; sid:200009324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msofficemessagescenter-1.mfs.gg"; classtype:attempted-recon; sid:200009325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msqtwkvdul.duckdns.org"; classtype:attempted-recon; sid:200009326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msquarefurniture.com"; classtype:attempted-recon; sid:200009327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msrprwwqsm.duckdns.org"; classtype:attempted-recon; sid:200009328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mstnbhsdak.duckdns.org"; classtype:attempted-recon; sid:200009329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msynbwlqiu.duckdns.org"; classtype:attempted-recon; sid:200009330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"msyvmwjwio.duckdns.org"; classtype:attempted-recon; sid:200009331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mt-bank.squizofriend.com"; classtype:attempted-recon; sid:200009332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mt-customer-4-7a94f5.ingress-baronn.ewp.live"; classtype:attempted-recon; sid:200009333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mt-e0a64.firebaseapp.com"; classtype:attempted-recon; sid:200009334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mt-e0a64.web.app"; classtype:attempted-recon; sid:200009335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtask-pr01.web.app"; classtype:attempted-recon; sid:200009336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtb-247-sec00.firebaseapp.com"; classtype:attempted-recon; sid:200009337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtb-247-sec00.web.app"; classtype:attempted-recon; sid:200009338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtb.gotdns.ch"; classtype:attempted-recon; sid:200009339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtbsecures.com"; classtype:attempted-recon; sid:200009340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtbtranserror.firebaseapp.com"; classtype:attempted-recon; sid:200009341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtbtranserror.web.app"; classtype:attempted-recon; sid:200009342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtcash.000webhostapp.com"; classtype:attempted-recon; sid:200009343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtdnlrbwzt.duckdns.org"; classtype:attempted-recon; sid:200009344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtimrrldfo.duckdns.org"; classtype:attempted-recon; sid:200009345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtjcc.tk"; classtype:attempted-recon; sid:200009346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtmsk-wlt.mystrikingly.com"; classtype:attempted-recon; sid:200009347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtofwzhyez.duckdns.org"; classtype:attempted-recon; sid:200009348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtowejfqqp.duckdns.org"; classtype:attempted-recon; sid:200009349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtqwscqbaq.duckdns.org"; classtype:attempted-recon; sid:200009350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtrsteel.com"; classtype:attempted-recon; sid:200009351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mttksqweku.duckdns.org"; classtype:attempted-recon; sid:200009352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtubkihcut.duckdns.org"; classtype:attempted-recon; sid:200009353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtvlrshuqd.duckdns.org"; classtype:attempted-recon; sid:200009354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtwqndupmi.duckdns.org"; classtype:attempted-recon; sid:200009355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtxeoobmfs.duckdns.org"; classtype:attempted-recon; sid:200009356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtxesyxevv.duckdns.org"; classtype:attempted-recon; sid:200009357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mub.me"; classtype:attempted-recon; sid:200009358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mucucnpntq.duckdns.org"; classtype:attempted-recon; sid:200009359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mudd.marpuasanotice.workers.dev"; classtype:attempted-recon; sid:200009360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muddgnjybm.duckdns.org"; classtype:attempted-recon; sid:200009361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muddy-ayya.topijerami.workers.dev"; classtype:attempted-recon; sid:200009362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muddy-breezers.p1woqbnm.workers.dev"; classtype:attempted-recon; sid:200009363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muddy-dawn-b613.sharepoinx.workers.dev"; classtype:attempted-recon; sid:200009364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muddy-dawn-e382.cdn-image.workers.dev"; classtype:attempted-recon; sid:200009365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muddy-frost-ee54.henhigay285.workers.dev"; classtype:attempted-recon; sid:200009366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mueslisvvap.firebaseapp.com"; classtype:attempted-recon; sid:200009367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mueslisvvap.web.app"; classtype:attempted-recon; sid:200009368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muigfzszez.duckdns.org"; classtype:attempted-recon; sid:200009369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"multi-coinpad.org"; classtype:attempted-recon; sid:200009370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"multi-coins.org"; classtype:attempted-recon; sid:200009371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"multiwalletconnectbot.com"; classtype:attempted-recon; sid:200009372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mumsturn.com"; classtype:attempted-recon; sid:200009373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mungdgxwoc.duckdns.org"; classtype:attempted-recon; sid:200009374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muoncworvb.duckdns.org"; classtype:attempted-recon; sid:200009375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muozvzdwxu.duckdns.org"; classtype:attempted-recon; sid:200009376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"murlidharrope.com"; classtype:attempted-recon; sid:200009377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muryhmjxla.duckdns.org"; classtype:attempted-recon; sid:200009378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"musing-swanson.37-221-65-205.plesk.page"; classtype:attempted-recon; sid:200009379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"musoifsvqp.duckdns.org"; classtype:attempted-recon; sid:200009380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mustahil.duckdns.org"; classtype:attempted-recon; sid:200009381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mustardinkstudios.com"; classtype:attempted-recon; sid:200009382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mute-cake-6731.beewoodrest.workers.dev"; classtype:attempted-recon; sid:200009383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mutyqiscot.duckdns.org"; classtype:attempted-recon; sid:200009384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvakoyryuk.duckdns.org"; classtype:attempted-recon; sid:200009385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvcas.com"; classtype:attempted-recon; sid:200009386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvellolandingpage.azurewebsites.net"; classtype:attempted-recon; sid:200009387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvjjtvzrbt.duckdns.org"; classtype:attempted-recon; sid:200009388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvmlfjvolx.duckdns.org"; classtype:attempted-recon; sid:200009389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvmyakcbbt.duckdns.org"; classtype:attempted-recon; sid:200009390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvtrccfaov.duckdns.org"; classtype:attempted-recon; sid:200009391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvvbjbzaob.duckdns.org"; classtype:attempted-recon; sid:200009392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvxalvhqgf.duckdns.org"; classtype:attempted-recon; sid:200009393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mvzmjkxosw.duckdns.org"; classtype:attempted-recon; sid:200009394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwdtimgsoj.duckdns.org"; classtype:attempted-recon; sid:200009395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwjoqvvfcr.duckdns.org"; classtype:attempted-recon; sid:200009396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwncubtvfl.duckdns.org"; classtype:attempted-recon; sid:200009397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwrbcedpnt.duckdns.org"; classtype:attempted-recon; sid:200009398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwsvauehas.duckdns.org"; classtype:attempted-recon; sid:200009399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwtbqnhtmm.duckdns.org"; classtype:attempted-recon; sid:200009400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwtqnmrrgw.duckdns.org"; classtype:attempted-recon; sid:200009401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mx01.pancakesvqp.com"; classtype:attempted-recon; sid:200009402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxainodvdv.duckdns.org"; classtype:attempted-recon; sid:200009403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxatnidxwj.duckdns.org"; classtype:attempted-recon; sid:200009404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxmfdingsh.duckdns.org"; classtype:attempted-recon; sid:200009405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxmlxpjmgl.duckdns.org"; classtype:attempted-recon; sid:200009406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxqpzeqeyb.duckdns.org"; classtype:attempted-recon; sid:200009407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxqvipz66q-zvpebfbsg.loginform.net"; classtype:attempted-recon; sid:200009408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxrcovtoms.duckdns.org"; classtype:attempted-recon; sid:200009409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxrr.com"; classtype:attempted-recon; sid:200009410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxsclbdjxt.duckdns.org"; classtype:attempted-recon; sid:200009411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxttfamhch.duckdns.org"; classtype:attempted-recon; sid:200009412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxvtwshdmx.duckdns.org"; classtype:attempted-recon; sid:200009413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-arnazno-prime6-singin6.workers.dev"; classtype:attempted-recon; sid:200009414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-att-mail-services0.yolasite.com"; classtype:attempted-recon; sid:200009415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-bithumb.web.app"; classtype:attempted-recon; sid:200009416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-business-108893-100754.square.site"; classtype:attempted-recon; sid:200009417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-citi-rser.kamsuletri.workers.dev"; classtype:attempted-recon; sid:200009418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-ehtrip.com"; classtype:attempted-recon; sid:200009419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-posta.firebaseapp.com"; classtype:attempted-recon; sid:200009420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-posta.web.app"; classtype:attempted-recon; sid:200009421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-site-101951-107859.weeblysite.com"; classtype:attempted-recon; sid:200009422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-site-silahkan-konfirmas-akun-anda088.weeblysite.com"; classtype:attempted-recon; sid:200009423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my-tsc3cardipulic.online"; classtype:attempted-recon; sid:200009424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my.heyform.net"; classtype:attempted-recon; sid:200009425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"my.netteveri.com"; classtype:attempted-recon; sid:200009426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myadd.in"; classtype:attempted-recon; sid:200009427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myadobe-net.theblackoceanbeach.com"; classtype:attempted-recon; sid:200009428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myappbtsecurebusiness.github.io"; classtype:attempted-recon; sid:200009429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myatt-account-update.yolasite.com"; classtype:attempted-recon; sid:200009430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myatt-customer-support2.yolasite.com"; classtype:attempted-recon; sid:200009431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myatt-upgrade.yolasite.com"; classtype:attempted-recon; sid:200009432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mybperrverificaonline.com"; classtype:attempted-recon; sid:200009433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mybroadband7140002.github.io"; classtype:attempted-recon; sid:200009434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mycb-d07e3.firebaseapp.com"; classtype:attempted-recon; sid:200009435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mycb-d07e3.web.app"; classtype:attempted-recon; sid:200009436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.lsasdfg.icu"; classtype:attempted-recon; sid:200009437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.lsoieuy.icu"; classtype:attempted-recon; sid:200009438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.lssopdie.icu"; classtype:attempted-recon; sid:200009439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.lxiskjde.icu"; classtype:attempted-recon; sid:200009440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.ma4k6.icu"; classtype:attempted-recon; sid:200009441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.maediof.icu"; classtype:attempted-recon; sid:200009442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.mjsudio.icu"; classtype:attempted-recon; sid:200009443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.msjudi.icu"; classtype:attempted-recon; sid:200009444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.namkdi.icu"; classtype:attempted-recon; sid:200009445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.tablegsh.icu"; classtype:attempted-recon; sid:200009447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.tashpitum.icu"; classtype:attempted-recon; sid:200009448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.usideq.icu"; classtype:attempted-recon; sid:200009449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.xiuydw.icu"; classtype:attempted-recon; sid:200009450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.xlsoida.icu"; classtype:attempted-recon; sid:200009451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoencoeeb.ceosnacoen.yianskd.icu"; classtype:attempted-recon; sid:200009452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200009453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.bsdeio.icu"; classtype:attempted-recon; sid:200009454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.gtxdifu.icu"; classtype:attempted-recon; sid:200009456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.jhusd.icu"; classtype:attempted-recon; sid:200009457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200009458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.likijs.icu"; classtype:attempted-recon; sid:200009459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.losijdue.icu"; classtype:attempted-recon; sid:200009460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.lskoposi.icu"; classtype:attempted-recon; sid:200009461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.lssopdie.icu"; classtype:attempted-recon; sid:200009462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200009463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.mangesd.icu"; classtype:attempted-recon; sid:200009464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.mxkusjdi.icu"; classtype:attempted-recon; sid:200009465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.nhduio.icu"; classtype:attempted-recon; sid:200009466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.nvmkdi.icu"; classtype:attempted-recon; sid:200009467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.qishui3.icu"; classtype:attempted-recon; sid:200009468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.sinnod.icu"; classtype:attempted-recon; sid:200009469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.v3454.icu"; classtype:attempted-recon; sid:200009470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccasasoensoeob.ceosnacoen.xiksjude.icu"; classtype:attempted-recon; sid:200009471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.baudiqq.icu"; classtype:attempted-recon; sid:200009472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.bfhju.icu"; classtype:attempted-recon; sid:200009473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.cdiosa.icu"; classtype:attempted-recon; sid:200009474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.ckfbs.icu"; classtype:attempted-recon; sid:200009475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.dayuhao.icu"; classtype:attempted-recon; sid:200009476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.ghdes.icu"; classtype:attempted-recon; sid:200009477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.gocdr.icu"; classtype:attempted-recon; sid:200009478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.i1lyb.icu"; classtype:attempted-recon; sid:200009479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.jpisi.icu"; classtype:attempted-recon; sid:200009480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.jskidoe.icu"; classtype:attempted-recon; sid:200009481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.ksidujed.icu"; classtype:attempted-recon; sid:200009482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.lciskdu.icu"; classtype:attempted-recon; sid:200009483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.lingangbcy.xyz"; classtype:attempted-recon; sid:200009484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.msodik.icu"; classtype:attempted-recon; sid:200009485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.nxhgsyd.icu"; classtype:attempted-recon; sid:200009486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.qhjkof.icu"; classtype:attempted-recon; sid:200009487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.sokdjhre.icu"; classtype:attempted-recon; sid:200009488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.xuyhsjd.icu"; classtype:attempted-recon; sid:200009489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneeb.ceosnaco.xzkuf.icu"; classtype:attempted-recon; sid:200009490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.6f1mf.icu"; classtype:attempted-recon; sid:200009491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.baudiqq.icu"; classtype:attempted-recon; sid:200009492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.bfhju.icu"; classtype:attempted-recon; sid:200009493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.bvhjjd.icu"; classtype:attempted-recon; sid:200009494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.gocdr.icu"; classtype:attempted-recon; sid:200009495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.huaxianone.icu"; classtype:attempted-recon; sid:200009496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.ixousudy.icu"; classtype:attempted-recon; sid:200009497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.laoisuej.icu"; classtype:attempted-recon; sid:200009498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.lianges.icu"; classtype:attempted-recon; sid:200009499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.lijhdjsu.icu"; classtype:attempted-recon; sid:200009500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.lshosie.icu"; classtype:attempted-recon; sid:200009501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.lsklsope.icu"; classtype:attempted-recon; sid:200009502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.lsloposl.icu"; classtype:attempted-recon; sid:200009503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.lsoieuyr.icu"; classtype:attempted-recon; sid:200009504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.lssncjud.icu"; classtype:attempted-recon; sid:200009505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.magxoisud.icu"; classtype:attempted-recon; sid:200009506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.qiehao.icu"; classtype:attempted-recon; sid:200009507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.t4gwf.icu"; classtype:attempted-recon; sid:200009508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.usideq.icu"; classtype:attempted-recon; sid:200009509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myccassoeneob.ceosnaco.xlsoida.icu"; classtype:attempted-recon; sid:200009510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mycutbuddies.com"; classtype:attempted-recon; sid:200009511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mycxxstqvh.duckdns.org"; classtype:attempted-recon; sid:200009512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mydappswalletconnect.com"; classtype:attempted-recon; sid:200009513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mydentalclinic.co.za"; classtype:attempted-recon; sid:200009514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mydooog.com"; classtype:attempted-recon; sid:200009515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myee-support-id.com"; classtype:attempted-recon; sid:200009516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myentcu.firebaseapp.com"; classtype:attempted-recon; sid:200009517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myentcu.web.app"; classtype:attempted-recon; sid:200009518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myerddybiu.duckdns.org"; classtype:attempted-recon; sid:200009519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myetherwallet-app.com"; classtype:attempted-recon; sid:200009520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myevri-redelivey-item.com"; classtype:attempted-recon; sid:200009521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myfilesecurity.dynamic-dns.net"; classtype:attempted-recon; sid:200009522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myiccu.firebaseapp.com"; classtype:attempted-recon; sid:200009523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myiccu.web.app"; classtype:attempted-recon; sid:200009524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myidmcierdco.top"; classtype:attempted-recon; sid:200009525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myidmeicerdc.top"; classtype:attempted-recon; sid:200009526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myislavista.com"; classtype:attempted-recon; sid:200009527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200009528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.asdaeer.icu"; classtype:attempted-recon; sid:200009529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.asjdied.icu"; classtype:attempted-recon; sid:200009530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.cdiosa.icu"; classtype:attempted-recon; sid:200009533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.gsyeidt.icu"; classtype:attempted-recon; sid:200009534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.gsyeuwi.icu"; classtype:attempted-recon; sid:200009535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.gtxdifu.icu"; classtype:attempted-recon; sid:200009536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.hliurkd.icu"; classtype:attempted-recon; sid:200009537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.jssjue.icu"; classtype:attempted-recon; sid:200009538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.msjdud.icu"; classtype:attempted-recon; sid:200009539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.nhusiwa.icu"; classtype:attempted-recon; sid:200009540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.paddki.icu"; classtype:attempted-recon; sid:200009542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.plaiksd.icu"; classtype:attempted-recon; sid:200009543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.qhjkof.icu"; classtype:attempted-recon; sid:200009544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.sokdjhre.icu"; classtype:attempted-recon; sid:200009545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.v3454.icu"; classtype:attempted-recon; sid:200009546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.xiuydw.icu"; classtype:attempted-recon; sid:200009547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.xmsjude.icu"; classtype:attempted-recon; sid:200009548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscciaasoenoeeeb.ceosnacoen.yianskd.icu"; classtype:attempted-recon; sid:200009549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.asdaeer.icu"; classtype:attempted-recon; sid:200009550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200009553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.erqer.icu"; classtype:attempted-recon; sid:200009554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.hajsued.icu"; classtype:attempted-recon; sid:200009555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.hliurkd.icu"; classtype:attempted-recon; sid:200009556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.ksudie.icu"; classtype:attempted-recon; sid:200009557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.laiisode.icu"; classtype:attempted-recon; sid:200009558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.lssncjud.icu"; classtype:attempted-recon; sid:200009559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.magxoisud.icu"; classtype:attempted-recon; sid:200009560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.margincolor.icu"; classtype:attempted-recon; sid:200009561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.msjdyf.icu"; classtype:attempted-recon; sid:200009562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.ncjhdyri.icu"; classtype:attempted-recon; sid:200009563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.nhusiwa.icu"; classtype:attempted-recon; sid:200009564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.nvmkdi.icu"; classtype:attempted-recon; sid:200009565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.qiehao.icu"; classtype:attempted-recon; sid:200009566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200009567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.tyroess.icu"; classtype:attempted-recon; sid:200009568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsccicasoenoeoeb.ceosnacoen.xmsjdhf.icu"; classtype:attempted-recon; sid:200009569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.asdaeer.icu"; classtype:attempted-recon; sid:200009570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.asjdied.icu"; classtype:attempted-recon; sid:200009571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.bsdeio.icu"; classtype:attempted-recon; sid:200009572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.cdiosa.icu"; classtype:attempted-recon; sid:200009573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.ckfbs.icu"; classtype:attempted-recon; sid:200009574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.fpaksix.icu"; classtype:attempted-recon; sid:200009575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.hsyueiod.icu"; classtype:attempted-recon; sid:200009576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.jsodiek.icu"; classtype:attempted-recon; sid:200009577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.ksudie.icu"; classtype:attempted-recon; sid:200009578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.lciskdu.icu"; classtype:attempted-recon; sid:200009579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.lsgsda.icu"; classtype:attempted-recon; sid:200009580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.lslpoi223.icu"; classtype:attempted-recon; sid:200009581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.ma4k6.icu"; classtype:attempted-recon; sid:200009582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.magxoisud.icu"; classtype:attempted-recon; sid:200009583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.nhusiwa.icu"; classtype:attempted-recon; sid:200009584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.nishilaji.icu"; classtype:attempted-recon; sid:200009585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.nvmkdi.icu"; classtype:attempted-recon; sid:200009586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.sdwsyde.icu"; classtype:attempted-recon; sid:200009587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.trsas.icu"; classtype:attempted-recon; sid:200009588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsciaaenoeeb.ceosnoen.xiuydw.icu"; classtype:attempted-recon; sid:200009589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.0e0db.icu"; classtype:attempted-recon; sid:200009590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.asdueiw.icu"; classtype:attempted-recon; sid:200009591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.erqer.icu"; classtype:attempted-recon; sid:200009593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.harginsu.icu"; classtype:attempted-recon; sid:200009594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.jskidoe.icu"; classtype:attempted-recon; sid:200009595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.jsodiek.icu"; classtype:attempted-recon; sid:200009596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.ksidujed.icu"; classtype:attempted-recon; sid:200009597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200009598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.lijhdy.icu"; classtype:attempted-recon; sid:200009599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.likijs.icu"; classtype:attempted-recon; sid:200009600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.lsggppe.icu"; classtype:attempted-recon; sid:200009601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.magxoisud.icu"; classtype:attempted-recon; sid:200009602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.mxkusjdi.icu"; classtype:attempted-recon; sid:200009603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.namkdi.icu"; classtype:attempted-recon; sid:200009604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.toutiaohao.icu"; classtype:attempted-recon; sid:200009605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.trsas.icu"; classtype:attempted-recon; sid:200009606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.vardir.icu"; classtype:attempted-recon; sid:200009607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.xiksjude.icu"; classtype:attempted-recon; sid:200009608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacscicaenooeb.ceosnoen.xzkuf.icu"; classtype:attempted-recon; sid:200009609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacseooeb.myjaoseeseb.sqltjt.top"; classtype:attempted-recon; sid:200009610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.asdueiw.icu"; classtype:attempted-recon; sid:200009611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.baidu123.icu"; classtype:attempted-recon; sid:200009612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.bfhju.icu"; classtype:attempted-recon; sid:200009613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.csndax.icu"; classtype:attempted-recon; sid:200009614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.harginsu.icu"; classtype:attempted-recon; sid:200009615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.hoalside.icu"; classtype:attempted-recon; sid:200009616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.kaosid.icu"; classtype:attempted-recon; sid:200009617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.laoisuej.icu"; classtype:attempted-recon; sid:200009618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.lasdas.icu"; classtype:attempted-recon; sid:200009619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.lianges.icu"; classtype:attempted-recon; sid:200009620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200009621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.lkosdf.icu"; classtype:attempted-recon; sid:200009622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.lsoidike.icu"; classtype:attempted-recon; sid:200009623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.ma4k6.icu"; classtype:attempted-recon; sid:200009624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.mangesd.icu"; classtype:attempted-recon; sid:200009625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.msodik.icu"; classtype:attempted-recon; sid:200009626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.pilidu.icu"; classtype:attempted-recon; sid:200009627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.recordd.icu"; classtype:attempted-recon; sid:200009628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.sdwsyde.icu"; classtype:attempted-recon; sid:200009629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.t4gwf.icu"; classtype:attempted-recon; sid:200009630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeeb.ocenacoen.toutiaohao.icu"; classtype:attempted-recon; sid:200009631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.cdiosa.icu"; classtype:attempted-recon; sid:200009632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.ckfbs.icu"; classtype:attempted-recon; sid:200009633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.dayuhao.icu"; classtype:attempted-recon; sid:200009634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.gsyeuwi.icu"; classtype:attempted-recon; sid:200009635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.hliurkd.icu"; classtype:attempted-recon; sid:200009636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.jpisi.icu"; classtype:attempted-recon; sid:200009637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.lsklsope.icu"; classtype:attempted-recon; sid:200009638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.lspxoiu.icu"; classtype:attempted-recon; sid:200009639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.maediof.icu"; classtype:attempted-recon; sid:200009640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.msjdyf.icu"; classtype:attempted-recon; sid:200009641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.mxkusjdi.icu"; classtype:attempted-recon; sid:200009642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.namkdi.icu"; classtype:attempted-recon; sid:200009643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.nhduio.icu"; classtype:attempted-recon; sid:200009644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.v3454.icu"; classtype:attempted-recon; sid:200009645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.vardir.icu"; classtype:attempted-recon; sid:200009646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsieccasonoeob.ocenacoen.yianskd.icu"; classtype:attempted-recon; sid:200009647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200009648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.cdiosa.icu"; classtype:attempted-recon; sid:200009650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.jssjue.icu"; classtype:attempted-recon; sid:200009651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.kaosid.icu"; classtype:attempted-recon; sid:200009652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.lasdas.icu"; classtype:attempted-recon; sid:200009653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200009654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.lsasdfg.icu"; classtype:attempted-recon; sid:200009655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200009656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.lxiskjde.icu"; classtype:attempted-recon; sid:200009657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.nishilaji.icu"; classtype:attempted-recon; sid:200009658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.nsjdyues.icu"; classtype:attempted-recon; sid:200009659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.paddki.icu"; classtype:attempted-recon; sid:200009660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.t4gwf.icu"; classtype:attempted-recon; sid:200009661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.tablegsh.icu"; classtype:attempted-recon; sid:200009662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.vardir.icu"; classtype:attempted-recon; sid:200009663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.xiksjude.icu"; classtype:attempted-recon; sid:200009664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.xskieus.icu"; classtype:attempted-recon; sid:200009665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoieccacasoenoeeb.oceosnacoen.xujsioa.icu"; classtype:attempted-recon; sid:200009666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200009667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.b5jsued.icu"; classtype:attempted-recon; sid:200009668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200009669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.dayuhao.icu"; classtype:attempted-recon; sid:200009670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.hoalside.icu"; classtype:attempted-recon; sid:200009671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.i1lyb.icu"; classtype:attempted-recon; sid:200009672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.jskidoe.icu"; classtype:attempted-recon; sid:200009673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.lsloposl.icu"; classtype:attempted-recon; sid:200009674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200009675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.mjsudio.icu"; classtype:attempted-recon; sid:200009676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.msjdyf.icu"; classtype:attempted-recon; sid:200009677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.msjhdyue.icu"; classtype:attempted-recon; sid:200009678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.msodik.icu"; classtype:attempted-recon; sid:200009679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.ncjxliskd.icu"; classtype:attempted-recon; sid:200009680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.sokdjhre.icu"; classtype:attempted-recon; sid:200009681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.tashpitum.icu"; classtype:attempted-recon; sid:200009682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.xiuydw.icu"; classtype:attempted-recon; sid:200009683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjacsoiecccsasoenoeob.oceosnacoen.xmsjude.icu"; classtype:attempted-recon; sid:200009684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.b5jsued.icu"; classtype:attempted-recon; sid:200009685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.bahusue.icu"; classtype:attempted-recon; sid:200009686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.ckfbs.icu"; classtype:attempted-recon; sid:200009687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200009688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.hajsued.icu"; classtype:attempted-recon; sid:200009689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.hoalside.icu"; classtype:attempted-recon; sid:200009690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.jpisi.icu"; classtype:attempted-recon; sid:200009691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.likijs.icu"; classtype:attempted-recon; sid:200009692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200009693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.mjsudio.icu"; classtype:attempted-recon; sid:200009694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.nsjdyues.icu"; classtype:attempted-recon; sid:200009695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.t4gwf.icu"; classtype:attempted-recon; sid:200009696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200009697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.tyroess.icu"; classtype:attempted-recon; sid:200009698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.v3454.icu"; classtype:attempted-recon; sid:200009699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaecccsasoenoseob.ceosnacoen.xskieus.icu"; classtype:attempted-recon; sid:200009700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.6f1mf.icu"; classtype:attempted-recon; sid:200009701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.asjdied.icu"; classtype:attempted-recon; sid:200009702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.bvhjjd.icu"; classtype:attempted-recon; sid:200009703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.dieowp.icu"; classtype:attempted-recon; sid:200009704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.fpaksix.icu"; classtype:attempted-recon; sid:200009705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.ghdes.icu"; classtype:attempted-recon; sid:200009706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.gsyeidt.icu"; classtype:attempted-recon; sid:200009707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.hliurkd.icu"; classtype:attempted-recon; sid:200009708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.koplsig.icu"; classtype:attempted-recon; sid:200009709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.likijs.icu"; classtype:attempted-recon; sid:200009710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200009711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.lxiskjde.icu"; classtype:attempted-recon; sid:200009712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.maediof.icu"; classtype:attempted-recon; sid:200009713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.msjdud.icu"; classtype:attempted-recon; sid:200009714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.mxkusjdi.icu"; classtype:attempted-recon; sid:200009715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.xlsoida.icu"; classtype:attempted-recon; sid:200009716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaeccsasnosob.ceosnaen.xmsjude.icu"; classtype:attempted-recon; sid:200009717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.ghdes.icu"; classtype:attempted-recon; sid:200009719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200009720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.gsyeuwi.icu"; classtype:attempted-recon; sid:200009721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.harginsu.icu"; classtype:attempted-recon; sid:200009722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.hliurkd.icu"; classtype:attempted-recon; sid:200009723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200009724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.i1lyb.icu"; classtype:attempted-recon; sid:200009725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.jssjue.icu"; classtype:attempted-recon; sid:200009726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.laiisode.icu"; classtype:attempted-recon; sid:200009727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.laoisuej.icu"; classtype:attempted-recon; sid:200009728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.lssncjud.icu"; classtype:attempted-recon; sid:200009729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200009730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.ma4k6.icu"; classtype:attempted-recon; sid:200009731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.paddki.icu"; classtype:attempted-recon; sid:200009733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.sokdjhre.icu"; classtype:attempted-recon; sid:200009734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200009735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.vajdui.icu"; classtype:attempted-recon; sid:200009736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesacccasasoenoeeb.mceosnacoen.xiuydw.icu"; classtype:attempted-recon; sid:200009737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.baudiqq.icu"; classtype:attempted-recon; sid:200009738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.ckfbs.icu"; classtype:attempted-recon; sid:200009739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.d3skoc332.icu"; classtype:attempted-recon; sid:200009740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.dayuhao.icu"; classtype:attempted-recon; sid:200009741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.dieowp.icu"; classtype:attempted-recon; sid:200009742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.gocdr.icu"; classtype:attempted-recon; sid:200009743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.gsyeuwi.icu"; classtype:attempted-recon; sid:200009744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.huaxianone.icu"; classtype:attempted-recon; sid:200009745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.jhusd.icu"; classtype:attempted-recon; sid:200009746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.laoisuej.icu"; classtype:attempted-recon; sid:200009747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.lciskdu.icu"; classtype:attempted-recon; sid:200009748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200009749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.lsloposl.icu"; classtype:attempted-recon; sid:200009750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.lslpoi223.icu"; classtype:attempted-recon; sid:200009751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.lsoidike.icu"; classtype:attempted-recon; sid:200009752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.msjhdyue.icu"; classtype:attempted-recon; sid:200009753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.nishilaji.icu"; classtype:attempted-recon; sid:200009754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.pilidu.icu"; classtype:attempted-recon; sid:200009755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.qishui3.icu"; classtype:attempted-recon; sid:200009756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.sdaiexswe.icu"; classtype:attempted-recon; sid:200009757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.tashpitum.icu"; classtype:attempted-recon; sid:200009758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.v3454.icu"; classtype:attempted-recon; sid:200009759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.xiuydw.icu"; classtype:attempted-recon; sid:200009760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccasoeoeeb.mceoacoen.xujsioa.icu"; classtype:attempted-recon; sid:200009761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.0e0db.icu"; classtype:attempted-recon; sid:200009762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.b5jsued.icu"; classtype:attempted-recon; sid:200009763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200009764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200009765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.lianges.icu"; classtype:attempted-recon; sid:200009766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.lijhdy.icu"; classtype:attempted-recon; sid:200009767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200009768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.nxhgsyd.icu"; classtype:attempted-recon; sid:200009769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.xlsoida.icu"; classtype:attempted-recon; sid:200009771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeeb.ceosnacoen.xuyhsjd.icu"; classtype:attempted-recon; sid:200009772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200009773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.jhusd.icu"; classtype:attempted-recon; sid:200009774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.lkosdf.icu"; classtype:attempted-recon; sid:200009775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.lshosie.icu"; classtype:attempted-recon; sid:200009776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.lsqpoisue.icu"; classtype:attempted-recon; sid:200009777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.mpdskdf.icu"; classtype:attempted-recon; sid:200009778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.msjhdyue.icu"; classtype:attempted-recon; sid:200009779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.msjudi.icu"; classtype:attempted-recon; sid:200009780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.plaiksd.icu"; classtype:attempted-recon; sid:200009781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.recordd.icu"; classtype:attempted-recon; sid:200009782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.sdwsyde.icu"; classtype:attempted-recon; sid:200009783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200009784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.v3454.icu"; classtype:attempted-recon; sid:200009785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccoiasoensoeob.ceosnacoen.xzkuf.icu"; classtype:attempted-recon; sid:200009786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200009787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200009790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.ksudie.icu"; classtype:attempted-recon; sid:200009791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200009792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200009793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.lsoiujds.icu"; classtype:attempted-recon; sid:200009794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.lsqpoisue.icu"; classtype:attempted-recon; sid:200009795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.lsxoisd.icu"; classtype:attempted-recon; sid:200009796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.nsjdyues.icu"; classtype:attempted-recon; sid:200009797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200009799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.vajdui.icu"; classtype:attempted-recon; sid:200009800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.xiksjude.icu"; classtype:attempted-recon; sid:200009801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.xlsoida.icu"; classtype:attempted-recon; sid:200009802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescccsasoenaseeb.ceosnacoen.xzkuf.icu"; classtype:attempted-recon; sid:200009803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.bahusue.icu"; classtype:attempted-recon; sid:200009804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.ghdes.icu"; classtype:attempted-recon; sid:200009805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.gtxdifu.icu"; classtype:attempted-recon; sid:200009806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200009807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.lsklsope.icu"; classtype:attempted-recon; sid:200009808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.lsoidike.icu"; classtype:attempted-recon; sid:200009809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.lsoiujds.icu"; classtype:attempted-recon; sid:200009810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.lssopdie.icu"; classtype:attempted-recon; sid:200009811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.t4gwf.icu"; classtype:attempted-recon; sid:200009812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeeb.ceoscoen.xmsjude.icu"; classtype:attempted-recon; sid:200009813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.asjdied.icu"; classtype:attempted-recon; sid:200009814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.bfhju.icu"; classtype:attempted-recon; sid:200009815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.fpaksix.icu"; classtype:attempted-recon; sid:200009816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.ghdes.icu"; classtype:attempted-recon; sid:200009817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.gsyeidt.icu"; classtype:attempted-recon; sid:200009818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.ksidujed.icu"; classtype:attempted-recon; sid:200009819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.lkosdf.icu"; classtype:attempted-recon; sid:200009820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200009821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.nanish.icu"; classtype:attempted-recon; sid:200009822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.ncjhdyri.icu"; classtype:attempted-recon; sid:200009823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.omgg0.icu"; classtype:attempted-recon; sid:200009824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.paddki.icu"; classtype:attempted-recon; sid:200009825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.usideq.icu"; classtype:attempted-recon; sid:200009826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.vardir.icu"; classtype:attempted-recon; sid:200009827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccoioenoeob.ceoscoen.xskieus.icu"; classtype:attempted-recon; sid:200009828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.6f1mf.icu"; classtype:attempted-recon; sid:200009829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.bsdeio.icu"; classtype:attempted-recon; sid:200009830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.ghdes.icu"; classtype:attempted-recon; sid:200009832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.gsyeidt.icu"; classtype:attempted-recon; sid:200009833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.gtxdifu.icu"; classtype:attempted-recon; sid:200009834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.hajsued.icu"; classtype:attempted-recon; sid:200009835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.huaxianone.icu"; classtype:attempted-recon; sid:200009836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.ixousudy.icu"; classtype:attempted-recon; sid:200009837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.jhusd.icu"; classtype:attempted-recon; sid:200009838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.jpisi.icu"; classtype:attempted-recon; sid:200009839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.lijhdy.icu"; classtype:attempted-recon; sid:200009840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.lkosdf.icu"; classtype:attempted-recon; sid:200009841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.margincolor.icu"; classtype:attempted-recon; sid:200009842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.msjdyf.icu"; classtype:attempted-recon; sid:200009843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.nhusiwa.icu"; classtype:attempted-recon; sid:200009844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.nsyheuks.icu"; classtype:attempted-recon; sid:200009845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.qishui3.icu"; classtype:attempted-recon; sid:200009846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.tablegsh.icu"; classtype:attempted-recon; sid:200009847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.trsas.icu"; classtype:attempted-recon; sid:200009848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.vajdui.icu"; classtype:attempted-recon; sid:200009849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.xiksjude.icu"; classtype:attempted-recon; sid:200009850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.xiuydw.icu"; classtype:attempted-recon; sid:200009851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.xmsjdhf.icu"; classtype:attempted-recon; sid:200009852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.xskieus.icu"; classtype:attempted-recon; sid:200009853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.xujsioa.icu"; classtype:attempted-recon; sid:200009854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.xzsywte.icu"; classtype:attempted-recon; sid:200009855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesccsaenaeeb.ceosnoen.yianskd.icu"; classtype:attempted-recon; sid:200009856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.asdueiw.icu"; classtype:attempted-recon; sid:200009857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200009859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.dieowp.icu"; classtype:attempted-recon; sid:200009860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.erqer.icu"; classtype:attempted-recon; sid:200009861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.ghdes.icu"; classtype:attempted-recon; sid:200009862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.gsyeuwi.icu"; classtype:attempted-recon; sid:200009863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.jhusd.icu"; classtype:attempted-recon; sid:200009864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.jpisi.icu"; classtype:attempted-recon; sid:200009865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.kjdjwuw.icu"; classtype:attempted-recon; sid:200009866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.lciskdu.icu"; classtype:attempted-recon; sid:200009867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.mpdskdf.icu"; classtype:attempted-recon; sid:200009868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.nishilaji.icu"; classtype:attempted-recon; sid:200009869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.paddki.icu"; classtype:attempted-recon; sid:200009870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.tablegsh.icu"; classtype:attempted-recon; sid:200009871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescsccasasoenoeob.mceosnacoen.xzkuf.icu"; classtype:attempted-recon; sid:200009872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.bahusue.icu"; classtype:attempted-recon; sid:200009873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.cdiosa.icu"; classtype:attempted-recon; sid:200009874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.erqer.icu"; classtype:attempted-recon; sid:200009875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.jhusd.icu"; classtype:attempted-recon; sid:200009876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.jsodiek.icu"; classtype:attempted-recon; sid:200009877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.laoisuej.icu"; classtype:attempted-recon; sid:200009878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.lijhdy.icu"; classtype:attempted-recon; sid:200009879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.likijs.icu"; classtype:attempted-recon; sid:200009880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.lkosdf.icu"; classtype:attempted-recon; sid:200009881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.lskoposi.icu"; classtype:attempted-recon; sid:200009882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.lslpoi223.icu"; classtype:attempted-recon; sid:200009883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.magxoisud.icu"; classtype:attempted-recon; sid:200009884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.mangesd.icu"; classtype:attempted-recon; sid:200009885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.msodik.icu"; classtype:attempted-recon; sid:200009886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.namkdi.icu"; classtype:attempted-recon; sid:200009887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.nsyheuks.icu"; classtype:attempted-recon; sid:200009888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.sdaiexswe.icu"; classtype:attempted-recon; sid:200009890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200009891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccocasoenoeeb.oceosnacoen.usideq.icu"; classtype:attempted-recon; sid:200009892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200009893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.asdueiw.icu"; classtype:attempted-recon; sid:200009894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200009896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.erqer.icu"; classtype:attempted-recon; sid:200009897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.hajsued.icu"; classtype:attempted-recon; sid:200009898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.harginsu.icu"; classtype:attempted-recon; sid:200009899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.i1lyb.icu"; classtype:attempted-recon; sid:200009900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.jskidoe.icu"; classtype:attempted-recon; sid:200009901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.lkosdf.icu"; classtype:attempted-recon; sid:200009902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.lsasdfg.icu"; classtype:attempted-recon; sid:200009903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.nhduio.icu"; classtype:attempted-recon; sid:200009904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.nhusiwa.icu"; classtype:attempted-recon; sid:200009905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.nvmkdi.icu"; classtype:attempted-recon; sid:200009906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.sdwsyde.icu"; classtype:attempted-recon; sid:200009907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.toutiaohao.icu"; classtype:attempted-recon; sid:200009908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseaoccosasoenoeob.oceosnacoen.vajdui.icu"; classtype:attempted-recon; sid:200009909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaescseasooeob.mn.pkwrdl.top"; classtype:attempted-recon; sid:200009910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.0e0db.icu"; classtype:attempted-recon; sid:200009911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.cdiosa.icu"; classtype:attempted-recon; sid:200009912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.ckfbs.icu"; classtype:attempted-recon; sid:200009913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.dayuhao.icu"; classtype:attempted-recon; sid:200009914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.erqer.icu"; classtype:attempted-recon; sid:200009915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.ghdes.icu"; classtype:attempted-recon; sid:200009916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.gtxdifu.icu"; classtype:attempted-recon; sid:200009917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.hliurkd.icu"; classtype:attempted-recon; sid:200009918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.ixousudy.icu"; classtype:attempted-recon; sid:200009919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.jpisi.icu"; classtype:attempted-recon; sid:200009920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.lciskdu.icu"; classtype:attempted-recon; sid:200009921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.lsoieuyr.icu"; classtype:attempted-recon; sid:200009922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.lssopdie.icu"; classtype:attempted-recon; sid:200009923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.tiafedf.icu"; classtype:attempted-recon; sid:200009924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.toutiaohao.icu"; classtype:attempted-recon; sid:200009925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaessccasoeoeob.mceoacoen.xskieus.icu"; classtype:attempted-recon; sid:200009926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200009927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.bahusue.icu"; classtype:attempted-recon; sid:200009928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.ckfbs.icu"; classtype:attempted-recon; sid:200009930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.dayuhao.icu"; classtype:attempted-recon; sid:200009931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.erqer.icu"; classtype:attempted-recon; sid:200009932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200009933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200009934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.kaosid.icu"; classtype:attempted-recon; sid:200009935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.kjdjwuw.icu"; classtype:attempted-recon; sid:200009936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200009937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.lsoieuyr.icu"; classtype:attempted-recon; sid:200009938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.lspxoiu.icu"; classtype:attempted-recon; sid:200009939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.mpdskdf.icu"; classtype:attempted-recon; sid:200009940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.msjdud.icu"; classtype:attempted-recon; sid:200009941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.nsjdyues.icu"; classtype:attempted-recon; sid:200009942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.tablegsh.icu"; classtype:attempted-recon; sid:200009944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.tyroess.icu"; classtype:attempted-recon; sid:200009945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.xiksjude.icu"; classtype:attempted-recon; sid:200009946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.xmsjdhf.icu"; classtype:attempted-recon; sid:200009947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.xskieus.icu"; classtype:attempted-recon; sid:200009948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoocaoenoeeb.oosnacoen.xuyhsjd.icu"; classtype:attempted-recon; sid:200009949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.0e0db.icu"; classtype:attempted-recon; sid:200009950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.asdaeer.icu"; classtype:attempted-recon; sid:200009951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.asdueiw.icu"; classtype:attempted-recon; sid:200009952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.b5jsued.icu"; classtype:attempted-recon; sid:200009953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.baidu123.icu"; classtype:attempted-recon; sid:200009954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200009955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.bsdeio.icu"; classtype:attempted-recon; sid:200009956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.d3skoc332.icu"; classtype:attempted-recon; sid:200009957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200009958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.huaxianone.icu"; classtype:attempted-recon; sid:200009959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.i1lyb.icu"; classtype:attempted-recon; sid:200009960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.kjdjwuw.icu"; classtype:attempted-recon; sid:200009961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.likijs.icu"; classtype:attempted-recon; sid:200009962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.lsgsda.icu"; classtype:attempted-recon; sid:200009963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.lshosie.icu"; classtype:attempted-recon; sid:200009964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200009965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.margincolor.icu"; classtype:attempted-recon; sid:200009966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.msjdyf.icu"; classtype:attempted-recon; sid:200009967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.paddki.icu"; classtype:attempted-recon; sid:200009968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.qhjkof.icu"; classtype:attempted-recon; sid:200009969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.t4gwf.icu"; classtype:attempted-recon; sid:200009970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.tablegsh.icu"; classtype:attempted-recon; sid:200009971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.xiksjude.icu"; classtype:attempted-recon; sid:200009972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaesseaoosaoenoeob.oosnacoen.xujsioa.icu"; classtype:attempted-recon; sid:200009973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaiocseooeb.myijaocseeseb.mgjuxa.top"; classtype:attempted-recon; sid:200009974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjannjffz.duckdns.org"; classtype:attempted-recon; sid:200009975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjaocseooeb.myjaocseeseb.mojnlk.top"; classtype:attempted-recon; sid:200009976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.b5jsued.icu"; classtype:attempted-recon; sid:200009977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.cocodes.icu"; classtype:attempted-recon; sid:200009978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200009979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.gtxdifu.icu"; classtype:attempted-recon; sid:200009980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.hajsued.icu"; classtype:attempted-recon; sid:200009981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.jhusd.icu"; classtype:attempted-recon; sid:200009982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.ksidujed.icu"; classtype:attempted-recon; sid:200009983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.laiisode.icu"; classtype:attempted-recon; sid:200009984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.laoisuej.icu"; classtype:attempted-recon; sid:200009985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.lasdas.icu"; classtype:attempted-recon; sid:200009986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200009987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.lskoposi.icu"; classtype:attempted-recon; sid:200009988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.ma4k6.icu"; classtype:attempted-recon; sid:200009989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.ncjhdyri.icu"; classtype:attempted-recon; sid:200009990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.nishilaji.icu"; classtype:attempted-recon; sid:200009991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200009992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.qhjkof.icu"; classtype:attempted-recon; sid:200009993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.tablegsh.icu"; classtype:attempted-recon; sid:200009994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200009995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.xlsoida.icu"; classtype:attempted-recon; sid:200009996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.xmsjdhf.icu"; classtype:attempted-recon; sid:200009997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.xskieus.icu"; classtype:attempted-recon; sid:200009998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasaccoeasoeneeob.mceosnacoen.xzsywte.icu"; classtype:attempted-recon; sid:200009999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.0e0db.icu"; classtype:attempted-recon; sid:200010000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.asdueiw.icu"; classtype:attempted-recon; sid:200010001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.b5jsued.icu"; classtype:attempted-recon; sid:200010002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.cocodes.icu"; classtype:attempted-recon; sid:200010003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.dieowp.icu"; classtype:attempted-recon; sid:200010004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.erqer.icu"; classtype:attempted-recon; sid:200010005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.gtxdifu.icu"; classtype:attempted-recon; sid:200010006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.hoalside.icu"; classtype:attempted-recon; sid:200010007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.hsyueiod.icu"; classtype:attempted-recon; sid:200010008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.jskidoe.icu"; classtype:attempted-recon; sid:200010009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.kjdjwuw.icu"; classtype:attempted-recon; sid:200010010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.laiisode.icu"; classtype:attempted-recon; sid:200010011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200010012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200010013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.lsoidike.icu"; classtype:attempted-recon; sid:200010014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.magxoisud.icu"; classtype:attempted-recon; sid:200010015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.mjsudio.icu"; classtype:attempted-recon; sid:200010016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.msjhdyue.icu"; classtype:attempted-recon; sid:200010017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.ncjxliskd.icu"; classtype:attempted-recon; sid:200010018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.nsjdyues.icu"; classtype:attempted-recon; sid:200010019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.omgg0.icu"; classtype:attempted-recon; sid:200010020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.usideq.icu"; classtype:attempted-recon; sid:200010021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.v3454.icu"; classtype:attempted-recon; sid:200010022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.vardir.icu"; classtype:attempted-recon; sid:200010023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasacoeaeneob.mceosnoen.xlsoida.icu"; classtype:attempted-recon; sid:200010024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200010025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.baidu123.icu"; classtype:attempted-recon; sid:200010026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.bsdeio.icu"; classtype:attempted-recon; sid:200010027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.cdiosa.icu"; classtype:attempted-recon; sid:200010028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.ckfbs.icu"; classtype:attempted-recon; sid:200010029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.dieowp.icu"; classtype:attempted-recon; sid:200010030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.jsodiek.icu"; classtype:attempted-recon; sid:200010031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.lciskdu.icu"; classtype:attempted-recon; sid:200010032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200010033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.lxiskjde.icu"; classtype:attempted-recon; sid:200010034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.magxoisud.icu"; classtype:attempted-recon; sid:200010035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.mxkusjdi.icu"; classtype:attempted-recon; sid:200010036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.nhusiwa.icu"; classtype:attempted-recon; sid:200010037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.nsjdyues.icu"; classtype:attempted-recon; sid:200010038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200010039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.tashpitum.icu"; classtype:attempted-recon; sid:200010040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200010041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.v3454.icu"; classtype:attempted-recon; sid:200010042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.vardir.icu"; classtype:attempted-recon; sid:200010043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.xiksjude.icu"; classtype:attempted-recon; sid:200010044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascccoeasoeneoob.mceosnacoen.xzkuf.icu"; classtype:attempted-recon; sid:200010045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.asjdied.icu"; classtype:attempted-recon; sid:200010046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.bfhju.icu"; classtype:attempted-recon; sid:200010047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.cdiosa.icu"; classtype:attempted-recon; sid:200010048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.ckfbs.icu"; classtype:attempted-recon; sid:200010049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.d3skoc332.icu"; classtype:attempted-recon; sid:200010050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.erqer.icu"; classtype:attempted-recon; sid:200010051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.hajsued.icu"; classtype:attempted-recon; sid:200010052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.hoalside.icu"; classtype:attempted-recon; sid:200010053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.hsyueiod.icu"; classtype:attempted-recon; sid:200010054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.ksidujed.icu"; classtype:attempted-recon; sid:200010055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.losijdue.icu"; classtype:attempted-recon; sid:200010056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.ma4k6.icu"; classtype:attempted-recon; sid:200010057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.mangesd.icu"; classtype:attempted-recon; sid:200010058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.msodik.icu"; classtype:attempted-recon; sid:200010059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.ncjhdyri.icu"; classtype:attempted-recon; sid:200010060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.tiafedf.icu"; classtype:attempted-recon; sid:200010061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.toutiaohao.icu"; classtype:attempted-recon; sid:200010062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjasccoeaeneob.mceosnoen.trsas.icu"; classtype:attempted-recon; sid:200010063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascesoccsaaseseb.mseycceaoojearescoooseaascsoeb.rinlvb.top"; classtype:attempted-recon; sid:200010064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascesoccsaaseseb.mseycceaoojearescoooseacsoeb.rinlvb.top"; classtype:attempted-recon; sid:200010065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascesoccsaaseseb.mseyjcaaaosearescooosecsoeb.rinlvb.top"; classtype:attempted-recon; sid:200010066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascesoccsaaseseb.mseyjcaacosearescoooseccsooeb.rinlvb.top"; classtype:attempted-recon; sid:200010067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascesoccsaaseseb.mseyjcaacosearescoooseoeb.rinlvb.top"; classtype:attempted-recon; sid:200010068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjascseooeb.myejaoseeseb.mstcly.top"; classtype:attempted-recon; sid:200010069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.ckfbs.icu"; classtype:attempted-recon; sid:200010070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.dieowp.icu"; classtype:attempted-recon; sid:200010071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.ghdes.icu"; classtype:attempted-recon; sid:200010072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.hliurkd.icu"; classtype:attempted-recon; sid:200010073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.hoalside.icu"; classtype:attempted-recon; sid:200010074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.kaosid.icu"; classtype:attempted-recon; sid:200010075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.lciskdu.icu"; classtype:attempted-recon; sid:200010076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.lsoieuy.icu"; classtype:attempted-recon; sid:200010077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.lsoieuyr.icu"; classtype:attempted-recon; sid:200010078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.nanish.icu"; classtype:attempted-recon; sid:200010079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.xujsioa.icu"; classtype:attempted-recon; sid:200010080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacccieoenscob.ceoscoen.xzkuf.icu"; classtype:attempted-recon; sid:200010081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.asdaeer.icu"; classtype:attempted-recon; sid:200010082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200010083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.ghdes.icu"; classtype:attempted-recon; sid:200010084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.gsyeidt.icu"; classtype:attempted-recon; sid:200010085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200010086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.jhusd.icu"; classtype:attempted-recon; sid:200010087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.magxoisud.icu"; classtype:attempted-recon; sid:200010088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.mpdskdf.icu"; classtype:attempted-recon; sid:200010089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.olkijsd.icu"; classtype:attempted-recon; sid:200010090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.qishui3.icu"; classtype:attempted-recon; sid:200010091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.sdwsyde.icu"; classtype:attempted-recon; sid:200010092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.t4gwf.icu"; classtype:attempted-recon; sid:200010093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.trsas.icu"; classtype:attempted-recon; sid:200010094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.tsyudasd.icu"; classtype:attempted-recon; sid:200010095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.xmsjude.icu"; classtype:attempted-recon; sid:200010096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacoeacoasenosob.ocsnacoen.yianskd.icu"; classtype:attempted-recon; sid:200010097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200010098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.ckfbs.icu"; classtype:attempted-recon; sid:200010099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200010100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.ghdes.icu"; classtype:attempted-recon; sid:200010101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200010102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.hajsued.icu"; classtype:attempted-recon; sid:200010103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.hoalside.icu"; classtype:attempted-recon; sid:200010104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.ksidujed.icu"; classtype:attempted-recon; sid:200010105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.lianges.icu"; classtype:attempted-recon; sid:200010106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200010107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.lsasdfg.icu"; classtype:attempted-recon; sid:200010108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.lslpoi223.icu"; classtype:attempted-recon; sid:200010109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.mangesd.icu"; classtype:attempted-recon; sid:200010110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.namkdi.icu"; classtype:attempted-recon; sid:200010111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.qishui3.icu"; classtype:attempted-recon; sid:200010112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.sokdjhre.icu"; classtype:attempted-recon; sid:200010113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.tiafedf.icu"; classtype:attempted-recon; sid:200010114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200010115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.xmsjude.icu"; classtype:attempted-recon; sid:200010116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsccieasoenoscob.ceosnacoen.xuyhsjd.icu"; classtype:attempted-recon; sid:200010117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.b5jsued.icu"; classtype:attempted-recon; sid:200010118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.bsdeio.icu"; classtype:attempted-recon; sid:200010119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.bvhjjd.icu"; classtype:attempted-recon; sid:200010120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.cdiosa.icu"; classtype:attempted-recon; sid:200010121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.ckfbs.icu"; classtype:attempted-recon; sid:200010122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.fpaksix.icu"; classtype:attempted-recon; sid:200010123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.jhusd.icu"; classtype:attempted-recon; sid:200010124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200010125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.lsklsope.icu"; classtype:attempted-recon; sid:200010126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.mpdskdf.icu"; classtype:attempted-recon; sid:200010127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.msjudi.icu"; classtype:attempted-recon; sid:200010128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.nhduio.icu"; classtype:attempted-recon; sid:200010129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.nishilaji.icu"; classtype:attempted-recon; sid:200010130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.qhjkof.icu"; classtype:attempted-recon; sid:200010131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.qiehao.icu"; classtype:attempted-recon; sid:200010132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.recordd.icu"; classtype:attempted-recon; sid:200010133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcacsoeacceoasoenosob.oceosnacoen.toutiaohao.icu"; classtype:attempted-recon; sid:200010134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.2021071.top"; classtype:attempted-recon; sid:200010135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.alister.ltd"; classtype:attempted-recon; sid:200010136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.cjehdm.top"; classtype:attempted-recon; sid:200010137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.clllbx.top"; classtype:attempted-recon; sid:200010138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.ebwptg.top"; classtype:attempted-recon; sid:200010139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.fcwh886.top"; classtype:attempted-recon; sid:200010140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.francis.ltd"; classtype:attempted-recon; sid:200010141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.fzosfk.top"; classtype:attempted-recon; sid:200010142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.gafuwd.top"; classtype:attempted-recon; sid:200010143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.glmbfd.top"; classtype:attempted-recon; sid:200010144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.gzfkmo.top"; classtype:attempted-recon; sid:200010145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.hncwbn.top"; classtype:attempted-recon; sid:200010146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.ipexqv.top"; classtype:attempted-recon; sid:200010147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.jcloud.group"; classtype:attempted-recon; sid:200010148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.jimdyd.top"; classtype:attempted-recon; sid:200010149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.jjglsw.top"; classtype:attempted-recon; sid:200010150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.leigh.ltd"; classtype:attempted-recon; sid:200010151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.leonard.ltd"; classtype:attempted-recon; sid:200010152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.lhixak.top"; classtype:attempted-recon; sid:200010153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.lhzfkh.top"; classtype:attempted-recon; sid:200010154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.limassol.group"; classtype:attempted-recon; sid:200010155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.loskh.top"; classtype:attempted-recon; sid:200010156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.mkma07.shop"; classtype:attempted-recon; sid:200010157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.ncbhdjei.icu"; classtype:attempted-recon; sid:200010158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.nicosia.group"; classtype:attempted-recon; sid:200010159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.njrksy.top"; classtype:attempted-recon; sid:200010160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.norfolk.ltd"; classtype:attempted-recon; sid:200010161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.npxfcv.top"; classtype:attempted-recon; sid:200010162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.nvjdhuei.icu"; classtype:attempted-recon; sid:200010163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.oamprk.top"; classtype:attempted-recon; sid:200010164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.owens.ltd"; classtype:attempted-recon; sid:200010165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.pcloud.group"; classtype:attempted-recon; sid:200010166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.ptywgv.top"; classtype:attempted-recon; sid:200010167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.qzvxui.top"; classtype:attempted-recon; sid:200010168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.reynolds.ltd"; classtype:attempted-recon; sid:200010169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.riley.ltd"; classtype:attempted-recon; sid:200010170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.robertson.ltd"; classtype:attempted-recon; sid:200010171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.rowan.ltd"; classtype:attempted-recon; sid:200010172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.shjpxn.top"; classtype:attempted-recon; sid:200010173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.sinclair.ltd"; classtype:attempted-recon; sid:200010174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.sqmim.top"; classtype:attempted-recon; sid:200010175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.tvrimx.top"; classtype:attempted-recon; sid:200010176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.tvxkmp.top"; classtype:attempted-recon; sid:200010177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.vjlile.top"; classtype:attempted-recon; sid:200010178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.vnxgwb.top"; classtype:attempted-recon; sid:200010179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.vordmh.top"; classtype:attempted-recon; sid:200010180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.wcloud.group"; classtype:attempted-recon; sid:200010181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.xdaupp.top"; classtype:attempted-recon; sid:200010182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.xhgmfb.top"; classtype:attempted-recon; sid:200010183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.xniqmj.top"; classtype:attempted-recon; sid:200010184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.xulhaq.top"; classtype:attempted-recon; sid:200010185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.ycloud.group"; classtype:attempted-recon; sid:200010186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.zbvvpg.top"; classtype:attempted-recon; sid:200010187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.zeyeds.ltd"; classtype:attempted-recon; sid:200010188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.zkzkd04.shop"; classtype:attempted-recon; sid:200010189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.zqjkvx.top"; classtype:attempted-recon; sid:200010190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasaeoeb.ca.zrxpv.top"; classtype:attempted-recon; sid:200010191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.asdaeer.icu"; classtype:attempted-recon; sid:200010192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.bahusue.icu"; classtype:attempted-recon; sid:200010193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.baidu123.icu"; classtype:attempted-recon; sid:200010194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.fpaksix.icu"; classtype:attempted-recon; sid:200010195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.hliurkd.icu"; classtype:attempted-recon; sid:200010196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.lasdas.icu"; classtype:attempted-recon; sid:200010197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.lsoieuy.icu"; classtype:attempted-recon; sid:200010198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200010199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.maediof.icu"; classtype:attempted-recon; sid:200010200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.margincolor.icu"; classtype:attempted-recon; sid:200010201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.msjdud.icu"; classtype:attempted-recon; sid:200010202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.nanish.icu"; classtype:attempted-recon; sid:200010203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.nvmkdi.icu"; classtype:attempted-recon; sid:200010204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.omgg0.icu"; classtype:attempted-recon; sid:200010205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.paddki.icu"; classtype:attempted-recon; sid:200010206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.plaiksd.icu"; classtype:attempted-recon; sid:200010207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.toutiaohao.icu"; classtype:attempted-recon; sid:200010208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.tsyudasd.icu"; classtype:attempted-recon; sid:200010209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.vajdui.icu"; classtype:attempted-recon; sid:200010210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.xiuydw.icu"; classtype:attempted-recon; sid:200010211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascceaoenoob.mceoscoen.xmsjude.icu"; classtype:attempted-recon; sid:200010212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200010213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.asdaeer.icu"; classtype:attempted-recon; sid:200010214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.asdueiw.icu"; classtype:attempted-recon; sid:200010215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.b5jsued.icu"; classtype:attempted-recon; sid:200010216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.ckfbs.icu"; classtype:attempted-recon; sid:200010217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.fpaksix.icu"; classtype:attempted-recon; sid:200010218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.gsyeuwi.icu"; classtype:attempted-recon; sid:200010219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.harginsu.icu"; classtype:attempted-recon; sid:200010220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.i1lyb.icu"; classtype:attempted-recon; sid:200010221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.lsasdfg.icu"; classtype:attempted-recon; sid:200010222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200010223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.lsoieuyr.icu"; classtype:attempted-recon; sid:200010224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.maediof.icu"; classtype:attempted-recon; sid:200010225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.magxoisud.icu"; classtype:attempted-recon; sid:200010226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.ncjhdyri.icu"; classtype:attempted-recon; sid:200010227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.nhusiwa.icu"; classtype:attempted-recon; sid:200010228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.qhjkof.icu"; classtype:attempted-recon; sid:200010229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.sdwsyde.icu"; classtype:attempted-recon; sid:200010230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.t4gwf.icu"; classtype:attempted-recon; sid:200010231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.vajdui.icu"; classtype:attempted-recon; sid:200010232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.xiksjude.icu"; classtype:attempted-recon; sid:200010233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.xlsoida.icu"; classtype:attempted-recon; sid:200010234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasccsoasoensoaab.ceosnacoen.xzsywte.icu"; classtype:attempted-recon; sid:200010235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.6f1mf.icu"; classtype:attempted-recon; sid:200010236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.bfhju.icu"; classtype:attempted-recon; sid:200010237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.bsdeio.icu"; classtype:attempted-recon; sid:200010238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.bvhjjd.icu"; classtype:attempted-recon; sid:200010239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.d3skoc332.icu"; classtype:attempted-recon; sid:200010240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.gsyeidt.icu"; classtype:attempted-recon; sid:200010241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.i1lyb.icu"; classtype:attempted-recon; sid:200010242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.ksidujed.icu"; classtype:attempted-recon; sid:200010243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.lciskdu.icu"; classtype:attempted-recon; sid:200010244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200010245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.lsgsda.icu"; classtype:attempted-recon; sid:200010246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.lskoposi.icu"; classtype:attempted-recon; sid:200010247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.lsloposl.icu"; classtype:attempted-recon; sid:200010248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.lsoieuyr.icu"; classtype:attempted-recon; sid:200010249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.lsoiujds.icu"; classtype:attempted-recon; sid:200010250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.mangesd.icu"; classtype:attempted-recon; sid:200010251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.namkdi.icu"; classtype:attempted-recon; sid:200010252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.nsjdyues.icu"; classtype:attempted-recon; sid:200010253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.olkijsd.icu"; classtype:attempted-recon; sid:200010254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.t4gwf.icu"; classtype:attempted-recon; sid:200010255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.trsas.icu"; classtype:attempted-recon; sid:200010256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.vajdui.icu"; classtype:attempted-recon; sid:200010257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcascsoaensaab.ceosnoen.xzkuf.icu"; classtype:attempted-recon; sid:200010258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.2021071.top"; classtype:attempted-recon; sid:200010259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.22567.cn"; classtype:attempted-recon; sid:200010260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.85567.cn"; classtype:attempted-recon; sid:200010261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.acloud.group"; classtype:attempted-recon; sid:200010262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.ahiftgl.top"; classtype:attempted-recon; sid:200010263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.alister.ltd"; classtype:attempted-recon; sid:200010264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.cjehdm.top"; classtype:attempted-recon; sid:200010265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.clllbx.top"; classtype:attempted-recon; sid:200010266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.ebwptg.top"; classtype:attempted-recon; sid:200010267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.fcwh886.top"; classtype:attempted-recon; sid:200010268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.francis.ltd"; classtype:attempted-recon; sid:200010269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.fzosfk.top"; classtype:attempted-recon; sid:200010270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.gafuwd.top"; classtype:attempted-recon; sid:200010271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.gcloud.group"; classtype:attempted-recon; sid:200010272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.glmbfd.top"; classtype:attempted-recon; sid:200010273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.hncwbn.top"; classtype:attempted-recon; sid:200010274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.ipexqv.top"; classtype:attempted-recon; sid:200010275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.jimdyd.top"; classtype:attempted-recon; sid:200010276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.jjglsw.top"; classtype:attempted-recon; sid:200010277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.leigh.ltd"; classtype:attempted-recon; sid:200010278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.leonard.ltd"; classtype:attempted-recon; sid:200010279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.lhixak.top"; classtype:attempted-recon; sid:200010280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.lhzfkh.top"; classtype:attempted-recon; sid:200010281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.limassol.group"; classtype:attempted-recon; sid:200010282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.loskh.top"; classtype:attempted-recon; sid:200010283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.mnvhdje.icu"; classtype:attempted-recon; sid:200010284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.mosjide.icu"; classtype:attempted-recon; sid:200010285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.njrksy.top"; classtype:attempted-recon; sid:200010286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.norfolk.ltd"; classtype:attempted-recon; sid:200010287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.npxfcv.top"; classtype:attempted-recon; sid:200010288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200010289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.oamprk.top"; classtype:attempted-recon; sid:200010290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.owens.ltd"; classtype:attempted-recon; sid:200010291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.pcloud.group"; classtype:attempted-recon; sid:200010292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.ptywgv.top"; classtype:attempted-recon; sid:200010293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.qzvxui.top"; classtype:attempted-recon; sid:200010294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.reynolds.ltd"; classtype:attempted-recon; sid:200010295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.riley.ltd"; classtype:attempted-recon; sid:200010296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.robertson.ltd"; classtype:attempted-recon; sid:200010297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.rowan.ltd"; classtype:attempted-recon; sid:200010298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.scloud.group"; classtype:attempted-recon; sid:200010299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.shjpxn.top"; classtype:attempted-recon; sid:200010300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.sinclair.ltd"; classtype:attempted-recon; sid:200010301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.sqmim.top"; classtype:attempted-recon; sid:200010302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.tvrimx.top"; classtype:attempted-recon; sid:200010303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.tvxkmp.top"; classtype:attempted-recon; sid:200010304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.vjlile.top"; classtype:attempted-recon; sid:200010305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.vnxgwb.top"; classtype:attempted-recon; sid:200010306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.vordmh.top"; classtype:attempted-recon; sid:200010307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.xdaupp.top"; classtype:attempted-recon; sid:200010308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.xhgmfb.top"; classtype:attempted-recon; sid:200010309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.xniqmj.top"; classtype:attempted-recon; sid:200010310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.xulhaq.top"; classtype:attempted-recon; sid:200010311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.zbvvpg.top"; classtype:attempted-recon; sid:200010312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.zeyeds.ltd"; classtype:attempted-recon; sid:200010313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.zqjkvx.top"; classtype:attempted-recon; sid:200010314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseaecoeb.caaa.zrxpv.top"; classtype:attempted-recon; sid:200010315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.bsdeio.icu"; classtype:attempted-recon; sid:200010316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200010317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200010318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.jskidoe.icu"; classtype:attempted-recon; sid:200010319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.ksudie.icu"; classtype:attempted-recon; sid:200010320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.lijhdy.icu"; classtype:attempted-recon; sid:200010321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.lshosie.icu"; classtype:attempted-recon; sid:200010322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.lslpoi223.icu"; classtype:attempted-recon; sid:200010323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.msjdyf.icu"; classtype:attempted-recon; sid:200010324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.msjhdyue.icu"; classtype:attempted-recon; sid:200010325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.msjudi.icu"; classtype:attempted-recon; sid:200010326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200010327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.plaiksd.icu"; classtype:attempted-recon; sid:200010328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.sdwsyde.icu"; classtype:attempted-recon; sid:200010329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.trsas.icu"; classtype:attempted-recon; sid:200010330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcasecceaasoensoob.mceosnacoen.xuyhsjd.icu"; classtype:attempted-recon; sid:200010331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.2021071.top"; classtype:attempted-recon; sid:200010332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.22567.cn"; classtype:attempted-recon; sid:200010333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.31567.cn"; classtype:attempted-recon; sid:200010334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.53567.cn"; classtype:attempted-recon; sid:200010335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.ahahh04.shop"; classtype:attempted-recon; sid:200010336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.alister.ltd"; classtype:attempted-recon; sid:200010337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.cjehdm.top"; classtype:attempted-recon; sid:200010338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.clllbx.top"; classtype:attempted-recon; sid:200010339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.dcloud.group"; classtype:attempted-recon; sid:200010340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.ebwptg.top"; classtype:attempted-recon; sid:200010341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.fcloud.group"; classtype:attempted-recon; sid:200010342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.fcwh886.top"; classtype:attempted-recon; sid:200010343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.francis.ltd"; classtype:attempted-recon; sid:200010344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.fzosfk.top"; classtype:attempted-recon; sid:200010345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.gafuwd.top"; classtype:attempted-recon; sid:200010346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.glmbfd.top"; classtype:attempted-recon; sid:200010347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.hncwbn.top"; classtype:attempted-recon; sid:200010348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.ipexqv.top"; classtype:attempted-recon; sid:200010349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.jimdyd.top"; classtype:attempted-recon; sid:200010350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.jjglsw.top"; classtype:attempted-recon; sid:200010351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.leigh.ltd"; classtype:attempted-recon; sid:200010352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.leonard.ltd"; classtype:attempted-recon; sid:200010353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.lhixak.top"; classtype:attempted-recon; sid:200010354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.lhzfkh.top"; classtype:attempted-recon; sid:200010355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.limassol.group"; classtype:attempted-recon; sid:200010356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.loskh.top"; classtype:attempted-recon; sid:200010357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.mkma07.shop"; classtype:attempted-recon; sid:200010358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.mnvhdje.icu"; classtype:attempted-recon; sid:200010359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.ncbhdjei.icu"; classtype:attempted-recon; sid:200010360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.njrksy.top"; classtype:attempted-recon; sid:200010361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.norfolk.ltd"; classtype:attempted-recon; sid:200010362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.npxfcv.top"; classtype:attempted-recon; sid:200010363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.nvjdhuei.icu"; classtype:attempted-recon; sid:200010364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.oamprk.top"; classtype:attempted-recon; sid:200010365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.owens.ltd"; classtype:attempted-recon; sid:200010366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.pcloud.group"; classtype:attempted-recon; sid:200010367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.ptywgv.top"; classtype:attempted-recon; sid:200010368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.qzvxui.top"; classtype:attempted-recon; sid:200010369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.reynolds.ltd"; classtype:attempted-recon; sid:200010370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.riley.ltd"; classtype:attempted-recon; sid:200010371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.robertson.ltd"; classtype:attempted-recon; sid:200010372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.rowan.ltd"; classtype:attempted-recon; sid:200010373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.shjpxn.top"; classtype:attempted-recon; sid:200010374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.sinclair.ltd"; classtype:attempted-recon; sid:200010375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.sqmim.top"; classtype:attempted-recon; sid:200010376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.tvrimx.top"; classtype:attempted-recon; sid:200010377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.tvxkmp.top"; classtype:attempted-recon; sid:200010378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.vjlile.top"; classtype:attempted-recon; sid:200010379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.vnxgwb.top"; classtype:attempted-recon; sid:200010380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.vordmh.top"; classtype:attempted-recon; sid:200010381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.xdaupp.top"; classtype:attempted-recon; sid:200010382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.xhgmfb.top"; classtype:attempted-recon; sid:200010383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.xniqmj.top"; classtype:attempted-recon; sid:200010384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.xulhaq.top"; classtype:attempted-recon; sid:200010385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.zbvvpg.top"; classtype:attempted-recon; sid:200010386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.zeyeds.ltd"; classtype:attempted-recon; sid:200010387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.zqjkvx.top"; classtype:attempted-recon; sid:200010388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseeocb.caa.zrxpv.top"; classtype:attempted-recon; sid:200010389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.2021071.top"; classtype:attempted-recon; sid:200010390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.31567.cn"; classtype:attempted-recon; sid:200010391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.alister.ltd"; classtype:attempted-recon; sid:200010392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.bcloud.group"; classtype:attempted-recon; sid:200010393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.bmhkg09.shop"; classtype:attempted-recon; sid:200010394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.cjehdm.top"; classtype:attempted-recon; sid:200010395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.clllbx.top"; classtype:attempted-recon; sid:200010396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.ebwptg.top"; classtype:attempted-recon; sid:200010397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.fcwh886.top"; classtype:attempted-recon; sid:200010398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.francis.ltd"; classtype:attempted-recon; sid:200010399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.fzosfk.top"; classtype:attempted-recon; sid:200010400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.gafuwd.top"; classtype:attempted-recon; sid:200010401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.gcloud.group"; classtype:attempted-recon; sid:200010402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.glmbfd.top"; classtype:attempted-recon; sid:200010403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.gzmvuo.top"; classtype:attempted-recon; sid:200010404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.hncwbn.top"; classtype:attempted-recon; sid:200010405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.ipexqv.top"; classtype:attempted-recon; sid:200010406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.jimdyd.top"; classtype:attempted-recon; sid:200010407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.jjglsw.top"; classtype:attempted-recon; sid:200010408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.leigh.ltd"; classtype:attempted-recon; sid:200010409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.leonard.ltd"; classtype:attempted-recon; sid:200010410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.lhixak.top"; classtype:attempted-recon; sid:200010411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.lhzfkh.top"; classtype:attempted-recon; sid:200010412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.limassol.group"; classtype:attempted-recon; sid:200010413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.loskh.top"; classtype:attempted-recon; sid:200010414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.mortys.cn"; classtype:attempted-recon; sid:200010415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.njrksy.top"; classtype:attempted-recon; sid:200010416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.norfolk.ltd"; classtype:attempted-recon; sid:200010417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.npxfcv.top"; classtype:attempted-recon; sid:200010418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.nvjdhuei.icu"; classtype:attempted-recon; sid:200010419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.oamprk.top"; classtype:attempted-recon; sid:200010420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.owens.ltd"; classtype:attempted-recon; sid:200010421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.ptywgv.top"; classtype:attempted-recon; sid:200010422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.qzvxui.top"; classtype:attempted-recon; sid:200010423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.reynolds.ltd"; classtype:attempted-recon; sid:200010424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.riley.ltd"; classtype:attempted-recon; sid:200010425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.robertson.ltd"; classtype:attempted-recon; sid:200010426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.rowan.ltd"; classtype:attempted-recon; sid:200010427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.shjpxn.top"; classtype:attempted-recon; sid:200010428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.sinclair.ltd"; classtype:attempted-recon; sid:200010429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.sqmim.top"; classtype:attempted-recon; sid:200010430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.tvrimx.top"; classtype:attempted-recon; sid:200010431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.tvxkmp.top"; classtype:attempted-recon; sid:200010432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.vjlile.top"; classtype:attempted-recon; sid:200010433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.vnxgwb.top"; classtype:attempted-recon; sid:200010434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.vordmh.top"; classtype:attempted-recon; sid:200010435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.xdaupp.top"; classtype:attempted-recon; sid:200010436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.xhgmfb.top"; classtype:attempted-recon; sid:200010437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.xniqmj.top"; classtype:attempted-recon; sid:200010438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.xulhaq.top"; classtype:attempted-recon; sid:200010439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.zbvvpg.top"; classtype:attempted-recon; sid:200010440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.zeyeds.ltd"; classtype:attempted-recon; sid:200010441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.zqjkvx.top"; classtype:attempted-recon; sid:200010442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcaseob.c.zrxpv.top"; classtype:attempted-recon; sid:200010443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcbeovnvcsowis.oeangsm.mcxugn.za.com"; classtype:attempted-recon; sid:200010444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcbevssivsvvivcsowis.eazgrsnisgsm.jrvbcm.za.com"; classtype:attempted-recon; sid:200010445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjcbevssvocnvnvcsuvcowisease.oioazrsngsm.gzauog.za.com"; classtype:attempted-recon; sid:200010446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.bahusue.icu"; classtype:attempted-recon; sid:200010447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.ckfbs.icu"; classtype:attempted-recon; sid:200010448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.csndax.icu"; classtype:attempted-recon; sid:200010449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.dieowp.icu"; classtype:attempted-recon; sid:200010450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.erqer.icu"; classtype:attempted-recon; sid:200010451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.fpaksix.icu"; classtype:attempted-recon; sid:200010452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.i1lyb.icu"; classtype:attempted-recon; sid:200010453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.jpisi.icu"; classtype:attempted-recon; sid:200010454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.lsjdhi.icu"; classtype:attempted-recon; sid:200010455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.lsshkly.icu"; classtype:attempted-recon; sid:200010456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.msjdud.icu"; classtype:attempted-recon; sid:200010457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.nhusiwa.icu"; classtype:attempted-recon; sid:200010458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.qishui3.icu"; classtype:attempted-recon; sid:200010459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.recordd.icu"; classtype:attempted-recon; sid:200010460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.sinnod.icu"; classtype:attempted-recon; sid:200010461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.tashpitum.icu"; classtype:attempted-recon; sid:200010462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.tiafedf.icu"; classtype:attempted-recon; sid:200010463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.vardir.icu"; classtype:attempted-recon; sid:200010464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacccosoesosob.ceoacoen.xuyhsjd.icu"; classtype:attempted-recon; sid:200010465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.6f1mf.icu"; classtype:attempted-recon; sid:200010466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.bsdeio.icu"; classtype:attempted-recon; sid:200010467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200010468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.ghdes.icu"; classtype:attempted-recon; sid:200010469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200010470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.gsyeuwi.icu"; classtype:attempted-recon; sid:200010471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.jpisi.icu"; classtype:attempted-recon; sid:200010472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.koplsig.icu"; classtype:attempted-recon; sid:200010473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.ksidujed.icu"; classtype:attempted-recon; sid:200010474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.lasdas.icu"; classtype:attempted-recon; sid:200010475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200010476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.lshosie.icu"; classtype:attempted-recon; sid:200010477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.lsjdhi.icu"; classtype:attempted-recon; sid:200010478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.lsshkly.icu"; classtype:attempted-recon; sid:200010479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.lssopdie.icu"; classtype:attempted-recon; sid:200010480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.msjdud.icu"; classtype:attempted-recon; sid:200010481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.nishilaji.icu"; classtype:attempted-recon; sid:200010482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200010483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.qhjkof.icu"; classtype:attempted-recon; sid:200010484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.tiafedf.icu"; classtype:attempted-recon; sid:200010485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaccesasoenoasob.ceosnacoen.toutiaohao.icu"; classtype:attempted-recon; sid:200010486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.asdueiw.icu"; classtype:attempted-recon; sid:200010487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.asjdied.icu"; classtype:attempted-recon; sid:200010488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.fpaksix.icu"; classtype:attempted-recon; sid:200010489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200010490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.huaxianone.icu"; classtype:attempted-recon; sid:200010491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.jhusd.icu"; classtype:attempted-recon; sid:200010492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.jpisi.icu"; classtype:attempted-recon; sid:200010493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.ksidujed.icu"; classtype:attempted-recon; sid:200010494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.lijhdjsu.icu"; classtype:attempted-recon; sid:200010495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.likijs.icu"; classtype:attempted-recon; sid:200010496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.lsloposl.icu"; classtype:attempted-recon; sid:200010497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.lslpoi223.icu"; classtype:attempted-recon; sid:200010498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.mjsudio.icu"; classtype:attempted-recon; sid:200010499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.mpdskdf.icu"; classtype:attempted-recon; sid:200010500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.ncjhdyri.icu"; classtype:attempted-recon; sid:200010501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200010502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.plaiksd.icu"; classtype:attempted-recon; sid:200010503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.qhjkof.icu"; classtype:attempted-recon; sid:200010504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.sokdjhre.icu"; classtype:attempted-recon; sid:200010505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.tashpitum.icu"; classtype:attempted-recon; sid:200010506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.usideq.icu"; classtype:attempted-recon; sid:200010507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaceascissoenosob.eosnacoen.xzsywte.icu"; classtype:attempted-recon; sid:200010508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.0e0db.icu"; classtype:attempted-recon; sid:200010509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.b5jsued.icu"; classtype:attempted-recon; sid:200010510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.i1lyb.icu"; classtype:attempted-recon; sid:200010511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.jpisi.icu"; classtype:attempted-recon; sid:200010512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.kaosid.icu"; classtype:attempted-recon; sid:200010513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.lijhdy.icu"; classtype:attempted-recon; sid:200010514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.lslpoi223.icu"; classtype:attempted-recon; sid:200010515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.mangesd.icu"; classtype:attempted-recon; sid:200010516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.namkdi.icu"; classtype:attempted-recon; sid:200010517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.nanish.icu"; classtype:attempted-recon; sid:200010518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.v3454.icu"; classtype:attempted-recon; sid:200010519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceacesaenosob.ceosnoen.xlsoida.icu"; classtype:attempted-recon; sid:200010520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.0e0db.icu"; classtype:attempted-recon; sid:200010521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.asdueiw.icu"; classtype:attempted-recon; sid:200010522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.ckfbs.icu"; classtype:attempted-recon; sid:200010523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.dayuhao.icu"; classtype:attempted-recon; sid:200010524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.dieowp.icu"; classtype:attempted-recon; sid:200010525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.ghdes.icu"; classtype:attempted-recon; sid:200010526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.jhusd.icu"; classtype:attempted-recon; sid:200010527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.jpisi.icu"; classtype:attempted-recon; sid:200010528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.kaosid.icu"; classtype:attempted-recon; sid:200010529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.koplsig.icu"; classtype:attempted-recon; sid:200010530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.laoisuej.icu"; classtype:attempted-recon; sid:200010531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.lasdas.icu"; classtype:attempted-recon; sid:200010532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.lciskdu.icu"; classtype:attempted-recon; sid:200010533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.likijs.icu"; classtype:attempted-recon; sid:200010534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.lslpoi223.icu"; classtype:attempted-recon; sid:200010535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.lsposie.icu"; classtype:attempted-recon; sid:200010536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.lssncjud.icu"; classtype:attempted-recon; sid:200010537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.mpdskdf.icu"; classtype:attempted-recon; sid:200010538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.nxhgsyd.icu"; classtype:attempted-recon; sid:200010539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.plaiksd.icu"; classtype:attempted-recon; sid:200010540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.recordd.icu"; classtype:attempted-recon; sid:200010541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.tablegsh.icu"; classtype:attempted-recon; sid:200010542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.tiafedf.icu"; classtype:attempted-recon; sid:200010543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.trsas.icu"; classtype:attempted-recon; sid:200010544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.vardir.icu"; classtype:attempted-recon; sid:200010545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.xiuydw.icu"; classtype:attempted-recon; sid:200010546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaeeccasonosob.mcenacoen.xmsjude.icu"; classtype:attempted-recon; sid:200010547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.2021071.top"; classtype:attempted-recon; sid:200010548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.22567.cn"; classtype:attempted-recon; sid:200010549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.53567.cn"; classtype:attempted-recon; sid:200010550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.alister.ltd"; classtype:attempted-recon; sid:200010551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.cjehdm.top"; classtype:attempted-recon; sid:200010552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.clllbx.top"; classtype:attempted-recon; sid:200010553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.ebwptg.top"; classtype:attempted-recon; sid:200010554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.fcwh886.top"; classtype:attempted-recon; sid:200010555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.francis.ltd"; classtype:attempted-recon; sid:200010556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.fzosfk.top"; classtype:attempted-recon; sid:200010557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.gafuwd.top"; classtype:attempted-recon; sid:200010558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.glmbfd.top"; classtype:attempted-recon; sid:200010559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.gzmvuo.top"; classtype:attempted-recon; sid:200010560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.hncwbn.top"; classtype:attempted-recon; sid:200010561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.ipexqv.top"; classtype:attempted-recon; sid:200010562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.jcloud.group"; classtype:attempted-recon; sid:200010563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.jimdyd.top"; classtype:attempted-recon; sid:200010564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.jjglsw.top"; classtype:attempted-recon; sid:200010565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.leigh.ltd"; classtype:attempted-recon; sid:200010566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.leonard.ltd"; classtype:attempted-recon; sid:200010567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.lhixak.top"; classtype:attempted-recon; sid:200010568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.lhzfkh.top"; classtype:attempted-recon; sid:200010569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.limassol.group"; classtype:attempted-recon; sid:200010570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.loskh.top"; classtype:attempted-recon; sid:200010571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.mnvhdje.icu"; classtype:attempted-recon; sid:200010572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.njrksy.top"; classtype:attempted-recon; sid:200010573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.norfolk.ltd"; classtype:attempted-recon; sid:200010574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.npxfcv.top"; classtype:attempted-recon; sid:200010575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200010576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.oamprk.top"; classtype:attempted-recon; sid:200010577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.owens.ltd"; classtype:attempted-recon; sid:200010578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.pcloud.group"; classtype:attempted-recon; sid:200010579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.ptywgv.top"; classtype:attempted-recon; sid:200010580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.qslbjc.top"; classtype:attempted-recon; sid:200010581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.qzvxui.top"; classtype:attempted-recon; sid:200010582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.reynolds.ltd"; classtype:attempted-recon; sid:200010583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.riley.ltd"; classtype:attempted-recon; sid:200010584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.robertson.ltd"; classtype:attempted-recon; sid:200010585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.rowan.ltd"; classtype:attempted-recon; sid:200010586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.shjpxn.top"; classtype:attempted-recon; sid:200010587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.sinclair.ltd"; classtype:attempted-recon; sid:200010588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.sqmim.top"; classtype:attempted-recon; sid:200010589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.tvrimx.top"; classtype:attempted-recon; sid:200010590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.tvxkmp.top"; classtype:attempted-recon; sid:200010591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.vjlile.top"; classtype:attempted-recon; sid:200010592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.vnxgwb.top"; classtype:attempted-recon; sid:200010593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.vordmh.top"; classtype:attempted-recon; sid:200010594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.wcloud.group"; classtype:attempted-recon; sid:200010595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.xdaupp.top"; classtype:attempted-recon; sid:200010596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.xhgmfb.top"; classtype:attempted-recon; sid:200010597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.xniqmj.top"; classtype:attempted-recon; sid:200010598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.xulhaq.top"; classtype:attempted-recon; sid:200010599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.zbvvpg.top"; classtype:attempted-recon; sid:200010600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.zeyedada.xyz"; classtype:attempted-recon; sid:200010601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200010602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.zqjkvx.top"; classtype:attempted-recon; sid:200010603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesacreaoecb.caoaa.zrxpv.top"; classtype:attempted-recon; sid:200010604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.2021071.top"; classtype:attempted-recon; sid:200010605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.22567.cn"; classtype:attempted-recon; sid:200010606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.53567.cn"; classtype:attempted-recon; sid:200010607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.87567.cn"; classtype:attempted-recon; sid:200010608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.alister.ltd"; classtype:attempted-recon; sid:200010609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.cjehdm.top"; classtype:attempted-recon; sid:200010610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.clllbx.top"; classtype:attempted-recon; sid:200010611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.ebwptg.top"; classtype:attempted-recon; sid:200010612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.fcwh886.top"; classtype:attempted-recon; sid:200010613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.francis.ltd"; classtype:attempted-recon; sid:200010614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.fzosfk.top"; classtype:attempted-recon; sid:200010615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.gafuwd.top"; classtype:attempted-recon; sid:200010616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.glmbfd.top"; classtype:attempted-recon; sid:200010617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.hncwbn.top"; classtype:attempted-recon; sid:200010618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.ipexqv.top"; classtype:attempted-recon; sid:200010619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.jimdyd.top"; classtype:attempted-recon; sid:200010620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.jjglsw.top"; classtype:attempted-recon; sid:200010621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.leigh.ltd"; classtype:attempted-recon; sid:200010622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.leonard.ltd"; classtype:attempted-recon; sid:200010623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.lhixak.top"; classtype:attempted-recon; sid:200010624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.lhzfkh.top"; classtype:attempted-recon; sid:200010625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.limassol.group"; classtype:attempted-recon; sid:200010626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.loskh.top"; classtype:attempted-recon; sid:200010627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.njrksy.top"; classtype:attempted-recon; sid:200010628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.norfolk.ltd"; classtype:attempted-recon; sid:200010629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.npxfcv.top"; classtype:attempted-recon; sid:200010630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200010631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.oamprk.top"; classtype:attempted-recon; sid:200010632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.owens.ltd"; classtype:attempted-recon; sid:200010633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.ptywgv.top"; classtype:attempted-recon; sid:200010634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.qzvxui.top"; classtype:attempted-recon; sid:200010635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.reynolds.ltd"; classtype:attempted-recon; sid:200010636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.riley.ltd"; classtype:attempted-recon; sid:200010637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.robertson.ltd"; classtype:attempted-recon; sid:200010638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.rowan.ltd"; classtype:attempted-recon; sid:200010639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.shjpxn.top"; classtype:attempted-recon; sid:200010640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.sinclair.ltd"; classtype:attempted-recon; sid:200010641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.sqmim.top"; classtype:attempted-recon; sid:200010642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.tvrimx.top"; classtype:attempted-recon; sid:200010643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.tvxkmp.top"; classtype:attempted-recon; sid:200010644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.vjlile.top"; classtype:attempted-recon; sid:200010645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.vnxgwb.top"; classtype:attempted-recon; sid:200010646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.vordmh.top"; classtype:attempted-recon; sid:200010647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.xdaupp.top"; classtype:attempted-recon; sid:200010648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.xhgmfb.top"; classtype:attempted-recon; sid:200010649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.xniqmj.top"; classtype:attempted-recon; sid:200010650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.xulhaq.top"; classtype:attempted-recon; sid:200010651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.zbvvpg.top"; classtype:attempted-recon; sid:200010652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200010653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.zqjkvx.top"; classtype:attempted-recon; sid:200010654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaesecroab.ccoaa.zrxpv.top"; classtype:attempted-recon; sid:200010655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.2021071.top"; classtype:attempted-recon; sid:200010656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.85567.cn"; classtype:attempted-recon; sid:200010657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.87567.cn"; classtype:attempted-recon; sid:200010658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.acloud.group"; classtype:attempted-recon; sid:200010659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.alister.ltd"; classtype:attempted-recon; sid:200010660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.ccloud.group"; classtype:attempted-recon; sid:200010661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.cjehdm.top"; classtype:attempted-recon; sid:200010662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.clllbx.top"; classtype:attempted-recon; sid:200010663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.ebwptg.top"; classtype:attempted-recon; sid:200010664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.erfghk03.shop"; classtype:attempted-recon; sid:200010665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.fcwh886.top"; classtype:attempted-recon; sid:200010666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.francis.ltd"; classtype:attempted-recon; sid:200010667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.fzosfk.top"; classtype:attempted-recon; sid:200010668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.gafuwd.top"; classtype:attempted-recon; sid:200010669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.gcloud.group"; classtype:attempted-recon; sid:200010670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.glmbfd.top"; classtype:attempted-recon; sid:200010671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.gzfkmo.top"; classtype:attempted-recon; sid:200010672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.hafner.group"; classtype:attempted-recon; sid:200010673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.hncwbn.top"; classtype:attempted-recon; sid:200010674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.ipexqv.top"; classtype:attempted-recon; sid:200010675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.jimdyd.top"; classtype:attempted-recon; sid:200010676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.jjglsw.top"; classtype:attempted-recon; sid:200010677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.leigh.ltd"; classtype:attempted-recon; sid:200010678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.leonard.ltd"; classtype:attempted-recon; sid:200010679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.lhixak.top"; classtype:attempted-recon; sid:200010680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.lhzfkh.top"; classtype:attempted-recon; sid:200010681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.limassol.group"; classtype:attempted-recon; sid:200010682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.loskh.top"; classtype:attempted-recon; sid:200010683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.njrksy.top"; classtype:attempted-recon; sid:200010684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.norfolk.ltd"; classtype:attempted-recon; sid:200010685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.npxfcv.top"; classtype:attempted-recon; sid:200010686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.nvjdhuei.icu"; classtype:attempted-recon; sid:200010687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.oamprk.top"; classtype:attempted-recon; sid:200010688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.owens.ltd"; classtype:attempted-recon; sid:200010689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.ptywgv.top"; classtype:attempted-recon; sid:200010690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.qzvxui.top"; classtype:attempted-recon; sid:200010691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.reynolds.ltd"; classtype:attempted-recon; sid:200010692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.riley.ltd"; classtype:attempted-recon; sid:200010693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.robertson.ltd"; classtype:attempted-recon; sid:200010694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.rowan.ltd"; classtype:attempted-recon; sid:200010695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.shjpxn.top"; classtype:attempted-recon; sid:200010696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.sinclair.ltd"; classtype:attempted-recon; sid:200010697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.smartlife.plus"; classtype:attempted-recon; sid:200010698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.sqmim.top"; classtype:attempted-recon; sid:200010699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.tvrimx.top"; classtype:attempted-recon; sid:200010700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.tvxkmp.top"; classtype:attempted-recon; sid:200010701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.vjlile.top"; classtype:attempted-recon; sid:200010702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.vnxgwb.top"; classtype:attempted-recon; sid:200010703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.vordmh.top"; classtype:attempted-recon; sid:200010704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.xdaupp.top"; classtype:attempted-recon; sid:200010705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.xhgmfb.top"; classtype:attempted-recon; sid:200010706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.xniqmj.top"; classtype:attempted-recon; sid:200010707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.xulhaq.top"; classtype:attempted-recon; sid:200010708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.zbvvpg.top"; classtype:attempted-recon; sid:200010709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.zeyedada.xyz"; classtype:attempted-recon; sid:200010710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.zeyeds.ltd"; classtype:attempted-recon; sid:200010711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.zqjkvx.top"; classtype:attempted-recon; sid:200010712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasareaoecb.cao.zrxpv.top"; classtype:attempted-recon; sid:200010713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.baidu123.icu"; classtype:attempted-recon; sid:200010714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.bfhju.icu"; classtype:attempted-recon; sid:200010715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.dieowp.icu"; classtype:attempted-recon; sid:200010716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.gocdr.icu"; classtype:attempted-recon; sid:200010717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.jsodiek.icu"; classtype:attempted-recon; sid:200010718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.lingangbcy.xyz"; classtype:attempted-recon; sid:200010719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200010720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.lsposie.icu"; classtype:attempted-recon; sid:200010721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.magxoisud.icu"; classtype:attempted-recon; sid:200010722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.msjudi.icu"; classtype:attempted-recon; sid:200010723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.ncjhdyri.icu"; classtype:attempted-recon; sid:200010724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceascccoiasoensosob.ceosnacoen.tsyudasd.icu"; classtype:attempted-recon; sid:200010725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.baudiqq.icu"; classtype:attempted-recon; sid:200010726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.csndax.icu"; classtype:attempted-recon; sid:200010727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.ghdes.icu"; classtype:attempted-recon; sid:200010728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.hoalside.icu"; classtype:attempted-recon; sid:200010729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.laiisode.icu"; classtype:attempted-recon; sid:200010730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.lkosdf.icu"; classtype:attempted-recon; sid:200010731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200010732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.lsoidike.icu"; classtype:attempted-recon; sid:200010733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.lssqwe3ly.icu"; classtype:attempted-recon; sid:200010734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.maediof.icu"; classtype:attempted-recon; sid:200010735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.margincolor.icu"; classtype:attempted-recon; sid:200010736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.olkijsd.icu"; classtype:attempted-recon; sid:200010737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.omgg0.icu"; classtype:attempted-recon; sid:200010738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceasceasoccisasoenosob.oceosnacoen.xuyhsjd.icu"; classtype:attempted-recon; sid:200010739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.hsyueiod.icu"; classtype:attempted-recon; sid:200010740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.ksidujed.icu"; classtype:attempted-recon; sid:200010741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.laiisode.icu"; classtype:attempted-recon; sid:200010742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.lianges.icu"; classtype:attempted-recon; sid:200010743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.likijs.icu"; classtype:attempted-recon; sid:200010744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.lsggppe.icu"; classtype:attempted-recon; sid:200010745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.lsoidike.icu"; classtype:attempted-recon; sid:200010746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.margincolor.icu"; classtype:attempted-recon; sid:200010747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.msjdyf.icu"; classtype:attempted-recon; sid:200010748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.msjhdyue.icu"; classtype:attempted-recon; sid:200010749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.nishilaji.icu"; classtype:attempted-recon; sid:200010750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.pilidu.icu"; classtype:attempted-recon; sid:200010751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.sokdjhre.icu"; classtype:attempted-recon; sid:200010752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.tablegsh.icu"; classtype:attempted-recon; sid:200010753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.tiafedf.icu"; classtype:attempted-recon; sid:200010754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseeccssasoenosob.mceosnacoen.v3454.icu"; classtype:attempted-recon; sid:200010755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.2021071.top"; classtype:attempted-recon; sid:200010756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.22567.cn"; classtype:attempted-recon; sid:200010757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.87567.cn"; classtype:attempted-recon; sid:200010758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.alister.ltd"; classtype:attempted-recon; sid:200010759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.bmhkg09.shop"; classtype:attempted-recon; sid:200010760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.cjehdm.top"; classtype:attempted-recon; sid:200010761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.clllbx.top"; classtype:attempted-recon; sid:200010762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.dcloud.group"; classtype:attempted-recon; sid:200010763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.dwbjs.top"; classtype:attempted-recon; sid:200010764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.ebwptg.top"; classtype:attempted-recon; sid:200010765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.fcwh886.top"; classtype:attempted-recon; sid:200010766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.francis.ltd"; classtype:attempted-recon; sid:200010767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.fzosfk.top"; classtype:attempted-recon; sid:200010768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.gafuwd.top"; classtype:attempted-recon; sid:200010769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.glmbfd.top"; classtype:attempted-recon; sid:200010770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.gzfkmo.top"; classtype:attempted-recon; sid:200010771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.hncwbn.top"; classtype:attempted-recon; sid:200010772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.ipexqv.top"; classtype:attempted-recon; sid:200010773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.jcloud.group"; classtype:attempted-recon; sid:200010774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.jimdyd.top"; classtype:attempted-recon; sid:200010775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.jjglsw.top"; classtype:attempted-recon; sid:200010776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.leigh.ltd"; classtype:attempted-recon; sid:200010777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.leonard.ltd"; classtype:attempted-recon; sid:200010778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.lhixak.top"; classtype:attempted-recon; sid:200010779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.lhzfkh.top"; classtype:attempted-recon; sid:200010780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.limassol.group"; classtype:attempted-recon; sid:200010781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.loskh.top"; classtype:attempted-recon; sid:200010782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.mkma07.shop"; classtype:attempted-recon; sid:200010783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.njrksy.top"; classtype:attempted-recon; sid:200010784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.norfolk.ltd"; classtype:attempted-recon; sid:200010785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.npxfcv.top"; classtype:attempted-recon; sid:200010786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.nvjdhuei.icu"; classtype:attempted-recon; sid:200010787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.oamprk.top"; classtype:attempted-recon; sid:200010788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.owens.ltd"; classtype:attempted-recon; sid:200010789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.ptywgv.top"; classtype:attempted-recon; sid:200010790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.qzvxui.top"; classtype:attempted-recon; sid:200010791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.reynolds.ltd"; classtype:attempted-recon; sid:200010792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.riley.ltd"; classtype:attempted-recon; sid:200010793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.robertson.ltd"; classtype:attempted-recon; sid:200010794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.rowan.ltd"; classtype:attempted-recon; sid:200010795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.shjpxn.top"; classtype:attempted-recon; sid:200010796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.sinclair.ltd"; classtype:attempted-recon; sid:200010797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.sqmim.top"; classtype:attempted-recon; sid:200010798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.tvrimx.top"; classtype:attempted-recon; sid:200010799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.tvxkmp.top"; classtype:attempted-recon; sid:200010800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.vjlile.top"; classtype:attempted-recon; sid:200010801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.vnxgwb.top"; classtype:attempted-recon; sid:200010802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.vordmh.top"; classtype:attempted-recon; sid:200010803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.wcloud.group"; classtype:attempted-recon; sid:200010804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.xdaupp.top"; classtype:attempted-recon; sid:200010805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.xhgmfb.top"; classtype:attempted-recon; sid:200010806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.xniqmj.top"; classtype:attempted-recon; sid:200010807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.xulhaq.top"; classtype:attempted-recon; sid:200010808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.zbvvpg.top"; classtype:attempted-recon; sid:200010809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.zeyeds.ltd"; classtype:attempted-recon; sid:200010810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.zqjkvx.top"; classtype:attempted-recon; sid:200010811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjceaseroab.cco.zrxpv.top"; classtype:attempted-recon; sid:200010812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjeacsceooesb.moyjeasocseeseb.gzfmft.top"; classtype:attempted-recon; sid:200010813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjeasccseooseb.omyeesjcaoseeseb.gnpais.top"; classtype:attempted-recon; sid:200010814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjeasccseooseb.omyeesjcaoseeseb.gzfmft.top"; classtype:attempted-recon; sid:200010815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjeeseosiaescrcseocoseebieo.socenmaseocyeueoccesoesjcaoseeseb.ytgs.co"; classtype:attempted-recon; sid:200010816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.2021071.top"; classtype:attempted-recon; sid:200010817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.31567.cn"; classtype:attempted-recon; sid:200010818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.85567.cn"; classtype:attempted-recon; sid:200010819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.87567.cn"; classtype:attempted-recon; sid:200010820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.alister.ltd"; classtype:attempted-recon; sid:200010821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.cjehdm.top"; classtype:attempted-recon; sid:200010822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.clllbx.top"; classtype:attempted-recon; sid:200010823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.dcloud.group"; classtype:attempted-recon; sid:200010824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.ebwptg.top"; classtype:attempted-recon; sid:200010825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.fcwh886.top"; classtype:attempted-recon; sid:200010826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.francis.ltd"; classtype:attempted-recon; sid:200010827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.fzosfk.top"; classtype:attempted-recon; sid:200010828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.gafuwd.top"; classtype:attempted-recon; sid:200010829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.gcloud.group"; classtype:attempted-recon; sid:200010830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.glmbfd.top"; classtype:attempted-recon; sid:200010831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.hncwbn.top"; classtype:attempted-recon; sid:200010832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.ipexqv.top"; classtype:attempted-recon; sid:200010833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.jimdyd.top"; classtype:attempted-recon; sid:200010834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.jjglsw.top"; classtype:attempted-recon; sid:200010835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.leigh.ltd"; classtype:attempted-recon; sid:200010836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.leonard.ltd"; classtype:attempted-recon; sid:200010837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.lhixak.top"; classtype:attempted-recon; sid:200010838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.lhzfkh.top"; classtype:attempted-recon; sid:200010839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.limassol.group"; classtype:attempted-recon; sid:200010840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.loskh.top"; classtype:attempted-recon; sid:200010841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.mkma07.shop"; classtype:attempted-recon; sid:200010842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.mnvhdje.icu"; classtype:attempted-recon; sid:200010843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.ncloud.group"; classtype:attempted-recon; sid:200010844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.njrksy.top"; classtype:attempted-recon; sid:200010845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.norfolk.ltd"; classtype:attempted-recon; sid:200010846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.npxfcv.top"; classtype:attempted-recon; sid:200010847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.nvjdhuei.icu"; classtype:attempted-recon; sid:200010848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.oamprk.top"; classtype:attempted-recon; sid:200010849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.owens.ltd"; classtype:attempted-recon; sid:200010850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.ptywgv.top"; classtype:attempted-recon; sid:200010851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.qzvxui.top"; classtype:attempted-recon; sid:200010852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.reynolds.ltd"; classtype:attempted-recon; sid:200010853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.riley.ltd"; classtype:attempted-recon; sid:200010854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.robertson.ltd"; classtype:attempted-recon; sid:200010855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.rowan.ltd"; classtype:attempted-recon; sid:200010856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.shjpxn.top"; classtype:attempted-recon; sid:200010857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.sinclair.ltd"; classtype:attempted-recon; sid:200010858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.smartlife.plus"; classtype:attempted-recon; sid:200010859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.sqmim.top"; classtype:attempted-recon; sid:200010860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.tvrimx.top"; classtype:attempted-recon; sid:200010861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.tvxkmp.top"; classtype:attempted-recon; sid:200010862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.vjlile.top"; classtype:attempted-recon; sid:200010863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.vnxgwb.top"; classtype:attempted-recon; sid:200010864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.vordmh.top"; classtype:attempted-recon; sid:200010865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.xdaupp.top"; classtype:attempted-recon; sid:200010866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.xhgmfb.top"; classtype:attempted-recon; sid:200010867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.xniqmj.top"; classtype:attempted-recon; sid:200010868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.xulhaq.top"; classtype:attempted-recon; sid:200010869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.zbvvpg.top"; classtype:attempted-recon; sid:200010870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.zeyeds.ltd"; classtype:attempted-recon; sid:200010871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.zqjkvx.top"; classtype:attempted-recon; sid:200010872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacaseeob.oa.zrxpv.top"; classtype:attempted-recon; sid:200010873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.2021071.top"; classtype:attempted-recon; sid:200010874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.22567.cn"; classtype:attempted-recon; sid:200010875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.87567.cn"; classtype:attempted-recon; sid:200010876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.alister.ltd"; classtype:attempted-recon; sid:200010877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.ccloud.group"; classtype:attempted-recon; sid:200010878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.cjehdm.top"; classtype:attempted-recon; sid:200010879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.clllbx.top"; classtype:attempted-recon; sid:200010880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.ebwptg.top"; classtype:attempted-recon; sid:200010881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.erfghk03.shop"; classtype:attempted-recon; sid:200010882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.fcwh886.top"; classtype:attempted-recon; sid:200010883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.francis.ltd"; classtype:attempted-recon; sid:200010884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.fzosfk.top"; classtype:attempted-recon; sid:200010885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.gafuwd.top"; classtype:attempted-recon; sid:200010886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.glmbfd.top"; classtype:attempted-recon; sid:200010887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.hncwbn.top"; classtype:attempted-recon; sid:200010888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.icfpvc.top"; classtype:attempted-recon; sid:200010889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.ipexqv.top"; classtype:attempted-recon; sid:200010890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.jimdyd.top"; classtype:attempted-recon; sid:200010891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.jjglsw.top"; classtype:attempted-recon; sid:200010892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.leigh.ltd"; classtype:attempted-recon; sid:200010893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.leonard.ltd"; classtype:attempted-recon; sid:200010894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.lhixak.top"; classtype:attempted-recon; sid:200010895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.lhzfkh.top"; classtype:attempted-recon; sid:200010896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.limassol.group"; classtype:attempted-recon; sid:200010897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.loskh.top"; classtype:attempted-recon; sid:200010898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.mkma07.shop"; classtype:attempted-recon; sid:200010899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.mnvhdje.icu"; classtype:attempted-recon; sid:200010900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.mosjide.icu"; classtype:attempted-recon; sid:200010901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.ncbhdjei.icu"; classtype:attempted-recon; sid:200010902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.njrksy.top"; classtype:attempted-recon; sid:200010903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.norfolk.ltd"; classtype:attempted-recon; sid:200010904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.npxfcv.top"; classtype:attempted-recon; sid:200010905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.nvjdhuei.icu"; classtype:attempted-recon; sid:200010906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.oamprk.top"; classtype:attempted-recon; sid:200010907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.owens.ltd"; classtype:attempted-recon; sid:200010908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.pcloud.group"; classtype:attempted-recon; sid:200010909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.ptywgv.top"; classtype:attempted-recon; sid:200010910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.qzvxui.top"; classtype:attempted-recon; sid:200010911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.reynolds.ltd"; classtype:attempted-recon; sid:200010912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.riley.ltd"; classtype:attempted-recon; sid:200010913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.robertson.ltd"; classtype:attempted-recon; sid:200010914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.rowan.ltd"; classtype:attempted-recon; sid:200010915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.shjpxn.top"; classtype:attempted-recon; sid:200010916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.sinclair.ltd"; classtype:attempted-recon; sid:200010917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.sqmim.top"; classtype:attempted-recon; sid:200010918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.tvrimx.top"; classtype:attempted-recon; sid:200010919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.tvxkmp.top"; classtype:attempted-recon; sid:200010920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.vjlile.top"; classtype:attempted-recon; sid:200010921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.vnxgwb.top"; classtype:attempted-recon; sid:200010922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.vordmh.top"; classtype:attempted-recon; sid:200010923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.xdaupp.top"; classtype:attempted-recon; sid:200010924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.xhgmfb.top"; classtype:attempted-recon; sid:200010925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.xniqmj.top"; classtype:attempted-recon; sid:200010926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.xulhaq.top"; classtype:attempted-recon; sid:200010927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.zbvvpg.top"; classtype:attempted-recon; sid:200010928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.zeyedada.xyz"; classtype:attempted-recon; sid:200010929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.zeyeds.ltd"; classtype:attempted-recon; sid:200010930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.zhzhh06.shop"; classtype:attempted-recon; sid:200010931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.zqjkvx.top"; classtype:attempted-recon; sid:200010932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacasoesb.na.zrxpv.top"; classtype:attempted-recon; sid:200010933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.2021071.top"; classtype:attempted-recon; sid:200010934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.22567.cn"; classtype:attempted-recon; sid:200010935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.31567.cn"; classtype:attempted-recon; sid:200010936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.53567.cn"; classtype:attempted-recon; sid:200010937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.ahiftgl.top"; classtype:attempted-recon; sid:200010938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.alister.ltd"; classtype:attempted-recon; sid:200010939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.cjehdm.top"; classtype:attempted-recon; sid:200010940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.clllbx.top"; classtype:attempted-recon; sid:200010941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.ebwptg.top"; classtype:attempted-recon; sid:200010942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.fcwh886.top"; classtype:attempted-recon; sid:200010943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.francis.ltd"; classtype:attempted-recon; sid:200010944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.fzosfk.top"; classtype:attempted-recon; sid:200010945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.gafuwd.top"; classtype:attempted-recon; sid:200010946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.glmbfd.top"; classtype:attempted-recon; sid:200010947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.hncwbn.top"; classtype:attempted-recon; sid:200010948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.ipexqv.top"; classtype:attempted-recon; sid:200010949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.jcloud.group"; classtype:attempted-recon; sid:200010950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.jimdyd.top"; classtype:attempted-recon; sid:200010951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.jjglsw.top"; classtype:attempted-recon; sid:200010952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.leigh.ltd"; classtype:attempted-recon; sid:200010953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.leonard.ltd"; classtype:attempted-recon; sid:200010954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.lhixak.top"; classtype:attempted-recon; sid:200010955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.lhzfkh.top"; classtype:attempted-recon; sid:200010956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.limassol.group"; classtype:attempted-recon; sid:200010957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.loskh.top"; classtype:attempted-recon; sid:200010958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.mkma07.shop"; classtype:attempted-recon; sid:200010959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.ncbhdjei.icu"; classtype:attempted-recon; sid:200010960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.ncloud.group"; classtype:attempted-recon; sid:200010961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.njrksy.top"; classtype:attempted-recon; sid:200010962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.norfolk.ltd"; classtype:attempted-recon; sid:200010963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.npxfcv.top"; classtype:attempted-recon; sid:200010964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200010965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.oamprk.top"; classtype:attempted-recon; sid:200010966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.owens.ltd"; classtype:attempted-recon; sid:200010967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.ptywgv.top"; classtype:attempted-recon; sid:200010968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.qzvxui.top"; classtype:attempted-recon; sid:200010969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.reynolds.ltd"; classtype:attempted-recon; sid:200010970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.riley.ltd"; classtype:attempted-recon; sid:200010971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.robertson.ltd"; classtype:attempted-recon; sid:200010972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.rowan.ltd"; classtype:attempted-recon; sid:200010973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.shjpxn.top"; classtype:attempted-recon; sid:200010974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.sinclair.ltd"; classtype:attempted-recon; sid:200010975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.sqmim.top"; classtype:attempted-recon; sid:200010976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.tubatue.icu"; classtype:attempted-recon; sid:200010977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.tvrimx.top"; classtype:attempted-recon; sid:200010978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.tvxkmp.top"; classtype:attempted-recon; sid:200010979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.vjlile.top"; classtype:attempted-recon; sid:200010980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.vnxgwb.top"; classtype:attempted-recon; sid:200010981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.vordmh.top"; classtype:attempted-recon; sid:200010982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.xdaupp.top"; classtype:attempted-recon; sid:200010983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.xhgmfb.top"; classtype:attempted-recon; sid:200010984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.xniqmj.top"; classtype:attempted-recon; sid:200010985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.xulhaq.top"; classtype:attempted-recon; sid:200010986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.ycloud.group"; classtype:attempted-recon; sid:200010987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.zbvvpg.top"; classtype:attempted-recon; sid:200010988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.zeyeds.ltd"; classtype:attempted-recon; sid:200010989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.zqjkvx.top"; classtype:attempted-recon; sid:200010990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceasceeob.oaaa.zrxpv.top"; classtype:attempted-recon; sid:200010991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.2021071.top"; classtype:attempted-recon; sid:200010992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.87567.cn"; classtype:attempted-recon; sid:200010993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.alister.ltd"; classtype:attempted-recon; sid:200010994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.bcloud.group"; classtype:attempted-recon; sid:200010995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.cjehdm.top"; classtype:attempted-recon; sid:200010996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.clllbx.top"; classtype:attempted-recon; sid:200010997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.ebwptg.top"; classtype:attempted-recon; sid:200010998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.fcwh886.top"; classtype:attempted-recon; sid:200010999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.francis.ltd"; classtype:attempted-recon; sid:200011000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.fzosfk.top"; classtype:attempted-recon; sid:200011001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.gafuwd.top"; classtype:attempted-recon; sid:200011002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.glmbfd.top"; classtype:attempted-recon; sid:200011003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.hcloud.group"; classtype:attempted-recon; sid:200011004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.hncwbn.top"; classtype:attempted-recon; sid:200011005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.ipexqv.top"; classtype:attempted-recon; sid:200011006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.jimdyd.top"; classtype:attempted-recon; sid:200011007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.jjglsw.top"; classtype:attempted-recon; sid:200011008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.lcloud.group"; classtype:attempted-recon; sid:200011009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.leigh.ltd"; classtype:attempted-recon; sid:200011010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.leonard.ltd"; classtype:attempted-recon; sid:200011011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.lhixak.top"; classtype:attempted-recon; sid:200011012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.lhzfkh.top"; classtype:attempted-recon; sid:200011013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.limassol.group"; classtype:attempted-recon; sid:200011014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.loskh.top"; classtype:attempted-recon; sid:200011015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.ncbhdjei.icu"; classtype:attempted-recon; sid:200011016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.nicosia.group"; classtype:attempted-recon; sid:200011017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.njrksy.top"; classtype:attempted-recon; sid:200011018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.norfolk.ltd"; classtype:attempted-recon; sid:200011019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.npxfcv.top"; classtype:attempted-recon; sid:200011020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.nsuuieds.icu"; classtype:attempted-recon; sid:200011021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200011022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.oamprk.top"; classtype:attempted-recon; sid:200011023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.ocloud.group"; classtype:attempted-recon; sid:200011024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.owens.ltd"; classtype:attempted-recon; sid:200011025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.pcloud.group"; classtype:attempted-recon; sid:200011026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.ptywgv.top"; classtype:attempted-recon; sid:200011027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.qzvxui.top"; classtype:attempted-recon; sid:200011028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.reynolds.ltd"; classtype:attempted-recon; sid:200011029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.riley.ltd"; classtype:attempted-recon; sid:200011030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.robertson.ltd"; classtype:attempted-recon; sid:200011031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.rowan.ltd"; classtype:attempted-recon; sid:200011032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.shjpxn.top"; classtype:attempted-recon; sid:200011033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.sinclair.ltd"; classtype:attempted-recon; sid:200011034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.sqmim.top"; classtype:attempted-recon; sid:200011035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.tvrimx.top"; classtype:attempted-recon; sid:200011036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.tvxkmp.top"; classtype:attempted-recon; sid:200011037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.vjlile.top"; classtype:attempted-recon; sid:200011038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.vnxgwb.top"; classtype:attempted-recon; sid:200011039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.vordmh.top"; classtype:attempted-recon; sid:200011040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.xdaupp.top"; classtype:attempted-recon; sid:200011041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.xhgmfb.top"; classtype:attempted-recon; sid:200011042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.xniqmj.top"; classtype:attempted-recon; sid:200011043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.xulhaq.top"; classtype:attempted-recon; sid:200011044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.zbvvpg.top"; classtype:attempted-recon; sid:200011045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.zeyeds.ltd"; classtype:attempted-recon; sid:200011046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.zkzkd04.shop"; classtype:attempted-recon; sid:200011047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.zqjkvx.top"; classtype:attempted-recon; sid:200011048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsaceascoesb.naaa.zrxpv.top"; classtype:attempted-recon; sid:200011049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.2021071.top"; classtype:attempted-recon; sid:200011050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.22567.cn"; classtype:attempted-recon; sid:200011051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.87567.cn"; classtype:attempted-recon; sid:200011052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.ahahh04.shop"; classtype:attempted-recon; sid:200011053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.alister.ltd"; classtype:attempted-recon; sid:200011054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.cctv16.online"; classtype:attempted-recon; sid:200011055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.cjehdm.top"; classtype:attempted-recon; sid:200011056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.clllbx.top"; classtype:attempted-recon; sid:200011057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.dcloud.group"; classtype:attempted-recon; sid:200011058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.ebwptg.top"; classtype:attempted-recon; sid:200011059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.fcwh886.top"; classtype:attempted-recon; sid:200011060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.francis.ltd"; classtype:attempted-recon; sid:200011061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.fzosfk.top"; classtype:attempted-recon; sid:200011062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.gafuwd.top"; classtype:attempted-recon; sid:200011063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.gcloud.group"; classtype:attempted-recon; sid:200011064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.glmbfd.top"; classtype:attempted-recon; sid:200011065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.gzmvuo.top"; classtype:attempted-recon; sid:200011066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.hafner.group"; classtype:attempted-recon; sid:200011067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.hncwbn.top"; classtype:attempted-recon; sid:200011068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.ipexqv.top"; classtype:attempted-recon; sid:200011069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.jimdyd.top"; classtype:attempted-recon; sid:200011070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.jjglsw.top"; classtype:attempted-recon; sid:200011071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.leigh.ltd"; classtype:attempted-recon; sid:200011072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.leonard.ltd"; classtype:attempted-recon; sid:200011073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.lhixak.top"; classtype:attempted-recon; sid:200011074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.lhzfkh.top"; classtype:attempted-recon; sid:200011075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.limassol.group"; classtype:attempted-recon; sid:200011076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.loskh.top"; classtype:attempted-recon; sid:200011077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.mnvhdje.icu"; classtype:attempted-recon; sid:200011078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.mortys.cn"; classtype:attempted-recon; sid:200011079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.mosjide.icu"; classtype:attempted-recon; sid:200011080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.njrksy.top"; classtype:attempted-recon; sid:200011081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.norfolk.ltd"; classtype:attempted-recon; sid:200011082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.npxfcv.top"; classtype:attempted-recon; sid:200011083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200011084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.oamprk.top"; classtype:attempted-recon; sid:200011085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.ocloud.group"; classtype:attempted-recon; sid:200011086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.owens.ltd"; classtype:attempted-recon; sid:200011087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.promotion.show"; classtype:attempted-recon; sid:200011088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.ptywgv.top"; classtype:attempted-recon; sid:200011089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.qslbjc.top"; classtype:attempted-recon; sid:200011090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.qzvxui.top"; classtype:attempted-recon; sid:200011091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.reynolds.ltd"; classtype:attempted-recon; sid:200011092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.riley.ltd"; classtype:attempted-recon; sid:200011093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.robertson.ltd"; classtype:attempted-recon; sid:200011094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.rowan.ltd"; classtype:attempted-recon; sid:200011095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.shjpxn.top"; classtype:attempted-recon; sid:200011096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.sinclair.ltd"; classtype:attempted-recon; sid:200011097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.sqmim.top"; classtype:attempted-recon; sid:200011098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.tvrimx.top"; classtype:attempted-recon; sid:200011099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.tvxkmp.top"; classtype:attempted-recon; sid:200011100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.vjlile.top"; classtype:attempted-recon; sid:200011101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.vnxgwb.top"; classtype:attempted-recon; sid:200011102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.vordmh.top"; classtype:attempted-recon; sid:200011103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.wcloud.group"; classtype:attempted-recon; sid:200011104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.xdaupp.top"; classtype:attempted-recon; sid:200011105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.xhgmfb.top"; classtype:attempted-recon; sid:200011106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.xniqmj.top"; classtype:attempted-recon; sid:200011107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.xulhaq.top"; classtype:attempted-recon; sid:200011108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.zbvvpg.top"; classtype:attempted-recon; sid:200011109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.zeyeds.ltd"; classtype:attempted-recon; sid:200011110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.zhzhh06.shop"; classtype:attempted-recon; sid:200011111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.zqjkvx.top"; classtype:attempted-recon; sid:200011112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesecob.oaa.zrxpv.top"; classtype:attempted-recon; sid:200011113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.2021071.top"; classtype:attempted-recon; sid:200011114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.22567.cn"; classtype:attempted-recon; sid:200011115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.53567.cn"; classtype:attempted-recon; sid:200011116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.ahahh04.shop"; classtype:attempted-recon; sid:200011117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.ahiftgl.top"; classtype:attempted-recon; sid:200011118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.aipay.tech"; classtype:attempted-recon; sid:200011119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.alister.ltd"; classtype:attempted-recon; sid:200011120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.ccloud.group"; classtype:attempted-recon; sid:200011121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.cjehdm.top"; classtype:attempted-recon; sid:200011122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.clllbx.top"; classtype:attempted-recon; sid:200011123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.ebwptg.top"; classtype:attempted-recon; sid:200011124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.fcwh886.top"; classtype:attempted-recon; sid:200011125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.francis.ltd"; classtype:attempted-recon; sid:200011126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.fzosfk.top"; classtype:attempted-recon; sid:200011127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.gafuwd.top"; classtype:attempted-recon; sid:200011128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.gcloud.group"; classtype:attempted-recon; sid:200011129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.glmbfd.top"; classtype:attempted-recon; sid:200011130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.gzmvuo.top"; classtype:attempted-recon; sid:200011131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.hncwbn.top"; classtype:attempted-recon; sid:200011132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.ipexqv.top"; classtype:attempted-recon; sid:200011133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.jimdyd.top"; classtype:attempted-recon; sid:200011134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.jjglsw.top"; classtype:attempted-recon; sid:200011135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.ksiudje.icu"; classtype:attempted-recon; sid:200011136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.leigh.ltd"; classtype:attempted-recon; sid:200011137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.leonard.ltd"; classtype:attempted-recon; sid:200011138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.lhixak.top"; classtype:attempted-recon; sid:200011139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.lhzfkh.top"; classtype:attempted-recon; sid:200011140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.limassol.group"; classtype:attempted-recon; sid:200011141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.loskh.top"; classtype:attempted-recon; sid:200011142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.mkma07.shop"; classtype:attempted-recon; sid:200011143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.njrksy.top"; classtype:attempted-recon; sid:200011144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.norfolk.ltd"; classtype:attempted-recon; sid:200011145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.npxfcv.top"; classtype:attempted-recon; sid:200011146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.nvjdhuei.icu"; classtype:attempted-recon; sid:200011147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.oamprk.top"; classtype:attempted-recon; sid:200011148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.owens.ltd"; classtype:attempted-recon; sid:200011149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.ptywgv.top"; classtype:attempted-recon; sid:200011150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.qzvxui.top"; classtype:attempted-recon; sid:200011151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.reynolds.ltd"; classtype:attempted-recon; sid:200011152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.riley.ltd"; classtype:attempted-recon; sid:200011153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.robertson.ltd"; classtype:attempted-recon; sid:200011154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.rowan.ltd"; classtype:attempted-recon; sid:200011155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.shjpxn.top"; classtype:attempted-recon; sid:200011156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.sinclair.ltd"; classtype:attempted-recon; sid:200011157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.sqmim.top"; classtype:attempted-recon; sid:200011158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.tvrimx.top"; classtype:attempted-recon; sid:200011159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.tvxkmp.top"; classtype:attempted-recon; sid:200011160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.vjlile.top"; classtype:attempted-recon; sid:200011161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.vnxgwb.top"; classtype:attempted-recon; sid:200011162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.vordmh.top"; classtype:attempted-recon; sid:200011163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.xdaupp.top"; classtype:attempted-recon; sid:200011164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.xhgmfb.top"; classtype:attempted-recon; sid:200011165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.xniqmj.top"; classtype:attempted-recon; sid:200011166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.xulhaq.top"; classtype:attempted-recon; sid:200011167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.zbvvpg.top"; classtype:attempted-recon; sid:200011168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.zeyedada.xyz"; classtype:attempted-recon; sid:200011169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.zeyeds.ltd"; classtype:attempted-recon; sid:200011170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.zqjkvx.top"; classtype:attempted-recon; sid:200011171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacesocsb.naa.zrxpv.top"; classtype:attempted-recon; sid:200011172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.2021071.top"; classtype:attempted-recon; sid:200011173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.22567.cn"; classtype:attempted-recon; sid:200011174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.31567.cn"; classtype:attempted-recon; sid:200011175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.53567.cn"; classtype:attempted-recon; sid:200011176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.85567.cn"; classtype:attempted-recon; sid:200011177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.ahahh04.shop"; classtype:attempted-recon; sid:200011178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.ahiftgl.top"; classtype:attempted-recon; sid:200011179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.alister.ltd"; classtype:attempted-recon; sid:200011180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.ccloud.group"; classtype:attempted-recon; sid:200011181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.cjehdm.top"; classtype:attempted-recon; sid:200011182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.clllbx.top"; classtype:attempted-recon; sid:200011183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.dwbjs.top"; classtype:attempted-recon; sid:200011184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.ebwptg.top"; classtype:attempted-recon; sid:200011185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.fcwh886.top"; classtype:attempted-recon; sid:200011186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.francis.ltd"; classtype:attempted-recon; sid:200011187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.fzosfk.top"; classtype:attempted-recon; sid:200011188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.gafuwd.top"; classtype:attempted-recon; sid:200011189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.glmbfd.top"; classtype:attempted-recon; sid:200011190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.hafner.group"; classtype:attempted-recon; sid:200011191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.hncwbn.top"; classtype:attempted-recon; sid:200011192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.ipexqv.top"; classtype:attempted-recon; sid:200011193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.jcloud.group"; classtype:attempted-recon; sid:200011194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.jimdyd.top"; classtype:attempted-recon; sid:200011195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.jjglsw.top"; classtype:attempted-recon; sid:200011196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.leigh.ltd"; classtype:attempted-recon; sid:200011197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.leonard.ltd"; classtype:attempted-recon; sid:200011198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.lhixak.top"; classtype:attempted-recon; sid:200011199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.lhzfkh.top"; classtype:attempted-recon; sid:200011200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.limassol.group"; classtype:attempted-recon; sid:200011201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.mkma07.shop"; classtype:attempted-recon; sid:200011202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.njrksy.top"; classtype:attempted-recon; sid:200011203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.norfolk.ltd"; classtype:attempted-recon; sid:200011204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.npxfcv.top"; classtype:attempted-recon; sid:200011205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.nvjdhuei.icu"; classtype:attempted-recon; sid:200011206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.oamprk.top"; classtype:attempted-recon; sid:200011207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.owens.ltd"; classtype:attempted-recon; sid:200011208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.ptywgv.top"; classtype:attempted-recon; sid:200011209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.qzvxui.top"; classtype:attempted-recon; sid:200011210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.reynolds.ltd"; classtype:attempted-recon; sid:200011211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.riley.ltd"; classtype:attempted-recon; sid:200011212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.robertson.ltd"; classtype:attempted-recon; sid:200011213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.rowan.ltd"; classtype:attempted-recon; sid:200011214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.shjpxn.top"; classtype:attempted-recon; sid:200011215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.sinclair.ltd"; classtype:attempted-recon; sid:200011216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.smartlife.plus"; classtype:attempted-recon; sid:200011217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.sqmim.top"; classtype:attempted-recon; sid:200011218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.tvrimx.top"; classtype:attempted-recon; sid:200011219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.tvxkmp.top"; classtype:attempted-recon; sid:200011220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.vjlile.top"; classtype:attempted-recon; sid:200011221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.vnxgwb.top"; classtype:attempted-recon; sid:200011222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.vordmh.top"; classtype:attempted-recon; sid:200011223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.xdaupp.top"; classtype:attempted-recon; sid:200011224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.xhgmfb.top"; classtype:attempted-recon; sid:200011225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.xniqmj.top"; classtype:attempted-recon; sid:200011226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.xulhaq.top"; classtype:attempted-recon; sid:200011227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.ycloud.group"; classtype:attempted-recon; sid:200011228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.zbvvpg.top"; classtype:attempted-recon; sid:200011229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.zeyeds.ltd"; classtype:attempted-recon; sid:200011230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.zqjkvx.top"; classtype:attempted-recon; sid:200011231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacseob.o.zrxpv.top"; classtype:attempted-recon; sid:200011232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.2021071.top"; classtype:attempted-recon; sid:200011233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.22567.cn"; classtype:attempted-recon; sid:200011234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.53567.cn"; classtype:attempted-recon; sid:200011235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.87567.cn"; classtype:attempted-recon; sid:200011236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.acloud.group"; classtype:attempted-recon; sid:200011237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.alister.ltd"; classtype:attempted-recon; sid:200011238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.bmhkg09.shop"; classtype:attempted-recon; sid:200011239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.cjehdm.top"; classtype:attempted-recon; sid:200011240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.clllbx.top"; classtype:attempted-recon; sid:200011241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.ebwptg.top"; classtype:attempted-recon; sid:200011242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.fcwh886.top"; classtype:attempted-recon; sid:200011243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.francis.ltd"; classtype:attempted-recon; sid:200011244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.fzosfk.top"; classtype:attempted-recon; sid:200011245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.gafuwd.top"; classtype:attempted-recon; sid:200011246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.glmbfd.top"; classtype:attempted-recon; sid:200011247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.hncwbn.top"; classtype:attempted-recon; sid:200011248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.ipexqv.top"; classtype:attempted-recon; sid:200011249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.jimdyd.top"; classtype:attempted-recon; sid:200011250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.jjglsw.top"; classtype:attempted-recon; sid:200011251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.leigh.ltd"; classtype:attempted-recon; sid:200011252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.leonard.ltd"; classtype:attempted-recon; sid:200011253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.lhixak.top"; classtype:attempted-recon; sid:200011254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.lhzfkh.top"; classtype:attempted-recon; sid:200011255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.limassol.group"; classtype:attempted-recon; sid:200011256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.loskh.top"; classtype:attempted-recon; sid:200011257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.nicosia.group"; classtype:attempted-recon; sid:200011258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.njrksy.top"; classtype:attempted-recon; sid:200011259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.norfolk.ltd"; classtype:attempted-recon; sid:200011260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.npxfcv.top"; classtype:attempted-recon; sid:200011261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.nvjdhuei.icu"; classtype:attempted-recon; sid:200011262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.oamprk.top"; classtype:attempted-recon; sid:200011263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.owens.ltd"; classtype:attempted-recon; sid:200011264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.ptywgv.top"; classtype:attempted-recon; sid:200011265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.qslbjc.top"; classtype:attempted-recon; sid:200011266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.qzvxui.top"; classtype:attempted-recon; sid:200011267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.reynolds.ltd"; classtype:attempted-recon; sid:200011268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.riley.ltd"; classtype:attempted-recon; sid:200011269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.robertson.ltd"; classtype:attempted-recon; sid:200011270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.rowan.ltd"; classtype:attempted-recon; sid:200011271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.scloud.group"; classtype:attempted-recon; sid:200011272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.shjpxn.top"; classtype:attempted-recon; sid:200011273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.sinclair.ltd"; classtype:attempted-recon; sid:200011274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.smartlife.plus"; classtype:attempted-recon; sid:200011275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.sqmim.top"; classtype:attempted-recon; sid:200011276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.tvrimx.top"; classtype:attempted-recon; sid:200011277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.tvxkmp.top"; classtype:attempted-recon; sid:200011278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.vjlile.top"; classtype:attempted-recon; sid:200011279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.vnxgwb.top"; classtype:attempted-recon; sid:200011280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.vordmh.top"; classtype:attempted-recon; sid:200011281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.xdaupp.top"; classtype:attempted-recon; sid:200011282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.xhgmfb.top"; classtype:attempted-recon; sid:200011283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.xniqmj.top"; classtype:attempted-recon; sid:200011284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.xulhaq.top"; classtype:attempted-recon; sid:200011285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.zbvvpg.top"; classtype:attempted-recon; sid:200011286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.zeyeds.ltd"; classtype:attempted-recon; sid:200011287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.zqjkvx.top"; classtype:attempted-recon; sid:200011288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjsacsosb.n.zrxpv.top"; classtype:attempted-recon; sid:200011289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.2021071.top"; classtype:attempted-recon; sid:200011290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.53567.cn"; classtype:attempted-recon; sid:200011291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.85567.cn"; classtype:attempted-recon; sid:200011292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.87567.cn"; classtype:attempted-recon; sid:200011293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.ahahh04.shop"; classtype:attempted-recon; sid:200011294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.alister.ltd"; classtype:attempted-recon; sid:200011295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.ccloud.group"; classtype:attempted-recon; sid:200011296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.cjehdm.top"; classtype:attempted-recon; sid:200011297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.clllbx.top"; classtype:attempted-recon; sid:200011298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.ebwptg.top"; classtype:attempted-recon; sid:200011299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.fcwh886.top"; classtype:attempted-recon; sid:200011300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.francis.ltd"; classtype:attempted-recon; sid:200011301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.fzosfk.top"; classtype:attempted-recon; sid:200011302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.gafuwd.top"; classtype:attempted-recon; sid:200011303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.glmbfd.top"; classtype:attempted-recon; sid:200011304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.hncwbn.top"; classtype:attempted-recon; sid:200011305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.icfpvc.top"; classtype:attempted-recon; sid:200011306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.ipexqv.top"; classtype:attempted-recon; sid:200011307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.jimdyd.top"; classtype:attempted-recon; sid:200011308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.jjglsw.top"; classtype:attempted-recon; sid:200011309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.leigh.ltd"; classtype:attempted-recon; sid:200011310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.leonard.ltd"; classtype:attempted-recon; sid:200011311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.lhixak.top"; classtype:attempted-recon; sid:200011312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.lhzfkh.top"; classtype:attempted-recon; sid:200011313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.limassol.group"; classtype:attempted-recon; sid:200011314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.loskh.top"; classtype:attempted-recon; sid:200011315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.njrksy.top"; classtype:attempted-recon; sid:200011316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.norfolk.ltd"; classtype:attempted-recon; sid:200011317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.npxfcv.top"; classtype:attempted-recon; sid:200011318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.nvjdhuei.icu"; classtype:attempted-recon; sid:200011319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.oamprk.top"; classtype:attempted-recon; sid:200011320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.owens.ltd"; classtype:attempted-recon; sid:200011321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.ptywgv.top"; classtype:attempted-recon; sid:200011322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.qzvxui.top"; classtype:attempted-recon; sid:200011323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.reynolds.ltd"; classtype:attempted-recon; sid:200011324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.riley.ltd"; classtype:attempted-recon; sid:200011325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.robertson.ltd"; classtype:attempted-recon; sid:200011326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.rowan.ltd"; classtype:attempted-recon; sid:200011327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.shjpxn.top"; classtype:attempted-recon; sid:200011328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.sinclair.ltd"; classtype:attempted-recon; sid:200011329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.sqmim.top"; classtype:attempted-recon; sid:200011330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.tvrimx.top"; classtype:attempted-recon; sid:200011331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.tvxkmp.top"; classtype:attempted-recon; sid:200011332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.vjlile.top"; classtype:attempted-recon; sid:200011333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.vnxgwb.top"; classtype:attempted-recon; sid:200011334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.vordmh.top"; classtype:attempted-recon; sid:200011335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.xdaupp.top"; classtype:attempted-recon; sid:200011336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.xhgmfb.top"; classtype:attempted-recon; sid:200011337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.xniqmj.top"; classtype:attempted-recon; sid:200011338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.xulhaq.top"; classtype:attempted-recon; sid:200011339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.zbvvpg.top"; classtype:attempted-recon; sid:200011340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.zeyeds.ltd"; classtype:attempted-recon; sid:200011341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.zkzkd04.shop"; classtype:attempted-recon; sid:200011342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.zqjkvx.top"; classtype:attempted-recon; sid:200011343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaeecob.oao.zrxpv.top"; classtype:attempted-recon; sid:200011344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.2021071.top"; classtype:attempted-recon; sid:200011345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.31567.cn"; classtype:attempted-recon; sid:200011346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.87567.cn"; classtype:attempted-recon; sid:200011347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.acloud.group"; classtype:attempted-recon; sid:200011348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.alister.ltd"; classtype:attempted-recon; sid:200011349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.cjehdm.top"; classtype:attempted-recon; sid:200011350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.clllbx.top"; classtype:attempted-recon; sid:200011351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.dwbjs.top"; classtype:attempted-recon; sid:200011352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.ebwptg.top"; classtype:attempted-recon; sid:200011353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.fcwh886.top"; classtype:attempted-recon; sid:200011354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.francis.ltd"; classtype:attempted-recon; sid:200011355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.fzosfk.top"; classtype:attempted-recon; sid:200011356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.gafuwd.top"; classtype:attempted-recon; sid:200011357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.glmbfd.top"; classtype:attempted-recon; sid:200011358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.hncwbn.top"; classtype:attempted-recon; sid:200011359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.ipexqv.top"; classtype:attempted-recon; sid:200011360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.jimdyd.top"; classtype:attempted-recon; sid:200011361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.jjglsw.top"; classtype:attempted-recon; sid:200011362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.lcloud.group"; classtype:attempted-recon; sid:200011363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.leigh.ltd"; classtype:attempted-recon; sid:200011364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.leonard.ltd"; classtype:attempted-recon; sid:200011365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.lhixak.top"; classtype:attempted-recon; sid:200011366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.lhzfkh.top"; classtype:attempted-recon; sid:200011367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.limassol.group"; classtype:attempted-recon; sid:200011368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.loskh.top"; classtype:attempted-recon; sid:200011369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.mortys.cn"; classtype:attempted-recon; sid:200011370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.ncbhdjei.icu"; classtype:attempted-recon; sid:200011371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.nicosia.group"; classtype:attempted-recon; sid:200011372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.njrksy.top"; classtype:attempted-recon; sid:200011373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.norfolk.ltd"; classtype:attempted-recon; sid:200011374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.npxfcv.top"; classtype:attempted-recon; sid:200011375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.nvjdhuei.icu"; classtype:attempted-recon; sid:200011376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.oamprk.top"; classtype:attempted-recon; sid:200011377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.ocloud.group"; classtype:attempted-recon; sid:200011378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.owens.ltd"; classtype:attempted-recon; sid:200011379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.pcloud.group"; classtype:attempted-recon; sid:200011380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.promotion.show"; classtype:attempted-recon; sid:200011381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.ptywgv.top"; classtype:attempted-recon; sid:200011382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.qzvxui.top"; classtype:attempted-recon; sid:200011383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.reynolds.ltd"; classtype:attempted-recon; sid:200011384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.riley.ltd"; classtype:attempted-recon; sid:200011385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.robertson.ltd"; classtype:attempted-recon; sid:200011386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.rowan.ltd"; classtype:attempted-recon; sid:200011387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.shjpxn.top"; classtype:attempted-recon; sid:200011388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.sinclair.ltd"; classtype:attempted-recon; sid:200011389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.smartlife.plus"; classtype:attempted-recon; sid:200011390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.sqmim.top"; classtype:attempted-recon; sid:200011391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.tvrimx.top"; classtype:attempted-recon; sid:200011392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.tvxkmp.top"; classtype:attempted-recon; sid:200011393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.vjlile.top"; classtype:attempted-recon; sid:200011394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.vnxgwb.top"; classtype:attempted-recon; sid:200011395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.vordmh.top"; classtype:attempted-recon; sid:200011396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.xulhaq.top"; classtype:attempted-recon; sid:200011397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.zbvvpg.top"; classtype:attempted-recon; sid:200011398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.zeyeds.ltd"; classtype:attempted-recon; sid:200011399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.zkzkd04.shop"; classtype:attempted-recon; sid:200011400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.zqjkvx.top"; classtype:attempted-recon; sid:200011401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacarsaoecsb.nao.zrxpv.top"; classtype:attempted-recon; sid:200011402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.2021071.top"; classtype:attempted-recon; sid:200011403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.22567.cn"; classtype:attempted-recon; sid:200011404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.31567.cn"; classtype:attempted-recon; sid:200011405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.85567.cn"; classtype:attempted-recon; sid:200011406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.alister.ltd"; classtype:attempted-recon; sid:200011407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.ccloud.group"; classtype:attempted-recon; sid:200011408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.cjehdm.top"; classtype:attempted-recon; sid:200011409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.clllbx.top"; classtype:attempted-recon; sid:200011410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.dwbjs.top"; classtype:attempted-recon; sid:200011411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.ebwptg.top"; classtype:attempted-recon; sid:200011412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.erfghk03.shop"; classtype:attempted-recon; sid:200011413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.fcwh886.top"; classtype:attempted-recon; sid:200011414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.francis.ltd"; classtype:attempted-recon; sid:200011415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.fzosfk.top"; classtype:attempted-recon; sid:200011416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.gafuwd.top"; classtype:attempted-recon; sid:200011417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.glmbfd.top"; classtype:attempted-recon; sid:200011418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.hncwbn.top"; classtype:attempted-recon; sid:200011419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.ipexqv.top"; classtype:attempted-recon; sid:200011420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.jimdyd.top"; classtype:attempted-recon; sid:200011421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.jjglsw.top"; classtype:attempted-recon; sid:200011422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.leigh.ltd"; classtype:attempted-recon; sid:200011423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.leonard.ltd"; classtype:attempted-recon; sid:200011424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.lhixak.top"; classtype:attempted-recon; sid:200011425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.lhzfkh.top"; classtype:attempted-recon; sid:200011426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.limassol.group"; classtype:attempted-recon; sid:200011427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.loskh.top"; classtype:attempted-recon; sid:200011428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.mkma07.shop"; classtype:attempted-recon; sid:200011429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.mnvhdje.icu"; classtype:attempted-recon; sid:200011430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.njrksy.top"; classtype:attempted-recon; sid:200011431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.norfolk.ltd"; classtype:attempted-recon; sid:200011432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.npxfcv.top"; classtype:attempted-recon; sid:200011433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.nsuuieds.icu"; classtype:attempted-recon; sid:200011434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.nvjdhuei.icu"; classtype:attempted-recon; sid:200011435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.oamprk.top"; classtype:attempted-recon; sid:200011436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.ocloud.group"; classtype:attempted-recon; sid:200011437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.owens.ltd"; classtype:attempted-recon; sid:200011438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.ptywgv.top"; classtype:attempted-recon; sid:200011439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.qslbjc.top"; classtype:attempted-recon; sid:200011440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.qzvxui.top"; classtype:attempted-recon; sid:200011441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.reynolds.ltd"; classtype:attempted-recon; sid:200011442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.riley.ltd"; classtype:attempted-recon; sid:200011443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.robertson.ltd"; classtype:attempted-recon; sid:200011444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.rowan.ltd"; classtype:attempted-recon; sid:200011445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.shjpxn.top"; classtype:attempted-recon; sid:200011446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.sinclair.ltd"; classtype:attempted-recon; sid:200011447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.smartlife.plus"; classtype:attempted-recon; sid:200011448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.sqmim.top"; classtype:attempted-recon; sid:200011449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.tvrimx.top"; classtype:attempted-recon; sid:200011450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.tvxkmp.top"; classtype:attempted-recon; sid:200011451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.vjlile.top"; classtype:attempted-recon; sid:200011452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.vnxgwb.top"; classtype:attempted-recon; sid:200011453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.vordmh.top"; classtype:attempted-recon; sid:200011454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.wcloud.group"; classtype:attempted-recon; sid:200011455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.xdaupp.top"; classtype:attempted-recon; sid:200011456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.xhgmfb.top"; classtype:attempted-recon; sid:200011457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.xniqmj.top"; classtype:attempted-recon; sid:200011458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.xulhaq.top"; classtype:attempted-recon; sid:200011459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.zbvvpg.top"; classtype:attempted-recon; sid:200011460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.zeyeds.ltd"; classtype:attempted-recon; sid:200011461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.zqjkvx.top"; classtype:attempted-recon; sid:200011462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsreaobc.oo.zrxpv.top"; classtype:attempted-recon; sid:200011463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.2021071.top"; classtype:attempted-recon; sid:200011464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.22567.cn"; classtype:attempted-recon; sid:200011465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.alister.ltd"; classtype:attempted-recon; sid:200011466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.cjehdm.top"; classtype:attempted-recon; sid:200011467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.clllbx.top"; classtype:attempted-recon; sid:200011468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.dcloud.group"; classtype:attempted-recon; sid:200011469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.ebwptg.top"; classtype:attempted-recon; sid:200011470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.fcwh886.top"; classtype:attempted-recon; sid:200011471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.francis.ltd"; classtype:attempted-recon; sid:200011472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.fzosfk.top"; classtype:attempted-recon; sid:200011473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.gafuwd.top"; classtype:attempted-recon; sid:200011474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.glmbfd.top"; classtype:attempted-recon; sid:200011475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.hncwbn.top"; classtype:attempted-recon; sid:200011476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.ipexqv.top"; classtype:attempted-recon; sid:200011477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.jimdyd.top"; classtype:attempted-recon; sid:200011478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.jjglsw.top"; classtype:attempted-recon; sid:200011479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.lcloud.group"; classtype:attempted-recon; sid:200011480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.leigh.ltd"; classtype:attempted-recon; sid:200011481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.leonard.ltd"; classtype:attempted-recon; sid:200011482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.lhixak.top"; classtype:attempted-recon; sid:200011483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.lhzfkh.top"; classtype:attempted-recon; sid:200011484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.limassol.group"; classtype:attempted-recon; sid:200011485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.loskh.top"; classtype:attempted-recon; sid:200011486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.mosjide.icu"; classtype:attempted-recon; sid:200011487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.njrksy.top"; classtype:attempted-recon; sid:200011488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.norfolk.ltd"; classtype:attempted-recon; sid:200011489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.npxfcv.top"; classtype:attempted-recon; sid:200011490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.nvjdhuei.icu"; classtype:attempted-recon; sid:200011491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.oamprk.top"; classtype:attempted-recon; sid:200011492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.ocloud.group"; classtype:attempted-recon; sid:200011493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.owens.ltd"; classtype:attempted-recon; sid:200011494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.ptywgv.top"; classtype:attempted-recon; sid:200011495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.qzvxui.top"; classtype:attempted-recon; sid:200011496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.reynolds.ltd"; classtype:attempted-recon; sid:200011497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.riley.ltd"; classtype:attempted-recon; sid:200011498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.robertson.ltd"; classtype:attempted-recon; sid:200011499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.rowan.ltd"; classtype:attempted-recon; sid:200011500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.shjpxn.top"; classtype:attempted-recon; sid:200011501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.sinclair.ltd"; classtype:attempted-recon; sid:200011502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.sqmim.top"; classtype:attempted-recon; sid:200011503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.tvrimx.top"; classtype:attempted-recon; sid:200011504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.tvxkmp.top"; classtype:attempted-recon; sid:200011505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.vjlile.top"; classtype:attempted-recon; sid:200011506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.vnxgwb.top"; classtype:attempted-recon; sid:200011507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.vordmh.top"; classtype:attempted-recon; sid:200011508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.xdaupp.top"; classtype:attempted-recon; sid:200011509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.xhgmfb.top"; classtype:attempted-recon; sid:200011510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.xniqmj.top"; classtype:attempted-recon; sid:200011511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.xulhaq.top"; classtype:attempted-recon; sid:200011512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.zbvvpg.top"; classtype:attempted-recon; sid:200011513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.zeyeds.ltd"; classtype:attempted-recon; sid:200011514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.zkzkd04.shop"; classtype:attempted-recon; sid:200011515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.zqjkvx.top"; classtype:attempted-recon; sid:200011516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseacsroasbc.no.zrxpv.top"; classtype:attempted-recon; sid:200011517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.2021071.top"; classtype:attempted-recon; sid:200011518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.22567.cn"; classtype:attempted-recon; sid:200011519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.53567.cn"; classtype:attempted-recon; sid:200011520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.87567.cn"; classtype:attempted-recon; sid:200011521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.ahahh04.shop"; classtype:attempted-recon; sid:200011522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.alister.ltd"; classtype:attempted-recon; sid:200011523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.bcloud.group"; classtype:attempted-recon; sid:200011524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.cjehdm.top"; classtype:attempted-recon; sid:200011525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.clllbx.top"; classtype:attempted-recon; sid:200011526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.ebwptg.top"; classtype:attempted-recon; sid:200011527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.erfghk03.shop"; classtype:attempted-recon; sid:200011528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.fcwh886.top"; classtype:attempted-recon; sid:200011529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.francis.ltd"; classtype:attempted-recon; sid:200011530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.fzosfk.top"; classtype:attempted-recon; sid:200011531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.gafuwd.top"; classtype:attempted-recon; sid:200011532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.glmbfd.top"; classtype:attempted-recon; sid:200011533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.hafner.group"; classtype:attempted-recon; sid:200011534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.hncwbn.top"; classtype:attempted-recon; sid:200011535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.ipexqv.top"; classtype:attempted-recon; sid:200011536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.jimdyd.top"; classtype:attempted-recon; sid:200011537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.jjglsw.top"; classtype:attempted-recon; sid:200011538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.lcloud.group"; classtype:attempted-recon; sid:200011539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.leigh.ltd"; classtype:attempted-recon; sid:200011540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.leonard.ltd"; classtype:attempted-recon; sid:200011541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.lhixak.top"; classtype:attempted-recon; sid:200011542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.lhzfkh.top"; classtype:attempted-recon; sid:200011543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.limassol.group"; classtype:attempted-recon; sid:200011544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.loskh.top"; classtype:attempted-recon; sid:200011545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.mortys.cn"; classtype:attempted-recon; sid:200011546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.njrksy.top"; classtype:attempted-recon; sid:200011547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.norfolk.ltd"; classtype:attempted-recon; sid:200011548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.npxfcv.top"; classtype:attempted-recon; sid:200011549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.nsuuieds.icu"; classtype:attempted-recon; sid:200011550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200011551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.oamprk.top"; classtype:attempted-recon; sid:200011552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.owens.ltd"; classtype:attempted-recon; sid:200011553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.ptywgv.top"; classtype:attempted-recon; sid:200011554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.qzvxui.top"; classtype:attempted-recon; sid:200011555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.reynolds.ltd"; classtype:attempted-recon; sid:200011556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.riley.ltd"; classtype:attempted-recon; sid:200011557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.robertson.ltd"; classtype:attempted-recon; sid:200011558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.rowan.ltd"; classtype:attempted-recon; sid:200011559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.shjpxn.top"; classtype:attempted-recon; sid:200011560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.sinclair.ltd"; classtype:attempted-recon; sid:200011561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.smartlife.plus"; classtype:attempted-recon; sid:200011562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.sqmim.top"; classtype:attempted-recon; sid:200011563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.tubatue.icu"; classtype:attempted-recon; sid:200011564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.tvrimx.top"; classtype:attempted-recon; sid:200011565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.tvxkmp.top"; classtype:attempted-recon; sid:200011566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.vjlile.top"; classtype:attempted-recon; sid:200011567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.vnxgwb.top"; classtype:attempted-recon; sid:200011568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.vordmh.top"; classtype:attempted-recon; sid:200011569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.wcloud.group"; classtype:attempted-recon; sid:200011570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.xdaupp.top"; classtype:attempted-recon; sid:200011571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.xhgmfb.top"; classtype:attempted-recon; sid:200011572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.xniqmj.top"; classtype:attempted-recon; sid:200011573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.xulhaq.top"; classtype:attempted-recon; sid:200011574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.ycloud.group"; classtype:attempted-recon; sid:200011575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.zbvvpg.top"; classtype:attempted-recon; sid:200011576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200011577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.zhzhh06.shop"; classtype:attempted-recon; sid:200011578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.zqjkvx.top"; classtype:attempted-recon; sid:200011579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaeecob.oaoaa.zrxpv.top"; classtype:attempted-recon; sid:200011580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.2021071.top"; classtype:attempted-recon; sid:200011581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.22567.cn"; classtype:attempted-recon; sid:200011582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.31567.cn"; classtype:attempted-recon; sid:200011583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.53567.cn"; classtype:attempted-recon; sid:200011584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.ahahh04.shop"; classtype:attempted-recon; sid:200011585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.alister.ltd"; classtype:attempted-recon; sid:200011586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.bcloud.group"; classtype:attempted-recon; sid:200011587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.ccloud.group"; classtype:attempted-recon; sid:200011588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.cjehdm.top"; classtype:attempted-recon; sid:200011589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.clllbx.top"; classtype:attempted-recon; sid:200011590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.ebwptg.top"; classtype:attempted-recon; sid:200011591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.fcloud.group"; classtype:attempted-recon; sid:200011592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.fcwh886.top"; classtype:attempted-recon; sid:200011593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.francis.ltd"; classtype:attempted-recon; sid:200011594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.fzosfk.top"; classtype:attempted-recon; sid:200011595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.gafuwd.top"; classtype:attempted-recon; sid:200011596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.glmbfd.top"; classtype:attempted-recon; sid:200011597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.gzmvuo.top"; classtype:attempted-recon; sid:200011598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.hncwbn.top"; classtype:attempted-recon; sid:200011599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.ipexqv.top"; classtype:attempted-recon; sid:200011600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.jimdyd.top"; classtype:attempted-recon; sid:200011601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.jjglsw.top"; classtype:attempted-recon; sid:200011602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.leigh.ltd"; classtype:attempted-recon; sid:200011603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.leonard.ltd"; classtype:attempted-recon; sid:200011604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.lhzfkh.top"; classtype:attempted-recon; sid:200011605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.limassol.group"; classtype:attempted-recon; sid:200011606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.loskh.top"; classtype:attempted-recon; sid:200011607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.mosjide.icu"; classtype:attempted-recon; sid:200011608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.njrksy.top"; classtype:attempted-recon; sid:200011609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.norfolk.ltd"; classtype:attempted-recon; sid:200011610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.npxfcv.top"; classtype:attempted-recon; sid:200011611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.nsuuieds.icu"; classtype:attempted-recon; sid:200011612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200011613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.oamprk.top"; classtype:attempted-recon; sid:200011614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.owens.ltd"; classtype:attempted-recon; sid:200011615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.ptywgv.top"; classtype:attempted-recon; sid:200011616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.qzvxui.top"; classtype:attempted-recon; sid:200011617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.reynolds.ltd"; classtype:attempted-recon; sid:200011618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.riley.ltd"; classtype:attempted-recon; sid:200011619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.robertson.ltd"; classtype:attempted-recon; sid:200011620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.rowan.ltd"; classtype:attempted-recon; sid:200011621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.shjpxn.top"; classtype:attempted-recon; sid:200011622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.sinclair.ltd"; classtype:attempted-recon; sid:200011623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.sqmim.top"; classtype:attempted-recon; sid:200011624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.tvrimx.top"; classtype:attempted-recon; sid:200011625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.tvxkmp.top"; classtype:attempted-recon; sid:200011626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.vjlile.top"; classtype:attempted-recon; sid:200011627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.vnxgwb.top"; classtype:attempted-recon; sid:200011628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.vordmh.top"; classtype:attempted-recon; sid:200011629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.xdaupp.top"; classtype:attempted-recon; sid:200011630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.xhgmfb.top"; classtype:attempted-recon; sid:200011631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.xniqmj.top"; classtype:attempted-recon; sid:200011632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.xulhaq.top"; classtype:attempted-recon; sid:200011633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.zbvvpg.top"; classtype:attempted-recon; sid:200011634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200011635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.zqjkvx.top"; classtype:attempted-recon; sid:200011636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecacrsaoecsb.naoaa.zrxpv.top"; classtype:attempted-recon; sid:200011637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.2021071.top"; classtype:attempted-recon; sid:200011638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.31567.cn"; classtype:attempted-recon; sid:200011639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.alister.ltd"; classtype:attempted-recon; sid:200011640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.bmhkg09.shop"; classtype:attempted-recon; sid:200011641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.cjehdm.top"; classtype:attempted-recon; sid:200011642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.clllbx.top"; classtype:attempted-recon; sid:200011643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.ebwptg.top"; classtype:attempted-recon; sid:200011644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.fcwh886.top"; classtype:attempted-recon; sid:200011645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.francis.ltd"; classtype:attempted-recon; sid:200011646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.fzosfk.top"; classtype:attempted-recon; sid:200011647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.gafuwd.top"; classtype:attempted-recon; sid:200011648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.glmbfd.top"; classtype:attempted-recon; sid:200011649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.gzfkmo.top"; classtype:attempted-recon; sid:200011650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.hncwbn.top"; classtype:attempted-recon; sid:200011651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.icfpvc.top"; classtype:attempted-recon; sid:200011652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.ipexqv.top"; classtype:attempted-recon; sid:200011653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.jimdyd.top"; classtype:attempted-recon; sid:200011654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.jjglsw.top"; classtype:attempted-recon; sid:200011655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.leigh.ltd"; classtype:attempted-recon; sid:200011656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.leonard.ltd"; classtype:attempted-recon; sid:200011657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.lhixak.top"; classtype:attempted-recon; sid:200011658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.lhzfkh.top"; classtype:attempted-recon; sid:200011659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.limassol.group"; classtype:attempted-recon; sid:200011660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.loskh.top"; classtype:attempted-recon; sid:200011661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.njrksy.top"; classtype:attempted-recon; sid:200011662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.norfolk.ltd"; classtype:attempted-recon; sid:200011663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.npxfcv.top"; classtype:attempted-recon; sid:200011664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200011665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.oamprk.top"; classtype:attempted-recon; sid:200011666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.owens.ltd"; classtype:attempted-recon; sid:200011667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.pcloud.group"; classtype:attempted-recon; sid:200011668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.ptywgv.top"; classtype:attempted-recon; sid:200011669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.qslbjc.top"; classtype:attempted-recon; sid:200011670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.qzvxui.top"; classtype:attempted-recon; sid:200011671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.reynolds.ltd"; classtype:attempted-recon; sid:200011672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.riley.ltd"; classtype:attempted-recon; sid:200011673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.robertson.ltd"; classtype:attempted-recon; sid:200011674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.rowan.ltd"; classtype:attempted-recon; sid:200011675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.scloud.group"; classtype:attempted-recon; sid:200011676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.shjpxn.top"; classtype:attempted-recon; sid:200011677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.sinclair.ltd"; classtype:attempted-recon; sid:200011678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.sqmim.top"; classtype:attempted-recon; sid:200011679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.tvrimx.top"; classtype:attempted-recon; sid:200011680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.tvxkmp.top"; classtype:attempted-recon; sid:200011681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.vjlile.top"; classtype:attempted-recon; sid:200011682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.vnxgwb.top"; classtype:attempted-recon; sid:200011683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.vordmh.top"; classtype:attempted-recon; sid:200011684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.xdaupp.top"; classtype:attempted-recon; sid:200011685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.xhgmfb.top"; classtype:attempted-recon; sid:200011686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.xniqmj.top"; classtype:attempted-recon; sid:200011687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.xulhaq.top"; classtype:attempted-recon; sid:200011688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.zbvvpg.top"; classtype:attempted-recon; sid:200011689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.zeyeds.ltd"; classtype:attempted-recon; sid:200011690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.zqjkvx.top"; classtype:attempted-recon; sid:200011691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscreaobc.ooaa.zrxpv.top"; classtype:attempted-recon; sid:200011692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.2021071.top"; classtype:attempted-recon; sid:200011693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.87567.cn"; classtype:attempted-recon; sid:200011694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.acloud.group"; classtype:attempted-recon; sid:200011695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.alister.ltd"; classtype:attempted-recon; sid:200011696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.cjehdm.top"; classtype:attempted-recon; sid:200011697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.clllbx.top"; classtype:attempted-recon; sid:200011698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.dwbjs.top"; classtype:attempted-recon; sid:200011699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.ebwptg.top"; classtype:attempted-recon; sid:200011700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.fcwh886.top"; classtype:attempted-recon; sid:200011701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.francis.ltd"; classtype:attempted-recon; sid:200011702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.fzosfk.top"; classtype:attempted-recon; sid:200011703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.gafuwd.top"; classtype:attempted-recon; sid:200011704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.gcloud.group"; classtype:attempted-recon; sid:200011705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.ggnxmf.top"; classtype:attempted-recon; sid:200011706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.glmbfd.top"; classtype:attempted-recon; sid:200011707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.hncwbn.top"; classtype:attempted-recon; sid:200011708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.icfpvc.top"; classtype:attempted-recon; sid:200011709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.ipexqv.top"; classtype:attempted-recon; sid:200011710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.jimdyd.top"; classtype:attempted-recon; sid:200011711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.jjglsw.top"; classtype:attempted-recon; sid:200011712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.leigh.ltd"; classtype:attempted-recon; sid:200011713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.leonard.ltd"; classtype:attempted-recon; sid:200011714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.lhixak.top"; classtype:attempted-recon; sid:200011715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.lhzfkh.top"; classtype:attempted-recon; sid:200011716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.limassol.group"; classtype:attempted-recon; sid:200011717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.loskh.top"; classtype:attempted-recon; sid:200011718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.mkma07.shop"; classtype:attempted-recon; sid:200011719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.mosjide.icu"; classtype:attempted-recon; sid:200011720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.njrksy.top"; classtype:attempted-recon; sid:200011721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.norfolk.ltd"; classtype:attempted-recon; sid:200011722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.npxfcv.top"; classtype:attempted-recon; sid:200011723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200011724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.oamprk.top"; classtype:attempted-recon; sid:200011725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.owens.ltd"; classtype:attempted-recon; sid:200011726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.ptywgv.top"; classtype:attempted-recon; sid:200011727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.qzvxui.top"; classtype:attempted-recon; sid:200011728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.reynolds.ltd"; classtype:attempted-recon; sid:200011729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.riley.ltd"; classtype:attempted-recon; sid:200011730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.robertson.ltd"; classtype:attempted-recon; sid:200011731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.rowan.ltd"; classtype:attempted-recon; sid:200011732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.shjpxn.top"; classtype:attempted-recon; sid:200011733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.sinclair.ltd"; classtype:attempted-recon; sid:200011734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.sqmim.top"; classtype:attempted-recon; sid:200011735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.tvrimx.top"; classtype:attempted-recon; sid:200011736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.tvxkmp.top"; classtype:attempted-recon; sid:200011737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.vjlile.top"; classtype:attempted-recon; sid:200011738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.vnxgwb.top"; classtype:attempted-recon; sid:200011739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.vordmh.top"; classtype:attempted-recon; sid:200011740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.xdaupp.top"; classtype:attempted-recon; sid:200011741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.xhgmfb.top"; classtype:attempted-recon; sid:200011742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.xniqmj.top"; classtype:attempted-recon; sid:200011743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.xulhaq.top"; classtype:attempted-recon; sid:200011744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.zbvvpg.top"; classtype:attempted-recon; sid:200011745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.zeyeds.ltd"; classtype:attempted-recon; sid:200011746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.zqjkvx.top"; classtype:attempted-recon; sid:200011747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myjseaecscroasbc.noaa.zrxpv.top"; classtype:attempted-recon; sid:200011748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myluxurycard.puynetjauzn.com"; classtype:attempted-recon; sid:200011749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mymail-usps.com"; classtype:attempted-recon; sid:200011750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mymklreovz.duckdns.org"; classtype:attempted-recon; sid:200011751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mymweb-owner.at.ua"; classtype:attempted-recon; sid:200011752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mynavy-folder-queryculosebrbxworkersdev.culasebrbx.workers.dev"; classtype:attempted-recon; sid:200011753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mynavy-src-resource.routin.workers.dev"; classtype:attempted-recon; sid:200011754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mynbejyrsw.duckdns.org"; classtype:attempted-recon; sid:200011755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mynditawvj.duckdns.org"; classtype:attempted-recon; sid:200011756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mynzsjh.top"; classtype:attempted-recon; sid:200011757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myoffice365oauth.elementor.cloud"; classtype:attempted-recon; sid:200011758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myofficemail423.boxmode.io"; classtype:attempted-recon; sid:200011759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mypayslip.sutherlandglobal.cm"; classtype:attempted-recon; sid:200011760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myqrvsefxo.duckdns.org"; classtype:attempted-recon; sid:200011761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myshedbuilder.com"; classtype:attempted-recon; sid:200011762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mytheamsauthecent.wapgem.com"; classtype:attempted-recon; sid:200011763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mytoshop.com"; classtype:attempted-recon; sid:200011764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myznaphfuj.duckdns.org"; classtype:attempted-recon; sid:200011765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mzpobxwxsn.duckdns.org"; classtype:attempted-recon; sid:200011766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mzrkuzyfxl.duckdns.org"; classtype:attempted-recon; sid:200011767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mzyrznxomh.duckdns.org"; classtype:attempted-recon; sid:200011768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"n-holdings.co.za"; classtype:attempted-recon; sid:200011769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"n-ver.unaux.com"; classtype:attempted-recon; sid:200011770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nab-alert.mobi"; classtype:attempted-recon; sid:200011771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nab-australia-help.com"; classtype:attempted-recon; sid:200011772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nab-cancel-payment.com"; classtype:attempted-recon; sid:200011773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nab-www.303.si"; classtype:attempted-recon; sid:200011774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nachurwildnokliafilepra.firebaseapp.com"; classtype:attempted-recon; sid:200011775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nachurwildnokliafilepra.web.app"; classtype:attempted-recon; sid:200011776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacion4lcosrica.webcindario.com"; classtype:attempted-recon; sid:200011777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacionabncrclo.webcindario.com"; classtype:attempted-recon; sid:200011778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacional0998.webcindario.com"; classtype:attempted-recon; sid:200011779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacionalbanco077.webcindario.com"; classtype:attempted-recon; sid:200011780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacionalficr.banconacional12.repl.co"; classtype:attempted-recon; sid:200011781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacionalficr.nacionalbrcr1.repl.co"; classtype:attempted-recon; sid:200011782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacionbank908878.webcindario.com"; classtype:attempted-recon; sid:200011783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nacionelbaan.webcindario.com"; classtype:attempted-recon; sid:200011784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"naciwebder.webcindario.com"; classtype:attempted-recon; sid:200011785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"naiiorshkb.duckdns.org"; classtype:attempted-recon; sid:200011786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"najboljeuslugezavas.betterservicesforyou.com"; classtype:attempted-recon; sid:200011787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"namele.marpuasabentar.workers.dev"; classtype:attempted-recon; sid:200011788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nameless-fog-03c7.dotmay820.workers.dev"; classtype:attempted-recon; sid:200011789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nameless-meadow-0aab.minitab4.workers.dev"; classtype:attempted-recon; sid:200011790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"namelessajaa.topijerami.workers.dev"; classtype:attempted-recon; sid:200011791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"namelesstr.topijerami.workers.dev"; classtype:attempted-recon; sid:200011792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"namvgtxkus.duckdns.org"; classtype:attempted-recon; sid:200011793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"namzapuaxq.duckdns.org"; classtype:attempted-recon; sid:200011794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nanazmpekq.duckdns.org"; classtype:attempted-recon; sid:200011795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nanettedesigns.co.za"; classtype:attempted-recon; sid:200011796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nano.webcindario.com"; classtype:attempted-recon; sid:200011797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"naoutamateep.fr"; classtype:attempted-recon; sid:200011798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"napffx5.com"; classtype:attempted-recon; sid:200011799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"narabeautyusa.com"; classtype:attempted-recon; sid:200011800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"narrowlostbetaversion.danihernandez2.repl.co"; classtype:attempted-recon; sid:200011801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nascimentoadvg.com"; classtype:attempted-recon; sid:200011802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nasdaqet.com"; classtype:attempted-recon; sid:200011803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nashakukla.com"; classtype:attempted-recon; sid:200011804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"naspa-aktualisierung.com"; classtype:attempted-recon; sid:200011805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nat1onalbr.webcindario.com"; classtype:attempted-recon; sid:200011806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nationalbank.webcindario.com"; classtype:attempted-recon; sid:200011807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nattynetworks.com"; classtype:attempted-recon; sid:200011808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"naturhouse.sk"; classtype:attempted-recon; sid:200011809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navatargroup-auth-0ffice365-folder.firebaseapp.com"; classtype:attempted-recon; sid:200011810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navatargroup-auth-0ffice365-folder.web.app"; classtype:attempted-recon; sid:200011811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi10.com"; classtype:attempted-recon; sid:200011812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi17.com"; classtype:attempted-recon; sid:200011813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi2.net"; classtype:attempted-recon; sid:200011814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi30.com"; classtype:attempted-recon; sid:200011815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi31.com"; classtype:attempted-recon; sid:200011816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi41.com"; classtype:attempted-recon; sid:200011817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi51.com"; classtype:attempted-recon; sid:200011818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi57.com"; classtype:attempted-recon; sid:200011819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi9.com"; classtype:attempted-recon; sid:200011820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navigator-web-de.boxmode.io"; classtype:attempted-recon; sid:200011821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navivincere.cc"; classtype:attempted-recon; sid:200011822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navzjbpglq.duckdns.org"; classtype:attempted-recon; sid:200011823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nayanielectronics.com"; classtype:attempted-recon; sid:200011824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"naygqsvmcw.duckdns.org"; classtype:attempted-recon; sid:200011825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbagjfvksm.duckdns.org"; classtype:attempted-recon; sid:200011826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbbbjinnhd.duckdns.org"; classtype:attempted-recon; sid:200011827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbc.uatb.org"; classtype:attempted-recon; sid:200011828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbdypmlqne.duckdns.org"; classtype:attempted-recon; sid:200011829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbfhhsdbxcdas.top"; classtype:attempted-recon; sid:200011830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbhabflsra.duckdns.org"; classtype:attempted-recon; sid:200011831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbhdwpbrfk.duckdns.org"; classtype:attempted-recon; sid:200011832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbhqgqonpf.duckdns.org"; classtype:attempted-recon; sid:200011833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbiaujowjv.duckdns.org"; classtype:attempted-recon; sid:200011834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbiwjnehdu.duckdns.org"; classtype:attempted-recon; sid:200011835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbomejtvft.duckdns.org"; classtype:attempted-recon; sid:200011836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbwcdrzuzs.duckdns.org"; classtype:attempted-recon; sid:200011837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nby1um.webwave.dev"; classtype:attempted-recon; sid:200011838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncbbiyslsv.duckdns.org"; classtype:attempted-recon; sid:200011839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nccsyezdzh.duckdns.org"; classtype:attempted-recon; sid:200011840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncfyjvesza.duckdns.org"; classtype:attempted-recon; sid:200011841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncgnhzrzjx.duckdns.org"; classtype:attempted-recon; sid:200011842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncityjrwbs.duckdns.org"; classtype:attempted-recon; sid:200011843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncoafd53cfe55c1019f08c3c010c89f8918efd53cfe55c1019f08c3c010c89f.ncoa-org.workers.dev"; classtype:attempted-recon; sid:200011844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncolaxtsgo.duckdns.org"; classtype:attempted-recon; sid:200011845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncvomgxpjm.duckdns.org"; classtype:attempted-recon; sid:200011846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ncvsxncmld.duckdns.org"; classtype:attempted-recon; sid:200011847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nczlitwdbu.duckdns.org"; classtype:attempted-recon; sid:200011848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndafpnaifa.duckdns.org"; classtype:attempted-recon; sid:200011849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nddvlmxjoy.duckdns.org"; classtype:attempted-recon; sid:200011850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndeflawtechnologies.com"; classtype:attempted-recon; sid:200011851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndfxhaedwd.duckdns.org"; classtype:attempted-recon; sid:200011852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndiwrmsnrm.duckdns.org"; classtype:attempted-recon; sid:200011853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndjqppprbb.duckdns.org"; classtype:attempted-recon; sid:200011854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndmhpadsjr.duckdns.org"; classtype:attempted-recon; sid:200011855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndmozmibkz.duckdns.org"; classtype:attempted-recon; sid:200011856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndpvwygegi.duckdns.org"; classtype:attempted-recon; sid:200011857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndssgecemn.duckdns.org"; classtype:attempted-recon; sid:200011858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndtvrxrhet.duckdns.org"; classtype:attempted-recon; sid:200011859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndubsrfmaz.duckdns.org"; classtype:attempted-recon; sid:200011860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndwyzypugv.duckdns.org"; classtype:attempted-recon; sid:200011861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndxbqcymft.duckdns.org"; classtype:attempted-recon; sid:200011862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ndyaeitjye.duckdns.org"; classtype:attempted-recon; sid:200011863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neadsbehwr.duckdns.org"; classtype:attempted-recon; sid:200011864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"near-waltets.autopartsmaroc.com"; classtype:attempted-recon; sid:200011865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nearwalletgithome.blogspot.com"; classtype:attempted-recon; sid:200011866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neat-shade-pantydraco.glitch.me"; classtype:attempted-recon; sid:200011867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"necessitymag.com"; classtype:attempted-recon; sid:200011868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"necesukylr.duckdns.org"; classtype:attempted-recon; sid:200011869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"necudneflirty.com"; classtype:attempted-recon; sid:200011870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nedbankqa.flowblocks.com"; classtype:attempted-recon; sid:200011871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nefertiti123.soporte256.repl.co"; classtype:attempted-recon; sid:200011872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nehvieilep.duckdns.org"; classtype:attempted-recon; sid:200011873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neonamsterdam.com"; classtype:attempted-recon; sid:200011874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nerdfsbmbp.duckdns.org"; classtype:attempted-recon; sid:200011875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nerestera.onrender.com"; classtype:attempted-recon; sid:200011876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nerqlkpzxu.duckdns.org"; classtype:attempted-recon; sid:200011877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netage.hextra.it"; classtype:attempted-recon; sid:200011878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netflfr.com"; classtype:attempted-recon; sid:200011879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netflixguiltless-guide.surge.sh"; classtype:attempted-recon; sid:200011880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netflixtvinfos.com"; classtype:attempted-recon; sid:200011881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netinterbank.pro"; classtype:attempted-recon; sid:200011882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netsttatsion2.apllus.co.jp.login.zaghf.top"; classtype:attempted-recon; sid:200011883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netwalletauth.com"; classtype:attempted-recon; sid:200011884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"network360000.firebaseapp.com"; classtype:attempted-recon; sid:200011885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"network360000.web.app"; classtype:attempted-recon; sid:200011886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"network360006.firebaseapp.com"; classtype:attempted-recon; sid:200011887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"network360006.web.app"; classtype:attempted-recon; sid:200011888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"network360007.firebaseapp.com"; classtype:attempted-recon; sid:200011889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"network360007.web.app"; classtype:attempted-recon; sid:200011890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"networksolutions-fd.firebaseapp.com"; classtype:attempted-recon; sid:200011891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"networksolutions-fd.web.app"; classtype:attempted-recon; sid:200011892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neue-update-okay99.firebaseapp.com"; classtype:attempted-recon; sid:200011893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neuxtvckwd.duckdns.org"; classtype:attempted-recon; sid:200011894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neuzvcefqq.duckdns.org"; classtype:attempted-recon; sid:200011895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neversencommun.fr"; classtype:attempted-recon; sid:200011896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nevjivelvz.duckdns.org"; classtype:attempted-recon; sid:200011897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"new-1.linatobar.repl.co"; classtype:attempted-recon; sid:200011898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"new.mjolkerampa.no"; classtype:attempted-recon; sid:200011899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"new_aggiornamento.mymom.info"; classtype:attempted-recon; sid:200011900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newattsbcsunday083944.square.site"; classtype:attempted-recon; sid:200011901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neweb.d3nktqlx3fpklj.amplifyapp.com"; classtype:attempted-recon; sid:200011902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newfreedomrealestategroup.com"; classtype:attempted-recon; sid:200011903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newhopemakassar.co.id"; classtype:attempted-recon; sid:200011904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newlink-popup-smart.biglink.to"; classtype:attempted-recon; sid:200011905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newmont.com"; classtype:attempted-recon; sid:200011906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newpageme.4everland.store"; classtype:attempted-recon; sid:200011907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newrfp-construction.myportfolio.com"; classtype:attempted-recon; sid:200011908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newrfp-hcarch.myportfolio.com"; classtype:attempted-recon; sid:200011909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newsletter.itherapeut.ch"; classtype:attempted-recon; sid:200011910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newty.rf.gd"; classtype:attempted-recon; sid:200011911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"newumd.com"; classtype:attempted-recon; sid:200011912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nex5l-kyaaa-aaaad-qddlq-cai.ic.fleek.co"; classtype:attempted-recon; sid:200011913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nexoinmobiliario.pe"; classtype:attempted-recon; sid:200011914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nextnurzjq.duckdns.org"; classtype:attempted-recon; sid:200011915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"neyblqchtz.duckdns.org"; classtype:attempted-recon; sid:200011916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfgf.ncqrmyy.cn"; classtype:attempted-recon; sid:200011917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfghtjbvxg.duckdns.org"; classtype:attempted-recon; sid:200011918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfkpsrepkf.duckdns.org"; classtype:attempted-recon; sid:200011919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nflrogyvjt.duckdns.org"; classtype:attempted-recon; sid:200011920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfntzawqmf.duckdns.org"; classtype:attempted-recon; sid:200011921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfrqnerotx.duckdns.org"; classtype:attempted-recon; sid:200011922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfrytlphja.duckdns.org"; classtype:attempted-recon; sid:200011923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfshwoeskg.duckdns.org"; classtype:attempted-recon; sid:200011924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nftio.online"; classtype:attempted-recon; sid:200011925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nftracking.io"; classtype:attempted-recon; sid:200011926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nftxvreytw.duckdns.org"; classtype:attempted-recon; sid:200011927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfuupoepiu.duckdns.org"; classtype:attempted-recon; sid:200011928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngcrdedncw.duckdns.org"; classtype:attempted-recon; sid:200011929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngjekglruy.duckdns.org"; classtype:attempted-recon; sid:200011930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngkhtipang.duckdns.org"; classtype:attempted-recon; sid:200011931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nglvowefpb.duckdns.org"; classtype:attempted-recon; sid:200011932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngpvjhrdwr.duckdns.org"; classtype:attempted-recon; sid:200011933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngsmartrp.com"; classtype:attempted-recon; sid:200011934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngtqzohnan.duckdns.org"; classtype:attempted-recon; sid:200011935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngvhjscwma.duckdns.org"; classtype:attempted-recon; sid:200011936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngxxymycuu.duckdns.org"; classtype:attempted-recon; sid:200011937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ngzzcylnnt.duckdns.org"; classtype:attempted-recon; sid:200011938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhattinsteel.com"; classtype:attempted-recon; sid:200011939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhawjkcomd.duckdns.org"; classtype:attempted-recon; sid:200011940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nheclkjeav.duckdns.org"; classtype:attempted-recon; sid:200011941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhfblsjkyn.duckdns.org"; classtype:attempted-recon; sid:200011942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhohsiyraa.duckdns.org"; classtype:attempted-recon; sid:200011943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhomlbgybr.duckdns.org"; classtype:attempted-recon; sid:200011944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhpfkfjnby.duckdns.org"; classtype:attempted-recon; sid:200011945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhpqlyntjt.duckdns.org"; classtype:attempted-recon; sid:200011946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhsapply-covid-pass.com"; classtype:attempted-recon; sid:200011947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhsfdhyubzsxyu.hostfree.pw"; classtype:attempted-recon; sid:200011948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhwoyowjwh.duckdns.org"; classtype:attempted-recon; sid:200011949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nhyocoamnu.duckdns.org"; classtype:attempted-recon; sid:200011950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"niagarapower.com"; classtype:attempted-recon; sid:200011951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nibcdirectnl.com"; classtype:attempted-recon; sid:200011952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nicephoto.org"; classtype:attempted-recon; sid:200011953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nicepriceoffice.nl"; classtype:attempted-recon; sid:200011954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nicoleaction.com"; classtype:attempted-recon; sid:200011955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nicoledruschnewitz.clickfunnels.com"; classtype:attempted-recon; sid:200011956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nidmyudaiz.duckdns.org"; classtype:attempted-recon; sid:200011957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nieuwpoortbe.godaddysites.com"; classtype:attempted-recon; sid:200011958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nifclgzdzd.duckdns.org"; classtype:attempted-recon; sid:200011959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nighkclick.biz"; classtype:attempted-recon; sid:200011960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nigvbetrty.duckdns.org"; classtype:attempted-recon; sid:200011961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nijrhawsdc.duckdns.org"; classtype:attempted-recon; sid:200011962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nikkofarmer.com"; classtype:attempted-recon; sid:200011963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"niqkgxanpn.duckdns.org"; classtype:attempted-recon; sid:200011964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"niqzvcszvt.duckdns.org"; classtype:attempted-recon; sid:200011965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nirehojmiv.duckdns.org"; classtype:attempted-recon; sid:200011966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nirmdrfcrm.duckdns.org"; classtype:attempted-recon; sid:200011967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nitro.neeve.co"; classtype:attempted-recon; sid:200011968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nittanyextra.com"; classtype:attempted-recon; sid:200011969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"niupgmlgjp.duckdns.org"; classtype:attempted-recon; sid:200011970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"niwa.co.za"; classtype:attempted-recon; sid:200011971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nizotchauffage.bilty.be"; classtype:attempted-recon; sid:200011972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nj58qz.hyperphp.com"; classtype:attempted-recon; sid:200011973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njaycqyesg.duckdns.org"; classtype:attempted-recon; sid:200011974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njdnwlnmnf.duckdns.org"; classtype:attempted-recon; sid:200011975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njkyuclrmu.duckdns.org"; classtype:attempted-recon; sid:200011976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njnsirt3.cf"; classtype:attempted-recon; sid:200011977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njnsirt5.tk"; classtype:attempted-recon; sid:200011978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njvmiucozq.duckdns.org"; classtype:attempted-recon; sid:200011979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njvmrgvdmz.duckdns.org"; classtype:attempted-recon; sid:200011980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njyeulvnnt.duckdns.org"; classtype:attempted-recon; sid:200011981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"njyrvffjmd.duckdns.org"; classtype:attempted-recon; sid:200011982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nkcefmntdt.duckdns.org"; classtype:attempted-recon; sid:200011983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nkhepyzpfa.duckdns.org"; classtype:attempted-recon; sid:200011984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nkhfgcezpg.duckdns.org"; classtype:attempted-recon; sid:200011985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nkhvmpjtll.duckdns.org"; classtype:attempted-recon; sid:200011986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nklonveefp.duckdns.org"; classtype:attempted-recon; sid:200011987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nkmjtddttf.duckdns.org"; classtype:attempted-recon; sid:200011988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nknrvbkhit.duckdns.org"; classtype:attempted-recon; sid:200011989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nktwefjmva.duckdns.org"; classtype:attempted-recon; sid:200011990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlbkyogsrb.duckdns.org"; classtype:attempted-recon; sid:200011991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlcaigigyn.duckdns.org"; classtype:attempted-recon; sid:200011992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlcfuafzoe.duckdns.org"; classtype:attempted-recon; sid:200011993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nldtjnbvtj.duckdns.org"; classtype:attempted-recon; sid:200011994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlearjspuv.duckdns.org"; classtype:attempted-recon; sid:200011995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlicafjyrc.duckdns.org"; classtype:attempted-recon; sid:200011996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nljanyaust.duckdns.org"; classtype:attempted-recon; sid:200011997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nljgklngmi.duckdns.org"; classtype:attempted-recon; sid:200011998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlkucqxwle.duckdns.org"; classtype:attempted-recon; sid:200011999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlnfrzyecf.duckdns.org"; classtype:attempted-recon; sid:200012000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlnihuumfl.duckdns.org"; classtype:attempted-recon; sid:200012001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlowlcnkbu.duckdns.org"; classtype:attempted-recon; sid:200012002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlrxh5.webwave.dev"; classtype:attempted-recon; sid:200012003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlwdporayt.duckdns.org"; classtype:attempted-recon; sid:200012004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlwsxbshlv.duckdns.org"; classtype:attempted-recon; sid:200012005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nlzyrdgtrq.duckdns.org"; classtype:attempted-recon; sid:200012006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmadwfpmaw.duckdns.org"; classtype:attempted-recon; sid:200012007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmjsdqylkm.duckdns.org"; classtype:attempted-recon; sid:200012008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmkdblsfqh.duckdns.org"; classtype:attempted-recon; sid:200012009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmqkzgkcve.duckdns.org"; classtype:attempted-recon; sid:200012010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmrefrigeration.com"; classtype:attempted-recon; sid:200012011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmtcqgdjmk.duckdns.org"; classtype:attempted-recon; sid:200012012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmwiytkvvm.duckdns.org"; classtype:attempted-recon; sid:200012013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nmxrlclfyy.duckdns.org"; classtype:attempted-recon; sid:200012014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nna.asiaconnect.bdren.net.bd"; classtype:attempted-recon; sid:200012015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnedapgigw.duckdns.org"; classtype:attempted-recon; sid:200012016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnfiihanse.com"; classtype:attempted-recon; sid:200012017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nngerleemt.duckdns.org"; classtype:attempted-recon; sid:200012018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nniesw.hyperphp.com"; classtype:attempted-recon; sid:200012019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nniuolcfee.duckdns.org"; classtype:attempted-recon; sid:200012020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnklbalqzf.duckdns.org"; classtype:attempted-recon; sid:200012021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnnhmybrmt.duckdns.org"; classtype:attempted-recon; sid:200012022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnqavbgywc.duckdns.org"; classtype:attempted-recon; sid:200012023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnqpperhmy.duckdns.org"; classtype:attempted-recon; sid:200012024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnwzpanwgg.duckdns.org"; classtype:attempted-recon; sid:200012025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnyetherwallet.com"; classtype:attempted-recon; sid:200012026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nnyugxgsia.duckdns.org"; classtype:attempted-recon; sid:200012027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nocnbxtswa.duckdns.org"; classtype:attempted-recon; sid:200012028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nodemoh-31651.firebaseapp.com"; classtype:attempted-recon; sid:200012029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nodemoh-31651.web.app"; classtype:attempted-recon; sid:200012030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noewwxpfcc.duckdns.org"; classtype:attempted-recon; sid:200012031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noiseless-summer-softball.glitch.me"; classtype:attempted-recon; sid:200012032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noisy-arts.03vd9e23.workers.dev"; classtype:attempted-recon; sid:200012033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noisy-cake-47d3.nh29901021139.workers.dev"; classtype:attempted-recon; sid:200012034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noisy-shadow-493c.wastrer.workers.dev"; classtype:attempted-recon; sid:200012035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nokkectxal.duckdns.org"; classtype:attempted-recon; sid:200012036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nolprqjsdv.duckdns.org"; classtype:attempted-recon; sid:200012037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nolzwlgoqa.duckdns.org"; classtype:attempted-recon; sid:200012038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"none-of-his-present.my.id"; classtype:attempted-recon; sid:200012039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nonprofitnetworkofindia.com"; classtype:attempted-recon; sid:200012040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nooumfbwih.duckdns.org"; classtype:attempted-recon; sid:200012041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nopobebqor.duckdns.org"; classtype:attempted-recon; sid:200012042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nordaelogg.firebaseapp.com"; classtype:attempted-recon; sid:200012043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nordaelogg.web.app"; classtype:attempted-recon; sid:200012044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nordeafinland.20-169-33-127.plesk.page"; classtype:attempted-recon; sid:200012045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nordeauth1.web.app"; classtype:attempted-recon; sid:200012046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nordincreading.xyz"; classtype:attempted-recon; sid:200012047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noreply-bb5653.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200012048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"normalangstonrealestate.com"; classtype:attempted-recon; sid:200012049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"northcultitude6263.com"; classtype:attempted-recon; sid:200012050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"northfacesklep.com"; classtype:attempted-recon; sid:200012051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nosposte458d.yolasite.com"; classtype:attempted-recon; sid:200012052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nossas-solucoes-agora.com"; classtype:attempted-recon; sid:200012053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notebp004.firebaseapp.com"; classtype:attempted-recon; sid:200012054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notebp004.web.app"; classtype:attempted-recon; sid:200012055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notif0galika1.notif0galika1.repl.co"; classtype:attempted-recon; sid:200012056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notife.help.institutepages.workers.dev"; classtype:attempted-recon; sid:200012057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notification-fb.secure-pages.workers.dev"; classtype:attempted-recon; sid:200012058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notificationservicefrances.firebaseapp.com"; classtype:attempted-recon; sid:200012059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notificationservicefrances.web.app"; classtype:attempted-recon; sid:200012060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notificationsms-baeab7.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200012061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notify-me.link"; classtype:attempted-recon; sid:200012062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nourayatravel.com"; classtype:attempted-recon; sid:200012063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nouvellefonctionnalitorange.podia.com"; classtype:attempted-recon; sid:200012064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"novelbogussoftwaresuite.lmlh4.repl.co"; classtype:attempted-recon; sid:200012065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nownltrpyu.duckdns.org"; classtype:attempted-recon; sid:200012066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nownnjahzq.duckdns.org"; classtype:attempted-recon; sid:200012067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noxtechblob00082310.blob.core.windows.net"; classtype:attempted-recon; sid:200012068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"noxyslqisr.duckdns.org"; classtype:attempted-recon; sid:200012069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"np.bb0n.cheeseconnoisseur.ca"; classtype:attempted-recon; sid:200012070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npbxnqqhgl.duckdns.org"; classtype:attempted-recon; sid:200012071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npcmxzijqj.duckdns.org"; classtype:attempted-recon; sid:200012072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npiywucfyg.duckdns.org"; classtype:attempted-recon; sid:200012073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npnltsrbtj.duckdns.org"; classtype:attempted-recon; sid:200012074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npqkmtjntt.duckdns.org"; classtype:attempted-recon; sid:200012075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nprczfkyxb.duckdns.org"; classtype:attempted-recon; sid:200012076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nprgrjlmel.firebaseapp.com"; classtype:attempted-recon; sid:200012077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nprgrjlmel.web.app"; classtype:attempted-recon; sid:200012078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npthvvcips.duckdns.org"; classtype:attempted-recon; sid:200012079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nptugnxtra.duckdns.org"; classtype:attempted-recon; sid:200012080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npwnlgbebt.duckdns.org"; classtype:attempted-recon; sid:200012081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"npzossvuqo.duckdns.org"; classtype:attempted-recon; sid:200012082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqbftpzlbh.duckdns.org"; classtype:attempted-recon; sid:200012083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqbigfcien.duckdns.org"; classtype:attempted-recon; sid:200012084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqeouejdgn.duckdns.org"; classtype:attempted-recon; sid:200012085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqeymzkxnc.duckdns.org"; classtype:attempted-recon; sid:200012086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqgkvyynwu.duckdns.org"; classtype:attempted-recon; sid:200012087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqhppvxkoh.duckdns.org"; classtype:attempted-recon; sid:200012088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqmtrgmiaz.duckdns.org"; classtype:attempted-recon; sid:200012089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqpgfdwjvm.duckdns.org"; classtype:attempted-recon; sid:200012090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nqxarlqwic.duckdns.org"; classtype:attempted-recon; sid:200012091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrdbheyqve.duckdns.org"; classtype:attempted-recon; sid:200012092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrdcindia.org.in"; classtype:attempted-recon; sid:200012093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrdznubaqh.duckdns.org"; classtype:attempted-recon; sid:200012094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrekctnckg.duckdns.org"; classtype:attempted-recon; sid:200012095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrfdsgkmzp.duckdns.org"; classtype:attempted-recon; sid:200012096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrglidwuyb.duckdns.org"; classtype:attempted-recon; sid:200012097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrhhvnrbnu.duckdns.org"; classtype:attempted-recon; sid:200012098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrhnkicnhe.duckdns.org"; classtype:attempted-recon; sid:200012099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrjfewmwql.duckdns.org"; classtype:attempted-recon; sid:200012100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrkolbtpuu.duckdns.org"; classtype:attempted-recon; sid:200012101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrmxlygurl.duckdns.org"; classtype:attempted-recon; sid:200012102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrnhfhzuqr.duckdns.org"; classtype:attempted-recon; sid:200012103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nroedreamcare.com"; classtype:attempted-recon; sid:200012104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrvzpyipvz.duckdns.org"; classtype:attempted-recon; sid:200012105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrwmjblmqu.duckdns.org"; classtype:attempted-recon; sid:200012106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrwviptzla.duckdns.org"; classtype:attempted-recon; sid:200012107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nrzlxpxoze.duckdns.org"; classtype:attempted-recon; sid:200012108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsegov.com"; classtype:attempted-recon; sid:200012109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsjiphrnfi.duckdns.org"; classtype:attempted-recon; sid:200012110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsk.russamogon.ru"; classtype:attempted-recon; sid:200012111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nskyjsmgrn.duckdns.org"; classtype:attempted-recon; sid:200012112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsltnsugqp.duckdns.org"; classtype:attempted-recon; sid:200012113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsqmukdhsv.duckdns.org"; classtype:attempted-recon; sid:200012114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsrbemzsfd.duckdns.org"; classtype:attempted-recon; sid:200012115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsrlqwe4.gq"; classtype:attempted-recon; sid:200012116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsvsoqvxlo.duckdns.org"; classtype:attempted-recon; sid:200012117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nt.embluemail.com"; classtype:attempted-recon; sid:200012118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntago-jp.nistkom.cn"; classtype:attempted-recon; sid:200012119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntago-jp.tkgrncb.cn"; classtype:attempted-recon; sid:200012120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntago-jp.ypcfwyl.cn"; classtype:attempted-recon; sid:200012121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.asdnwp.cn"; classtype:attempted-recon; sid:200012122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.aytdawp.cn"; classtype:attempted-recon; sid:200012123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.ckai3aw.cn"; classtype:attempted-recon; sid:200012124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.cvnuxs.cn"; classtype:attempted-recon; sid:200012125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.czecnbl.cn"; classtype:attempted-recon; sid:200012126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.dgrrg.cn"; classtype:attempted-recon; sid:200012127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.ehxsrai.cn"; classtype:attempted-recon; sid:200012128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.eygxpg.cn"; classtype:attempted-recon; sid:200012129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.fatvplv.cn"; classtype:attempted-recon; sid:200012130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.grimryc.cn"; classtype:attempted-recon; sid:200012131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.hcrkrz.cn"; classtype:attempted-recon; sid:200012132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.hpvyznj.cn"; classtype:attempted-recon; sid:200012133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.jgrweuh.cn"; classtype:attempted-recon; sid:200012134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.jpty0uj.cn"; classtype:attempted-recon; sid:200012135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.juhyjkm.cn"; classtype:attempted-recon; sid:200012136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.kgfish.cn"; classtype:attempted-recon; sid:200012137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.ltzdir.cn"; classtype:attempted-recon; sid:200012138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.mhmpwg.cn"; classtype:attempted-recon; sid:200012139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.pafbxco.cn"; classtype:attempted-recon; sid:200012140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.pdxsazf.cn"; classtype:attempted-recon; sid:200012141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.pnivgtj.cn"; classtype:attempted-recon; sid:200012142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.pthrfl.cn"; classtype:attempted-recon; sid:200012143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.qgvvtoq.cn"; classtype:attempted-recon; sid:200012144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.rpvrvwt.cn"; classtype:attempted-recon; sid:200012145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.ruilibath.cn"; classtype:attempted-recon; sid:200012146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.tifrrqf.cn"; classtype:attempted-recon; sid:200012147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.tljkcnk.cn"; classtype:attempted-recon; sid:200012148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.txluij.cn"; classtype:attempted-recon; sid:200012149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.ucposea.cn"; classtype:attempted-recon; sid:200012150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.ulaqajm.cn"; classtype:attempted-recon; sid:200012151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.untltxa.cn"; classtype:attempted-recon; sid:200012152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.uqotjhs.cn"; classtype:attempted-recon; sid:200012153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.uwgoiv.cn"; classtype:attempted-recon; sid:200012154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.vbcrck.cn"; classtype:attempted-recon; sid:200012155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.vdyyltb.cn"; classtype:attempted-recon; sid:200012156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.vsdevro.cn"; classtype:attempted-recon; sid:200012157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.wjiw08.cn"; classtype:attempted-recon; sid:200012158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.wzxiner.cn"; classtype:attempted-recon; sid:200012159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.yozazfs.cn"; classtype:attempted-recon; sid:200012160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagoi-jp.zwwfrsd.cn"; classtype:attempted-recon; sid:200012161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntagol-jp.mxsjapm.cn"; classtype:attempted-recon; sid:200012162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntaguoi-jp.aesfera.cn"; classtype:attempted-recon; sid:200012163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntaguoi-jp.hbslcmu.cn"; classtype:attempted-recon; sid:200012164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntapay-japan.sxklhd.com"; classtype:attempted-recon; sid:200012165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntekzcwayd.duckdns.org"; classtype:attempted-recon; sid:200012166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntfx-check.fr"; classtype:attempted-recon; sid:200012167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntfx-cl.com"; classtype:attempted-recon; sid:200012168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntkurcsfka.duckdns.org"; classtype:attempted-recon; sid:200012169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntlqtmwaif.duckdns.org"; classtype:attempted-recon; sid:200012170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntutxcgszu.duckdns.org"; classtype:attempted-recon; sid:200012171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nucleoresultado.com"; classtype:attempted-recon; sid:200012172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuevo-tuya-2.hostfree.pw"; classtype:attempted-recon; sid:200012173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuevoo365tuya.hostfree.pw"; classtype:attempted-recon; sid:200012174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuevoo365tuyya14.hostfree.pw"; classtype:attempted-recon; sid:200012175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuevosdatosbancarios.c1.biz"; classtype:attempted-recon; sid:200012176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuevosestudi324.webcindario.com"; classtype:attempted-recon; sid:200012177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nufveedroo.duckdns.org"; classtype:attempted-recon; sid:200012178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"numberoneburger.com.br"; classtype:attempted-recon; sid:200012179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuncorehits.web.app"; classtype:attempted-recon; sid:200012180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nunzrhnjec.duckdns.org"; classtype:attempted-recon; sid:200012181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuotpfgunt.duckdns.org"; classtype:attempted-recon; sid:200012182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nupxjaezub.duckdns.org"; classtype:attempted-recon; sid:200012183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuqdwohtuu.duckdns.org"; classtype:attempted-recon; sid:200012184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuuraokhff.duckdns.org"; classtype:attempted-recon; sid:200012185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuvemdafaturasbrasileira.xyz"; classtype:attempted-recon; sid:200012186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvanvlknyd.duckdns.org"; classtype:attempted-recon; sid:200012187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvbhwrlsrr.duckdns.org"; classtype:attempted-recon; sid:200012188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvdxzwucin.duckdns.org"; classtype:attempted-recon; sid:200012189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvidia1651665403.zendesk.com"; classtype:attempted-recon; sid:200012190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvigvvjclo.duckdns.org"; classtype:attempted-recon; sid:200012191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvkwfcxnqu.duckdns.org"; classtype:attempted-recon; sid:200012192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvojzeomkm.duckdns.org"; classtype:attempted-recon; sid:200012193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvopfminww.duckdns.org"; classtype:attempted-recon; sid:200012194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvorppnijy.duckdns.org"; classtype:attempted-recon; sid:200012195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvqauunrww.duckdns.org"; classtype:attempted-recon; sid:200012196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvwdqgzcjk.duckdns.org"; classtype:attempted-recon; sid:200012197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nvyscndtcf.duckdns.org"; classtype:attempted-recon; sid:200012198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nwbrzkpkgb.duckdns.org"; classtype:attempted-recon; sid:200012199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nwingufibj.duckdns.org"; classtype:attempted-recon; sid:200012200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nwnmhqzphe.duckdns.org"; classtype:attempted-recon; sid:200012201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nwss419.top"; classtype:attempted-recon; sid:200012202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nwtxpanuti.duckdns.org"; classtype:attempted-recon; sid:200012203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nwxydnipvb.duckdns.org"; classtype:attempted-recon; sid:200012204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxbczjdlbe.duckdns.org"; classtype:attempted-recon; sid:200012205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxbiboeddt.duckdns.org"; classtype:attempted-recon; sid:200012206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxbuwwebli.duckdns.org"; classtype:attempted-recon; sid:200012207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxdvoounff.duckdns.org"; classtype:attempted-recon; sid:200012208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxdzplgjed.duckdns.org"; classtype:attempted-recon; sid:200012209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxehhtccht.duckdns.org"; classtype:attempted-recon; sid:200012210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxfuvfwwpb.duckdns.org"; classtype:attempted-recon; sid:200012211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxgctrfzss.duckdns.org"; classtype:attempted-recon; sid:200012212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxhdekcmdm.duckdns.org"; classtype:attempted-recon; sid:200012213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxhrgunukr.duckdns.org"; classtype:attempted-recon; sid:200012214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxiuhemtcp.duckdns.org"; classtype:attempted-recon; sid:200012215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxl58s.hyperphp.com"; classtype:attempted-recon; sid:200012216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxllmxikla.duckdns.org"; classtype:attempted-recon; sid:200012217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxlwccmhdy.duckdns.org"; classtype:attempted-recon; sid:200012218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxnqronbfd.duckdns.org"; classtype:attempted-recon; sid:200012219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxqntnrkeq.duckdns.org"; classtype:attempted-recon; sid:200012220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxscysrouc.duckdns.org"; classtype:attempted-recon; sid:200012221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxurbsrarw.duckdns.org"; classtype:attempted-recon; sid:200012222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nxzfvaxgul.duckdns.org"; classtype:attempted-recon; sid:200012223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyestriasztas.hu"; classtype:attempted-recon; sid:200012224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyfivfohbo.duckdns.org"; classtype:attempted-recon; sid:200012225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nygxtmqwfa.duckdns.org"; classtype:attempted-recon; sid:200012226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nygxvoixlo.duckdns.org"; classtype:attempted-recon; sid:200012227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyhkjkpgpf.duckdns.org"; classtype:attempted-recon; sid:200012228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyiksaulekel.66ghz.com"; classtype:attempted-recon; sid:200012229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyiypjhuip.duckdns.org"; classtype:attempted-recon; sid:200012230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nymo.ee"; classtype:attempted-recon; sid:200012231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyotisovdu.duckdns.org"; classtype:attempted-recon; sid:200012232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nypfhtzmke.duckdns.org"; classtype:attempted-recon; sid:200012233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nysdivorcemediation.com"; classtype:attempted-recon; sid:200012234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nysestarts.com"; classtype:attempted-recon; sid:200012235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nysethkpd.com"; classtype:attempted-recon; sid:200012236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyupsjxilz.duckdns.org"; classtype:attempted-recon; sid:200012237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyvlgkznhl.duckdns.org"; classtype:attempted-recon; sid:200012238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nywsenfdov.duckdns.org"; classtype:attempted-recon; sid:200012239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nyxxxxyree.duckdns.org"; classtype:attempted-recon; sid:200012240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nzbgbhuxzx.duckdns.org"; classtype:attempted-recon; sid:200012241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nzjtrbsthg.duckdns.org"; classtype:attempted-recon; sid:200012242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nzpgxwfoxr.duckdns.org"; classtype:attempted-recon; sid:200012243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nzritaaext.duckdns.org"; classtype:attempted-recon; sid:200012244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nzzjikqmyv.duckdns.org"; classtype:attempted-recon; sid:200012245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"o1x-shipment.5000921.xyz"; classtype:attempted-recon; sid:200012246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"o2-account-review.firebaseapp.com"; classtype:attempted-recon; sid:200012247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"o2-account-review.web.app"; classtype:attempted-recon; sid:200012248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"o2-village.com.ua"; classtype:attempted-recon; sid:200012249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"o4gul-xyaaa-aaaad-qdxwq-cai.raw.ic0.app"; classtype:attempted-recon; sid:200012250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oabpzgfcch.duckdns.org"; classtype:attempted-recon; sid:200012251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oahyjrxwao.duckdns.org"; classtype:attempted-recon; sid:200012252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oaipvkflww.duckdns.org"; classtype:attempted-recon; sid:200012253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oajehzqhin.duckdns.org"; classtype:attempted-recon; sid:200012254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oal-3080.authen03845.workers.dev"; classtype:attempted-recon; sid:200012255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oancgyhydw.duckdns.org"; classtype:attempted-recon; sid:200012256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oaoeheklmw.duckdns.org"; classtype:attempted-recon; sid:200012257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oasisworkz.com"; classtype:attempted-recon; sid:200012258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oavetjnjrn.duckdns.org"; classtype:attempted-recon; sid:200012259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oaxtydhepn.duckdns.org"; classtype:attempted-recon; sid:200012260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obejdgj20.d208ai8leta6q5.amplifyapp.com"; classtype:attempted-recon; sid:200012261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obfpmevwvo.duckdns.org"; classtype:attempted-recon; sid:200012262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"objective-curie.109-71-253-24.plesk.page"; classtype:attempted-recon; sid:200012263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"objectstorage.eu-paris-1.oraclecloud.com"; classtype:attempted-recon; sid:200012264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"objectstorage.us-sanjose-1.oraclecloud.com"; classtype:attempted-recon; sid:200012265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obllwijbbm.duckdns.org"; classtype:attempted-recon; sid:200012266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obnmxljmjp.duckdns.org"; classtype:attempted-recon; sid:200012267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"observinglife.net"; classtype:attempted-recon; sid:200012268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obsixmfyql.duckdns.org"; classtype:attempted-recon; sid:200012269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obtovlwtda.duckdns.org"; classtype:attempted-recon; sid:200012270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obxgn-wqaaa-aaaad-qczaq-cai.raw.ic0.app"; classtype:attempted-recon; sid:200012271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"obxjetflis.duckdns.org"; classtype:attempted-recon; sid:200012272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ocdyymmudp.duckdns.org"; classtype:attempted-recon; sid:200012273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ochtbpavue.duckdns.org"; classtype:attempted-recon; sid:200012274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ocioturismogalicia.com"; classtype:attempted-recon; sid:200012275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ocnewyork.net"; classtype:attempted-recon; sid:200012276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ocsvsfumvn.duckdns.org"; classtype:attempted-recon; sid:200012277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ocvqnbbcqu.duckdns.org"; classtype:attempted-recon; sid:200012278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ocwumxkytp.duckdns.org"; classtype:attempted-recon; sid:200012279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odd-bonus-a725.wastemen.workers.dev"; classtype:attempted-recon; sid:200012280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odd-breadd9a.wed8spk8.workers.dev"; classtype:attempted-recon; sid:200012281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odd-field-9e1d.microsft-docs-foecisayant.workers.dev"; classtype:attempted-recon; sid:200012282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odd-lake-a237.hvac.workers.dev"; classtype:attempted-recon; sid:200012283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odelnswubk.duckdns.org"; classtype:attempted-recon; sid:200012284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odnlbltsnx.duckdns.org"; classtype:attempted-recon; sid:200012285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odoyrkdytm.duckdns.org"; classtype:attempted-recon; sid:200012286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odrhmojojg.duckdns.org"; classtype:attempted-recon; sid:200012287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odtcnmzoit.duckdns.org"; classtype:attempted-recon; sid:200012288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odv-shared-file-qs.firebaseapp.com"; classtype:attempted-recon; sid:200012289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odv-shared-file-qs.web.app"; classtype:attempted-recon; sid:200012290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odvifzhoml.duckdns.org"; classtype:attempted-recon; sid:200012291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odwaltqbfa.duckdns.org"; classtype:attempted-recon; sid:200012292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odwgwjjzmi.duckdns.org"; classtype:attempted-recon; sid:200012293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"odxtagpqzj.duckdns.org"; classtype:attempted-recon; sid:200012294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oea4t2.webwave.dev"; classtype:attempted-recon; sid:200012295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oegaixiyhu.duckdns.org"; classtype:attempted-recon; sid:200012296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oehckibywc.duckdns.org"; classtype:attempted-recon; sid:200012297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oejglvyonr.duckdns.org"; classtype:attempted-recon; sid:200012298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oejrlthnnb.duckdns.org"; classtype:attempted-recon; sid:200012299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oekdnrfhgjgtig.godaddysites.com"; classtype:attempted-recon; sid:200012300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oelgfqwruo.duckdns.org"; classtype:attempted-recon; sid:200012301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oenwtvjseq.duckdns.org"; classtype:attempted-recon; sid:200012302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oeqhgkauom.duckdns.org"; classtype:attempted-recon; sid:200012303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oetemgngbl.duckdns.org"; classtype:attempted-recon; sid:200012304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oeuskemv.cn"; classtype:attempted-recon; sid:200012305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oevwjnfnlu.duckdns.org"; classtype:attempted-recon; sid:200012306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oezozhsozt.duckdns.org"; classtype:attempted-recon; sid:200012307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofaitfpbru.duckdns.org"; classtype:attempted-recon; sid:200012308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofaufqjkzt.duckdns.org"; classtype:attempted-recon; sid:200012309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofdmjtdsro.duckdns.org"; classtype:attempted-recon; sid:200012310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofekdpnemb.duckdns.org"; classtype:attempted-recon; sid:200012311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oferta-100.order145.info"; classtype:attempted-recon; sid:200012312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofewijjjzx.duckdns.org"; classtype:attempted-recon; sid:200012313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"offic4280692.sitebuilder.name.tools"; classtype:attempted-recon; sid:200012314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office-filedesk.myportfolio.com"; classtype:attempted-recon; sid:200012315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office-invauth13425.zeknotarzo.workers.dev"; classtype:attempted-recon; sid:200012316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office-proofpoint-documents.myportfolio.com"; classtype:attempted-recon; sid:200012317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office-rsjp2.spheron.app"; classtype:attempted-recon; sid:200012318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office.ways-status.workers.dev"; classtype:attempted-recon; sid:200012319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office024324468.boxmode.io"; classtype:attempted-recon; sid:200012320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office03039200323.firebaseapp.com"; classtype:attempted-recon; sid:200012321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office03039200323.web.app"; classtype:attempted-recon; sid:200012322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office08492b75d5eb514031d6bcc398777e3208492b75d5eb514031d6bcc39.joseqqaw.workers.dev"; classtype:attempted-recon; sid:200012323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office1059883818b02084f9c6a8960999f10c1059883818b02084f9c6a8960.pamcam.workers.dev"; classtype:attempted-recon; sid:200012324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office18bd41c4e27d01ca654ef485200a641cc381795dd3ee389f34900c690.softmail2.workers.dev"; classtype:attempted-recon; sid:200012325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office1fbfbbb69e7a57899f2d31eb895f8b891fbfbbb69e7a57899f2d31eb8.nuzzo.workers.dev"; classtype:attempted-recon; sid:200012326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office24ba15ff9906029c852bb400dea2990b1b8aca4e1b643202d4ec7c0c8.softmais.workers.dev"; classtype:attempted-recon; sid:200012327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office27f227de102c9d63ac9f975899a7eb8727f227de102c9d63ac9f97589.egeary.workers.dev"; classtype:attempted-recon; sid:200012328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office2ba26c936161df9a60ce20211f793266211c4e3be87fdae87bf4d3c4b.softmail3.workers.dev"; classtype:attempted-recon; sid:200012329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office346422eff3a37052e27dceac15b15a1c346422eff3a37052e27dceac1.commercejp.workers.dev"; classtype:attempted-recon; sid:200012330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365-owa1657.microsoftteams.workers.dev"; classtype:attempted-recon; sid:200012331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365-owa6878.microsoftpublisher.workers.dev"; classtype:attempted-recon; sid:200012332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365-securedocs-onmic000000.myportfolio.com"; classtype:attempted-recon; sid:200012333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365dumc0med5cibcugnc7dkvci2qbmrzo72wkguova62vqkkcib.softmail1.workers.dev"; classtype:attempted-recon; sid:200012334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365fileshare.myportfolio.com"; classtype:attempted-recon; sid:200012335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365mail.myportfolio.com"; classtype:attempted-recon; sid:200012336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365onedrivestorage.myportfolio.com"; classtype:attempted-recon; sid:200012337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365projectmemo.myportfolio.com"; classtype:attempted-recon; sid:200012338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office365xxxjhgxxxonedrivekjhjdggccx.myportfolio.com"; classtype:attempted-recon; sid:200012339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office39283c79b6d239c952b821624b0e6a26c3383c79b6d239c952b821624.emailnow2.workers.dev"; classtype:attempted-recon; sid:200012340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office517561fc83f1fcba0c373e6a3194623e517561fc83f1fcba0c373e6a3.wheelinghomeless.workers.dev"; classtype:attempted-recon; sid:200012341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office56b37d9abc629a95a353b4753bea37a356b37d9abc629a95a353b4753.acceptance.workers.dev"; classtype:attempted-recon; sid:200012342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office791eb7f904b4cf42b73b8b6eb3bd1023791eb7f904b4cf42b73b8b6eb.tynanlaw.workers.dev"; classtype:attempted-recon; sid:200012343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office7be5d0cc7597185ea2b07c5d67ace2647be5d0cc7597185ea2b07c5d6.mailmicrosoft.workers.dev"; classtype:attempted-recon; sid:200012344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office80f8a649b49eef411c04a82b3e39b85b80f8a649b49eef411c04aa8fd.onedriveoffice.workers.dev"; classtype:attempted-recon; sid:200012345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office92860fc8359aa442dbbbd31cd358386492860fc8359aa442dbbbd31cd.microsoftdrives1.workers.dev"; classtype:attempted-recon; sid:200012346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office949abb2585772ab51a8ad332f13989dcd5d5bb2585772ab51a8ad332f.abcsenderz.workers.dev"; classtype:attempted-recon; sid:200012347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office95352e9ccf1b1b0027b683de66e337bb95352e9ccf1b1b0027b683de6.mcrosoftfilezs.workers.dev"; classtype:attempted-recon; sid:200012348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeaf3038133032eec1406a08677e4e3152af3038133032eec1406a08677.mojylaw.workers.dev"; classtype:attempted-recon; sid:200012349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officebd96618918cac08e309d8b2e5a3d6d25bd96618918cac08e309d8b2e5.dreamsgentlemenclub.workers.dev"; classtype:attempted-recon; sid:200012350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officec53d59b9a7fa68faa8ac3e6fed0f7678c53d59b9a7fa68faa8ac3e6fe.cathykonnik.workers.dev"; classtype:attempted-recon; sid:200012351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officedrive204b23499ee682480a9d4fb5592dcf30c7b323499ee682480a9d.ondreivsds.workers.dev"; classtype:attempted-recon; sid:200012352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officedrive671d943c66d43639ff504f6e8603b0d3637b943c66d43639ff50.offices365files.workers.dev"; classtype:attempted-recon; sid:200012353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officedrive6860908c937775e0f58fe179754804126860908c937775e0f58f.onedrivesgf.workers.dev"; classtype:attempted-recon; sid:200012354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officedrivef7848b1089c0b94ba05f0ee7a32b53dbf7848b1089c0b94ba05f.drivecheckmails.workers.dev"; classtype:attempted-recon; sid:200012355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officedrivesxe85bdf3fb68145124c57c78d1f798930e85bdf3fb68145124c.sureonedrive.workers.dev"; classtype:attempted-recon; sid:200012356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officee1b9da80a723c5f1dffe6c11ce4cffb9e1b9da80a723c5f1dffe6c11c.accceptance.workers.dev"; classtype:attempted-recon; sid:200012357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officee421a8bc35722f5aa4bbc277404bf8bee421a8bc35722f5aa4bbc2774.officemicrosofte421a8bc35722f5aa4bbc277404bf8bee421a8bc35722f5a.workers.dev"; classtype:attempted-recon; sid:200012358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeee.bubbleapps.io"; classtype:attempted-recon; sid:200012359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officematsolutions.co.za"; classtype:attempted-recon; sid:200012360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officemicrosoft4cc17ac0369d77b37b0126363c5a814f4cc17ac0369d77b3.sharepointsoft.workers.dev"; classtype:attempted-recon; sid:200012361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrive0449c492c4fd1eb2f9a68932d4b8e7ff0449c492c4fd1eb2f.mcrosoftfilez6879.workers.dev"; classtype:attempted-recon; sid:200012362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrive25ffed98fda6dd6c8d5c80834463490d25ffed98fda6dd6c8.microsoftz.workers.dev"; classtype:attempted-recon; sid:200012363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrive634e3a53e73e0036f30a04bf224dcf85634e3a53e73e0036f.microsoft1.workers.dev"; classtype:attempted-recon; sid:200012364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrive7259cb18c1bc44b8e9b415dd251dd4ce7259cb18c1bc44b8e.micromails.workers.dev"; classtype:attempted-recon; sid:200012365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrive7be1bfb0486de510b18632cad5938a287be1bfb0486de510b.paulboffice.workers.dev"; classtype:attempted-recon; sid:200012366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrive896f8a9115240dd777b605c925eca22c381c8a9115240dd77.softoffice.workers.dev"; classtype:attempted-recon; sid:200012367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrive9cf9dd481ca05e2e7a7837abcf593ef6e37abcf593ef6e37a.mcrosoftfiles.workers.dev"; classtype:attempted-recon; sid:200012368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrivea3188350d116c56f4640139145cbca08a3188350d116c56f4.officepos.workers.dev"; classtype:attempted-recon; sid:200012369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedriveaf5f5e5ad0794773bb4296155c18d99caf5f5e5ad0794773b.softofficex.workers.dev"; classtype:attempted-recon; sid:200012370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedriveb7affd86aa6565d724aefba4b8dbea52b7affd86aa6565d72.officewi.workers.dev"; classtype:attempted-recon; sid:200012371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrivec34109e8baa4f981ff836aec31d86510c34109e8baa4f981f.softshare.workers.dev"; classtype:attempted-recon; sid:200012372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrivedb4a74607068611f61cd159e966ae78d53c319380101349d0.softmicromail1.workers.dev"; classtype:attempted-recon; sid:200012373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrivee376ca49c36aeb18a1926bb5d169739ce376ca49c36aeb18a.microsoftmails.workers.dev"; classtype:attempted-recon; sid:200012374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonedrives2e38ea393a11eb94bd1bc533816b19052e38ea3b19052e38.filemicrosoft1.workers.dev"; classtype:attempted-recon; sid:200012375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeonline.manifo.com"; classtype:attempted-recon; sid:200012376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officeoutlookfdaa672a942961604a8cd3b0cb5247c2fdaa672a942961604a.abcsender.workers.dev"; classtype:attempted-recon; sid:200012377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officequarantineemails.elementor.cloud"; classtype:attempted-recon; sid:200012378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"offices160a0dfe952dc58d52babb813089b049160a0dfe952dc58d52babb81.officemails.workers.dev"; classtype:attempted-recon; sid:200012379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"offices7b6ce136c0aad19d8d3ef2d19e7d8b515989e136c0aad19d8d3ef2d1.officesgm.workers.dev"; classtype:attempted-recon; sid:200012380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officesc739fc24499a54ef81e2243e9d60c97fc739fc24499a54ef81e2243e.filesesecures.workers.dev"; classtype:attempted-recon; sid:200012381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"officialliker.co"; classtype:attempted-recon; sid:200012382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"offre.streamlink.to"; classtype:attempted-recon; sid:200012383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"offshorestaticstructures.bancollombia321.repl.co"; classtype:attempted-recon; sid:200012384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"offyourplate.my.idaptive.app"; classtype:attempted-recon; sid:200012385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofgcdrpalg.duckdns.org"; classtype:attempted-recon; sid:200012386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofhcoxfumn.duckdns.org"; classtype:attempted-recon; sid:200012387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oficialofiice.webcindario.com"; classtype:attempted-recon; sid:200012388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofkqcycsli.duckdns.org"; classtype:attempted-recon; sid:200012389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofnqywwiax.duckdns.org"; classtype:attempted-recon; sid:200012390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofntddfvvx.duckdns.org"; classtype:attempted-recon; sid:200012391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofomtyeanr.duckdns.org"; classtype:attempted-recon; sid:200012392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofpurotucf.duckdns.org"; classtype:attempted-recon; sid:200012393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofpuxvecol.duckdns.org"; classtype:attempted-recon; sid:200012394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofqoozvejm.duckdns.org"; classtype:attempted-recon; sid:200012395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofrtassetiembrextrcash.com"; classtype:attempted-recon; sid:200012396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ofwbqndvyq.duckdns.org"; classtype:attempted-recon; sid:200012397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogbjdaubxx.duckdns.org"; classtype:attempted-recon; sid:200012398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogccgrruxt.duckdns.org"; classtype:attempted-recon; sid:200012399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogdraashag.duckdns.org"; classtype:attempted-recon; sid:200012400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oggkesbliu.duckdns.org"; classtype:attempted-recon; sid:200012401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oggtlmwkkg.duckdns.org"; classtype:attempted-recon; sid:200012402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogktmtipie.duckdns.org"; classtype:attempted-recon; sid:200012403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogmbcwvhvs.duckdns.org"; classtype:attempted-recon; sid:200012404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogoyyburnm.duckdns.org"; classtype:attempted-recon; sid:200012405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogsnabrmoo.duckdns.org"; classtype:attempted-recon; sid:200012406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oguhiltcqq.duckdns.org"; classtype:attempted-recon; sid:200012407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogvddezcnl.duckdns.org"; classtype:attempted-recon; sid:200012408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogwnwjhizj.duckdns.org"; classtype:attempted-recon; sid:200012409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogytfvlokb.duckdns.org"; classtype:attempted-recon; sid:200012410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ogyxqzykjr.duckdns.org"; classtype:attempted-recon; sid:200012411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oh-viewsharedfile-onedrive.firebaseapp.com"; classtype:attempted-recon; sid:200012412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oh-viewsharedfile-onedrive.web.app"; classtype:attempted-recon; sid:200012413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ohhcxvlhod.duckdns.org"; classtype:attempted-recon; sid:200012414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ohmyglory.com"; classtype:attempted-recon; sid:200012415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ohw.tf"; classtype:attempted-recon; sid:200012416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ohxcwqjwmx.duckdns.org"; classtype:attempted-recon; sid:200012417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oigbvdiaku.duckdns.org"; classtype:attempted-recon; sid:200012418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oihgkoligv.duckdns.org"; classtype:attempted-recon; sid:200012419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oijtgnxjyy.duckdns.org"; classtype:attempted-recon; sid:200012420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oikklpfhie.duckdns.org"; classtype:attempted-recon; sid:200012421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oikmmmn998.firebaseapp.com"; classtype:attempted-recon; sid:200012422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oikmmmn998.web.app"; classtype:attempted-recon; sid:200012423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oilhcyrkjo.duckdns.org"; classtype:attempted-recon; sid:200012424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oisbnjuzhf.duckdns.org"; classtype:attempted-recon; sid:200012425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oiswwnwsjd.duckdns.org"; classtype:attempted-recon; sid:200012426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oixbfexbkn.duckdns.org"; classtype:attempted-recon; sid:200012427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oixgiejo8596.liveblog365.com"; classtype:attempted-recon; sid:200012428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ojfodxtned.duckdns.org"; classtype:attempted-recon; sid:200012429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ojjcuexose.duckdns.org"; classtype:attempted-recon; sid:200012430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ojkbnedgsf.duckdns.org"; classtype:attempted-recon; sid:200012431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ojpdrhipma.duckdns.org"; classtype:attempted-recon; sid:200012432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ojqgjthhoi.duckdns.org"; classtype:attempted-recon; sid:200012433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ojsipcmxab.duckdns.org"; classtype:attempted-recon; sid:200012434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ojunnzzkhl.duckdns.org"; classtype:attempted-recon; sid:200012435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okanlwzqbe.duckdns.org"; classtype:attempted-recon; sid:200012436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okcphotoboothrental.com"; classtype:attempted-recon; sid:200012437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okcrxxhujf.duckdns.org"; classtype:attempted-recon; sid:200012438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okeykknqgo.duckdns.org"; classtype:attempted-recon; sid:200012439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okisokariari.com"; classtype:attempted-recon; sid:200012440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okjd6z.hyperphp.com"; classtype:attempted-recon; sid:200012441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oklwzyuqms.duckdns.org"; classtype:attempted-recon; sid:200012442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okpwtu.webwave.dev"; classtype:attempted-recon; sid:200012443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"okzxgpagwa.duckdns.org"; classtype:attempted-recon; sid:200012444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olabert.playcode.io"; classtype:attempted-recon; sid:200012445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olaezuvfsy.duckdns.org"; classtype:attempted-recon; sid:200012446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olaoiqdwcw.duckdns.org"; classtype:attempted-recon; sid:200012447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"old-file-surf-978b.theattdrops6111.workers.dev"; classtype:attempted-recon; sid:200012448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"old.martobang.workers.dev"; classtype:attempted-recon; sid:200012449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oldlacebronzeactivemovie.wl8794.repl.co"; classtype:attempted-recon; sid:200012450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oldmanhobbies.com"; classtype:attempted-recon; sid:200012451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olgeutavds.duckdns.org"; classtype:attempted-recon; sid:200012452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olhjotkezm.duckdns.org"; classtype:attempted-recon; sid:200012453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olipublic.com"; classtype:attempted-recon; sid:200012454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olirecords.mixture.ltd"; classtype:attempted-recon; sid:200012455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olivedrabjampackedcircle.pedroelias34.repl.co"; classtype:attempted-recon; sid:200012456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oliviwq.hyperphp.com"; classtype:attempted-recon; sid:200012457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olllaabekz.duckdns.org"; classtype:attempted-recon; sid:200012458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olmnjkyhgbv.top"; classtype:attempted-recon; sid:200012459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olpfknddjg.duckdns.org"; classtype:attempted-recon; sid:200012460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olqzriqsdi.duckdns.org"; classtype:attempted-recon; sid:200012461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olsapjpiub.duckdns.org"; classtype:attempted-recon; sid:200012462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oluwarantinmialafia.godaddysites.com"; classtype:attempted-recon; sid:200012463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olx-dispatch.5466475.xyz"; classtype:attempted-recon; sid:200012464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olx-informing.9077754.xyz"; classtype:attempted-recon; sid:200012465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olx-pl-id95iw.everyones.top"; classtype:attempted-recon; sid:200012466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olx-pl-xhp.accept8145.me"; classtype:attempted-recon; sid:200012467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olx-shopping.435279.xyz"; classtype:attempted-recon; sid:200012468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olyqiohwmy.duckdns.org"; classtype:attempted-recon; sid:200012469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"olyzjnqprf.duckdns.org"; classtype:attempted-recon; sid:200012470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"om-9473s.9237-28a.workers.dev"; classtype:attempted-recon; sid:200012471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omahashutters.com"; classtype:attempted-recon; sid:200012472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omareturnian.com"; classtype:attempted-recon; sid:200012473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omcpakwfuy.duckdns.org"; classtype:attempted-recon; sid:200012474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omicronhotel.com"; classtype:attempted-recon; sid:200012475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omniafricashop.online"; classtype:attempted-recon; sid:200012476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omqqqvmwpi.duckdns.org"; classtype:attempted-recon; sid:200012477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omrgroupitaliagiambelli.firebaseapp.com"; classtype:attempted-recon; sid:200012478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omrgroupitaliagiambelli.web.app"; classtype:attempted-recon; sid:200012479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omsunqutpc.duckdns.org"; classtype:attempted-recon; sid:200012480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omuhdjnoxk.duckdns.org"; classtype:attempted-recon; sid:200012481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omvxgumljj.duckdns.org"; classtype:attempted-recon; sid:200012482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onatfsdlbw.duckdns.org"; classtype:attempted-recon; sid:200012483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive-public.fengwind.workers.dev"; classtype:attempted-recon; sid:200012484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive-shared.zineadiet.workers.dev"; classtype:attempted-recon; sid:200012485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.12075354539642.workers.dev"; classtype:attempted-recon; sid:200012486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.ama2on.workers.dev"; classtype:attempted-recon; sid:200012487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.augustus-xue.workers.dev"; classtype:attempted-recon; sid:200012488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.comnom.workers.dev"; classtype:attempted-recon; sid:200012489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.dearkai.workers.dev"; classtype:attempted-recon; sid:200012490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.dpot.workers.dev"; classtype:attempted-recon; sid:200012491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.jennitai.workers.dev"; classtype:attempted-recon; sid:200012492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.lonelyminicat.workers.dev"; classtype:attempted-recon; sid:200012493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.lqbby.workers.dev"; classtype:attempted-recon; sid:200012494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.nmzl.workers.dev"; classtype:attempted-recon; sid:200012495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.potatoyang246.workers.dev"; classtype:attempted-recon; sid:200012496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.prprv.workers.dev"; classtype:attempted-recon; sid:200012497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.yizhimengxin2233.workers.dev"; classtype:attempted-recon; sid:200012498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive.ziznah.workers.dev"; classtype:attempted-recon; sid:200012499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive00-21556.firebaseapp.com"; classtype:attempted-recon; sid:200012500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrive00-21556.web.app"; classtype:attempted-recon; sid:200012501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrivee5.joejoe5.workers.dev"; classtype:attempted-recon; sid:200012502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrivefiles0011101.weebly.com"; classtype:attempted-recon; sid:200012503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedriveoffice28432c5b1f27614986e6d114fb3cb70028432c5b1f2761498.checkonedrives.workers.dev"; classtype:attempted-recon; sid:200012504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onedrv.web.app"; classtype:attempted-recon; sid:200012505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onee-a0488.web.app"; classtype:attempted-recon; sid:200012506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oneinch.web.app"; classtype:attempted-recon; sid:200012507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oneone-19cd8.web.app"; classtype:attempted-recon; sid:200012508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onepovbrpe.duckdns.org"; classtype:attempted-recon; sid:200012509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onescanner.web.app"; classtype:attempted-recon; sid:200012510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onheqrinkm.duckdns.org"; classtype:attempted-recon; sid:200012511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onige.cm"; classtype:attempted-recon; sid:200012512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onilebanking7.onilebanking7.repl.co"; classtype:attempted-recon; sid:200012513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onin8yendf.temp.swtest.ru"; classtype:attempted-recon; sid:200012514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oninendfi2.temp.swtest.ru"; classtype:attempted-recon; sid:200012515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oniowjzpfx.firebaseapp.com"; classtype:attempted-recon; sid:200012516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oniowjzpfx.web.app"; classtype:attempted-recon; sid:200012517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onjixuphbo.duckdns.org"; classtype:attempted-recon; sid:200012518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-acount-validat-e.on.fleek.co"; classtype:attempted-recon; sid:200012519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-bankin5.validarusername.repl.co"; classtype:attempted-recon; sid:200012520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-citi-serv.dijom961481023.workers.dev"; classtype:attempted-recon; sid:200012521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-citi-serv.sewec46652.workers.dev"; classtype:attempted-recon; sid:200012522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-citi-srcr.xovep73131699.workers.dev"; classtype:attempted-recon; sid:200012523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-kundenportal-spk.de"; classtype:attempted-recon; sid:200012524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-mail-108481.weeblysite.com"; classtype:attempted-recon; sid:200012525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-mtb1.firebaseapp.com"; classtype:attempted-recon; sid:200012526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-mtb1.web.app"; classtype:attempted-recon; sid:200012527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-pdf-portal.visura.co"; classtype:attempted-recon; sid:200012528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-umpqua.firebaseapp.com"; classtype:attempted-recon; sid:200012529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-umpqua.web.app"; classtype:attempted-recon; sid:200012530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online.attservice.workers.dev"; classtype:attempted-recon; sid:200012531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online.jpstrader.com"; classtype:attempted-recon; sid:200012532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinebankign4.galicia54.repl.co"; classtype:attempted-recon; sid:200012533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinebncoitau.x10.mx"; classtype:attempted-recon; sid:200012534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinebncopyitau.x10.mx"; classtype:attempted-recon; sid:200012535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinec.mcdir.me"; classtype:attempted-recon; sid:200012536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlineebankingarg.hbgaliciaarg.repl.co"; classtype:attempted-recon; sid:200012537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinegliciatoken.onlineglicia.repl.co"; classtype:attempted-recon; sid:200012538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinehomee.repl.co"; classtype:attempted-recon; sid:200012539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlineoffice365-owa5418.microsoftcertifications2022.workers.dev"; classtype:attempted-recon; sid:200012540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinesantanderesss.com.swtest.ru"; classtype:attempted-recon; sid:200012541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinesantanderspainghgh.com.swtest.ru"; classtype:attempted-recon; sid:200012542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlineshowerheads.com"; classtype:attempted-recon; sid:200012543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlinetracking7usps.ml"; classtype:attempted-recon; sid:200012544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onlysportplus.com"; classtype:attempted-recon; sid:200012545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onnetbkhxi.duckdns.org"; classtype:attempted-recon; sid:200012546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onrydgloer.duckdns.org"; classtype:attempted-recon; sid:200012547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onsdutyheres-903954.click"; classtype:attempted-recon; sid:200012548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onspghvdfe.duckdns.org"; classtype:attempted-recon; sid:200012549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onsrfflhdg.firebaseapp.com"; classtype:attempted-recon; sid:200012550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onsrfflhdg.web.app"; classtype:attempted-recon; sid:200012551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onstre.com"; classtype:attempted-recon; sid:200012552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ontarioonlineacademy.com"; classtype:attempted-recon; sid:200012553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onvcrmoyvn.duckdns.org"; classtype:attempted-recon; sid:200012554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onvpkvjgqu.duckdns.org"; classtype:attempted-recon; sid:200012555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"onxnsltjug.duckdns.org"; classtype:attempted-recon; sid:200012556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ooaqctwumr.duckdns.org"; classtype:attempted-recon; sid:200012557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oocgfcsngv.duckdns.org"; classtype:attempted-recon; sid:200012558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oohlziihch.duckdns.org"; classtype:attempted-recon; sid:200012559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ooiowzbucd.duckdns.org"; classtype:attempted-recon; sid:200012560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oojwgrqqhe.duckdns.org"; classtype:attempted-recon; sid:200012561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oolrddrsry.duckdns.org"; classtype:attempted-recon; sid:200012562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oonmerdcpc.duckdns.org"; classtype:attempted-recon; sid:200012563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ootlathens.duckdns.org"; classtype:attempted-recon; sid:200012564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ootuqpgycg.duckdns.org"; classtype:attempted-recon; sid:200012565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ooylargspe.duckdns.org"; classtype:attempted-recon; sid:200012566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ooymnuxozw.duckdns.org"; classtype:attempted-recon; sid:200012567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opadtsepdu.duckdns.org"; classtype:attempted-recon; sid:200012568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opcxmdrjix.duckdns.org"; classtype:attempted-recon; sid:200012569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opdalazzam.duckdns.org"; classtype:attempted-recon; sid:200012570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opdateringsrvc.com"; classtype:attempted-recon; sid:200012571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opence.dos-comm.ru"; classtype:attempted-recon; sid:200012572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"openedl.org"; classtype:attempted-recon; sid:200012573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opensea-help.com"; classtype:attempted-recon; sid:200012574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opensea-nft-airdrop.com"; classtype:attempted-recon; sid:200012575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opensea-support.rf.gd"; classtype:attempted-recon; sid:200012576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opensea-tools.net"; classtype:attempted-recon; sid:200012577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"openseaspps.com"; classtype:attempted-recon; sid:200012578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opensee-marketplace.com"; classtype:attempted-recon; sid:200012579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opensels.com"; classtype:attempted-recon; sid:200012580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"operationiaod892a.liveblog365.com"; classtype:attempted-recon; sid:200012581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ophyqyhkdj.duckdns.org"; classtype:attempted-recon; sid:200012582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opirroawsg.duckdns.org"; classtype:attempted-recon; sid:200012583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opkatmneut.duckdns.org"; classtype:attempted-recon; sid:200012584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opnsea-oo-login.mystrikingly.com"; classtype:attempted-recon; sid:200012585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opntcrfzfl.duckdns.org"; classtype:attempted-recon; sid:200012586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oponvozihr.duckdns.org"; classtype:attempted-recon; sid:200012587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opretretopoptk.000webhostapp.com"; classtype:attempted-recon; sid:200012588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opsadnmppb.duckdns.org"; classtype:attempted-recon; sid:200012589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"optus-support.net"; classtype:attempted-recon; sid:200012590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"optuselaretanestrace-b94c6f.ingress-comporellon.ewp.live"; classtype:attempted-recon; sid:200012591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"optydistribution.ca"; classtype:attempted-recon; sid:200012592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opvbnuqqdb.duckdns.org"; classtype:attempted-recon; sid:200012593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opzyvvjfbl.duckdns.org"; classtype:attempted-recon; sid:200012594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqabanajrx.duckdns.org"; classtype:attempted-recon; sid:200012595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqbgxqmsys.duckdns.org"; classtype:attempted-recon; sid:200012596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqbwqlubwe.duckdns.org"; classtype:attempted-recon; sid:200012597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqcvdczaqb.duckdns.org"; classtype:attempted-recon; sid:200012598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqepjgaelq.duckdns.org"; classtype:attempted-recon; sid:200012599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqfkyvqftw.duckdns.org"; classtype:attempted-recon; sid:200012600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqgbidvxya.duckdns.org"; classtype:attempted-recon; sid:200012601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqjlpsnlvx.duckdns.org"; classtype:attempted-recon; sid:200012602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqobgeaybo.duckdns.org"; classtype:attempted-recon; sid:200012603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqqptwvggx.duckdns.org"; classtype:attempted-recon; sid:200012604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqvyaepghv.duckdns.org"; classtype:attempted-recon; sid:200012605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oqyxhwkaeg.duckdns.org"; classtype:attempted-recon; sid:200012606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orabote.name"; classtype:attempted-recon; sid:200012607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orangbanq2.temp.swtest.ru"; classtype:attempted-recon; sid:200012608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orange-security.cloud.coreoz.com"; classtype:attempted-recon; sid:200012609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orange-thunder-1962.anyrag8021015.workers.dev"; classtype:attempted-recon; sid:200012610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orange.iobeya.com"; classtype:attempted-recon; sid:200012611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orange.sphinxonline.net"; classtype:attempted-recon; sid:200012612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orange.windagrande78.workers.dev"; classtype:attempted-recon; sid:200012613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orangebank.mailerpage.io"; classtype:attempted-recon; sid:200012614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orangess.contactin.bio"; classtype:attempted-recon; sid:200012615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oranjempsnspeo.t.justns.ru"; classtype:attempted-recon; sid:200012616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oranvr.gq"; classtype:attempted-recon; sid:200012617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orcube-bf0cf.web.app"; classtype:attempted-recon; sid:200012618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"order4232.info"; classtype:attempted-recon; sid:200012619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ordinaryyellowmiddleware.piterivano30.repl.co"; classtype:attempted-recon; sid:200012620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ordsenhnyk.duckdns.org"; classtype:attempted-recon; sid:200012621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orhncfqosb.duckdns.org"; classtype:attempted-recon; sid:200012622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oribrdxsbh.duckdns.org"; classtype:attempted-recon; sid:200012623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"origin.axieinfinity.com"; classtype:attempted-recon; sid:200012624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"originmirrors.com"; classtype:attempted-recon; sid:200012625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orilogbon.me"; classtype:attempted-recon; sid:200012626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orionlandscapeco.com"; classtype:attempted-recon; sid:200012627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ormail.podia.com"; classtype:attempted-recon; sid:200012628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ormantencs112.odoo.com"; classtype:attempted-recon; sid:200012629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ornima.com"; classtype:attempted-recon; sid:200012630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orostellar.com"; classtype:attempted-recon; sid:200012631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orouatwjfi.duckdns.org"; classtype:attempted-recon; sid:200012632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orsdhlzmoa.duckdns.org"; classtype:attempted-recon; sid:200012633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orxbrsjyku.duckdns.org"; classtype:attempted-recon; sid:200012634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orzvqozhft.duckdns.org"; classtype:attempted-recon; sid:200012635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"osbpkaxdkv.duckdns.org"; classtype:attempted-recon; sid:200012636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oscond.com"; classtype:attempted-recon; sid:200012637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"osdgkgscmn.duckdns.org"; classtype:attempted-recon; sid:200012638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"osfnft.xyz"; classtype:attempted-recon; sid:200012639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"osohfffxjv.duckdns.org"; classtype:attempted-recon; sid:200012640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otatceensz.duckdns.org"; classtype:attempted-recon; sid:200012641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otayjhxped.duckdns.org"; classtype:attempted-recon; sid:200012642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otehqifohm.duckdns.org"; classtype:attempted-recon; sid:200012643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otepkvmgom.duckdns.org"; classtype:attempted-recon; sid:200012644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"othersplc.firebaseapp.com"; classtype:attempted-recon; sid:200012645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"othersplc.web.app"; classtype:attempted-recon; sid:200012646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"othsbezrgo.duckdns.org"; classtype:attempted-recon; sid:200012647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otiaysvuwq.duckdns.org"; classtype:attempted-recon; sid:200012648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otibhiycow.duckdns.org"; classtype:attempted-recon; sid:200012649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otkvzrjkkv.duckdns.org"; classtype:attempted-recon; sid:200012650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otlkihogwo.duckdns.org"; classtype:attempted-recon; sid:200012651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otomoto-h229.net"; classtype:attempted-recon; sid:200012652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otomoto3452.com"; classtype:attempted-recon; sid:200012653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otveewhekh.duckdns.org"; classtype:attempted-recon; sid:200012654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otvqfhxjjy.duckdns.org"; classtype:attempted-recon; sid:200012655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"otvtikussf.duckdns.org"; classtype:attempted-recon; sid:200012656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ou1ook-maile-1d28.queri.workers.dev"; classtype:attempted-recon; sid:200012657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouczdbimev.duckdns.org"; classtype:attempted-recon; sid:200012658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oudvrtbvwb.firebaseapp.com"; classtype:attempted-recon; sid:200012659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouectnqzeo.duckdns.org"; classtype:attempted-recon; sid:200012660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oueehpkkht.duckdns.org"; classtype:attempted-recon; sid:200012661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouhcnbfvho.duckdns.org"; classtype:attempted-recon; sid:200012662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouikshhavx.duckdns.org"; classtype:attempted-recon; sid:200012663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oukeqwlmfb.duckdns.org"; classtype:attempted-recon; sid:200012664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oukqkmvupf.duckdns.org"; classtype:attempted-recon; sid:200012665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouktxljowz.duckdns.org"; classtype:attempted-recon; sid:200012666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oumjgakjns.duckdns.org"; classtype:attempted-recon; sid:200012667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oundzmupxz.duckdns.org"; classtype:attempted-recon; sid:200012668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouqsntclki.duckdns.org"; classtype:attempted-recon; sid:200012669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"our-a272e1.ingress-erytho.ewp.live"; classtype:attempted-recon; sid:200012670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ourkitmrhi.duckdns.org"; classtype:attempted-recon; sid:200012671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outcubvgbq.duckdns.org"; classtype:attempted-recon; sid:200012672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlok.formaloo.net"; classtype:attempted-recon; sid:200012673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlook1541489.webcindario.com"; classtype:attempted-recon; sid:200012674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlookadminsupport.softr.app"; classtype:attempted-recon; sid:200012675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlookk.myportfolio.com"; classtype:attempted-recon; sid:200012676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlookonline.myportfolio.com"; classtype:attempted-recon; sid:200012677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlookowa.myportfolio.com"; classtype:attempted-recon; sid:200012678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlookowalive.myportfolio.com"; classtype:attempted-recon; sid:200012679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlooksharepointfile.myportfolio.com"; classtype:attempted-recon; sid:200012680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlooksotf_cln_mailcln.filesusr.com"; classtype:attempted-recon; sid:200012681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouutjestni.duckdns.org"; classtype:attempted-recon; sid:200012682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ouvr-bn.web.app"; classtype:attempted-recon; sid:200012683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ov-h-709f2.firebaseapp.com"; classtype:attempted-recon; sid:200012684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ov-h-709f2.web.app"; classtype:attempted-recon; sid:200012685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovcaigcqvs.duckdns.org"; classtype:attempted-recon; sid:200012686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovdjtxhink.duckdns.org"; classtype:attempted-recon; sid:200012687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovh-cl0ud.web.app"; classtype:attempted-recon; sid:200012688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovh-dfh.web.app"; classtype:attempted-recon; sid:200012689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovh-link.firebaseapp.com"; classtype:attempted-recon; sid:200012690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovh-link.web.app"; classtype:attempted-recon; sid:200012691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovhh-0.web.app"; classtype:attempted-recon; sid:200012692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovhh-19f4a.web.app"; classtype:attempted-recon; sid:200012693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovhirquzxi.duckdns.org"; classtype:attempted-recon; sid:200012694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovpnpxoapf.duckdns.org"; classtype:attempted-recon; sid:200012695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovtkngycyp.duckdns.org"; classtype:attempted-recon; sid:200012696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ovxqvxrqhx.duckdns.org"; classtype:attempted-recon; sid:200012697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ow-up.bluemid23.repl.co"; classtype:attempted-recon; sid:200012698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owamail29.auth5656.workers.dev"; classtype:attempted-recon; sid:200012699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owaweb3-6-5.mailauthorize.workers.dev"; classtype:attempted-recon; sid:200012700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owbfymbbxk.duckdns.org"; classtype:attempted-recon; sid:200012701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owfjdyijzd.duckdns.org"; classtype:attempted-recon; sid:200012702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owgiyfhqgx.duckdns.org"; classtype:attempted-recon; sid:200012703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owjpdksnqz.duckdns.org"; classtype:attempted-recon; sid:200012704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owkisizhha.duckdns.org"; classtype:attempted-recon; sid:200012705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owkraaeqtl.duckdns.org"; classtype:attempted-recon; sid:200012706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owlmxqddru.duckdns.org"; classtype:attempted-recon; sid:200012707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owlzelioww.duckdns.org"; classtype:attempted-recon; sid:200012708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owofcqzoxi.duckdns.org"; classtype:attempted-recon; sid:200012709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owtjynsuaj.duckdns.org"; classtype:attempted-recon; sid:200012710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owwnzkvzut.duckdns.org"; classtype:attempted-recon; sid:200012711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owyfdyorvn.duckdns.org"; classtype:attempted-recon; sid:200012712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owyoihaajl.duckdns.org"; classtype:attempted-recon; sid:200012713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owzyydrqmy.duckdns.org"; classtype:attempted-recon; sid:200012714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxbtki.webwave.dev"; classtype:attempted-recon; sid:200012715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxdhosjasr.duckdns.org"; classtype:attempted-recon; sid:200012716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxglfzcalr.duckdns.org"; classtype:attempted-recon; sid:200012717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxgrimhapx.duckdns.org"; classtype:attempted-recon; sid:200012718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxmathrpkh.duckdns.org"; classtype:attempted-recon; sid:200012719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxnjiuxqea.duckdns.org"; classtype:attempted-recon; sid:200012720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxrynfpdei.duckdns.org"; classtype:attempted-recon; sid:200012721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxsgpxzlnp.duckdns.org"; classtype:attempted-recon; sid:200012722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oxspsdxpyi.duckdns.org"; classtype:attempted-recon; sid:200012723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oycshnakur.duckdns.org"; classtype:attempted-recon; sid:200012724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oyjmjaonho.duckdns.org"; classtype:attempted-recon; sid:200012725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oyjngxfxhu.duckdns.org"; classtype:attempted-recon; sid:200012726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oykfdmhjei.duckdns.org"; classtype:attempted-recon; sid:200012727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oylpaeoxza.duckdns.org"; classtype:attempted-recon; sid:200012728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oyoshopbuisness.easy.co"; classtype:attempted-recon; sid:200012729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oytbvxhwoe.duckdns.org"; classtype:attempted-recon; sid:200012730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oyusgvhpeu.duckdns.org"; classtype:attempted-recon; sid:200012731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oyutwexcfgs.top"; classtype:attempted-recon; sid:200012732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oyxpsqsvfm.duckdns.org"; classtype:attempted-recon; sid:200012733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozabjofcza.duckdns.org"; classtype:attempted-recon; sid:200012734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozboya.com"; classtype:attempted-recon; sid:200012735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozjlsitcmj.duckdns.org"; classtype:attempted-recon; sid:200012736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozlgnvfpxp.duckdns.org"; classtype:attempted-recon; sid:200012737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozluijatrb.duckdns.org"; classtype:attempted-recon; sid:200012738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozmmjcabiq.duckdns.org"; classtype:attempted-recon; sid:200012739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozmrimehht.duckdns.org"; classtype:attempted-recon; sid:200012740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozo.pages.dev"; classtype:attempted-recon; sid:200012741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozuuzldamv.duckdns.org"; classtype:attempted-recon; sid:200012742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ozykbbnzzz.duckdns.org"; classtype:attempted-recon; sid:200012743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p0lygon-php.blogspot.com"; classtype:attempted-recon; sid:200012744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p1us3-nkh.jiguangsiwa.cn"; classtype:attempted-recon; sid:200012745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p26355acouandapdatesnow157798.co.vu"; classtype:attempted-recon; sid:200012746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pa6e55acounsecureapdatesnow11251994.co.vu"; classtype:attempted-recon; sid:200012747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pa9355acounsecureapdatesnow25199411.co.vu"; classtype:attempted-recon; sid:200012748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pacific-utility-pipeline.myportfolio.com"; classtype:attempted-recon; sid:200012749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pacificcapital.com"; classtype:attempted-recon; sid:200012750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"package2021.blogspot.ba"; classtype:attempted-recon; sid:200012751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"package2021.blogspot.bg"; classtype:attempted-recon; sid:200012752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"package2021.blogspot.com"; classtype:attempted-recon; sid:200012753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"packageonlineza.page.link"; classtype:attempted-recon; sid:200012754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"packageusps.cloudns.ph"; classtype:attempted-recon; sid:200012755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"padhqubzys.duckdns.org"; classtype:attempted-recon; sid:200012756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pafdqdpqqp.duckdns.org"; classtype:attempted-recon; sid:200012757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pag35acountsapdatescecures18293378.co.vu"; classtype:attempted-recon; sid:200012758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagaesperfectapdatesacoundandsecures.co.vu"; classtype:attempted-recon; sid:200012759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagamenti.bestmailoffers.us"; classtype:attempted-recon; sid:200012760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagamentofaturahiper-a7b8c1.com"; classtype:attempted-recon; sid:200012761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagaseidntomationsactivitys.co.vu"; classtype:attempted-recon; sid:200012762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"page-recovery-identity2022.com"; classtype:attempted-recon; sid:200012763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"page.appmobilepages.workers.dev"; classtype:attempted-recon; sid:200012764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"page3eprot3ectionsservic3s3curity.epizy.com"; classtype:attempted-recon; sid:200012765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"page4counsecureaktifiapdat25766981.co.vu"; classtype:attempted-recon; sid:200012766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"page5comunit1apdatesacoiun1277365.co.vu"; classtype:attempted-recon; sid:200012767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageasacounsecureapdatesnow252519972.co.vu"; classtype:attempted-recon; sid:200012768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageassecurtysideytytaccounts.co.vu"; classtype:attempted-recon; sid:200012769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagebussines171409663052r4fi.co.vu"; classtype:attempted-recon; sid:200012770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageconfirmation500811.co.vu"; classtype:attempted-recon; sid:200012771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageconfirmation618576.co.vu"; classtype:attempted-recon; sid:200012772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageconfirmation652160.co.vu"; classtype:attempted-recon; sid:200012773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageconfirmation660003.co.vu"; classtype:attempted-recon; sid:200012774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageconfirmation868174.co.vu"; classtype:attempted-recon; sid:200012775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagehelp-center2022.rf.gd"; classtype:attempted-recon; sid:200012776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagehelpandsecure2022.co.vu"; classtype:attempted-recon; sid:200012777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagehelpmail4.duckdns.org"; classtype:attempted-recon; sid:200012778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagehelpmail5.duckdns.org"; classtype:attempted-recon; sid:200012779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagehelpsupport6516159851.co.vu"; classtype:attempted-recon; sid:200012780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagehelpsupport651615985156496.co.vu"; classtype:attempted-recon; sid:200012781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageidentity2022.com"; classtype:attempted-recon; sid:200012782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageinternetactivityandstaysafetys.co.vu"; classtype:attempted-recon; sid:200012783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageprotection.co.vu"; classtype:attempted-recon; sid:200012784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagerecoveryidentity2.com"; classtype:attempted-recon; sid:200012785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pages-help-center.epizy.com"; classtype:attempted-recon; sid:200012786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pages-marvelous-project.webflow.io"; classtype:attempted-recon; sid:200012787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pages-protection-update-2022.me"; classtype:attempted-recon; sid:200012788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pages-protetions-updates2022.co"; classtype:attempted-recon; sid:200012789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pages.secure-accts.workers.dev"; classtype:attempted-recon; sid:200012790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagesacouandssecureapdatess.co.vu"; classtype:attempted-recon; sid:200012791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagesacounsercurecomunitstand19902797.co.vu"; classtype:attempted-recon; sid:200012792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagesecure1nformationactivitysystemin.co.vu"; classtype:attempted-recon; sid:200012793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagesecureinf0rmationactivitysystem.co.vu"; classtype:attempted-recon; sid:200012794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagesecureinformationsactisltysistem.co.vu"; classtype:attempted-recon; sid:200012795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagesrecureinformationactivltyclients2022.co.vu"; classtype:attempted-recon; sid:200012796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagesupportoffice2022.epizy.com"; classtype:attempted-recon; sid:200012797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pageverictionsidentytysaccountas2022.co.vu"; classtype:attempted-recon; sid:200012798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagosfreetuya.hostfree.pw"; classtype:attempted-recon; sid:200012799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paiementboncoin.com"; classtype:attempted-recon; sid:200012800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paiooetlrb.duckdns.org"; classtype:attempted-recon; sid:200012801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paket-postch.work"; classtype:attempted-recon; sid:200012802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paket-secure.us11.instawp.xyz"; classtype:attempted-recon; sid:200012803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paketomir.atservers.net"; classtype:attempted-recon; sid:200012804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paknasirindustry.com"; classtype:attempted-recon; sid:200012805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"palycfjokj.duckdns.org"; classtype:attempted-recon; sid:200012806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancaekeswap.cloud"; classtype:attempted-recon; sid:200012807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancake-sand.com"; classtype:attempted-recon; sid:200012808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancake-swapp.com"; classtype:attempted-recon; sid:200012809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancake100x.finance"; classtype:attempted-recon; sid:200012810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancake7wop.com"; classtype:attempted-recon; sid:200012811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakefinance-tokenpresale.com"; classtype:attempted-recon; sid:200012812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakemobile.com"; classtype:attempted-recon; sid:200012813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakesswaps.tech"; classtype:attempted-recon; sid:200012814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakesswaps.us"; classtype:attempted-recon; sid:200012815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakesvvap.financial"; classtype:attempted-recon; sid:200012816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakesvwap.finance"; classtype:attempted-recon; sid:200012817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswa-p.com"; classtype:attempted-recon; sid:200012818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswap-com.thinkific.com"; classtype:attempted-recon; sid:200012819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswap-home.github.io"; classtype:attempted-recon; sid:200012820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswap.diamondhandsnetwork.app"; classtype:attempted-recon; sid:200012821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswap.finance.tradechange.in"; classtype:attempted-recon; sid:200012822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswap.himotechglobal.com"; classtype:attempted-recon; sid:200012823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswap.insure"; classtype:attempted-recon; sid:200012824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswapapp.com"; classtype:attempted-recon; sid:200012825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswape.net"; classtype:attempted-recon; sid:200012826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswapefinance.app"; classtype:attempted-recon; sid:200012827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswapfincnae.app"; classtype:attempted-recon; sid:200012828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswapmeta.pro"; classtype:attempted-recon; sid:200012829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswappers.com"; classtype:attempted-recon; sid:200012830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswappshop.blogspot.com"; classtype:attempted-recon; sid:200012831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswapsupport.co"; classtype:attempted-recon; sid:200012832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakeswapz.blogspot.com"; classtype:attempted-recon; sid:200012833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancakesweb.info"; classtype:attempted-recon; sid:200012834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancalteswap.finance"; classtype:attempted-recon; sid:200012835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancokeswap.cc"; classtype:attempted-recon; sid:200012836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancokeswope.finance.mechadda.com"; classtype:attempted-recon; sid:200012837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pandamoniumplaycentre.com"; classtype:attempted-recon; sid:200012838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"panelweb-4cae2.web.app"; classtype:attempted-recon; sid:200012839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pantonecolourss.com"; classtype:attempted-recon; sid:200012840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paonjrexff.duckdns.org"; classtype:attempted-recon; sid:200012841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paragua.x10.mx"; classtype:attempted-recon; sid:200012842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paragutya23.paraguay22.repl.co"; classtype:attempted-recon; sid:200012843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parajuniorline22.x10.mx"; classtype:attempted-recon; sid:200012844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parallelmetaspace.com"; classtype:attempted-recon; sid:200012845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parcel-reschedule-gb.firebaseapp.com"; classtype:attempted-recon; sid:200012846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parcel-reschedule-gb.web.app"; classtype:attempted-recon; sid:200012847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parcel-schedule-date.firebaseapp.com"; classtype:attempted-recon; sid:200012848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parcel-schedule-date.web.app"; classtype:attempted-recon; sid:200012849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parcel-ups-service.com"; classtype:attempted-recon; sid:200012850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parfumduroi.com"; classtype:attempted-recon; sid:200012851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parfumieftin.eu"; classtype:attempted-recon; sid:200012852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"park.great-site.net"; classtype:attempted-recon; sid:200012853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parkstatesbank.com"; classtype:attempted-recon; sid:200012854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"partnervrn.ru"; classtype:attempted-recon; sid:200012855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"parwrcoeti.duckdns.org"; classtype:attempted-recon; sid:200012856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pasgeasacittycityacaountasmy.co.vu"; classtype:attempted-recon; sid:200012857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pasgeasidtyisaycomunitytasyasda.co.vu"; classtype:attempted-recon; sid:200012858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"passgeaccountasdentitytsbverusi.co.vu"; classtype:attempted-recon; sid:200012859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"passionexploretechnology-busineshlp.my.id"; classtype:attempted-recon; sid:200012860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"passionfruit4576261.brizy.site"; classtype:attempted-recon; sid:200012861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pateltutorials.com"; classtype:attempted-recon; sid:200012862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"patient-cell-40f5.updatedlogmylogin.workers.dev"; classtype:attempted-recon; sid:200012863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"patient-night-b2a2.hfmhuntbay6214.workers.dev"; classtype:attempted-recon; sid:200012864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"patient-recipe-8acc.0z7nntak.workers.dev"; classtype:attempted-recon; sid:200012865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"patient-starp.9u94voh3.workers.dev"; classtype:attempted-recon; sid:200012866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paverguide.com"; classtype:attempted-recon; sid:200012867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pavivity.com"; classtype:attempted-recon; sid:200012868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paxful-load.pro"; classtype:attempted-recon; sid:200012869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paxful-more.pro"; classtype:attempted-recon; sid:200012870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paxful-term.pro"; classtype:attempted-recon; sid:200012871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paxful-vendor.pro"; classtype:attempted-recon; sid:200012872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paxful.com.ph"; classtype:attempted-recon; sid:200012873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paxful53.com"; classtype:attempted-recon; sid:200012874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paxxxfull-offer-lc9hfadgokprxly6a3e6jd.netlify.app"; classtype:attempted-recon; sid:200012875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"payee-review.firebaseapp.com"; classtype:attempted-recon; sid:200012876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"payee-review.web.app"; classtype:attempted-recon; sid:200012877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"payment-remittance-advice.myportfolio.com"; classtype:attempted-recon; sid:200012878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paymentnotificationnow.blogspot.com"; classtype:attempted-recon; sid:200012879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paymydoctor.ltd"; classtype:attempted-recon; sid:200012880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"payozavkfq.duckdns.org"; classtype:attempted-recon; sid:200012881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paypal.com.0.security-confirmation.d72b69c8e37aec662e13e39d929d6e3d.as2.2u.se"; classtype:attempted-recon; sid:200012882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paypal.secure-verimail-usersecure.com"; classtype:attempted-recon; sid:200012883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"paypay-bank.hjvter.cn"; classtype:attempted-recon; sid:200012884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbenjpbovi.duckdns.org"; classtype:attempted-recon; sid:200012885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbiqpauitq.duckdns.org"; classtype:attempted-recon; sid:200012886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbojfvrmri.duckdns.org"; classtype:attempted-recon; sid:200012887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbshcxztfp.duckdns.org"; classtype:attempted-recon; sid:200012888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbucqirfug.duckdns.org"; classtype:attempted-recon; sid:200012889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbwsgcjwgl.duckdns.org"; classtype:attempted-recon; sid:200012890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbydndxskf.duckdns.org"; classtype:attempted-recon; sid:200012891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pbzgfttjxy.duckdns.org"; classtype:attempted-recon; sid:200012892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pchmhnopco.duckdns.org"; classtype:attempted-recon; sid:200012893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcmqcdmmxw.duckdns.org"; classtype:attempted-recon; sid:200012894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcmvhhxodr.duckdns.org"; classtype:attempted-recon; sid:200012895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcnysciudb.duckdns.org"; classtype:attempted-recon; sid:200012896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcovyywogb.duckdns.org"; classtype:attempted-recon; sid:200012897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcqqyfbcim.duckdns.org"; classtype:attempted-recon; sid:200012898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcsystemscelaya.com"; classtype:attempted-recon; sid:200012899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcvcrutqle.duckdns.org"; classtype:attempted-recon; sid:200012900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pcxdpvuhfb.duckdns.org"; classtype:attempted-recon; sid:200012901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdairwwvrt.duckdns.org"; classtype:attempted-recon; sid:200012902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdbkpqtroy.duckdns.org"; classtype:attempted-recon; sid:200012903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdcaulfcsn.duckdns.org"; classtype:attempted-recon; sid:200012904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdeaf.com"; classtype:attempted-recon; sid:200012905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdewnjsxtp.duckdns.org"; classtype:attempted-recon; sid:200012906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdf-cloud-document.weeblysite.com"; classtype:attempted-recon; sid:200012907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdf-shared-cloud.project-deec.workers.dev"; classtype:attempted-recon; sid:200012908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdf-sharefile-doc.weeblysite.com"; classtype:attempted-recon; sid:200012909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdf.file-documents.workers.dev"; classtype:attempted-recon; sid:200012910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfdocument-24042.firebaseapp.com"; classtype:attempted-recon; sid:200012911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfdocument-24042.web.app"; classtype:attempted-recon; sid:200012912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfdocument-67442.firebaseapp.com"; classtype:attempted-recon; sid:200012913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfdocument-67442.web.app"; classtype:attempted-recon; sid:200012914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfdocument200.firebaseapp.com"; classtype:attempted-recon; sid:200012915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfdocument200.web.app"; classtype:attempted-recon; sid:200012916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfdocument9240.firebaseapp.com"; classtype:attempted-recon; sid:200012917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdfsecured.mystrikingly.com"; classtype:attempted-recon; sid:200012918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdkoxahkcb.duckdns.org"; classtype:attempted-recon; sid:200012919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdnvwkmzdr.duckdns.org"; classtype:attempted-recon; sid:200012920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdnxidzuwf.duckdns.org"; classtype:attempted-recon; sid:200012921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdojzugitc.duckdns.org"; classtype:attempted-recon; sid:200012922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pdtlhwxpvt.duckdns.org"; classtype:attempted-recon; sid:200012923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peachyspuffs.com"; classtype:attempted-recon; sid:200012924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pederopeder.com"; classtype:attempted-recon; sid:200012925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pedromaoudmind9.com.ng"; classtype:attempted-recon; sid:200012926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peenoquwhz.duckdns.org"; classtype:attempted-recon; sid:200012927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pejcqbqmdk.firebaseapp.com"; classtype:attempted-recon; sid:200012928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pekao-app.myapp-account.online"; classtype:attempted-recon; sid:200012929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pekao.myapp-account.online"; classtype:attempted-recon; sid:200012930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pekao.myappaccount.org"; classtype:attempted-recon; sid:200012931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pelphkcitz.duckdns.org"; classtype:attempted-recon; sid:200012932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pemblokiran-fb.wixsite.com"; classtype:attempted-recon; sid:200012933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pemblokiranaccounfb.weebly.com"; classtype:attempted-recon; sid:200012934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pemlqveqzc.duckdns.org"; classtype:attempted-recon; sid:200012935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pemulihanresmiakau9.wixsite.com"; classtype:attempted-recon; sid:200012936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pengembalian-dana.com"; classtype:attempted-recon; sid:200012937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pepperelmillcampusllc.securevdr.com"; classtype:attempted-recon; sid:200012938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"perfectenergy.in"; classtype:attempted-recon; sid:200012939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"perfectliker.net"; classtype:attempted-recon; sid:200012940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"perfectunionapparel.com"; classtype:attempted-recon; sid:200012941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"performancelocal.com"; classtype:attempted-recon; sid:200012942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"periingatan-verifiikasi.weebly.com"; classtype:attempted-recon; sid:200012943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peringatann-id2022.weeblysite.com"; classtype:attempted-recon; sid:200012944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peringatanpostinganfb.weebly.com"; classtype:attempted-recon; sid:200012945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"perituza.com"; classtype:attempted-recon; sid:200012946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"persianmy.com"; classtype:attempted-recon; sid:200012947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"personalcapial.com"; classtype:attempted-recon; sid:200012948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"personas.accitauspy.repl.co"; classtype:attempted-recon; sid:200012949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"personas.usnmee.repl.co"; classtype:attempted-recon; sid:200012950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"personascrfienlinea.pana.red"; classtype:attempted-recon; sid:200012951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"personasportal.hostfree.pw"; classtype:attempted-recon; sid:200012952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pertinentraggedbookmarks.46321233.repl.co"; classtype:attempted-recon; sid:200012953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"petalite-shrub-banjo.glitch.me"; classtype:attempted-recon; sid:200012954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pete08schworkdy.myportfolio.com"; classtype:attempted-recon; sid:200012955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"petticoatrow.com"; classtype:attempted-recon; sid:200012956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pettytangiblemenu.homeallstors.repl.co"; classtype:attempted-recon; sid:200012957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peuamrcwxu.duckdns.org"; classtype:attempted-recon; sid:200012958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peulpdyckc.duckdns.org"; classtype:attempted-recon; sid:200012959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pevlibcvmt.duckdns.org"; classtype:attempted-recon; sid:200012960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peweetools.truly-minting.com"; classtype:attempted-recon; sid:200012961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfazdhprqu.duckdns.org"; classtype:attempted-recon; sid:200012962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfd-mtlebanonrehab-docs.ga"; classtype:attempted-recon; sid:200012963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfefanwilz.duckdns.org"; classtype:attempted-recon; sid:200012964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfjykejodq.firebaseapp.com"; classtype:attempted-recon; sid:200012965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfjykejodq.web.app"; classtype:attempted-recon; sid:200012966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfkwpyxuvm.duckdns.org"; classtype:attempted-recon; sid:200012967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfvnereorm.duckdns.org"; classtype:attempted-recon; sid:200012968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfvxjkjjjx.duckdns.org"; classtype:attempted-recon; sid:200012969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfvzbpnkng.duckdns.org"; classtype:attempted-recon; sid:200012970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfwbiffxph.duckdns.org"; classtype:attempted-recon; sid:200012971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfxjlkohyc.duckdns.org"; classtype:attempted-recon; sid:200012972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pfyuqxtfxj.duckdns.org"; classtype:attempted-recon; sid:200012973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgcekgsxsu.duckdns.org"; classtype:attempted-recon; sid:200012974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgdswaxm-jp.wpthzht.cn"; classtype:attempted-recon; sid:200012975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgeesnhyxc.duckdns.org"; classtype:attempted-recon; sid:200012976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgennczoom.duckdns.org"; classtype:attempted-recon; sid:200012977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgfrsmrptu.duckdns.org"; classtype:attempted-recon; sid:200012978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pggthkfupb.duckdns.org"; classtype:attempted-recon; sid:200012979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgjmuxmvqf.duckdns.org"; classtype:attempted-recon; sid:200012980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgndcrqfuj.duckdns.org"; classtype:attempted-recon; sid:200012981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgrggepjyc.duckdns.org"; classtype:attempted-recon; sid:200012982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgsandrcvryprvcy45744.co.vu"; classtype:attempted-recon; sid:200012983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgsinfotech.info"; classtype:attempted-recon; sid:200012984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgsinfotech.org"; classtype:attempted-recon; sid:200012985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pgsqummowq.duckdns.org"; classtype:attempted-recon; sid:200012986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phantom-wallet.siterubix.com"; classtype:attempted-recon; sid:200012987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phantom-wallett.azurewebsites.net"; classtype:attempted-recon; sid:200012988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phantomwalett.app"; classtype:attempted-recon; sid:200012989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phantyomwallet.mypixieset.com"; classtype:attempted-recon; sid:200012990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phcpzkwgyf.duckdns.org"; classtype:attempted-recon; sid:200012991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phijrsjdfd.duckdns.org"; classtype:attempted-recon; sid:200012992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phjdnoeucj.duckdns.org"; classtype:attempted-recon; sid:200012993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phlcpfycgx.duckdns.org"; classtype:attempted-recon; sid:200012994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phola.org"; classtype:attempted-recon; sid:200012995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"photoboothrentalmemphistn.com"; classtype:attempted-recon; sid:200012996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"photostock.uns.ac.id"; classtype:attempted-recon; sid:200012997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"php5ymysql.webcindario.com"; classtype:attempted-recon; sid:200012998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phpstack-835499-2877633.cloudwaysapps.com"; classtype:attempted-recon; sid:200012999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phreshphoto.com"; classtype:attempted-recon; sid:200013000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phthalocyaninepigement.firebaseapp.com"; classtype:attempted-recon; sid:200013001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phthalocyaninepigement.web.app"; classtype:attempted-recon; sid:200013002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phx888.com"; classtype:attempted-recon; sid:200013003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pianeta-bimbo.it"; classtype:attempted-recon; sid:200013004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"piarngttmx.duckdns.org"; classtype:attempted-recon; sid:200013005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"picnic.industries"; classtype:attempted-recon; sid:200013006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pict-product.ga"; classtype:attempted-recon; sid:200013007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pidetuprestamo.stage.analyzenbd.com"; classtype:attempted-recon; sid:200013008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pieuniverse.org"; classtype:attempted-recon; sid:200013009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pifgovqvwn.duckdns.org"; classtype:attempted-recon; sid:200013010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"piiuujpapy.duckdns.org"; classtype:attempted-recon; sid:200013011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pikay13.github.io"; classtype:attempted-recon; sid:200013012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pilwvywpmh.duckdns.org"; classtype:attempted-recon; sid:200013013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pimvggliciaaarv.ympiheartgglcia.repl.co"; classtype:attempted-recon; sid:200013014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pinballfinder.org"; classtype:attempted-recon; sid:200013015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pinjhcjskf.duckdns.org"; classtype:attempted-recon; sid:200013016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pinkmaids.sg"; classtype:attempted-recon; sid:200013017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pinksale-finance.blogspot.com"; classtype:attempted-recon; sid:200013018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pipe302414607-ypu6n69k.systeme.io"; classtype:attempted-recon; sid:200013019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"piscinaveronza.com"; classtype:attempted-recon; sid:200013020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pisosfarias-0-polygonon-0.blogspot.com"; classtype:attempted-recon; sid:200013021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pixbamwvpf.duckdns.org"; classtype:attempted-recon; sid:200013022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pixoffjphq.duckdns.org"; classtype:attempted-recon; sid:200013023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjcsifopok.duckdns.org"; classtype:attempted-recon; sid:200013024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjfcfcplsb.duckdns.org"; classtype:attempted-recon; sid:200013025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjhagqvops.duckdns.org"; classtype:attempted-recon; sid:200013026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjhoiladkn.duckdns.org"; classtype:attempted-recon; sid:200013027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjjejovdkj.duckdns.org"; classtype:attempted-recon; sid:200013028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjnbcdefse.duckdns.org"; classtype:attempted-recon; sid:200013029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjpziqspxj.duckdns.org"; classtype:attempted-recon; sid:200013030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjtififiai.duckdns.org"; classtype:attempted-recon; sid:200013031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjtqyntfmc.duckdns.org"; classtype:attempted-recon; sid:200013032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pjwvmppphz.duckdns.org"; classtype:attempted-recon; sid:200013033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkbzlqirrj.duckdns.org"; classtype:attempted-recon; sid:200013034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkeqwbyixv.duckdns.org"; classtype:attempted-recon; sid:200013035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkexlppjie.duckdns.org"; classtype:attempted-recon; sid:200013036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkkdtyjqta.duckdns.org"; classtype:attempted-recon; sid:200013037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkkzklfyqh.duckdns.org"; classtype:attempted-recon; sid:200013038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pklcleelvw.duckdns.org"; classtype:attempted-recon; sid:200013039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkqqfijosi.duckdns.org"; classtype:attempted-recon; sid:200013040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkqtwolgwq.duckdns.org"; classtype:attempted-recon; sid:200013041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkrdajhxjw.duckdns.org"; classtype:attempted-recon; sid:200013042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pksjmlcppd.duckdns.org"; classtype:attempted-recon; sid:200013043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pksmhxpbzw.duckdns.org"; classtype:attempted-recon; sid:200013044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkt-bpsdm.kalbarprov.go.id"; classtype:attempted-recon; sid:200013045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkuswqnbet.duckdns.org"; classtype:attempted-recon; sid:200013046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkvfepfsdk.duckdns.org"; classtype:attempted-recon; sid:200013047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkxjimsqvv.duckdns.org"; classtype:attempted-recon; sid:200013048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkxycachdq.duckdns.org"; classtype:attempted-recon; sid:200013049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkyopchghe.duckdns.org"; classtype:attempted-recon; sid:200013050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pkzftrefcl.duckdns.org"; classtype:attempted-recon; sid:200013051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pl-olx-u28hv2.oferta.life"; classtype:attempted-recon; sid:200013052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"placeboook.com"; classtype:attempted-recon; sid:200013053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"placment.eostudy.com"; classtype:attempted-recon; sid:200013054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plain-flower-e3c0.phantasm0147.workers.dev"; classtype:attempted-recon; sid:200013055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plain-frost-6851.p54drdar.workers.dev"; classtype:attempted-recon; sid:200013056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plain-mouse-6094.on.fleek.co"; classtype:attempted-recon; sid:200013057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plain-mud-69ed.wtbappraiser5791.workers.dev"; classtype:attempted-recon; sid:200013058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plain.selalusalome.workers.dev"; classtype:attempted-recon; sid:200013059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plaintivegracefulproblem4847743.agentelaboral.repl.co"; classtype:attempted-recon; sid:200013060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plamhjhdeg.duckdns.org"; classtype:attempted-recon; sid:200013061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plamtpwgbj.duckdns.org"; classtype:attempted-recon; sid:200013062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plasmaticdesign.net"; classtype:attempted-recon; sid:200013063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plasticaindia.com"; classtype:attempted-recon; sid:200013064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plataforma-2022ar.usuariosdig.repl.co"; classtype:attempted-recon; sid:200013065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"platdujour.co.uk"; classtype:attempted-recon; sid:200013066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"play-deikifngsdoms.com"; classtype:attempted-recon; sid:200013067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"playgalagame.app"; classtype:attempted-recon; sid:200013068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plcdmpntxn.duckdns.org"; classtype:attempted-recon; sid:200013069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plclpxscbz.duckdns.org"; classtype:attempted-recon; sid:200013070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pleasingsaltyblog.sinpup.repl.co"; classtype:attempted-recon; sid:200013071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plentyofishdating.com"; classtype:attempted-recon; sid:200013072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plfkgfzktn.duckdns.org"; classtype:attempted-recon; sid:200013073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plg-polygon-tecnology.blogspot.com"; classtype:attempted-recon; sid:200013074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plggozpslh.duckdns.org"; classtype:attempted-recon; sid:200013075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plkgmkxvxe.duckdns.org"; classtype:attempted-recon; sid:200013076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plklzd.com"; classtype:attempted-recon; sid:200013077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plkscjpgbn.duckdns.org"; classtype:attempted-recon; sid:200013078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pllllmzziw.duckdns.org"; classtype:attempted-recon; sid:200013079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plqeoihgfk.duckdns.org"; classtype:attempted-recon; sid:200013080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plxagxsabz.duckdns.org"; classtype:attempted-recon; sid:200013081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"plzptrpltd.duckdns.org"; classtype:attempted-recon; sid:200013082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmb.akamigasbalongan.ac.id"; classtype:attempted-recon; sid:200013083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmcfmuhojg.duckdns.org"; classtype:attempted-recon; sid:200013084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmfwbgcfpr.duckdns.org"; classtype:attempted-recon; sid:200013085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmkemjwfem.duckdns.org"; classtype:attempted-recon; sid:200013086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmpkxjzdpd.duckdns.org"; classtype:attempted-recon; sid:200013087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmqeeaqplo.duckdns.org"; classtype:attempted-recon; sid:200013088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmqxjqornh.duckdns.org"; classtype:attempted-recon; sid:200013089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmrplmyhcb.duckdns.org"; classtype:attempted-recon; sid:200013090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmsauqahjk.duckdns.org"; classtype:attempted-recon; sid:200013091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmuvoxhjzj.duckdns.org"; classtype:attempted-recon; sid:200013092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmywadqvnw.duckdns.org"; classtype:attempted-recon; sid:200013093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pmzqarkpdf.duckdns.org"; classtype:attempted-recon; sid:200013094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pnicoijybk.duckdns.org"; classtype:attempted-recon; sid:200013095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pnjone.com"; classtype:attempted-recon; sid:200013096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pnkcbsbxvc.duckdns.org"; classtype:attempted-recon; sid:200013097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pnmkkuskfx.duckdns.org"; classtype:attempted-recon; sid:200013098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pnrcxdewtq.duckdns.org"; classtype:attempted-recon; sid:200013099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pntojyrlfx.duckdns.org"; classtype:attempted-recon; sid:200013100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pnwstdbevc.duckdns.org"; classtype:attempted-recon; sid:200013101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pnxizajbhj.duckdns.org"; classtype:attempted-recon; sid:200013102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pobgshlzvk.duckdns.org"; classtype:attempted-recon; sid:200013103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poc-rewards-program-c2dfc.web.app"; classtype:attempted-recon; sid:200013104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poconoshotels.com"; classtype:attempted-recon; sid:200013105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pocstes.online"; classtype:attempted-recon; sid:200013106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poczta-online.sawadee.life"; classtype:attempted-recon; sid:200013107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poczta-online.virella.life"; classtype:attempted-recon; sid:200013108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poczta-polska.e-kei.pl"; classtype:attempted-recon; sid:200013109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poewr43lkhlkdf.club"; classtype:attempted-recon; sid:200013110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poftrrzsoz.duckdns.org"; classtype:attempted-recon; sid:200013111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pogmotru.flazio.com"; classtype:attempted-recon; sid:200013112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pokajca.web.app"; classtype:attempted-recon; sid:200013113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polgyons.technology"; classtype:attempted-recon; sid:200013114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poligrafiapias.com"; classtype:attempted-recon; sid:200013115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polished-frost-5c8b.pearwormermone.workers.dev"; classtype:attempted-recon; sid:200013116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polished-unit-0189.maddison-383.workers.dev"; classtype:attempted-recon; sid:200013117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polishedvcxvb.topijerami.workers.dev"; classtype:attempted-recon; sid:200013118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"politeavariciouslanguage.url75.repl.co"; classtype:attempted-recon; sid:200013119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polkabridge-giveaway.com"; classtype:attempted-recon; sid:200013120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polkadot.network"; classtype:attempted-recon; sid:200013121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polkastqrter.com"; classtype:attempted-recon; sid:200013122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polkastqrtter.com"; classtype:attempted-recon; sid:200013123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polllygonn-waallet.blogspot.com"; classtype:attempted-recon; sid:200013124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pollyggon.blogspot.com"; classtype:attempted-recon; sid:200013125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pollygonnwalletconect.blogspot.com"; classtype:attempted-recon; sid:200013126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polngdhmmz.duckdns.org"; classtype:attempted-recon; sid:200013127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poloskairto.hu"; classtype:attempted-recon; sid:200013128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-allegro.id4249854.xyz"; classtype:attempted-recon; sid:200013129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-allegro.info4661399.xyz"; classtype:attempted-recon; sid:200013130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-allegro.merchant1981999.xyz"; classtype:attempted-recon; sid:200013131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-allegro.merchant4741605.xyz"; classtype:attempted-recon; sid:200013132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-dpd.info4661399.xyz"; classtype:attempted-recon; sid:200013133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-dpd.information970347.xyz"; classtype:attempted-recon; sid:200013134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-dpd.merchant1981999.xyz"; classtype:attempted-recon; sid:200013135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-lnpost.id4249854.xyz"; classtype:attempted-recon; sid:200013136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-lnpost.information970347.xyz"; classtype:attempted-recon; sid:200013137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-lnpost.merchant1981999.xyz"; classtype:attempted-recon; sid:200013138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-lnpost.merchant4741605.xyz"; classtype:attempted-recon; sid:200013139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-lnpost.merchant9600973.xyz"; classtype:attempted-recon; sid:200013140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-olx.info6769027.xyz"; classtype:attempted-recon; sid:200013141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-olx.info6989772.xyz"; classtype:attempted-recon; sid:200013142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-olx.merchant9600973.xyz"; classtype:attempted-recon; sid:200013143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-poczlta.info6769027.xyz"; classtype:attempted-recon; sid:200013144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-poczlta.merchant9600973.xyz"; classtype:attempted-recon; sid:200013145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-vinted-hjso21.anzijie.top"; classtype:attempted-recon; sid:200013146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polska-vinted-hjso21.spturate.top"; classtype:attempted-recon; sid:200013147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygon---technology.blogspot.com"; classtype:attempted-recon; sid:200013148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygon-onlline.blogspot.com"; classtype:attempted-recon; sid:200013149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygon-wallet0.blogspot.com"; classtype:attempted-recon; sid:200013150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonconnecttwallet.blogspot.com"; classtype:attempted-recon; sid:200013151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonexs05.blogspot.com"; classtype:attempted-recon; sid:200013152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonixls-antonio.blogspot.com"; classtype:attempted-recon; sid:200013153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonixls-leandra.blogspot.com"; classtype:attempted-recon; sid:200013154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonjan.blogspot.com"; classtype:attempted-recon; sid:200013155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonmac.blogspot.com"; classtype:attempted-recon; sid:200013156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonxls-raylson.blogspot.com"; classtype:attempted-recon; sid:200013157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polygonxlss-antonio.blogspot.com"; classtype:attempted-recon; sid:200013158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"polyqon-technology-connect-wallet.blogspot.com"; classtype:attempted-recon; sid:200013159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ponnareqqp.duckdns.org"; classtype:attempted-recon; sid:200013160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pooccoin-app.blogspot.com"; classtype:attempted-recon; sid:200013161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-app-plataform-connect.blogspot.com"; classtype:attempted-recon; sid:200013162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-appf.us"; classtype:attempted-recon; sid:200013163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-appu.us"; classtype:attempted-recon; sid:200013164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-appw.info"; classtype:attempted-recon; sid:200013165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-appy.info"; classtype:attempted-recon; sid:200013166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-bsc-charts-token-connect.blogspot.com"; classtype:attempted-recon; sid:200013167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-connect-app-tokens.blogspot.com"; classtype:attempted-recon; sid:200013168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoin-connect-plataform.blogspot.com"; classtype:attempted-recon; sid:200013169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoinapp-spwap.us"; classtype:attempted-recon; sid:200013170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoinapp-swsap.us"; classtype:attempted-recon; sid:200013171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoinapp-sxwap.us"; classtype:attempted-recon; sid:200013172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoinaqpp.us"; classtype:attempted-recon; sid:200013173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoinsapnp.us"; classtype:attempted-recon; sid:200013174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poocoinswayp.info"; classtype:attempted-recon; sid:200013175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"popjoaehdo.duckdns.org"; classtype:attempted-recon; sid:200013176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"popsystemled.es"; classtype:attempted-recon; sid:200013177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"populardclud.42web.io"; classtype:attempted-recon; sid:200013178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"popularteemingmonotone.ingres.repl.co"; classtype:attempted-recon; sid:200013179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"popupsubsmart.streamlink.to"; classtype:attempted-recon; sid:200013180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"poraskjdasfs.hostfree.pw"; classtype:attempted-recon; sid:200013181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"porinternet-portalseguro.v1sa-accessperu.top"; classtype:attempted-recon; sid:200013182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"porpe528qwerty321.bebp204prax1231.repl.co"; classtype:attempted-recon; sid:200013183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"porrtalperson.hostfree.pw"; classtype:attempted-recon; sid:200013184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"port-3000-track-200034-brown-tiger-iwakamilla909596729.codeanyapp.com"; classtype:attempted-recon; sid:200013185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portail-client-sfr.com"; classtype:attempted-recon; sid:200013186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portal-servicio.firebaseapp.com"; classtype:attempted-recon; sid:200013187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portal-servicio.web.app"; classtype:attempted-recon; sid:200013188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portal.app.post.it.tyara.sa"; classtype:attempted-recon; sid:200013189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portal.revenue.services.6v2fl.us"; classtype:attempted-recon; sid:200013190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portal.revenue.services.z4a97.us"; classtype:attempted-recon; sid:200013191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalappseguro.hostfree.pw"; classtype:attempted-recon; sid:200013192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalclicknegocios.com.br"; classtype:attempted-recon; sid:200013193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portaldosfamosos.com.br"; classtype:attempted-recon; sid:200013194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalejo.hostfree.pw"; classtype:attempted-recon; sid:200013195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalempsonline-info.preview-domain.com"; classtype:attempted-recon; sid:200013196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalempsweb.info"; classtype:attempted-recon; sid:200013197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalenlinea.ampliacion-desolicitud-com.online"; classtype:attempted-recon; sid:200013198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalesicuromps-info.preview-domain.com"; classtype:attempted-recon; sid:200013199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portalpayexito.hostfree.pw"; classtype:attempted-recon; sid:200013200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portaltransaccionalseguropagos.liveblog365.com"; classtype:attempted-recon; sid:200013201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portaltranstuyl.hostfree.pw"; classtype:attempted-recon; sid:200013202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portaltuyacupo.hostfree.pw"; classtype:attempted-recon; sid:200013203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portaltuyapay0.hostfree.pw"; classtype:attempted-recon; sid:200013204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portaluyaexito.hostfree.pw"; classtype:attempted-recon; sid:200013205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portaluytareaandfdhrth.liveblog365.com"; classtype:attempted-recon; sid:200013206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"porwlgjsrr.duckdns.org"; classtype:attempted-recon; sid:200013207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"position-exachange-naps.blogspot.com"; classtype:attempted-recon; sid:200013208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"positivelyworks.com"; classtype:attempted-recon; sid:200013209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"posminterurugiay.ultimatefreehost.in"; classtype:attempted-recon; sid:200013210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"post-at.info-trackings.su"; classtype:attempted-recon; sid:200013211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"posta-slovenia.firebaseapp.com"; classtype:attempted-recon; sid:200013212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"posta-slovenia.web.app"; classtype:attempted-recon; sid:200013213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"postal-sessionbach0025.firebaseapp.com"; classtype:attempted-recon; sid:200013214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"postal-sessionbach0025.web.app"; classtype:attempted-recon; sid:200013215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"postaltrasacionalexito.lovestoblog.com"; classtype:attempted-recon; sid:200013216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"postch.wonstasite.com"; classtype:attempted-recon; sid:200013217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"postch9192.cargo.site"; classtype:attempted-recon; sid:200013218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"posten.no.d2w2e384d9464a1v6644id.com"; classtype:attempted-recon; sid:200013219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"postmailer.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200013220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"posttrack-9d255b.ingress-baronn.ewp.live"; classtype:attempted-recon; sid:200013221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"potaltyapairinmg.hostfree.pw"; classtype:attempted-recon; sid:200013222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pousuittin.mom"; classtype:attempted-recon; sid:200013223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"powerful-dark-ironclad.glitch.me"; classtype:attempted-recon; sid:200013224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"powersafeenergia.blogspot.com"; classtype:attempted-recon; sid:200013225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pozzmmzamr.duckdns.org"; classtype:attempted-recon; sid:200013226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pp-90214950.hostfree.pw"; classtype:attempted-recon; sid:200013227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppbnehqxay.duckdns.org"; classtype:attempted-recon; sid:200013228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppkdojsxwc.duckdns.org"; classtype:attempted-recon; sid:200013229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppkxupqahi.firebaseapp.com"; classtype:attempted-recon; sid:200013230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppkxupqahi.web.app"; classtype:attempted-recon; sid:200013231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppldpuagkk.duckdns.org"; classtype:attempted-recon; sid:200013232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppljbghkce.duckdns.org"; classtype:attempted-recon; sid:200013233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppnfdfqllo.duckdns.org"; classtype:attempted-recon; sid:200013234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppnsxuuodi.duckdns.org"; classtype:attempted-recon; sid:200013235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppooccoin.com"; classtype:attempted-recon; sid:200013236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppoocoih.com"; classtype:attempted-recon; sid:200013237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppoocoin.com"; classtype:attempted-recon; sid:200013238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppqcemutbl.duckdns.org"; classtype:attempted-recon; sid:200013239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppqihbfpli.duckdns.org"; classtype:attempted-recon; sid:200013240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppsolcsast.duckdns.org"; classtype:attempted-recon; sid:200013241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppvbixxxbb.duckdns.org"; classtype:attempted-recon; sid:200013242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppzaxspaop.duckdns.org"; classtype:attempted-recon; sid:200013243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqddogszjw.duckdns.org"; classtype:attempted-recon; sid:200013244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqdoulncii.duckdns.org"; classtype:attempted-recon; sid:200013245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqefmnttmf.duckdns.org"; classtype:attempted-recon; sid:200013246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqenxhvzyx.duckdns.org"; classtype:attempted-recon; sid:200013247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqeuupaowk.duckdns.org"; classtype:attempted-recon; sid:200013248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqklweptyg.duckdns.org"; classtype:attempted-recon; sid:200013249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqlgxompkr.duckdns.org"; classtype:attempted-recon; sid:200013250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqmmetzvue.duckdns.org"; classtype:attempted-recon; sid:200013251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pr3zxf3.cn"; classtype:attempted-recon; sid:200013252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pr7k4s.csb.app"; classtype:attempted-recon; sid:200013253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pra-voce-solucoes.com"; classtype:attempted-recon; sid:200013254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prairieharbor.org"; classtype:attempted-recon; sid:200013255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prauzoqumu.duckdns.org"; classtype:attempted-recon; sid:200013256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prbxuvzilj.duckdns.org"; classtype:attempted-recon; sid:200013257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prcjxet.web.app"; classtype:attempted-recon; sid:200013258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"predesigns.shop"; classtype:attempted-recon; sid:200013259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preg.marketingvici.com"; classtype:attempted-recon; sid:200013260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pregoirde.gourpre8.repl.co"; classtype:attempted-recon; sid:200013261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prejmwhpyi.duckdns.org"; classtype:attempted-recon; sid:200013262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"premiaprestamosibk.noustecnologia.com.br"; classtype:attempted-recon; sid:200013263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"premier07.ru"; classtype:attempted-recon; sid:200013264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preppingconfidence.com"; classtype:attempted-recon; sid:200013265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prestamos.banblf.solicitud-segura.com"; classtype:attempted-recon; sid:200013266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prevenstar.com"; classtype:attempted-recon; sid:200013267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview-content-projet.sugar-voicee.workers.dev"; classtype:attempted-recon; sid:200013268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview-document.tortesabun.workers.dev"; classtype:attempted-recon; sid:200013269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview-download-file.dating-optimize.workers.dev"; classtype:attempted-recon; sid:200013270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview-download-project.voice-chatt.workers.dev"; classtype:attempted-recon; sid:200013271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview-files.project-deec.workers.dev"; classtype:attempted-recon; sid:200013272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview-folder.people-media.workers.dev"; classtype:attempted-recon; sid:200013273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview-folder.protect-secur.workers.dev"; classtype:attempted-recon; sid:200013274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preview.mailerlite.io"; classtype:attempted-recon; sid:200013275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prgmd.net"; classtype:attempted-recon; sid:200013276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prhyrbimpf.duckdns.org"; classtype:attempted-recon; sid:200013277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"primematic.in"; classtype:attempted-recon; sid:200013278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"primeone.org"; classtype:attempted-recon; sid:200013279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"primeprivatecg.com"; classtype:attempted-recon; sid:200013280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"primex-inter.com"; classtype:attempted-recon; sid:200013281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prince.ps"; classtype:attempted-recon; sid:200013282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"print0ffce.rec6110.workers.dev"; classtype:attempted-recon; sid:200013283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"printingon5th.com"; classtype:attempted-recon; sid:200013284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"privacy-point-50000245875896301.tk"; classtype:attempted-recon; sid:200013285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"privacy-point-50000245875896309.tk"; classtype:attempted-recon; sid:200013286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"private-pdf.iteroageme.workers.dev"; classtype:attempted-recon; sid:200013287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"priyankasandokar1606.github.io"; classtype:attempted-recon; sid:200013288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prjaxzxwbi.duckdns.org"; classtype:attempted-recon; sid:200013289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prlschoglf.duckdns.org"; classtype:attempted-recon; sid:200013290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prmwcqaany.duckdns.org"; classtype:attempted-recon; sid:200013291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pro-nfts.com"; classtype:attempted-recon; sid:200013292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"probblemacc4454.co.uk"; classtype:attempted-recon; sid:200013293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"problemspage.ujzo9mpalm-ewx3ldz9k6zq.p.temp-site.link"; classtype:attempted-recon; sid:200013294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"procedi-ora2022.com"; classtype:attempted-recon; sid:200013295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"processbox.co.in"; classtype:attempted-recon; sid:200013296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"procreditecuatorial.info"; classtype:attempted-recon; sid:200013297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"procservautomatizacion.com"; classtype:attempted-recon; sid:200013298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"produck-picture-99085.firebaseapp.com"; classtype:attempted-recon; sid:200013299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"produck-picture-99085.web.app"; classtype:attempted-recon; sid:200013300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"production.shiny-tree-e80c.clane.workers.dev"; classtype:attempted-recon; sid:200013301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"professhealthproducts.com"; classtype:attempted-recon; sid:200013302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"profiimobiliare.ro"; classtype:attempted-recon; sid:200013303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"profilaktualisierung-dkb.is-certified.com"; classtype:attempted-recon; sid:200013304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"profileupdates.dyndns.info"; classtype:attempted-recon; sid:200013305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"profusion1.com"; classtype:attempted-recon; sid:200013306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"programowanietowyzwanie.pl"; classtype:attempted-recon; sid:200013307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"progressivebank1.biz"; classtype:attempted-recon; sid:200013308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-cloud-folder.mature-voice.workers.dev"; classtype:attempted-recon; sid:200013309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-cloud-shared.oauthh-conf.workers.dev"; classtype:attempted-recon; sid:200013310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-folder.chat-securee.workers.dev"; classtype:attempted-recon; sid:200013311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-list.doceungeyymeu.workers.dev"; classtype:attempted-recon; sid:200013312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-preview-shared.grand-oauth.workers.dev"; classtype:attempted-recon; sid:200013313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-shared-pdf.shared-securee.workers.dev"; classtype:attempted-recon; sid:200013314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-sheet-doc.assign-sec.workers.dev"; classtype:attempted-recon; sid:200013315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project11a-8cd2d.firebaseapp.com"; classtype:attempted-recon; sid:200013316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project11a-8cd2d.web.app"; classtype:attempted-recon; sid:200013317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project11c-95a40.firebaseapp.com"; classtype:attempted-recon; sid:200013318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project11c-95a40.web.app"; classtype:attempted-recon; sid:200013319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project12c-1ea70.firebaseapp.com"; classtype:attempted-recon; sid:200013320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project12c-1ea70.web.app"; classtype:attempted-recon; sid:200013321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project12e-83d13.firebaseapp.com"; classtype:attempted-recon; sid:200013322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project12e-83d13.web.app"; classtype:attempted-recon; sid:200013323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project14b-7dcbb.firebaseapp.com"; classtype:attempted-recon; sid:200013324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project16e-b49de.firebaseapp.com"; classtype:attempted-recon; sid:200013325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project16e-b49de.web.app"; classtype:attempted-recon; sid:200013326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project1d-e2a39.firebaseapp.com"; classtype:attempted-recon; sid:200013327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project1d-e2a39.web.app"; classtype:attempted-recon; sid:200013328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project4-37fc8.firebaseapp.com"; classtype:attempted-recon; sid:200013329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project4-37fc8.web.app"; classtype:attempted-recon; sid:200013330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project9c-ed771.firebaseapp.com"; classtype:attempted-recon; sid:200013331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project9c-ed771.web.app"; classtype:attempted-recon; sid:200013332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"projectfiles.trainercentral.com"; classtype:attempted-recon; sid:200013333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"projectjiotower.com"; classtype:attempted-recon; sid:200013334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prolaptop.net"; classtype:attempted-recon; sid:200013335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prometheus.asia-pancakeswap.dysnix.org"; classtype:attempted-recon; sid:200013336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"promo.mycorporate-rewards.net"; classtype:attempted-recon; sid:200013337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"promocionib.machunion.com"; classtype:attempted-recon; sid:200013338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"promosparatodoss.com"; classtype:attempted-recon; sid:200013339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"proof.mint-live.cc"; classtype:attempted-recon; sid:200013340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"proojectttt.pages.dev"; classtype:attempted-recon; sid:200013341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"propair.hu"; classtype:attempted-recon; sid:200013342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"propellent-choices.000webhostapp.com"; classtype:attempted-recon; sid:200013343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"proposal-projects.procesrpguvins.workers.dev"; classtype:attempted-recon; sid:200013344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"proposalldoc111.myportfolio.com"; classtype:attempted-recon; sid:200013345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"proprevxdoc.myportfolio.com"; classtype:attempted-recon; sid:200013346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prosxsiuser.myfreesites.net"; classtype:attempted-recon; sid:200013347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protect-4d56vca.surge.sh"; classtype:attempted-recon; sid:200013348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protected-message2022-1311615844.cos.na-ashburn.myqcloud.com"; classtype:attempted-recon; sid:200013349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944611-fb.tk"; classtype:attempted-recon; sid:200013350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944612-fb.tk"; classtype:attempted-recon; sid:200013351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944615-fb.tk"; classtype:attempted-recon; sid:200013352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944619-fb.tk"; classtype:attempted-recon; sid:200013353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944621-fb.tk"; classtype:attempted-recon; sid:200013354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944622-fb.tk"; classtype:attempted-recon; sid:200013355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944625-fb.tk"; classtype:attempted-recon; sid:200013356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944627-fb.tk"; classtype:attempted-recon; sid:200013357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944631-fb.tk"; classtype:attempted-recon; sid:200013358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-46454898944635-fb.tk"; classtype:attempted-recon; sid:200013359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection-settings.cc"; classtype:attempted-recon; sid:200013360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protection.retarus.com"; classtype:attempted-recon; sid:200013361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protocolnear.shop"; classtype:attempted-recon; sid:200013362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"proud-unit-1b37.weatherest.workers.dev"; classtype:attempted-recon; sid:200013363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prowlerspeed.com"; classtype:attempted-recon; sid:200013364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"proy.elzorro2023.repl.co"; classtype:attempted-recon; sid:200013365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prpebiyqim.duckdns.org"; classtype:attempted-recon; sid:200013366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prtqpflmjy.duckdns.org"; classtype:attempted-recon; sid:200013367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"prueflowbrooks.top"; classtype:attempted-recon; sid:200013368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pruvecfymu.duckdns.org"; classtype:attempted-recon; sid:200013369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psaoyxunnd.duckdns.org"; classtype:attempted-recon; sid:200013370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pscyaeswyu.duckdns.org"; classtype:attempted-recon; sid:200013371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psd2-kunde13928.info"; classtype:attempted-recon; sid:200013372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psd2-kunde2171.info"; classtype:attempted-recon; sid:200013373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psd2-kunde44532.info"; classtype:attempted-recon; sid:200013374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psd2-kunde6671.info"; classtype:attempted-recon; sid:200013375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psd2-kunde923.info"; classtype:attempted-recon; sid:200013376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psd2-kunde95133.info"; classtype:attempted-recon; sid:200013377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psd2-kunde99772.info"; classtype:attempted-recon; sid:200013378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psdgxbmoew.duckdns.org"; classtype:attempted-recon; sid:200013379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pshamkwmnx.duckdns.org"; classtype:attempted-recon; sid:200013380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psosblcvzd.duckdns.org"; classtype:attempted-recon; sid:200013381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psosofxpem.duckdns.org"; classtype:attempted-recon; sid:200013382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"psqisoe2.ga"; classtype:attempted-recon; sid:200013383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pswrvrcrgc.duckdns.org"; classtype:attempted-recon; sid:200013384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pszkclddjg.duckdns.org"; classtype:attempted-recon; sid:200013385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptbwawpzih.duckdns.org"; classtype:attempted-recon; sid:200013386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptebffgnma.duckdns.org"; classtype:attempted-recon; sid:200013387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptfyfbjzpv.duckdns.org"; classtype:attempted-recon; sid:200013388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pthfclcdxw.duckdns.org"; classtype:attempted-recon; sid:200013389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptiwsjuhmt.duckdns.org"; classtype:attempted-recon; sid:200013390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptjkuldijy.duckdns.org"; classtype:attempted-recon; sid:200013391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptjoxetsar.duckdns.org"; classtype:attempted-recon; sid:200013392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptlzhxnsig.duckdns.org"; classtype:attempted-recon; sid:200013393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptoeteutuu.duckdns.org"; classtype:attempted-recon; sid:200013394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptpjiwuzto.duckdns.org"; classtype:attempted-recon; sid:200013395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptuyanewaumentui008t6.liveblog365.com"; classtype:attempted-recon; sid:200013396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptxx.cc"; classtype:attempted-recon; sid:200013397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ptyketcsic.duckdns.org"; classtype:attempted-recon; sid:200013398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pubgmidassbuyy.com"; classtype:attempted-recon; sid:200013399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"publicdefinetwork.com"; classtype:attempted-recon; sid:200013400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"publish-p43452-e180057.adobeaemcloud.com"; classtype:attempted-recon; sid:200013401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pucoatouxq.duckdns.org"; classtype:attempted-recon; sid:200013402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pufrhfkkzr.duckdns.org"; classtype:attempted-recon; sid:200013403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pufvjccrvm.duckdns.org"; classtype:attempted-recon; sid:200013404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puhemoabcl.duckdns.org"; classtype:attempted-recon; sid:200013405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pujabhandar.com"; classtype:attempted-recon; sid:200013406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pulaubiru.xyz"; classtype:attempted-recon; sid:200013407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pulhnhfvjj.duckdns.org"; classtype:attempted-recon; sid:200013408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pumaperspectives.com"; classtype:attempted-recon; sid:200013409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"purple-da6462.qqu4qswu.workers.dev"; classtype:attempted-recon; sid:200013410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"purple-morning-d15d.beewatchsea.workers.dev"; classtype:attempted-recon; sid:200013411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"purpttlgmj.duckdns.org"; classtype:attempted-recon; sid:200013412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"push-spk.de"; classtype:attempted-recon; sid:200013413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puuqmrozpa.duckdns.org"; classtype:attempted-recon; sid:200013414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puvkjpuydu.duckdns.org"; classtype:attempted-recon; sid:200013415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puvtytvvbd.duckdns.org"; classtype:attempted-recon; sid:200013416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puyegwgjut.duckdns.org"; classtype:attempted-recon; sid:200013417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puylkskifh.duckdns.org"; classtype:attempted-recon; sid:200013418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puyqrjsjcf.duckdns.org"; classtype:attempted-recon; sid:200013419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puzzling-exciting-halibut.glitch.me"; classtype:attempted-recon; sid:200013420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvceuqatvj.duckdns.org"; classtype:attempted-recon; sid:200013421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvcxz.co.vu"; classtype:attempted-recon; sid:200013422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvduebarfy.duckdns.org"; classtype:attempted-recon; sid:200013423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvezkebskh.duckdns.org"; classtype:attempted-recon; sid:200013424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvfxpysdhu.duckdns.org"; classtype:attempted-recon; sid:200013425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvkebjxlak.duckdns.org"; classtype:attempted-recon; sid:200013426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvlsqcscwy.duckdns.org"; classtype:attempted-recon; sid:200013427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvoajamvyo.duckdns.org"; classtype:attempted-recon; sid:200013428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvqwqgdmve.duckdns.org"; classtype:attempted-recon; sid:200013429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pvzdtzxhvx.duckdns.org"; classtype:attempted-recon; sid:200013430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwbbssnlaf.duckdns.org"; classtype:attempted-recon; sid:200013431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwdmyrmduy.duckdns.org"; classtype:attempted-recon; sid:200013432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwhrhijjtz.duckdns.org"; classtype:attempted-recon; sid:200013433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwkzsbhvqt.duckdns.org"; classtype:attempted-recon; sid:200013434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwnvwaxvxj.duckdns.org"; classtype:attempted-recon; sid:200013435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwrmfkfyjd.duckdns.org"; classtype:attempted-recon; sid:200013436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwuxriinth.duckdns.org"; classtype:attempted-recon; sid:200013437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwvuemzolz.duckdns.org"; classtype:attempted-recon; sid:200013438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwwhuorgas.duckdns.org"; classtype:attempted-recon; sid:200013439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pwychvglae.duckdns.org"; classtype:attempted-recon; sid:200013440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxbwxiodym.duckdns.org"; classtype:attempted-recon; sid:200013441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxclknigfh.duckdns.org"; classtype:attempted-recon; sid:200013442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxdfvsvwdz.duckdns.org"; classtype:attempted-recon; sid:200013443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxgqnapzsp.duckdns.org"; classtype:attempted-recon; sid:200013444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxhjaezdxy.duckdns.org"; classtype:attempted-recon; sid:200013445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxkwvhklmo.duckdns.org"; classtype:attempted-recon; sid:200013446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxqpggkokm.duckdns.org"; classtype:attempted-recon; sid:200013447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxtiqiivbk.duckdns.org"; classtype:attempted-recon; sid:200013448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxxtrzqkoq.duckdns.org"; classtype:attempted-recon; sid:200013449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxzhdrdkft.duckdns.org"; classtype:attempted-recon; sid:200013450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pxzytxcdfj.duckdns.org"; classtype:attempted-recon; sid:200013451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pycrbowcta.duckdns.org"; classtype:attempted-recon; sid:200013452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pydjfhnxxc.duckdns.org"; classtype:attempted-recon; sid:200013453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyebrrmgdb.duckdns.org"; classtype:attempted-recon; sid:200013454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyepwdlnde.duckdns.org"; classtype:attempted-recon; sid:200013455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pygyxtfzdb.duckdns.org"; classtype:attempted-recon; sid:200013456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyjfqwzpko.duckdns.org"; classtype:attempted-recon; sid:200013457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pykxgqxghd.duckdns.org"; classtype:attempted-recon; sid:200013458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyltcsphzz.duckdns.org"; classtype:attempted-recon; sid:200013459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pymbnmhbsx.duckdns.org"; classtype:attempted-recon; sid:200013460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyntcfmkog.duckdns.org"; classtype:attempted-recon; sid:200013461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pynwxamjjo.duckdns.org"; classtype:attempted-recon; sid:200013462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pypfnwcded.duckdns.org"; classtype:attempted-recon; sid:200013463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyqldlpqsi.duckdns.org"; classtype:attempted-recon; sid:200013464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyrletfsnx.duckdns.org"; classtype:attempted-recon; sid:200013465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pysdvpubru.duckdns.org"; classtype:attempted-recon; sid:200013466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pysnjhmggc.duckdns.org"; classtype:attempted-recon; sid:200013467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pyudlgksop.duckdns.org"; classtype:attempted-recon; sid:200013468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzedpfnuzo.duckdns.org"; classtype:attempted-recon; sid:200013469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzjvlahmds.duckdns.org"; classtype:attempted-recon; sid:200013470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzldjobgbk.duckdns.org"; classtype:attempted-recon; sid:200013471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzrqkkgugz.duckdns.org"; classtype:attempted-recon; sid:200013472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzthsnqoku.duckdns.org"; classtype:attempted-recon; sid:200013473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzwxkdzygj.duckdns.org"; classtype:attempted-recon; sid:200013474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzxpuqesjq.duckdns.org"; classtype:attempted-recon; sid:200013475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzxuyhjujt.duckdns.org"; classtype:attempted-recon; sid:200013476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pzyfevisls.duckdns.org"; classtype:attempted-recon; sid:200013477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qaizimprno.duckdns.org"; classtype:attempted-recon; sid:200013478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qanrflypzc.duckdns.org"; classtype:attempted-recon; sid:200013479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qaohvqvlhy.duckdns.org"; classtype:attempted-recon; sid:200013480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qaqjbjekwr.duckdns.org"; classtype:attempted-recon; sid:200013481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qasnfiagkh.duckdns.org"; classtype:attempted-recon; sid:200013482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qatar2022.pro"; classtype:attempted-recon; sid:200013483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qatar2022.work"; classtype:attempted-recon; sid:200013484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qautlbkrev.duckdns.org"; classtype:attempted-recon; sid:200013485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qavtfkawml.duckdns.org"; classtype:attempted-recon; sid:200013486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qawdvdlzhz.duckdns.org"; classtype:attempted-recon; sid:200013487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qawfsurtur.duckdns.org"; classtype:attempted-recon; sid:200013488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qawlkvfusd.duckdns.org"; classtype:attempted-recon; sid:200013489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qazxcderfvbgt.top"; classtype:attempted-recon; sid:200013490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbcphhhiuh.duckdns.org"; classtype:attempted-recon; sid:200013491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbfianrgao.duckdns.org"; classtype:attempted-recon; sid:200013492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qblwhwapoz.duckdns.org"; classtype:attempted-recon; sid:200013493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbnobmrydm.duckdns.org"; classtype:attempted-recon; sid:200013494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbocd.csb.app"; classtype:attempted-recon; sid:200013495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbplnkleag.duckdns.org"; classtype:attempted-recon; sid:200013496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbrluqsqjk.duckdns.org"; classtype:attempted-recon; sid:200013497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbswiqgikk.duckdns.org"; classtype:attempted-recon; sid:200013498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbsxwkpqmf.duckdns.org"; classtype:attempted-recon; sid:200013499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbuerqjggg.duckdns.org"; classtype:attempted-recon; sid:200013500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbvlrqvvrl.duckdns.org"; classtype:attempted-recon; sid:200013501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbxoqajhgi.duckdns.org"; classtype:attempted-recon; sid:200013502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qbymtzmneh.duckdns.org"; classtype:attempted-recon; sid:200013503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcbjhrkaoq.duckdns.org"; classtype:attempted-recon; sid:200013504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcbnyusktd.duckdns.org"; classtype:attempted-recon; sid:200013505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcbxdzsvlx.duckdns.org"; classtype:attempted-recon; sid:200013506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qccefeesjk.duckdns.org"; classtype:attempted-recon; sid:200013507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcdngqpmnm.duckdns.org"; classtype:attempted-recon; sid:200013508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qchcljhgdt.duckdns.org"; classtype:attempted-recon; sid:200013509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qchmyfuvyf.duckdns.org"; classtype:attempted-recon; sid:200013510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcmdaokvsq.duckdns.org"; classtype:attempted-recon; sid:200013511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcmtqfxkww.duckdns.org"; classtype:attempted-recon; sid:200013512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcofimcodk.duckdns.org"; classtype:attempted-recon; sid:200013513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qcpboopooo.duckdns.org"; classtype:attempted-recon; sid:200013514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qddstiosza.duckdns.org"; classtype:attempted-recon; sid:200013515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qdqovbdyya.duckdns.org"; classtype:attempted-recon; sid:200013516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qdrqwblqop.duckdns.org"; classtype:attempted-recon; sid:200013517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qeabpirdid.duckdns.org"; classtype:attempted-recon; sid:200013518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qeaemmgnpo.duckdns.org"; classtype:attempted-recon; sid:200013519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qechxstdtf.duckdns.org"; classtype:attempted-recon; sid:200013520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qecstwpwgw.duckdns.org"; classtype:attempted-recon; sid:200013521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qefjexwnlb.duckdns.org"; classtype:attempted-recon; sid:200013522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qefwbbrmfc.duckdns.org"; classtype:attempted-recon; sid:200013523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qeikhtkwtv.duckdns.org"; classtype:attempted-recon; sid:200013524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qeiwbnqcau.duckdns.org"; classtype:attempted-recon; sid:200013525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qejzjydrcu.duckdns.org"; classtype:attempted-recon; sid:200013526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qemszieppg.duckdns.org"; classtype:attempted-recon; sid:200013527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qenikeqdjh.duckdns.org"; classtype:attempted-recon; sid:200013528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qeyvnfvrdx.duckdns.org"; classtype:attempted-recon; sid:200013529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfgtgughqi.duckdns.org"; classtype:attempted-recon; sid:200013530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfqouhyegp.duckdns.org"; classtype:attempted-recon; sid:200013531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfrcdbygdo.duckdns.org"; classtype:attempted-recon; sid:200013532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfvhzkeftx.duckdns.org"; classtype:attempted-recon; sid:200013533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfzvtrceyd.duckdns.org"; classtype:attempted-recon; sid:200013534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgajrriyhw.duckdns.org"; classtype:attempted-recon; sid:200013535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgamvwaayi.duckdns.org"; classtype:attempted-recon; sid:200013536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgdsgzeraqfqdfc.blogspot.com"; classtype:attempted-recon; sid:200013537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgfystatlz.duckdns.org"; classtype:attempted-recon; sid:200013538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgfzhqlkdz.duckdns.org"; classtype:attempted-recon; sid:200013539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgkacckmfg.duckdns.org"; classtype:attempted-recon; sid:200013540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgkccvodxh.duckdns.org"; classtype:attempted-recon; sid:200013541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgllqksnjb.duckdns.org"; classtype:attempted-recon; sid:200013542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgnxxojtkm.duckdns.org"; classtype:attempted-recon; sid:200013543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgpvlpgtxy.duckdns.org"; classtype:attempted-recon; sid:200013544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgstjxmelu.duckdns.org"; classtype:attempted-recon; sid:200013545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgxlmimvwy.duckdns.org"; classtype:attempted-recon; sid:200013546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qgylwuerjs.duckdns.org"; classtype:attempted-recon; sid:200013547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhenwtteks.duckdns.org"; classtype:attempted-recon; sid:200013548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhiasvmuyj.duckdns.org"; classtype:attempted-recon; sid:200013549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhj39hfxqftr.clickfunnels.com"; classtype:attempted-recon; sid:200013550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhmheewtxu.duckdns.org"; classtype:attempted-recon; sid:200013551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhntfhygrv.duckdns.org"; classtype:attempted-recon; sid:200013552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhqgrqezzm.duckdns.org"; classtype:attempted-recon; sid:200013553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhryat.ga"; classtype:attempted-recon; sid:200013554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhutszpwyx.duckdns.org"; classtype:attempted-recon; sid:200013555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhvxejigev.duckdns.org"; classtype:attempted-recon; sid:200013556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qhylauwbeg.duckdns.org"; classtype:attempted-recon; sid:200013557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qiacnofaxb.duckdns.org"; classtype:attempted-recon; sid:200013558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qicszsylow.duckdns.org"; classtype:attempted-recon; sid:200013559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qilfscwjmj.duckdns.org"; classtype:attempted-recon; sid:200013560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qiroslflhu.duckdns.org"; classtype:attempted-recon; sid:200013561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qirvtnegrz.duckdns.org"; classtype:attempted-recon; sid:200013562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qismshhkia.duckdns.org"; classtype:attempted-recon; sid:200013563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qitltmervt.duckdns.org"; classtype:attempted-recon; sid:200013564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qiwq919vamn.club"; classtype:attempted-recon; sid:200013565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qiwtghcjtn.duckdns.org"; classtype:attempted-recon; sid:200013566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qixtwjbnqw.duckdns.org"; classtype:attempted-recon; sid:200013567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qiyvntpnaf.duckdns.org"; classtype:attempted-recon; sid:200013568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjalonxzal.duckdns.org"; classtype:attempted-recon; sid:200013569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjbyvfxlei.duckdns.org"; classtype:attempted-recon; sid:200013570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjghtydzkk.duckdns.org"; classtype:attempted-recon; sid:200013571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjmlyvrmcf.duckdns.org"; classtype:attempted-recon; sid:200013572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjmsjqqzme.duckdns.org"; classtype:attempted-recon; sid:200013573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjoqngdxbu.duckdns.org"; classtype:attempted-recon; sid:200013574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjrjqzahsb.duckdns.org"; classtype:attempted-recon; sid:200013575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjrkdvqfzx.duckdns.org"; classtype:attempted-recon; sid:200013576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjsskkonli.duckdns.org"; classtype:attempted-recon; sid:200013577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjtaniifah.duckdns.org"; classtype:attempted-recon; sid:200013578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qjzpnkoczm.duckdns.org"; classtype:attempted-recon; sid:200013579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkhzycftta.duckdns.org"; classtype:attempted-recon; sid:200013580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkjybiamcb.duckdns.org"; classtype:attempted-recon; sid:200013581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkmnzgrpgr.duckdns.org"; classtype:attempted-recon; sid:200013582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkovfqyels.duckdns.org"; classtype:attempted-recon; sid:200013583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkplwjecua.duckdns.org"; classtype:attempted-recon; sid:200013584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkpvniwlcy.duckdns.org"; classtype:attempted-recon; sid:200013585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkshvbjlkb.duckdns.org"; classtype:attempted-recon; sid:200013586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qkxkyhdiiw.duckdns.org"; classtype:attempted-recon; sid:200013587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlbljerczd.duckdns.org"; classtype:attempted-recon; sid:200013588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qldjiueyfd.duckdns.org"; classtype:attempted-recon; sid:200013589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlgfveu3.tk"; classtype:attempted-recon; sid:200013590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlgfveu5.tk"; classtype:attempted-recon; sid:200013591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlgfveu8.ga"; classtype:attempted-recon; sid:200013592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlhapuiaxn.duckdns.org"; classtype:attempted-recon; sid:200013593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlms1.hyperphp.com"; classtype:attempted-recon; sid:200013594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlpfmuvekv.duckdns.org"; classtype:attempted-recon; sid:200013595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlrizgituk.duckdns.org"; classtype:attempted-recon; sid:200013596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qlvgjfewvs.duckdns.org"; classtype:attempted-recon; sid:200013597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmdfpuehpb.duckdns.org"; classtype:attempted-recon; sid:200013598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmfzirhyqj.duckdns.org"; classtype:attempted-recon; sid:200013599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmhxohpegb.duckdns.org"; classtype:attempted-recon; sid:200013600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmncubeqdd.duckdns.org"; classtype:attempted-recon; sid:200013601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmncxdnpmj.duckdns.org"; classtype:attempted-recon; sid:200013602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmonwcsqgc.duckdns.org"; classtype:attempted-recon; sid:200013603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmoqtlrfbp.duckdns.org"; classtype:attempted-recon; sid:200013604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmtmdyyggw.duckdns.org"; classtype:attempted-recon; sid:200013605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmvvegzroa.duckdns.org"; classtype:attempted-recon; sid:200013606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmyqjpgpcm.duckdns.org"; classtype:attempted-recon; sid:200013607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qmzabdb7yjqygnddyphsnxh4w74woz6gk9zu5hgtbqjvxw.myportfolio.com"; classtype:attempted-recon; sid:200013608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qndcpsbfsx.duckdns.org"; classtype:attempted-recon; sid:200013609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnddfxjzvu.duckdns.org"; classtype:attempted-recon; sid:200013610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnhdvuhwrf.duckdns.org"; classtype:attempted-recon; sid:200013611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnliwcnzkl.duckdns.org"; classtype:attempted-recon; sid:200013612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnntmkvgaz.duckdns.org"; classtype:attempted-recon; sid:200013613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnrpacqkiv.duckdns.org"; classtype:attempted-recon; sid:200013614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnsixooupm.duckdns.org"; classtype:attempted-recon; sid:200013615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnvjxqwnsv.duckdns.org"; classtype:attempted-recon; sid:200013616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnxypcqzsb.duckdns.org"; classtype:attempted-recon; sid:200013617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qoaffreerw.duckdns.org"; classtype:attempted-recon; sid:200013618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qoarkksdqd.duckdns.org"; classtype:attempted-recon; sid:200013619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qobbcpcqdq.duckdns.org"; classtype:attempted-recon; sid:200013620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qodlcqluaf.duckdns.org"; classtype:attempted-recon; sid:200013621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qofkcgaewa.duckdns.org"; classtype:attempted-recon; sid:200013622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qoixcphheq.duckdns.org"; classtype:attempted-recon; sid:200013623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qoqhlmlurj.duckdns.org"; classtype:attempted-recon; sid:200013624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qoqnmrzfoj.duckdns.org"; classtype:attempted-recon; sid:200013625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qp1ctm.webwave.dev"; classtype:attempted-recon; sid:200013626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpaijonanl.duckdns.org"; classtype:attempted-recon; sid:200013627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpdyskotvm.duckdns.org"; classtype:attempted-recon; sid:200013628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qphuflzhtf.duckdns.org"; classtype:attempted-recon; sid:200013629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpihjdcpqq.duckdns.org"; classtype:attempted-recon; sid:200013630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpjaoozhhc.duckdns.org"; classtype:attempted-recon; sid:200013631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpjxizuuhy.duckdns.org"; classtype:attempted-recon; sid:200013632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpkjzfpdib.duckdns.org"; classtype:attempted-recon; sid:200013633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qpssvqlsxe.duckdns.org"; classtype:attempted-recon; sid:200013634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qqbuxswkck.duckdns.org"; classtype:attempted-recon; sid:200013635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qqcymqbztn.duckdns.org"; classtype:attempted-recon; sid:200013636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qqnhqsdiep.duckdns.org"; classtype:attempted-recon; sid:200013637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qqtieovnqa.duckdns.org"; classtype:attempted-recon; sid:200013638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qqtxrwxoev.duckdns.org"; classtype:attempted-recon; sid:200013639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qqxesdwveg.duckdns.org"; classtype:attempted-recon; sid:200013640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qr.paps.jp"; classtype:attempted-recon; sid:200013641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qrdkqrhmux.duckdns.org"; classtype:attempted-recon; sid:200013642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qresodfgzn.duckdns.org"; classtype:attempted-recon; sid:200013643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qrgdbmzprd.duckdns.org"; classtype:attempted-recon; sid:200013644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qrhrvsdwrf.duckdns.org"; classtype:attempted-recon; sid:200013645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qrlwrrejln.duckdns.org"; classtype:attempted-recon; sid:200013646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qrsxvrmdws.duckdns.org"; classtype:attempted-recon; sid:200013647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qsfqpfsbwk.duckdns.org"; classtype:attempted-recon; sid:200013648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qsh74pekkv5e8.clickfunnels.com"; classtype:attempted-recon; sid:200013649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qsjxfmhssz.duckdns.org"; classtype:attempted-recon; sid:200013650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qspanlfffl.duckdns.org"; classtype:attempted-recon; sid:200013651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qss1a.hyperphp.com"; classtype:attempted-recon; sid:200013652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qstivtnmpb.duckdns.org"; classtype:attempted-recon; sid:200013653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qsuaxjpqgv.duckdns.org"; classtype:attempted-recon; sid:200013654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qsvk6n.webwave.dev"; classtype:attempted-recon; sid:200013655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qswsvfpfnd.duckdns.org"; classtype:attempted-recon; sid:200013656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qsybxiykao.duckdns.org"; classtype:attempted-recon; sid:200013657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qtcqyxaurb.duckdns.org"; classtype:attempted-recon; sid:200013658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qtgxbrbtqr.duckdns.org"; classtype:attempted-recon; sid:200013659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qthrdxdejh.duckdns.org"; classtype:attempted-recon; sid:200013660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qtoiq4jbdkjlfa.club"; classtype:attempted-recon; sid:200013661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qtpgbfyedj.duckdns.org"; classtype:attempted-recon; sid:200013662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qtrqjousyk.duckdns.org"; classtype:attempted-recon; sid:200013663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qtuyxvfipv.duckdns.org"; classtype:attempted-recon; sid:200013664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quaflowpvj.duckdns.org"; classtype:attempted-recon; sid:200013665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quafreefirevip.gearena.vn"; classtype:attempted-recon; sid:200013666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quaintnumbprogram.galicianene.repl.co"; classtype:attempted-recon; sid:200013667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quaran2082022tine048103-1312962597.cos.ap-seoul.myqcloud.com"; classtype:attempted-recon; sid:200013668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quarantine-2542022app-1311433986.cos.ap-nanjing.myqcloud.com"; classtype:attempted-recon; sid:200013669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quarantine-mes2742022-1311564033.cos.na-ashburn.myqcloud.com"; classtype:attempted-recon; sid:200013670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quarantine26042022mic-1311531473.cos.ap-seoul.myqcloud.com"; classtype:attempted-recon; sid:200013671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quarantine27042022web-1311564033.cos.ap-nanjing.myqcloud.com"; classtype:attempted-recon; sid:200013672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com"; classtype:attempted-recon; sid:200013673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quarantine592022web-1312962597.cos.ap-chongqing.myqcloud.com"; classtype:attempted-recon; sid:200013674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qube.kz"; classtype:attempted-recon; sid:200013675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"questionablejoyousnewsaggregator.withebrou3log9c.repl.co"; classtype:attempted-recon; sid:200013676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quhxhkizhy.duckdns.org"; classtype:attempted-recon; sid:200013677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quickdentalconditionals.bankbancol.repl.co"; classtype:attempted-recon; sid:200013678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quiet-block-e399.westmoons.workers.dev"; classtype:attempted-recon; sid:200013679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quiet-glade-0366.on.fleek.co"; classtype:attempted-recon; sid:200013680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quiet-meadow.8av37ve6.workers.dev"; classtype:attempted-recon; sid:200013681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quijdforxr.duckdns.org"; classtype:attempted-recon; sid:200013682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quiouyuuu76.firebaseapp.com"; classtype:attempted-recon; sid:200013683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quiouyuuu76.web.app"; classtype:attempted-recon; sid:200013684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quitjeohkh.duckdns.org"; classtype:attempted-recon; sid:200013685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quizzical-mcnulty.185-194-219-163.plesk.page"; classtype:attempted-recon; sid:200013686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qulfzsewag.duckdns.org"; classtype:attempted-recon; sid:200013687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qunyyvbsyi.duckdns.org"; classtype:attempted-recon; sid:200013688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quooiplfbp.duckdns.org"; classtype:attempted-recon; sid:200013689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quoooyu454.web.app"; classtype:attempted-recon; sid:200013690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quootete44443.web.app"; classtype:attempted-recon; sid:200013691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quosiiqmny.duckdns.org"; classtype:attempted-recon; sid:200013692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quote123430.firebaseapp.com"; classtype:attempted-recon; sid:200013693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quote123430.web.app"; classtype:attempted-recon; sid:200013694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quotee323.firebaseapp.com"; classtype:attempted-recon; sid:200013695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quotee323.web.app"; classtype:attempted-recon; sid:200013696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quoter4439000.firebaseapp.com"; classtype:attempted-recon; sid:200013697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quoter4439000.web.app"; classtype:attempted-recon; sid:200013698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qutrlkrbgl.duckdns.org"; classtype:attempted-recon; sid:200013699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quulcontke.duckdns.org"; classtype:attempted-recon; sid:200013700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quumzqbirn.duckdns.org"; classtype:attempted-recon; sid:200013701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quuootew32.firebaseapp.com"; classtype:attempted-recon; sid:200013702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quuootew32.web.app"; classtype:attempted-recon; sid:200013703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quzxszzwop.duckdns.org"; classtype:attempted-recon; sid:200013704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvahhmgrhm.duckdns.org"; classtype:attempted-recon; sid:200013705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvczjbspvw.duckdns.org"; classtype:attempted-recon; sid:200013706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvdntmrymr.duckdns.org"; classtype:attempted-recon; sid:200013707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvfnafuskw.duckdns.org"; classtype:attempted-recon; sid:200013708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvhjkwclpy.duckdns.org"; classtype:attempted-recon; sid:200013709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvkithzmsg.duckdns.org"; classtype:attempted-recon; sid:200013710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvlfbhzhjn.duckdns.org"; classtype:attempted-recon; sid:200013711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvncopzwkf.duckdns.org"; classtype:attempted-recon; sid:200013712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvuspngcwc.duckdns.org"; classtype:attempted-recon; sid:200013713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvvpwkrxcn.duckdns.org"; classtype:attempted-recon; sid:200013714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvwmlexydq.duckdns.org"; classtype:attempted-recon; sid:200013715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvxucydcwj.duckdns.org"; classtype:attempted-recon; sid:200013716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvznrxpxxu.duckdns.org"; classtype:attempted-recon; sid:200013717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwemrhgprc.duckdns.org"; classtype:attempted-recon; sid:200013718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwerrdhzze.duckdns.org"; classtype:attempted-recon; sid:200013719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwjjgeijnt.duckdns.org"; classtype:attempted-recon; sid:200013720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwtbaflrri.duckdns.org"; classtype:attempted-recon; sid:200013721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwuzysmkvs.duckdns.org"; classtype:attempted-recon; sid:200013722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwwbvkykkm.duckdns.org"; classtype:attempted-recon; sid:200013723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwwtppdkvm.duckdns.org"; classtype:attempted-recon; sid:200013724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwxguawwpj.duckdns.org"; classtype:attempted-recon; sid:200013725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qwxkykzhog.duckdns.org"; classtype:attempted-recon; sid:200013726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qxecaaxmdf.duckdns.org"; classtype:attempted-recon; sid:200013727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qxprhzi.top"; classtype:attempted-recon; sid:200013728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qxqglikjji.duckdns.org"; classtype:attempted-recon; sid:200013729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qxtlyjicsx.duckdns.org"; classtype:attempted-recon; sid:200013730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qxtpdnlejv.duckdns.org"; classtype:attempted-recon; sid:200013731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qxwcfmzpsn.duckdns.org"; classtype:attempted-recon; sid:200013732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qxxvrjfvya.duckdns.org"; classtype:attempted-recon; sid:200013733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qygevsjaby.duckdns.org"; classtype:attempted-recon; sid:200013734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyhmypuxkc.duckdns.org"; classtype:attempted-recon; sid:200013735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qykziwjrca.duckdns.org"; classtype:attempted-recon; sid:200013736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qymjjedsfu.duckdns.org"; classtype:attempted-recon; sid:200013737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qymvwabwrz.duckdns.org"; classtype:attempted-recon; sid:200013738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyovpfimkk.duckdns.org"; classtype:attempted-recon; sid:200013739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyphmxzbpn.duckdns.org"; classtype:attempted-recon; sid:200013740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qypvqoqtwo.duckdns.org"; classtype:attempted-recon; sid:200013741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyqqnfdllk.duckdns.org"; classtype:attempted-recon; sid:200013742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyqupdamkw.duckdns.org"; classtype:attempted-recon; sid:200013743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyqwvqdytd.duckdns.org"; classtype:attempted-recon; sid:200013744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyulerssbf.duckdns.org"; classtype:attempted-recon; sid:200013745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyuvtluxye.duckdns.org"; classtype:attempted-recon; sid:200013746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyvuxtqrfv.duckdns.org"; classtype:attempted-recon; sid:200013747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qywdpsatkt.duckdns.org"; classtype:attempted-recon; sid:200013748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qyysvgrffa.duckdns.org"; classtype:attempted-recon; sid:200013749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qzbvyvgaoe.duckdns.org"; classtype:attempted-recon; sid:200013750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qzfdyxjyze.duckdns.org"; classtype:attempted-recon; sid:200013751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qzokqnhrye.duckdns.org"; classtype:attempted-recon; sid:200013752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qzplvilmie.duckdns.org"; classtype:attempted-recon; sid:200013753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qztoghvmix.duckdns.org"; classtype:attempted-recon; sid:200013754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qzuxzumapq.duckdns.org"; classtype:attempted-recon; sid:200013755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"r2mzim.com"; classtype:attempted-recon; sid:200013756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"r8vfisf7v703na8fmxcq.s3.eu-north-1.amazonaws.com"; classtype:attempted-recon; sid:200013757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"r9ogn4.webwave.dev"; classtype:attempted-recon; sid:200013758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ra.kiech.correarealtygroup.cl.#.ahr0chm6ly9iywzrcmvpzjnkzdrwegz0n3hzeg83bxnqedv3axdwamq0zgdmbmxrnxh1advnamezzxdudxrnnghnbs5pcgzzlm5mdhn0b3jhz2uubgluay8jywjvbmlsbgfacmhyaw50zxjuyxrpb25hbc5jb20=3d"; classtype:attempted-recon; sid:200013759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raaheudpzy.duckdns.org"; classtype:attempted-recon; sid:200013760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rabbithole.mirror.xyz"; classtype:attempted-recon; sid:200013761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"racebetter.co.uk"; classtype:attempted-recon; sid:200013762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rack-adminpanel.firebaseapp.com"; classtype:attempted-recon; sid:200013763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rack-adminpanel.web.app"; classtype:attempted-recon; sid:200013764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rack-specsadminteam.firebaseapp.com"; classtype:attempted-recon; sid:200013765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rack-specsadminteam.web.app"; classtype:attempted-recon; sid:200013766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackenfordlabs.com"; classtype:attempted-recon; sid:200013767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy004.firebaseapp.com"; classtype:attempted-recon; sid:200013768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy004.web.app"; classtype:attempted-recon; sid:200013769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy006.firebaseapp.com"; classtype:attempted-recon; sid:200013770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy006.web.app"; classtype:attempted-recon; sid:200013771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy008.firebaseapp.com"; classtype:attempted-recon; sid:200013772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy008.web.app"; classtype:attempted-recon; sid:200013773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy009.firebaseapp.com"; classtype:attempted-recon; sid:200013774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rackspcemondy009.web.app"; classtype:attempted-recon; sid:200013775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"radhikamd.github.io"; classtype:attempted-recon; sid:200013776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"radver.com"; classtype:attempted-recon; sid:200013777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.037768888861.xyz"; classtype:attempted-recon; sid:200013778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.284nxw.icu"; classtype:attempted-recon; sid:200013779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.33hf19.icu"; classtype:attempted-recon; sid:200013780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.473glv.icu"; classtype:attempted-recon; sid:200013781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.4k2dci.icu"; classtype:attempted-recon; sid:200013782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.687cem.icu"; classtype:attempted-recon; sid:200013783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.69bn6b.icu"; classtype:attempted-recon; sid:200013784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.6c7bza.icu"; classtype:attempted-recon; sid:200013785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.6pw2wd.icu"; classtype:attempted-recon; sid:200013786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.6rtqht.icu"; classtype:attempted-recon; sid:200013787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.6t1vk7.icu"; classtype:attempted-recon; sid:200013788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.7a4s96.icu"; classtype:attempted-recon; sid:200013789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.82casa.icu"; classtype:attempted-recon; sid:200013790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.9d24dh.icu"; classtype:attempted-recon; sid:200013791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.9pw3lv.icu"; classtype:attempted-recon; sid:200013792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.9zv0ny.icu"; classtype:attempted-recon; sid:200013793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.aale2a.icu"; classtype:attempted-recon; sid:200013794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.aayldm.top"; classtype:attempted-recon; sid:200013795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.adldni.top"; classtype:attempted-recon; sid:200013796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.afqzgx.top"; classtype:attempted-recon; sid:200013797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ajxdpg.top"; classtype:attempted-recon; sid:200013798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ansklx.top"; classtype:attempted-recon; sid:200013799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ao0dkn.icu"; classtype:attempted-recon; sid:200013800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.aogild.top"; classtype:attempted-recon; sid:200013801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.bucyvo.top"; classtype:attempted-recon; sid:200013802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.bwxsxf.top"; classtype:attempted-recon; sid:200013803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.bxsxvy.top"; classtype:attempted-recon; sid:200013804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.cgogay.top"; classtype:attempted-recon; sid:200013805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.cmudlt.top"; classtype:attempted-recon; sid:200013806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ctdwug.top"; classtype:attempted-recon; sid:200013807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.cwpgoh.top"; classtype:attempted-recon; sid:200013808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.d5u49w.icu"; classtype:attempted-recon; sid:200013809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.dbezzz.top"; classtype:attempted-recon; sid:200013810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.dbhlbm.top"; classtype:attempted-recon; sid:200013811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.dqbdkl.top"; classtype:attempted-recon; sid:200013812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.drkild.icu"; classtype:attempted-recon; sid:200013813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.e7ie6j.icu"; classtype:attempted-recon; sid:200013814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.eahbrm.top"; classtype:attempted-recon; sid:200013815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.enioab.top"; classtype:attempted-recon; sid:200013816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.erkdnv.top"; classtype:attempted-recon; sid:200013817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.fn0aqh.icu"; classtype:attempted-recon; sid:200013818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.hblfhq.top"; classtype:attempted-recon; sid:200013819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.hefhjq.icu"; classtype:attempted-recon; sid:200013820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.herbertweb.site"; classtype:attempted-recon; sid:200013821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.hli3b0.icu"; classtype:attempted-recon; sid:200013822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.hlsyku.icu"; classtype:attempted-recon; sid:200013823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.hmziti.top"; classtype:attempted-recon; sid:200013824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.idenyq.top"; classtype:attempted-recon; sid:200013825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.inkblog.ink"; classtype:attempted-recon; sid:200013826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.j3tu3m.icu"; classtype:attempted-recon; sid:200013827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.j77o38.icu"; classtype:attempted-recon; sid:200013828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.jehe99.icu"; classtype:attempted-recon; sid:200013829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.juls8q.icu"; classtype:attempted-recon; sid:200013830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.k3ma2x.icu"; classtype:attempted-recon; sid:200013831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.k9pn0d.icu"; classtype:attempted-recon; sid:200013832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ka83cb.icu"; classtype:attempted-recon; sid:200013833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.kb5b6d.icu"; classtype:attempted-recon; sid:200013834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.kgfkdv.top"; classtype:attempted-recon; sid:200013835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.krjqpe.top"; classtype:attempted-recon; sid:200013836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.kvrhdp.top"; classtype:attempted-recon; sid:200013837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.lcazit.top"; classtype:attempted-recon; sid:200013838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.lfyacu.icu"; classtype:attempted-recon; sid:200013839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ljmuov.top"; classtype:attempted-recon; sid:200013840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ll64vg.icu"; classtype:attempted-recon; sid:200013841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.llufip.top"; classtype:attempted-recon; sid:200013842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.lmheln.top"; classtype:attempted-recon; sid:200013843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.lwgayp.top"; classtype:attempted-recon; sid:200013844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.lylxce.top"; classtype:attempted-recon; sid:200013845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.mcltim.top"; classtype:attempted-recon; sid:200013846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.mfx741.icu"; classtype:attempted-recon; sid:200013847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.mgjpjr.top"; classtype:attempted-recon; sid:200013848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.mjdnpt.top"; classtype:attempted-recon; sid:200013849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.nllyoh.top"; classtype:attempted-recon; sid:200013850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.nqveqi.top"; classtype:attempted-recon; sid:200013851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.nrhpkc.icu"; classtype:attempted-recon; sid:200013852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.nu57wl.icu"; classtype:attempted-recon; sid:200013853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.nv9dtw.icu"; classtype:attempted-recon; sid:200013854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ojyzcd.top"; classtype:attempted-recon; sid:200013855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.okbpku.icu"; classtype:attempted-recon; sid:200013856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.oppxsj.top"; classtype:attempted-recon; sid:200013857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.or1glf.icu"; classtype:attempted-recon; sid:200013858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.pe14pc.icu"; classtype:attempted-recon; sid:200013859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.psdexq.top"; classtype:attempted-recon; sid:200013860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.psdoni.top"; classtype:attempted-recon; sid:200013861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.pujapd.top"; classtype:attempted-recon; sid:200013862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.pzgoea.top"; classtype:attempted-recon; sid:200013863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.q0s2sm.icu"; classtype:attempted-recon; sid:200013864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.qclqjo.top"; classtype:attempted-recon; sid:200013865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.qeaogd.top"; classtype:attempted-recon; sid:200013866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.qnqwcs.icu"; classtype:attempted-recon; sid:200013867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.qpchzg.top"; classtype:attempted-recon; sid:200013868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.qqjjzi.top"; classtype:attempted-recon; sid:200013869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.qvgavp.top"; classtype:attempted-recon; sid:200013870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.rbyycn.top"; classtype:attempted-recon; sid:200013871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.rmgomo.top"; classtype:attempted-recon; sid:200013872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.rsxojx.top"; classtype:attempted-recon; sid:200013873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.sawjbk.top"; classtype:attempted-recon; sid:200013874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.slnb02.icu"; classtype:attempted-recon; sid:200013875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.srcwhi.top"; classtype:attempted-recon; sid:200013876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.srwwap.top"; classtype:attempted-recon; sid:200013877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.sthtuh.top"; classtype:attempted-recon; sid:200013878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.syeuaw.top"; classtype:attempted-recon; sid:200013879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.tazsl1.icu"; classtype:attempted-recon; sid:200013880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.tbnilj.top"; classtype:attempted-recon; sid:200013881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.tl86n6.icu"; classtype:attempted-recon; sid:200013882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.to5fb9.icu"; classtype:attempted-recon; sid:200013883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.u0c8sn.icu"; classtype:attempted-recon; sid:200013884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.uixah3.icu"; classtype:attempted-recon; sid:200013885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ukesvp.icu"; classtype:attempted-recon; sid:200013886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ukrtxd.top"; classtype:attempted-recon; sid:200013887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.upahh5.icu"; classtype:attempted-recon; sid:200013888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.uxdgpy.top"; classtype:attempted-recon; sid:200013889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.uxvqzp.top"; classtype:attempted-recon; sid:200013890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.vdpgwm.top"; classtype:attempted-recon; sid:200013891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.vqeyuo.top"; classtype:attempted-recon; sid:200013892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.vspjok.icu"; classtype:attempted-recon; sid:200013893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.vvkdlh.top"; classtype:attempted-recon; sid:200013894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.vxcrlo.top"; classtype:attempted-recon; sid:200013895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.werbdt.top"; classtype:attempted-recon; sid:200013896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.wfirhj.top"; classtype:attempted-recon; sid:200013897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.whnjwr.top"; classtype:attempted-recon; sid:200013898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.witojr.top"; classtype:attempted-recon; sid:200013899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.wmygyx.top"; classtype:attempted-recon; sid:200013900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.wpzqxg.top"; classtype:attempted-recon; sid:200013901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.wsojbg.icu"; classtype:attempted-recon; sid:200013902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.wxpckc.icu"; classtype:attempted-recon; sid:200013903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.xd1bpn.icu"; classtype:attempted-recon; sid:200013904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.xeygaj.top"; classtype:attempted-recon; sid:200013905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.xgysxo.top"; classtype:attempted-recon; sid:200013906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.xydvkg.top"; classtype:attempted-recon; sid:200013907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.xyuhnm.top"; classtype:attempted-recon; sid:200013908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.xztftf.top"; classtype:attempted-recon; sid:200013909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ymifv0.icu"; classtype:attempted-recon; sid:200013910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.yqasjy.icu"; classtype:attempted-recon; sid:200013911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.yuxvpc.top"; classtype:attempted-recon; sid:200013912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.yvjdgy.top"; classtype:attempted-recon; sid:200013913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.yybtfl.top"; classtype:attempted-recon; sid:200013914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.zhsntm.top"; classtype:attempted-recon; sid:200013915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.zhwpnq.top"; classtype:attempted-recon; sid:200013916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.zovh96.icu"; classtype:attempted-recon; sid:200013917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.zoyqhl.top"; classtype:attempted-recon; sid:200013918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.037768888861.xyz"; classtype:attempted-recon; sid:200013919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.284nxw.icu"; classtype:attempted-recon; sid:200013920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.33hf19.icu"; classtype:attempted-recon; sid:200013921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.473glv.icu"; classtype:attempted-recon; sid:200013922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.4k2dci.icu"; classtype:attempted-recon; sid:200013923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.687cem.icu"; classtype:attempted-recon; sid:200013924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.69bn6b.icu"; classtype:attempted-recon; sid:200013925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.6c7bza.icu"; classtype:attempted-recon; sid:200013926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.6pw2wd.icu"; classtype:attempted-recon; sid:200013927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.6rtqht.icu"; classtype:attempted-recon; sid:200013928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.6t1vk7.icu"; classtype:attempted-recon; sid:200013929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.7a4s96.icu"; classtype:attempted-recon; sid:200013930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.82casa.icu"; classtype:attempted-recon; sid:200013931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.9d24dh.icu"; classtype:attempted-recon; sid:200013932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.9pw3lv.icu"; classtype:attempted-recon; sid:200013933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.9zv0ny.icu"; classtype:attempted-recon; sid:200013934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.aale2a.icu"; classtype:attempted-recon; sid:200013935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.aayldm.top"; classtype:attempted-recon; sid:200013936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.adldni.top"; classtype:attempted-recon; sid:200013937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.afqzgx.top"; classtype:attempted-recon; sid:200013938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ajxdpg.top"; classtype:attempted-recon; sid:200013939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ansklx.top"; classtype:attempted-recon; sid:200013940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ao0dkn.icu"; classtype:attempted-recon; sid:200013941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.aogild.top"; classtype:attempted-recon; sid:200013942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.bucyvo.top"; classtype:attempted-recon; sid:200013943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.bwxsxf.top"; classtype:attempted-recon; sid:200013944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.bxsxvy.top"; classtype:attempted-recon; sid:200013945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.cgogay.top"; classtype:attempted-recon; sid:200013946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.cmudlt.top"; classtype:attempted-recon; sid:200013947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ctdwug.top"; classtype:attempted-recon; sid:200013948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.cwpgoh.top"; classtype:attempted-recon; sid:200013949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.d5u49w.icu"; classtype:attempted-recon; sid:200013950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.dbezzz.top"; classtype:attempted-recon; sid:200013951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.dbhlbm.top"; classtype:attempted-recon; sid:200013952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.dqbdkl.top"; classtype:attempted-recon; sid:200013953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.drkild.icu"; classtype:attempted-recon; sid:200013954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.e7ie6j.icu"; classtype:attempted-recon; sid:200013955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.eahbrm.top"; classtype:attempted-recon; sid:200013956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.enioab.top"; classtype:attempted-recon; sid:200013957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.erkdnv.top"; classtype:attempted-recon; sid:200013958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.fn0aqh.icu"; classtype:attempted-recon; sid:200013959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.hblfhq.top"; classtype:attempted-recon; sid:200013960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.hefhjq.icu"; classtype:attempted-recon; sid:200013961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.hli3b0.icu"; classtype:attempted-recon; sid:200013962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.hlsyku.icu"; classtype:attempted-recon; sid:200013963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.hmziti.top"; classtype:attempted-recon; sid:200013964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.idenyq.top"; classtype:attempted-recon; sid:200013965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.inkblog.ink"; classtype:attempted-recon; sid:200013966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.j3tu3m.icu"; classtype:attempted-recon; sid:200013967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.j77o38.icu"; classtype:attempted-recon; sid:200013968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.jehe99.icu"; classtype:attempted-recon; sid:200013969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.juls8q.icu"; classtype:attempted-recon; sid:200013970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.k3ma2x.icu"; classtype:attempted-recon; sid:200013971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.k9pn0d.icu"; classtype:attempted-recon; sid:200013972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ka83cb.icu"; classtype:attempted-recon; sid:200013973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.kb5b6d.icu"; classtype:attempted-recon; sid:200013974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.kgfkdv.top"; classtype:attempted-recon; sid:200013975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.krjqpe.top"; classtype:attempted-recon; sid:200013976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.kvrhdp.top"; classtype:attempted-recon; sid:200013977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.lcazit.top"; classtype:attempted-recon; sid:200013978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.lfyacu.icu"; classtype:attempted-recon; sid:200013979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ljmuov.top"; classtype:attempted-recon; sid:200013980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ll64vg.icu"; classtype:attempted-recon; sid:200013981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.llufip.top"; classtype:attempted-recon; sid:200013982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.lmheln.top"; classtype:attempted-recon; sid:200013983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.lwgayp.top"; classtype:attempted-recon; sid:200013984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.lylxce.top"; classtype:attempted-recon; sid:200013985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.mcltim.top"; classtype:attempted-recon; sid:200013986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.mfx741.icu"; classtype:attempted-recon; sid:200013987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.mgjpjr.top"; classtype:attempted-recon; sid:200013988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.mjdnpt.top"; classtype:attempted-recon; sid:200013989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.nllyoh.top"; classtype:attempted-recon; sid:200013990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.nqveqi.top"; classtype:attempted-recon; sid:200013991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.nrhpkc.icu"; classtype:attempted-recon; sid:200013992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.nu57wl.icu"; classtype:attempted-recon; sid:200013993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.nv9dtw.icu"; classtype:attempted-recon; sid:200013994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ojyzcd.top"; classtype:attempted-recon; sid:200013995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.okbpku.icu"; classtype:attempted-recon; sid:200013996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.oppxsj.top"; classtype:attempted-recon; sid:200013997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.or1glf.icu"; classtype:attempted-recon; sid:200013998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.pe14pc.icu"; classtype:attempted-recon; sid:200013999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.psdexq.top"; classtype:attempted-recon; sid:200014000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.psdoni.top"; classtype:attempted-recon; sid:200014001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.pujapd.top"; classtype:attempted-recon; sid:200014002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.pzgoea.top"; classtype:attempted-recon; sid:200014003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.q0s2sm.icu"; classtype:attempted-recon; sid:200014004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.qclqjo.top"; classtype:attempted-recon; sid:200014005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.qeaogd.top"; classtype:attempted-recon; sid:200014006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.qnqwcs.icu"; classtype:attempted-recon; sid:200014007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.qpchzg.top"; classtype:attempted-recon; sid:200014008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.qqjjzi.top"; classtype:attempted-recon; sid:200014009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.qvgavp.top"; classtype:attempted-recon; sid:200014010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.rbyycn.top"; classtype:attempted-recon; sid:200014011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.rmgomo.top"; classtype:attempted-recon; sid:200014012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.rsxojx.top"; classtype:attempted-recon; sid:200014013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.sawjbk.top"; classtype:attempted-recon; sid:200014014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.slnb02.icu"; classtype:attempted-recon; sid:200014015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.srcwhi.top"; classtype:attempted-recon; sid:200014016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.srwwap.top"; classtype:attempted-recon; sid:200014017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.sthtuh.top"; classtype:attempted-recon; sid:200014018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.syeuaw.top"; classtype:attempted-recon; sid:200014019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.tazsl1.icu"; classtype:attempted-recon; sid:200014020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.tbnilj.top"; classtype:attempted-recon; sid:200014021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.tl86n6.icu"; classtype:attempted-recon; sid:200014022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.to5fb9.icu"; classtype:attempted-recon; sid:200014023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.u0c8sn.icu"; classtype:attempted-recon; sid:200014024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.uixah3.icu"; classtype:attempted-recon; sid:200014025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ukesvp.icu"; classtype:attempted-recon; sid:200014026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ukrtxd.top"; classtype:attempted-recon; sid:200014027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.upahh5.icu"; classtype:attempted-recon; sid:200014028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.uxdgpy.top"; classtype:attempted-recon; sid:200014029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.uxvqzp.top"; classtype:attempted-recon; sid:200014030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.vdpgwm.top"; classtype:attempted-recon; sid:200014031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.vqeyuo.top"; classtype:attempted-recon; sid:200014032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.vspjok.icu"; classtype:attempted-recon; sid:200014033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.vvkdlh.top"; classtype:attempted-recon; sid:200014034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.vxcrlo.top"; classtype:attempted-recon; sid:200014035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.werbdt.top"; classtype:attempted-recon; sid:200014036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.wfirhj.top"; classtype:attempted-recon; sid:200014037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.whnjwr.top"; classtype:attempted-recon; sid:200014038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.witojr.top"; classtype:attempted-recon; sid:200014039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.wmygyx.top"; classtype:attempted-recon; sid:200014040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.wpzqxg.top"; classtype:attempted-recon; sid:200014041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.wsojbg.icu"; classtype:attempted-recon; sid:200014042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.wxpckc.icu"; classtype:attempted-recon; sid:200014043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.xd1bpn.icu"; classtype:attempted-recon; sid:200014044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.xeygaj.top"; classtype:attempted-recon; sid:200014045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.xgysxo.top"; classtype:attempted-recon; sid:200014046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.xyuhnm.top"; classtype:attempted-recon; sid:200014047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.xztftf.top"; classtype:attempted-recon; sid:200014048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.ymifv0.icu"; classtype:attempted-recon; sid:200014049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.yqasjy.icu"; classtype:attempted-recon; sid:200014050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.yuxvpc.top"; classtype:attempted-recon; sid:200014051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.yvjdgy.top"; classtype:attempted-recon; sid:200014052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.yybtfl.top"; classtype:attempted-recon; sid:200014053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.zhsntm.top"; classtype:attempted-recon; sid:200014054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.zhwpnq.top"; classtype:attempted-recon; sid:200014055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.zovh96.icu"; classtype:attempted-recon; sid:200014056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekoatnocn.rakaseeoour.zoyqhl.top"; classtype:attempted-recon; sid:200014057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.037768888861.xyz"; classtype:attempted-recon; sid:200014058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.284nxw.icu"; classtype:attempted-recon; sid:200014059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.33hf19.icu"; classtype:attempted-recon; sid:200014060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.473glv.icu"; classtype:attempted-recon; sid:200014061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.4k2dci.icu"; classtype:attempted-recon; sid:200014062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.687cem.icu"; classtype:attempted-recon; sid:200014063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.69bn6b.icu"; classtype:attempted-recon; sid:200014064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.6c7bza.icu"; classtype:attempted-recon; sid:200014065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.6pw2wd.icu"; classtype:attempted-recon; sid:200014066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.6rtqht.icu"; classtype:attempted-recon; sid:200014067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.6t1vk7.icu"; classtype:attempted-recon; sid:200014068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.7a4s96.icu"; classtype:attempted-recon; sid:200014069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.82casa.icu"; classtype:attempted-recon; sid:200014070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.9d24dh.icu"; classtype:attempted-recon; sid:200014071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.9pw3lv.icu"; classtype:attempted-recon; sid:200014072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.9zv0ny.icu"; classtype:attempted-recon; sid:200014073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.aale2a.icu"; classtype:attempted-recon; sid:200014074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.aayldm.top"; classtype:attempted-recon; sid:200014075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.adldni.top"; classtype:attempted-recon; sid:200014076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.afqzgx.top"; classtype:attempted-recon; sid:200014077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ajxdpg.top"; classtype:attempted-recon; sid:200014078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ansklx.top"; classtype:attempted-recon; sid:200014079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ao0dkn.icu"; classtype:attempted-recon; sid:200014080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.aogild.top"; classtype:attempted-recon; sid:200014081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.bucyvo.top"; classtype:attempted-recon; sid:200014082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.bwxsxf.top"; classtype:attempted-recon; sid:200014083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.bxsxvy.top"; classtype:attempted-recon; sid:200014084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.cgogay.top"; classtype:attempted-recon; sid:200014085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.cmudlt.top"; classtype:attempted-recon; sid:200014086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ctdwug.top"; classtype:attempted-recon; sid:200014087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.cwpgoh.top"; classtype:attempted-recon; sid:200014088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.d5u49w.icu"; classtype:attempted-recon; sid:200014089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.dbezzz.top"; classtype:attempted-recon; sid:200014090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.dbhlbm.top"; classtype:attempted-recon; sid:200014091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.dqbdkl.top"; classtype:attempted-recon; sid:200014092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.drkild.icu"; classtype:attempted-recon; sid:200014093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.e7ie6j.icu"; classtype:attempted-recon; sid:200014094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.eahbrm.top"; classtype:attempted-recon; sid:200014095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.enioab.top"; classtype:attempted-recon; sid:200014096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.erkdnv.top"; classtype:attempted-recon; sid:200014097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.fn0aqh.icu"; classtype:attempted-recon; sid:200014098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.hblfhq.top"; classtype:attempted-recon; sid:200014099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.hefhjq.icu"; classtype:attempted-recon; sid:200014100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.hli3b0.icu"; classtype:attempted-recon; sid:200014101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.hlsyku.icu"; classtype:attempted-recon; sid:200014102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.hmziti.top"; classtype:attempted-recon; sid:200014103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.idenyq.top"; classtype:attempted-recon; sid:200014104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.inkblog.ink"; classtype:attempted-recon; sid:200014105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.j3tu3m.icu"; classtype:attempted-recon; sid:200014106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.j77o38.icu"; classtype:attempted-recon; sid:200014107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.jehe99.icu"; classtype:attempted-recon; sid:200014108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.juls8q.icu"; classtype:attempted-recon; sid:200014109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.k3ma2x.icu"; classtype:attempted-recon; sid:200014110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.k9pn0d.icu"; classtype:attempted-recon; sid:200014111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ka83cb.icu"; classtype:attempted-recon; sid:200014112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.kb5b6d.icu"; classtype:attempted-recon; sid:200014113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.kgfkdv.top"; classtype:attempted-recon; sid:200014114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.krjqpe.top"; classtype:attempted-recon; sid:200014115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.kvrhdp.top"; classtype:attempted-recon; sid:200014116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.lcazit.top"; classtype:attempted-recon; sid:200014117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.lfyacu.icu"; classtype:attempted-recon; sid:200014118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ljmuov.top"; classtype:attempted-recon; sid:200014119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ll64vg.icu"; classtype:attempted-recon; sid:200014120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.llufip.top"; classtype:attempted-recon; sid:200014121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.lmheln.top"; classtype:attempted-recon; sid:200014122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.lwgayp.top"; classtype:attempted-recon; sid:200014123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.lylxce.top"; classtype:attempted-recon; sid:200014124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.mcltim.top"; classtype:attempted-recon; sid:200014125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.mfx741.icu"; classtype:attempted-recon; sid:200014126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.mgjpjr.top"; classtype:attempted-recon; sid:200014127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.mjdnpt.top"; classtype:attempted-recon; sid:200014128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.nllyoh.top"; classtype:attempted-recon; sid:200014129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.nqveqi.top"; classtype:attempted-recon; sid:200014130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.nrhpkc.icu"; classtype:attempted-recon; sid:200014131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.nu57wl.icu"; classtype:attempted-recon; sid:200014132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.nv9dtw.icu"; classtype:attempted-recon; sid:200014133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ojyzcd.top"; classtype:attempted-recon; sid:200014134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.okbpku.icu"; classtype:attempted-recon; sid:200014135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.oppxsj.top"; classtype:attempted-recon; sid:200014136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.or1glf.icu"; classtype:attempted-recon; sid:200014137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.pe14pc.icu"; classtype:attempted-recon; sid:200014138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.psdexq.top"; classtype:attempted-recon; sid:200014139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.psdoni.top"; classtype:attempted-recon; sid:200014140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.pujapd.top"; classtype:attempted-recon; sid:200014141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.pzgoea.top"; classtype:attempted-recon; sid:200014142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.q0s2sm.icu"; classtype:attempted-recon; sid:200014143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.qclqjo.top"; classtype:attempted-recon; sid:200014144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.qeaogd.top"; classtype:attempted-recon; sid:200014145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.qnqwcs.icu"; classtype:attempted-recon; sid:200014146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.qpchzg.top"; classtype:attempted-recon; sid:200014147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.qqjjzi.top"; classtype:attempted-recon; sid:200014148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.qvgavp.top"; classtype:attempted-recon; sid:200014149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.rbyycn.top"; classtype:attempted-recon; sid:200014150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.rmgomo.top"; classtype:attempted-recon; sid:200014151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.rsxojx.top"; classtype:attempted-recon; sid:200014152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.sawjbk.top"; classtype:attempted-recon; sid:200014153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.slnb02.icu"; classtype:attempted-recon; sid:200014154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.srcwhi.top"; classtype:attempted-recon; sid:200014155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.srwwap.top"; classtype:attempted-recon; sid:200014156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.sthtuh.top"; classtype:attempted-recon; sid:200014157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.syeuaw.top"; classtype:attempted-recon; sid:200014158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.tazsl1.icu"; classtype:attempted-recon; sid:200014159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.tbnilj.top"; classtype:attempted-recon; sid:200014160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.tl86n6.icu"; classtype:attempted-recon; sid:200014161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.to5fb9.icu"; classtype:attempted-recon; sid:200014162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.u0c8sn.icu"; classtype:attempted-recon; sid:200014163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.uixah3.icu"; classtype:attempted-recon; sid:200014164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ukesvp.icu"; classtype:attempted-recon; sid:200014165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ukrtxd.top"; classtype:attempted-recon; sid:200014166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.upahh5.icu"; classtype:attempted-recon; sid:200014167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.uxdgpy.top"; classtype:attempted-recon; sid:200014168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.uxvqzp.top"; classtype:attempted-recon; sid:200014169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.vdpgwm.top"; classtype:attempted-recon; sid:200014170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.vqeyuo.top"; classtype:attempted-recon; sid:200014171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.vspjok.icu"; classtype:attempted-recon; sid:200014172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.vvkdlh.top"; classtype:attempted-recon; sid:200014173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.vxcrlo.top"; classtype:attempted-recon; sid:200014174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.werbdt.top"; classtype:attempted-recon; sid:200014175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.wfirhj.top"; classtype:attempted-recon; sid:200014176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.whnjwr.top"; classtype:attempted-recon; sid:200014177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.witojr.top"; classtype:attempted-recon; sid:200014178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.wmygyx.top"; classtype:attempted-recon; sid:200014179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.wpzqxg.top"; classtype:attempted-recon; sid:200014180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.wsojbg.icu"; classtype:attempted-recon; sid:200014181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.wxpckc.icu"; classtype:attempted-recon; sid:200014182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.xd1bpn.icu"; classtype:attempted-recon; sid:200014183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.xeygaj.top"; classtype:attempted-recon; sid:200014184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.xgysxo.top"; classtype:attempted-recon; sid:200014185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.xydvkg.top"; classtype:attempted-recon; sid:200014186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.xyuhnm.top"; classtype:attempted-recon; sid:200014187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.xztftf.top"; classtype:attempted-recon; sid:200014188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.ymifv0.icu"; classtype:attempted-recon; sid:200014189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.yqasjy.icu"; classtype:attempted-recon; sid:200014190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.yuxvpc.top"; classtype:attempted-recon; sid:200014191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.yvjdgy.top"; classtype:attempted-recon; sid:200014192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.yybtfl.top"; classtype:attempted-recon; sid:200014193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.zhsntm.top"; classtype:attempted-recon; sid:200014194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.zhwpnq.top"; classtype:attempted-recon; sid:200014195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.zovh96.icu"; classtype:attempted-recon; sid:200014196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotncsron.rakaseoouasero.zoyqhl.top"; classtype:attempted-recon; sid:200014197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.037768888861.xyz"; classtype:attempted-recon; sid:200014198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.131452.site"; classtype:attempted-recon; sid:200014199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.284nxw.icu"; classtype:attempted-recon; sid:200014200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.33hf19.icu"; classtype:attempted-recon; sid:200014201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.473glv.icu"; classtype:attempted-recon; sid:200014202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.4k2dci.icu"; classtype:attempted-recon; sid:200014203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.687cem.icu"; classtype:attempted-recon; sid:200014204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.69bn6b.icu"; classtype:attempted-recon; sid:200014205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.6c7bza.icu"; classtype:attempted-recon; sid:200014206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.6pw2wd.icu"; classtype:attempted-recon; sid:200014207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.6rtqht.icu"; classtype:attempted-recon; sid:200014208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.6t1vk7.icu"; classtype:attempted-recon; sid:200014209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.7a4s96.icu"; classtype:attempted-recon; sid:200014210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.82casa.icu"; classtype:attempted-recon; sid:200014211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.9d24dh.icu"; classtype:attempted-recon; sid:200014212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.9pw3lv.icu"; classtype:attempted-recon; sid:200014213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.9zv0ny.icu"; classtype:attempted-recon; sid:200014214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.aale2a.icu"; classtype:attempted-recon; sid:200014215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.aayldm.top"; classtype:attempted-recon; sid:200014216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.adldni.top"; classtype:attempted-recon; sid:200014217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.afqzgx.top"; classtype:attempted-recon; sid:200014218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ajxdpg.top"; classtype:attempted-recon; sid:200014219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ansklx.top"; classtype:attempted-recon; sid:200014220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ao0dkn.icu"; classtype:attempted-recon; sid:200014221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.aogild.top"; classtype:attempted-recon; sid:200014222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.bucyvo.top"; classtype:attempted-recon; sid:200014223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.bwxsxf.top"; classtype:attempted-recon; sid:200014224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.bxsxvy.top"; classtype:attempted-recon; sid:200014225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.cgogay.top"; classtype:attempted-recon; sid:200014226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.cmudlt.top"; classtype:attempted-recon; sid:200014227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ctdwug.top"; classtype:attempted-recon; sid:200014228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.cwpgoh.top"; classtype:attempted-recon; sid:200014229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.d5u49w.icu"; classtype:attempted-recon; sid:200014230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.dbezzz.top"; classtype:attempted-recon; sid:200014231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.dbhlbm.top"; classtype:attempted-recon; sid:200014232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.dqbdkl.top"; classtype:attempted-recon; sid:200014233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.drkild.icu"; classtype:attempted-recon; sid:200014234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.e7ie6j.icu"; classtype:attempted-recon; sid:200014235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.eahbrm.top"; classtype:attempted-recon; sid:200014236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.enioab.top"; classtype:attempted-recon; sid:200014237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.erkdnv.top"; classtype:attempted-recon; sid:200014238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.fn0aqh.icu"; classtype:attempted-recon; sid:200014239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.hblfhq.top"; classtype:attempted-recon; sid:200014240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.hefhjq.icu"; classtype:attempted-recon; sid:200014241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.hli3b0.icu"; classtype:attempted-recon; sid:200014242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.hlsyku.icu"; classtype:attempted-recon; sid:200014243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.hmziti.top"; classtype:attempted-recon; sid:200014244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.idenyq.top"; classtype:attempted-recon; sid:200014245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.inkblog.ink"; classtype:attempted-recon; sid:200014246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.j3tu3m.icu"; classtype:attempted-recon; sid:200014247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.j77o38.icu"; classtype:attempted-recon; sid:200014248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.jehe99.icu"; classtype:attempted-recon; sid:200014249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.juls8q.icu"; classtype:attempted-recon; sid:200014250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.k3ma2x.icu"; classtype:attempted-recon; sid:200014251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.k9pn0d.icu"; classtype:attempted-recon; sid:200014252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ka83cb.icu"; classtype:attempted-recon; sid:200014253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.kb5b6d.icu"; classtype:attempted-recon; sid:200014254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.kgfkdv.top"; classtype:attempted-recon; sid:200014255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.krjqpe.top"; classtype:attempted-recon; sid:200014256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.kvrhdp.top"; classtype:attempted-recon; sid:200014257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.lcazit.top"; classtype:attempted-recon; sid:200014258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.lfyacu.icu"; classtype:attempted-recon; sid:200014259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ljmuov.top"; classtype:attempted-recon; sid:200014260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ll64vg.icu"; classtype:attempted-recon; sid:200014261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.llufip.top"; classtype:attempted-recon; sid:200014262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.lmheln.top"; classtype:attempted-recon; sid:200014263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.lwgayp.top"; classtype:attempted-recon; sid:200014264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.lylxce.top"; classtype:attempted-recon; sid:200014265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.mcltim.top"; classtype:attempted-recon; sid:200014266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.mfx741.icu"; classtype:attempted-recon; sid:200014267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.mgjpjr.top"; classtype:attempted-recon; sid:200014268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.mjdnpt.top"; classtype:attempted-recon; sid:200014269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.nllyoh.top"; classtype:attempted-recon; sid:200014270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.nqveqi.top"; classtype:attempted-recon; sid:200014271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.nrhpkc.icu"; classtype:attempted-recon; sid:200014272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.nu57wl.icu"; classtype:attempted-recon; sid:200014273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.nv9dtw.icu"; classtype:attempted-recon; sid:200014274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ojyzcd.top"; classtype:attempted-recon; sid:200014275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.okbpku.icu"; classtype:attempted-recon; sid:200014276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.oppxsj.top"; classtype:attempted-recon; sid:200014277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.or1glf.icu"; classtype:attempted-recon; sid:200014278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.pe14pc.icu"; classtype:attempted-recon; sid:200014279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.psdexq.top"; classtype:attempted-recon; sid:200014280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.psdoni.top"; classtype:attempted-recon; sid:200014281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.pujapd.top"; classtype:attempted-recon; sid:200014282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.pzgoea.top"; classtype:attempted-recon; sid:200014283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.q0s2sm.icu"; classtype:attempted-recon; sid:200014284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.qclqjo.top"; classtype:attempted-recon; sid:200014285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.qeaogd.top"; classtype:attempted-recon; sid:200014286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.qnqwcs.icu"; classtype:attempted-recon; sid:200014287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.qpchzg.top"; classtype:attempted-recon; sid:200014288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.qqjjzi.top"; classtype:attempted-recon; sid:200014289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.qvgavp.top"; classtype:attempted-recon; sid:200014290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.rbyycn.top"; classtype:attempted-recon; sid:200014291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.rmgomo.top"; classtype:attempted-recon; sid:200014292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.rsxojx.top"; classtype:attempted-recon; sid:200014293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.sawjbk.top"; classtype:attempted-recon; sid:200014294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.slnb02.icu"; classtype:attempted-recon; sid:200014295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.srcwhi.top"; classtype:attempted-recon; sid:200014296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.srwwap.top"; classtype:attempted-recon; sid:200014297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.sthtuh.top"; classtype:attempted-recon; sid:200014298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.syeuaw.top"; classtype:attempted-recon; sid:200014299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.tazsl1.icu"; classtype:attempted-recon; sid:200014300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.tbnilj.top"; classtype:attempted-recon; sid:200014301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.tl86n6.icu"; classtype:attempted-recon; sid:200014302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.u0c8sn.icu"; classtype:attempted-recon; sid:200014303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.uixah3.icu"; classtype:attempted-recon; sid:200014304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ukesvp.icu"; classtype:attempted-recon; sid:200014305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ukrtxd.top"; classtype:attempted-recon; sid:200014306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.upahh5.icu"; classtype:attempted-recon; sid:200014307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.uxdgpy.top"; classtype:attempted-recon; sid:200014308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.uxvqzp.top"; classtype:attempted-recon; sid:200014309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.vdpgwm.top"; classtype:attempted-recon; sid:200014310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.vqeyuo.top"; classtype:attempted-recon; sid:200014311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.vspjok.icu"; classtype:attempted-recon; sid:200014312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.vvkdlh.top"; classtype:attempted-recon; sid:200014313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.vxcrlo.top"; classtype:attempted-recon; sid:200014314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.werbdt.top"; classtype:attempted-recon; sid:200014315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.wfirhj.top"; classtype:attempted-recon; sid:200014316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.whnjwr.top"; classtype:attempted-recon; sid:200014317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.witojr.top"; classtype:attempted-recon; sid:200014318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.wmygyx.top"; classtype:attempted-recon; sid:200014319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.wpzqxg.top"; classtype:attempted-recon; sid:200014320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.wsojbg.icu"; classtype:attempted-recon; sid:200014321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.wxpckc.icu"; classtype:attempted-recon; sid:200014322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.xd1bpn.icu"; classtype:attempted-recon; sid:200014323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.xeygaj.top"; classtype:attempted-recon; sid:200014324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.xgysxo.top"; classtype:attempted-recon; sid:200014325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.xydvkg.top"; classtype:attempted-recon; sid:200014326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.xyuhnm.top"; classtype:attempted-recon; sid:200014327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.xztftf.top"; classtype:attempted-recon; sid:200014328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.ymifv0.icu"; classtype:attempted-recon; sid:200014329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.yqasjy.icu"; classtype:attempted-recon; sid:200014330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.yuxvpc.top"; classtype:attempted-recon; sid:200014331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.yvjdgy.top"; classtype:attempted-recon; sid:200014332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.yybtfl.top"; classtype:attempted-recon; sid:200014333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.zhsntm.top"; classtype:attempted-recon; sid:200014334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.zhwpnq.top"; classtype:attempted-recon; sid:200014335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.zovh96.icu"; classtype:attempted-recon; sid:200014336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raekotnon.rakaseoou.zoyqhl.top"; classtype:attempted-recon; sid:200014337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ragezkqpys.duckdns.org"; classtype:attempted-recon; sid:200014338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rahasiaverifyid.xyz"; classtype:attempted-recon; sid:200014339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rajirkitermisa.co.vu"; classtype:attempted-recon; sid:200014340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.037768888861.xyz"; classtype:attempted-recon; sid:200014341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.284nxw.icu"; classtype:attempted-recon; sid:200014342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.33hf19.icu"; classtype:attempted-recon; sid:200014343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.473glv.icu"; classtype:attempted-recon; sid:200014344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.4k2dci.icu"; classtype:attempted-recon; sid:200014345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.687cem.icu"; classtype:attempted-recon; sid:200014346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.69bn6b.icu"; classtype:attempted-recon; sid:200014347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.6c7bza.icu"; classtype:attempted-recon; sid:200014348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.6pw2wd.icu"; classtype:attempted-recon; sid:200014349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.6rtqht.icu"; classtype:attempted-recon; sid:200014350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.6t1vk7.icu"; classtype:attempted-recon; sid:200014351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.7a4s96.icu"; classtype:attempted-recon; sid:200014352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.82casa.icu"; classtype:attempted-recon; sid:200014353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.9d24dh.icu"; classtype:attempted-recon; sid:200014354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.9pw3lv.icu"; classtype:attempted-recon; sid:200014355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.9zv0ny.icu"; classtype:attempted-recon; sid:200014356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.aale2a.icu"; classtype:attempted-recon; sid:200014357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.aayldm.top"; classtype:attempted-recon; sid:200014358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.adldni.top"; classtype:attempted-recon; sid:200014359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.afqzgx.top"; classtype:attempted-recon; sid:200014360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ajxdpg.top"; classtype:attempted-recon; sid:200014361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ansklx.top"; classtype:attempted-recon; sid:200014362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ao0dkn.icu"; classtype:attempted-recon; sid:200014363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.aogild.top"; classtype:attempted-recon; sid:200014364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.bucyvo.top"; classtype:attempted-recon; sid:200014365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.bwxsxf.top"; classtype:attempted-recon; sid:200014366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.bxsxvy.top"; classtype:attempted-recon; sid:200014367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.cgogay.top"; classtype:attempted-recon; sid:200014368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.cmudlt.top"; classtype:attempted-recon; sid:200014369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ctdwug.top"; classtype:attempted-recon; sid:200014370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.cwpgoh.top"; classtype:attempted-recon; sid:200014371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.d5u49w.icu"; classtype:attempted-recon; sid:200014372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.dbezzz.top"; classtype:attempted-recon; sid:200014373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.dbhlbm.top"; classtype:attempted-recon; sid:200014374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.dqbdkl.top"; classtype:attempted-recon; sid:200014375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.drkild.icu"; classtype:attempted-recon; sid:200014376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.e7ie6j.icu"; classtype:attempted-recon; sid:200014377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.eahbrm.top"; classtype:attempted-recon; sid:200014378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.enioab.top"; classtype:attempted-recon; sid:200014379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.erkdnv.top"; classtype:attempted-recon; sid:200014380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.fn0aqh.icu"; classtype:attempted-recon; sid:200014381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.hblfhq.top"; classtype:attempted-recon; sid:200014382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.hefhjq.icu"; classtype:attempted-recon; sid:200014383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.hli3b0.icu"; classtype:attempted-recon; sid:200014384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.hlsyku.icu"; classtype:attempted-recon; sid:200014385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.hmziti.top"; classtype:attempted-recon; sid:200014386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.idenyq.top"; classtype:attempted-recon; sid:200014387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.inkblog.ink"; classtype:attempted-recon; sid:200014388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.j3tu3m.icu"; classtype:attempted-recon; sid:200014389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.j77o38.icu"; classtype:attempted-recon; sid:200014390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.jehe99.icu"; classtype:attempted-recon; sid:200014391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.juls8q.icu"; classtype:attempted-recon; sid:200014392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.k3ma2x.icu"; classtype:attempted-recon; sid:200014393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.k9pn0d.icu"; classtype:attempted-recon; sid:200014394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ka83cb.icu"; classtype:attempted-recon; sid:200014395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.kb5b6d.icu"; classtype:attempted-recon; sid:200014396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.kgfkdv.top"; classtype:attempted-recon; sid:200014397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.krjqpe.top"; classtype:attempted-recon; sid:200014398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.kvrhdp.top"; classtype:attempted-recon; sid:200014399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.lcazit.top"; classtype:attempted-recon; sid:200014400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.lfyacu.icu"; classtype:attempted-recon; sid:200014401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ljmuov.top"; classtype:attempted-recon; sid:200014402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ll64vg.icu"; classtype:attempted-recon; sid:200014403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.llufip.top"; classtype:attempted-recon; sid:200014404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.lmheln.top"; classtype:attempted-recon; sid:200014405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.lwgayp.top"; classtype:attempted-recon; sid:200014406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.lylxce.top"; classtype:attempted-recon; sid:200014407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.mcltim.top"; classtype:attempted-recon; sid:200014408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.mfx741.icu"; classtype:attempted-recon; sid:200014409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.mgjpjr.top"; classtype:attempted-recon; sid:200014410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.mjdnpt.top"; classtype:attempted-recon; sid:200014411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.nllyoh.top"; classtype:attempted-recon; sid:200014412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.nqveqi.top"; classtype:attempted-recon; sid:200014413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.nrhpkc.icu"; classtype:attempted-recon; sid:200014414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.nu57wl.icu"; classtype:attempted-recon; sid:200014415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.nv9dtw.icu"; classtype:attempted-recon; sid:200014416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ojyzcd.top"; classtype:attempted-recon; sid:200014417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.okbpku.icu"; classtype:attempted-recon; sid:200014418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.oppxsj.top"; classtype:attempted-recon; sid:200014419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.or1glf.icu"; classtype:attempted-recon; sid:200014420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.pe14pc.icu"; classtype:attempted-recon; sid:200014421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.psdexq.top"; classtype:attempted-recon; sid:200014422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.psdoni.top"; classtype:attempted-recon; sid:200014423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.pujapd.top"; classtype:attempted-recon; sid:200014424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.pzgoea.top"; classtype:attempted-recon; sid:200014425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.q0s2sm.icu"; classtype:attempted-recon; sid:200014426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.qclqjo.top"; classtype:attempted-recon; sid:200014427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.qeaogd.top"; classtype:attempted-recon; sid:200014428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.qnqwcs.icu"; classtype:attempted-recon; sid:200014429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.qpchzg.top"; classtype:attempted-recon; sid:200014430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.qqjjzi.top"; classtype:attempted-recon; sid:200014431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.qvgavp.top"; classtype:attempted-recon; sid:200014432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.rbyycn.top"; classtype:attempted-recon; sid:200014433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.rmgomo.top"; classtype:attempted-recon; sid:200014434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.rsxojx.top"; classtype:attempted-recon; sid:200014435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.sawjbk.top"; classtype:attempted-recon; sid:200014436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.slnb02.icu"; classtype:attempted-recon; sid:200014437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.srcwhi.top"; classtype:attempted-recon; sid:200014438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.srwwap.top"; classtype:attempted-recon; sid:200014439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.sthtuh.top"; classtype:attempted-recon; sid:200014440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.syeuaw.top"; classtype:attempted-recon; sid:200014441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.tazsl1.icu"; classtype:attempted-recon; sid:200014442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.tbnilj.top"; classtype:attempted-recon; sid:200014443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.tl86n6.icu"; classtype:attempted-recon; sid:200014444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.to5fb9.icu"; classtype:attempted-recon; sid:200014445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.u0c8sn.icu"; classtype:attempted-recon; sid:200014446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.uixah3.icu"; classtype:attempted-recon; sid:200014447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ukesvp.icu"; classtype:attempted-recon; sid:200014448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ukrtxd.top"; classtype:attempted-recon; sid:200014449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.upahh5.icu"; classtype:attempted-recon; sid:200014450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.uxdgpy.top"; classtype:attempted-recon; sid:200014451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.uxvqzp.top"; classtype:attempted-recon; sid:200014452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.vads.fun"; classtype:attempted-recon; sid:200014453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.vdpgwm.top"; classtype:attempted-recon; sid:200014454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.vqeyuo.top"; classtype:attempted-recon; sid:200014455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.vspjok.icu"; classtype:attempted-recon; sid:200014456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.vvkdlh.top"; classtype:attempted-recon; sid:200014457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.vxcrlo.top"; classtype:attempted-recon; sid:200014458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.werbdt.top"; classtype:attempted-recon; sid:200014459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.wfirhj.top"; classtype:attempted-recon; sid:200014460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.whnjwr.top"; classtype:attempted-recon; sid:200014461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.witojr.top"; classtype:attempted-recon; sid:200014462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.wmygyx.top"; classtype:attempted-recon; sid:200014463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.wpzqxg.top"; classtype:attempted-recon; sid:200014464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.wsojbg.icu"; classtype:attempted-recon; sid:200014465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.wxpckc.icu"; classtype:attempted-recon; sid:200014466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.xd1bpn.icu"; classtype:attempted-recon; sid:200014467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.xeygaj.top"; classtype:attempted-recon; sid:200014468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.xgysxo.top"; classtype:attempted-recon; sid:200014469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.xydvkg.top"; classtype:attempted-recon; sid:200014470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.xyuhnm.top"; classtype:attempted-recon; sid:200014471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.xztftf.top"; classtype:attempted-recon; sid:200014472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ymifv0.icu"; classtype:attempted-recon; sid:200014473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.yqasjy.icu"; classtype:attempted-recon; sid:200014474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.yuxvpc.top"; classtype:attempted-recon; sid:200014475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.yvjdgy.top"; classtype:attempted-recon; sid:200014476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.yybtfl.top"; classtype:attempted-recon; sid:200014477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.zhsntm.top"; classtype:attempted-recon; sid:200014478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.zhwpnq.top"; classtype:attempted-recon; sid:200014479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.zovh96.icu"; classtype:attempted-recon; sid:200014480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaecsroocu.raekoetnaseroonr.zoyqhl.top"; classtype:attempted-recon; sid:200014481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.037768888861.xyz"; classtype:attempted-recon; sid:200014482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.284nxw.icu"; classtype:attempted-recon; sid:200014483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.33hf19.icu"; classtype:attempted-recon; sid:200014484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.473glv.icu"; classtype:attempted-recon; sid:200014485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.4k2dci.icu"; classtype:attempted-recon; sid:200014486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.687cem.icu"; classtype:attempted-recon; sid:200014487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.69bn6b.icu"; classtype:attempted-recon; sid:200014488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.6c7bza.icu"; classtype:attempted-recon; sid:200014489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.6pw2wd.icu"; classtype:attempted-recon; sid:200014490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.6rtqht.icu"; classtype:attempted-recon; sid:200014491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.6t1vk7.icu"; classtype:attempted-recon; sid:200014492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.7a4s96.icu"; classtype:attempted-recon; sid:200014493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.82casa.icu"; classtype:attempted-recon; sid:200014494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.9d24dh.icu"; classtype:attempted-recon; sid:200014495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.9pw3lv.icu"; classtype:attempted-recon; sid:200014496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.9zv0ny.icu"; classtype:attempted-recon; sid:200014497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.aale2a.icu"; classtype:attempted-recon; sid:200014498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.aayldm.top"; classtype:attempted-recon; sid:200014499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.adldni.top"; classtype:attempted-recon; sid:200014500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.afqzgx.top"; classtype:attempted-recon; sid:200014501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ajxdpg.top"; classtype:attempted-recon; sid:200014502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ansklx.top"; classtype:attempted-recon; sid:200014503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ao0dkn.icu"; classtype:attempted-recon; sid:200014504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.aogild.top"; classtype:attempted-recon; sid:200014505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.bucyvo.top"; classtype:attempted-recon; sid:200014506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.bwxsxf.top"; classtype:attempted-recon; sid:200014507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.bxsxvy.top"; classtype:attempted-recon; sid:200014508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.cgogay.top"; classtype:attempted-recon; sid:200014509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.cmudlt.top"; classtype:attempted-recon; sid:200014510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ctdwug.top"; classtype:attempted-recon; sid:200014511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.cwpgoh.top"; classtype:attempted-recon; sid:200014512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.d5u49w.icu"; classtype:attempted-recon; sid:200014513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.dbezzz.top"; classtype:attempted-recon; sid:200014514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.dbhlbm.top"; classtype:attempted-recon; sid:200014515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.dqbdkl.top"; classtype:attempted-recon; sid:200014516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.drkild.icu"; classtype:attempted-recon; sid:200014517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.e7ie6j.icu"; classtype:attempted-recon; sid:200014518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.eahbrm.top"; classtype:attempted-recon; sid:200014519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.enioab.top"; classtype:attempted-recon; sid:200014520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.erkdnv.top"; classtype:attempted-recon; sid:200014521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.fn0aqh.icu"; classtype:attempted-recon; sid:200014522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.hblfhq.top"; classtype:attempted-recon; sid:200014523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.hefhjq.icu"; classtype:attempted-recon; sid:200014524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.hli3b0.icu"; classtype:attempted-recon; sid:200014525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.hlsyku.icu"; classtype:attempted-recon; sid:200014526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.hmziti.top"; classtype:attempted-recon; sid:200014527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.idenyq.top"; classtype:attempted-recon; sid:200014528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.inkblog.ink"; classtype:attempted-recon; sid:200014529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.j3tu3m.icu"; classtype:attempted-recon; sid:200014530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.j77o38.icu"; classtype:attempted-recon; sid:200014531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.jehe99.icu"; classtype:attempted-recon; sid:200014532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.juls8q.icu"; classtype:attempted-recon; sid:200014533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.k3ma2x.icu"; classtype:attempted-recon; sid:200014534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.k9pn0d.icu"; classtype:attempted-recon; sid:200014535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ka83cb.icu"; classtype:attempted-recon; sid:200014536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.kb5b6d.icu"; classtype:attempted-recon; sid:200014537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.kgfkdv.top"; classtype:attempted-recon; sid:200014538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.krjqpe.top"; classtype:attempted-recon; sid:200014539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.kvrhdp.top"; classtype:attempted-recon; sid:200014540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.lcazit.top"; classtype:attempted-recon; sid:200014541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.lfyacu.icu"; classtype:attempted-recon; sid:200014542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ljmuov.top"; classtype:attempted-recon; sid:200014543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ll64vg.icu"; classtype:attempted-recon; sid:200014544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.llufip.top"; classtype:attempted-recon; sid:200014545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.lmheln.top"; classtype:attempted-recon; sid:200014546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.lwgayp.top"; classtype:attempted-recon; sid:200014547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.lylxce.top"; classtype:attempted-recon; sid:200014548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.mcltim.top"; classtype:attempted-recon; sid:200014549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.mfx741.icu"; classtype:attempted-recon; sid:200014550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.mgjpjr.top"; classtype:attempted-recon; sid:200014551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.mjdnpt.top"; classtype:attempted-recon; sid:200014552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.nllyoh.top"; classtype:attempted-recon; sid:200014553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.nqveqi.top"; classtype:attempted-recon; sid:200014554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.nrhpkc.icu"; classtype:attempted-recon; sid:200014555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.nu57wl.icu"; classtype:attempted-recon; sid:200014556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.nv9dtw.icu"; classtype:attempted-recon; sid:200014557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ojyzcd.top"; classtype:attempted-recon; sid:200014558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.okbpku.icu"; classtype:attempted-recon; sid:200014559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.oppxsj.top"; classtype:attempted-recon; sid:200014560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.or1glf.icu"; classtype:attempted-recon; sid:200014561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.pe14pc.icu"; classtype:attempted-recon; sid:200014562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.psdexq.top"; classtype:attempted-recon; sid:200014563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.psdoni.top"; classtype:attempted-recon; sid:200014564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.pujapd.top"; classtype:attempted-recon; sid:200014565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.pzgoea.top"; classtype:attempted-recon; sid:200014566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.q0s2sm.icu"; classtype:attempted-recon; sid:200014567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.qclqjo.top"; classtype:attempted-recon; sid:200014568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.qeaogd.top"; classtype:attempted-recon; sid:200014569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.qnqwcs.icu"; classtype:attempted-recon; sid:200014570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.qpchzg.top"; classtype:attempted-recon; sid:200014571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.qqjjzi.top"; classtype:attempted-recon; sid:200014572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.qvgavp.top"; classtype:attempted-recon; sid:200014573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.rbyycn.top"; classtype:attempted-recon; sid:200014574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.rmgomo.top"; classtype:attempted-recon; sid:200014575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.rsxojx.top"; classtype:attempted-recon; sid:200014576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.sawjbk.top"; classtype:attempted-recon; sid:200014577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.slnb02.icu"; classtype:attempted-recon; sid:200014578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.srcwhi.top"; classtype:attempted-recon; sid:200014579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.srwwap.top"; classtype:attempted-recon; sid:200014580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.sthtuh.top"; classtype:attempted-recon; sid:200014581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.syeuaw.top"; classtype:attempted-recon; sid:200014582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.tazsl1.icu"; classtype:attempted-recon; sid:200014583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.tbnilj.top"; classtype:attempted-recon; sid:200014584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.tl86n6.icu"; classtype:attempted-recon; sid:200014585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.to5fb9.icu"; classtype:attempted-recon; sid:200014586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.u0c8sn.icu"; classtype:attempted-recon; sid:200014587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.uixah3.icu"; classtype:attempted-recon; sid:200014588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ukesvp.icu"; classtype:attempted-recon; sid:200014589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ukrtxd.top"; classtype:attempted-recon; sid:200014590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.upahh5.icu"; classtype:attempted-recon; sid:200014591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.uxdgpy.top"; classtype:attempted-recon; sid:200014592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.uxvqzp.top"; classtype:attempted-recon; sid:200014593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.vads.fun"; classtype:attempted-recon; sid:200014594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.vdpgwm.top"; classtype:attempted-recon; sid:200014595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.vqeyuo.top"; classtype:attempted-recon; sid:200014596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.vspjok.icu"; classtype:attempted-recon; sid:200014597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.vvkdlh.top"; classtype:attempted-recon; sid:200014598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.vxcrlo.top"; classtype:attempted-recon; sid:200014599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.werbdt.top"; classtype:attempted-recon; sid:200014600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.wfirhj.top"; classtype:attempted-recon; sid:200014601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.whnjwr.top"; classtype:attempted-recon; sid:200014602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.witojr.top"; classtype:attempted-recon; sid:200014603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.wmygyx.top"; classtype:attempted-recon; sid:200014604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.wpzqxg.top"; classtype:attempted-recon; sid:200014605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.wsojbg.icu"; classtype:attempted-recon; sid:200014606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.wxpckc.icu"; classtype:attempted-recon; sid:200014607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.xd1bpn.icu"; classtype:attempted-recon; sid:200014608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.xeygaj.top"; classtype:attempted-recon; sid:200014609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.xgysxo.top"; classtype:attempted-recon; sid:200014610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.xydvkg.top"; classtype:attempted-recon; sid:200014611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.xyuhnm.top"; classtype:attempted-recon; sid:200014612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.xztftf.top"; classtype:attempted-recon; sid:200014613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.ymifv0.icu"; classtype:attempted-recon; sid:200014614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.yqasjy.icu"; classtype:attempted-recon; sid:200014615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.yuxvpc.top"; classtype:attempted-recon; sid:200014616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.yvjdgy.top"; classtype:attempted-recon; sid:200014617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.yybtfl.top"; classtype:attempted-recon; sid:200014618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.zhsntm.top"; classtype:attempted-recon; sid:200014619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.zhwpnq.top"; classtype:attempted-recon; sid:200014620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.zovh96.icu"; classtype:attempted-recon; sid:200014621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakasaeoocu.raekoetnonr.zoyqhl.top"; classtype:attempted-recon; sid:200014622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.037768888861.xyz"; classtype:attempted-recon; sid:200014623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.284nxw.icu"; classtype:attempted-recon; sid:200014624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.33hf19.icu"; classtype:attempted-recon; sid:200014625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.473glv.icu"; classtype:attempted-recon; sid:200014626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.4k2dci.icu"; classtype:attempted-recon; sid:200014627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.687cem.icu"; classtype:attempted-recon; sid:200014628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.69bn6b.icu"; classtype:attempted-recon; sid:200014629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.6c7bza.icu"; classtype:attempted-recon; sid:200014630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.6pw2wd.icu"; classtype:attempted-recon; sid:200014631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.6rtqht.icu"; classtype:attempted-recon; sid:200014632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.6t1vk7.icu"; classtype:attempted-recon; sid:200014633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.7a4s96.icu"; classtype:attempted-recon; sid:200014634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.82casa.icu"; classtype:attempted-recon; sid:200014635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.9d24dh.icu"; classtype:attempted-recon; sid:200014636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.9pw3lv.icu"; classtype:attempted-recon; sid:200014637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.9zv0ny.icu"; classtype:attempted-recon; sid:200014638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.aale2a.icu"; classtype:attempted-recon; sid:200014639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.aayldm.top"; classtype:attempted-recon; sid:200014640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.adldni.top"; classtype:attempted-recon; sid:200014641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.afqzgx.top"; classtype:attempted-recon; sid:200014642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ajxdpg.top"; classtype:attempted-recon; sid:200014643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ansklx.top"; classtype:attempted-recon; sid:200014644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ao0dkn.icu"; classtype:attempted-recon; sid:200014645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.aogild.top"; classtype:attempted-recon; sid:200014646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.bucyvo.top"; classtype:attempted-recon; sid:200014647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.bwxsxf.top"; classtype:attempted-recon; sid:200014648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.bxsxvy.top"; classtype:attempted-recon; sid:200014649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.cgogay.top"; classtype:attempted-recon; sid:200014650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.cmudlt.top"; classtype:attempted-recon; sid:200014651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ctdwug.top"; classtype:attempted-recon; sid:200014652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.cwpgoh.top"; classtype:attempted-recon; sid:200014653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.d5u49w.icu"; classtype:attempted-recon; sid:200014654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.dbezzz.top"; classtype:attempted-recon; sid:200014655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.dbhlbm.top"; classtype:attempted-recon; sid:200014656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.dqbdkl.top"; classtype:attempted-recon; sid:200014657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.drkild.icu"; classtype:attempted-recon; sid:200014658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.e7ie6j.icu"; classtype:attempted-recon; sid:200014659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.eahbrm.top"; classtype:attempted-recon; sid:200014660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.enioab.top"; classtype:attempted-recon; sid:200014661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.erkdnv.top"; classtype:attempted-recon; sid:200014662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.fanyedong.site"; classtype:attempted-recon; sid:200014663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.fn0aqh.icu"; classtype:attempted-recon; sid:200014664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.hblfhq.top"; classtype:attempted-recon; sid:200014665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.hefhjq.icu"; classtype:attempted-recon; sid:200014666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.hli3b0.icu"; classtype:attempted-recon; sid:200014667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.hlsyku.icu"; classtype:attempted-recon; sid:200014668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.hmziti.top"; classtype:attempted-recon; sid:200014669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.idenyq.top"; classtype:attempted-recon; sid:200014670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.inkblog.ink"; classtype:attempted-recon; sid:200014671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.j3tu3m.icu"; classtype:attempted-recon; sid:200014672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.j77o38.icu"; classtype:attempted-recon; sid:200014673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.jehe99.icu"; classtype:attempted-recon; sid:200014674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.juls8q.icu"; classtype:attempted-recon; sid:200014675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.k3ma2x.icu"; classtype:attempted-recon; sid:200014676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.k9pn0d.icu"; classtype:attempted-recon; sid:200014677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ka83cb.icu"; classtype:attempted-recon; sid:200014678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.kb5b6d.icu"; classtype:attempted-recon; sid:200014679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.kgfkdv.top"; classtype:attempted-recon; sid:200014680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.krjqpe.top"; classtype:attempted-recon; sid:200014681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.kvrhdp.top"; classtype:attempted-recon; sid:200014682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.lcazit.top"; classtype:attempted-recon; sid:200014683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.lfyacu.icu"; classtype:attempted-recon; sid:200014684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ljmuov.top"; classtype:attempted-recon; sid:200014685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ll64vg.icu"; classtype:attempted-recon; sid:200014686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.llufip.top"; classtype:attempted-recon; sid:200014687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.lmheln.top"; classtype:attempted-recon; sid:200014688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.lwgayp.top"; classtype:attempted-recon; sid:200014689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.lylxce.top"; classtype:attempted-recon; sid:200014690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.mcltim.top"; classtype:attempted-recon; sid:200014691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.mfx741.icu"; classtype:attempted-recon; sid:200014692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.mgjpjr.top"; classtype:attempted-recon; sid:200014693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.mjdnpt.top"; classtype:attempted-recon; sid:200014694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.nllyoh.top"; classtype:attempted-recon; sid:200014695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.nqveqi.top"; classtype:attempted-recon; sid:200014696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.nrhpkc.icu"; classtype:attempted-recon; sid:200014697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.nu57wl.icu"; classtype:attempted-recon; sid:200014698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.nv9dtw.icu"; classtype:attempted-recon; sid:200014699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ojyzcd.top"; classtype:attempted-recon; sid:200014700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.okbpku.icu"; classtype:attempted-recon; sid:200014701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.oppxsj.top"; classtype:attempted-recon; sid:200014702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.or1glf.icu"; classtype:attempted-recon; sid:200014703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.pe14pc.icu"; classtype:attempted-recon; sid:200014704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.psdexq.top"; classtype:attempted-recon; sid:200014705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.psdoni.top"; classtype:attempted-recon; sid:200014706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.pujapd.top"; classtype:attempted-recon; sid:200014707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.pzgoea.top"; classtype:attempted-recon; sid:200014708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.q0s2sm.icu"; classtype:attempted-recon; sid:200014709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.qclqjo.top"; classtype:attempted-recon; sid:200014710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.qeaogd.top"; classtype:attempted-recon; sid:200014711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.qnqwcs.icu"; classtype:attempted-recon; sid:200014712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.qpchzg.top"; classtype:attempted-recon; sid:200014713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.qqjjzi.top"; classtype:attempted-recon; sid:200014714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.qvgavp.top"; classtype:attempted-recon; sid:200014715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.rbyycn.top"; classtype:attempted-recon; sid:200014716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.rmgomo.top"; classtype:attempted-recon; sid:200014717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.rsxojx.top"; classtype:attempted-recon; sid:200014718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.sawjbk.top"; classtype:attempted-recon; sid:200014719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.slnb02.icu"; classtype:attempted-recon; sid:200014720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.srcwhi.top"; classtype:attempted-recon; sid:200014721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.srwwap.top"; classtype:attempted-recon; sid:200014722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.sthtuh.top"; classtype:attempted-recon; sid:200014723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.syeuaw.top"; classtype:attempted-recon; sid:200014724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.tazsl1.icu"; classtype:attempted-recon; sid:200014725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.tbnilj.top"; classtype:attempted-recon; sid:200014726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.tl86n6.icu"; classtype:attempted-recon; sid:200014727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.to5fb9.icu"; classtype:attempted-recon; sid:200014728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.u0c8sn.icu"; classtype:attempted-recon; sid:200014729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.uixah3.icu"; classtype:attempted-recon; sid:200014730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ukesvp.icu"; classtype:attempted-recon; sid:200014731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ukrtxd.top"; classtype:attempted-recon; sid:200014732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.upahh5.icu"; classtype:attempted-recon; sid:200014733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.uxdgpy.top"; classtype:attempted-recon; sid:200014734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.uxvqzp.top"; classtype:attempted-recon; sid:200014735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.vdpgwm.top"; classtype:attempted-recon; sid:200014736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.vqeyuo.top"; classtype:attempted-recon; sid:200014737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.vspjok.icu"; classtype:attempted-recon; sid:200014738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.vvkdlh.top"; classtype:attempted-recon; sid:200014739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.vxcrlo.top"; classtype:attempted-recon; sid:200014740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.werbdt.top"; classtype:attempted-recon; sid:200014741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.wfirhj.top"; classtype:attempted-recon; sid:200014742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.whnjwr.top"; classtype:attempted-recon; sid:200014743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.witojr.top"; classtype:attempted-recon; sid:200014744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.wmygyx.top"; classtype:attempted-recon; sid:200014745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.wpzqxg.top"; classtype:attempted-recon; sid:200014746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.wsojbg.icu"; classtype:attempted-recon; sid:200014747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.wxpckc.icu"; classtype:attempted-recon; sid:200014748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.xd1bpn.icu"; classtype:attempted-recon; sid:200014749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.xeygaj.top"; classtype:attempted-recon; sid:200014750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.xgysxo.top"; classtype:attempted-recon; sid:200014751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.xydvkg.top"; classtype:attempted-recon; sid:200014752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.xyuhnm.top"; classtype:attempted-recon; sid:200014753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.xztftf.top"; classtype:attempted-recon; sid:200014754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.ymifv0.icu"; classtype:attempted-recon; sid:200014755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.yqasjy.icu"; classtype:attempted-recon; sid:200014756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.yuxvpc.top"; classtype:attempted-recon; sid:200014757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.yvjdgy.top"; classtype:attempted-recon; sid:200014758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.yybtfl.top"; classtype:attempted-recon; sid:200014759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.zhsntm.top"; classtype:attempted-recon; sid:200014760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.zhwpnq.top"; classtype:attempted-recon; sid:200014761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.zovh96.icu"; classtype:attempted-recon; sid:200014762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseocsrou.raekotnonasero.zoyqhl.top"; classtype:attempted-recon; sid:200014763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.037768888861.xyz"; classtype:attempted-recon; sid:200014764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.284nxw.icu"; classtype:attempted-recon; sid:200014765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.33hf19.icu"; classtype:attempted-recon; sid:200014766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.473glv.icu"; classtype:attempted-recon; sid:200014767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.4k2dci.icu"; classtype:attempted-recon; sid:200014768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.687cem.icu"; classtype:attempted-recon; sid:200014769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.69bn6b.icu"; classtype:attempted-recon; sid:200014770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.6c7bza.icu"; classtype:attempted-recon; sid:200014771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.6pw2wd.icu"; classtype:attempted-recon; sid:200014772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.6rtqht.icu"; classtype:attempted-recon; sid:200014773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.6t1vk7.icu"; classtype:attempted-recon; sid:200014774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.7a4s96.icu"; classtype:attempted-recon; sid:200014775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.82casa.icu"; classtype:attempted-recon; sid:200014776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.9d24dh.icu"; classtype:attempted-recon; sid:200014777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.9pw3lv.icu"; classtype:attempted-recon; sid:200014778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.9zv0ny.icu"; classtype:attempted-recon; sid:200014779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.aale2a.icu"; classtype:attempted-recon; sid:200014780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.aayldm.top"; classtype:attempted-recon; sid:200014781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.adldni.top"; classtype:attempted-recon; sid:200014782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.afqzgx.top"; classtype:attempted-recon; sid:200014783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ajxdpg.top"; classtype:attempted-recon; sid:200014784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ansklx.top"; classtype:attempted-recon; sid:200014785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ao0dkn.icu"; classtype:attempted-recon; sid:200014786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.aogild.top"; classtype:attempted-recon; sid:200014787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.bucyvo.top"; classtype:attempted-recon; sid:200014788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.bwxsxf.top"; classtype:attempted-recon; sid:200014789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.bxsxvy.top"; classtype:attempted-recon; sid:200014790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.cgogay.top"; classtype:attempted-recon; sid:200014791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.cmudlt.top"; classtype:attempted-recon; sid:200014792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ctdwug.top"; classtype:attempted-recon; sid:200014793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.cwpgoh.top"; classtype:attempted-recon; sid:200014794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.d5u49w.icu"; classtype:attempted-recon; sid:200014795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.dbezzz.top"; classtype:attempted-recon; sid:200014796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.dbhlbm.top"; classtype:attempted-recon; sid:200014797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.dqbdkl.top"; classtype:attempted-recon; sid:200014798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.drkild.icu"; classtype:attempted-recon; sid:200014799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.e7ie6j.icu"; classtype:attempted-recon; sid:200014800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.eahbrm.top"; classtype:attempted-recon; sid:200014801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.enioab.top"; classtype:attempted-recon; sid:200014802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.erkdnv.top"; classtype:attempted-recon; sid:200014803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.fn0aqh.icu"; classtype:attempted-recon; sid:200014804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.hblfhq.top"; classtype:attempted-recon; sid:200014805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.hefhjq.icu"; classtype:attempted-recon; sid:200014806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.hli3b0.icu"; classtype:attempted-recon; sid:200014807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.hlsyku.icu"; classtype:attempted-recon; sid:200014808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.hmziti.top"; classtype:attempted-recon; sid:200014809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.idenyq.top"; classtype:attempted-recon; sid:200014810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.inkblog.ink"; classtype:attempted-recon; sid:200014811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.j3tu3m.icu"; classtype:attempted-recon; sid:200014812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.j77o38.icu"; classtype:attempted-recon; sid:200014813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.jehe99.icu"; classtype:attempted-recon; sid:200014814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.juls8q.icu"; classtype:attempted-recon; sid:200014815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.k3ma2x.icu"; classtype:attempted-recon; sid:200014816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.k9pn0d.icu"; classtype:attempted-recon; sid:200014817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ka83cb.icu"; classtype:attempted-recon; sid:200014818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.kb5b6d.icu"; classtype:attempted-recon; sid:200014819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.kgfkdv.top"; classtype:attempted-recon; sid:200014820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.krjqpe.top"; classtype:attempted-recon; sid:200014821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.kvrhdp.top"; classtype:attempted-recon; sid:200014822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.lcazit.top"; classtype:attempted-recon; sid:200014823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.lfyacu.icu"; classtype:attempted-recon; sid:200014824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ljmuov.top"; classtype:attempted-recon; sid:200014825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ll64vg.icu"; classtype:attempted-recon; sid:200014826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.llufip.top"; classtype:attempted-recon; sid:200014827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.lmheln.top"; classtype:attempted-recon; sid:200014828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.lwgayp.top"; classtype:attempted-recon; sid:200014829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.lylxce.top"; classtype:attempted-recon; sid:200014830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.mcltim.top"; classtype:attempted-recon; sid:200014831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.mfx741.icu"; classtype:attempted-recon; sid:200014832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.mgjpjr.top"; classtype:attempted-recon; sid:200014833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.mjdnpt.top"; classtype:attempted-recon; sid:200014834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.nllyoh.top"; classtype:attempted-recon; sid:200014835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.nqveqi.top"; classtype:attempted-recon; sid:200014836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.nrhpkc.icu"; classtype:attempted-recon; sid:200014837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.nu57wl.icu"; classtype:attempted-recon; sid:200014838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.nv9dtw.icu"; classtype:attempted-recon; sid:200014839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ojyzcd.top"; classtype:attempted-recon; sid:200014840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.okbpku.icu"; classtype:attempted-recon; sid:200014841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.oppxsj.top"; classtype:attempted-recon; sid:200014842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.or1glf.icu"; classtype:attempted-recon; sid:200014843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.pe14pc.icu"; classtype:attempted-recon; sid:200014844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.psdexq.top"; classtype:attempted-recon; sid:200014845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.psdoni.top"; classtype:attempted-recon; sid:200014846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.pujapd.top"; classtype:attempted-recon; sid:200014847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.pzgoea.top"; classtype:attempted-recon; sid:200014848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.q0s2sm.icu"; classtype:attempted-recon; sid:200014849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.qclqjo.top"; classtype:attempted-recon; sid:200014850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.qeaogd.top"; classtype:attempted-recon; sid:200014851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.qnqwcs.icu"; classtype:attempted-recon; sid:200014852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.qpchzg.top"; classtype:attempted-recon; sid:200014853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.qqjjzi.top"; classtype:attempted-recon; sid:200014854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.qvgavp.top"; classtype:attempted-recon; sid:200014855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.rbyycn.top"; classtype:attempted-recon; sid:200014856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.rmgomo.top"; classtype:attempted-recon; sid:200014857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.rsxojx.top"; classtype:attempted-recon; sid:200014858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.sawjbk.top"; classtype:attempted-recon; sid:200014859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.slnb02.icu"; classtype:attempted-recon; sid:200014860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.srcwhi.top"; classtype:attempted-recon; sid:200014861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.srwwap.top"; classtype:attempted-recon; sid:200014862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.sthtuh.top"; classtype:attempted-recon; sid:200014863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.syeuaw.top"; classtype:attempted-recon; sid:200014864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.tazsl1.icu"; classtype:attempted-recon; sid:200014865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.tbnilj.top"; classtype:attempted-recon; sid:200014866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.tl86n6.icu"; classtype:attempted-recon; sid:200014867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.to5fb9.icu"; classtype:attempted-recon; sid:200014868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.u0c8sn.icu"; classtype:attempted-recon; sid:200014869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.uixah3.icu"; classtype:attempted-recon; sid:200014870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ukesvp.icu"; classtype:attempted-recon; sid:200014871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ukrtxd.top"; classtype:attempted-recon; sid:200014872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.upahh5.icu"; classtype:attempted-recon; sid:200014873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.uxdgpy.top"; classtype:attempted-recon; sid:200014874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.uxvqzp.top"; classtype:attempted-recon; sid:200014875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.vdpgwm.top"; classtype:attempted-recon; sid:200014876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.vqeyuo.top"; classtype:attempted-recon; sid:200014877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.vspjok.icu"; classtype:attempted-recon; sid:200014878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.vvkdlh.top"; classtype:attempted-recon; sid:200014879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.vxcrlo.top"; classtype:attempted-recon; sid:200014880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.werbdt.top"; classtype:attempted-recon; sid:200014881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.wfirhj.top"; classtype:attempted-recon; sid:200014882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.whnjwr.top"; classtype:attempted-recon; sid:200014883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.witojr.top"; classtype:attempted-recon; sid:200014884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.wmygyx.top"; classtype:attempted-recon; sid:200014885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.wpzqxg.top"; classtype:attempted-recon; sid:200014886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.wsojbg.icu"; classtype:attempted-recon; sid:200014887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.wxpckc.icu"; classtype:attempted-recon; sid:200014888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.xd1bpn.icu"; classtype:attempted-recon; sid:200014889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.xeygaj.top"; classtype:attempted-recon; sid:200014890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.xgysxo.top"; classtype:attempted-recon; sid:200014891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.xydvkg.top"; classtype:attempted-recon; sid:200014892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.xyuhnm.top"; classtype:attempted-recon; sid:200014893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.xztftf.top"; classtype:attempted-recon; sid:200014894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.ymifv0.icu"; classtype:attempted-recon; sid:200014895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.yqasjy.icu"; classtype:attempted-recon; sid:200014896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.yuxvpc.top"; classtype:attempted-recon; sid:200014897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.yvjdgy.top"; classtype:attempted-recon; sid:200014898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.yybtfl.top"; classtype:attempted-recon; sid:200014899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.zhsntm.top"; classtype:attempted-recon; sid:200014900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.zhwpnq.top"; classtype:attempted-recon; sid:200014901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.zovh96.icu"; classtype:attempted-recon; sid:200014902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakaseoou.raekotnon.zoyqhl.top"; classtype:attempted-recon; sid:200014903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raketoesnccsaasecasorsedcceaoo.earescooosearkutsen.rinlvb.top"; classtype:attempted-recon; sid:200014904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakibmotors.com"; classtype:attempted-recon; sid:200014905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakutencardco.top"; classtype:attempted-recon; sid:200014906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ralxkbskvp.duckdns.org"; classtype:attempted-recon; sid:200014907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ramanjitsingh.in"; classtype:attempted-recon; sid:200014908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ranboomerch.net"; classtype:attempted-recon; sid:200014909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.037768888861.xyz"; classtype:attempted-recon; sid:200014910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.284nxw.icu"; classtype:attempted-recon; sid:200014911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.33hf19.icu"; classtype:attempted-recon; sid:200014912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.473glv.icu"; classtype:attempted-recon; sid:200014913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.4k2dci.icu"; classtype:attempted-recon; sid:200014914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.687cem.icu"; classtype:attempted-recon; sid:200014915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.69bn6b.icu"; classtype:attempted-recon; sid:200014916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.6c7bza.icu"; classtype:attempted-recon; sid:200014917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.6pw2wd.icu"; classtype:attempted-recon; sid:200014918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.6rtqht.icu"; classtype:attempted-recon; sid:200014919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.6t1vk7.icu"; classtype:attempted-recon; sid:200014920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.7a4s96.icu"; classtype:attempted-recon; sid:200014921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.82casa.icu"; classtype:attempted-recon; sid:200014922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.9d24dh.icu"; classtype:attempted-recon; sid:200014923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.9pw3lv.icu"; classtype:attempted-recon; sid:200014924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.9zv0ny.icu"; classtype:attempted-recon; sid:200014925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.aale2a.icu"; classtype:attempted-recon; sid:200014926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.aayldm.top"; classtype:attempted-recon; sid:200014927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.adldni.top"; classtype:attempted-recon; sid:200014928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.afqzgx.top"; classtype:attempted-recon; sid:200014929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ajxdpg.top"; classtype:attempted-recon; sid:200014930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ansklx.top"; classtype:attempted-recon; sid:200014931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ao0dkn.icu"; classtype:attempted-recon; sid:200014932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.aogild.top"; classtype:attempted-recon; sid:200014933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.bucyvo.top"; classtype:attempted-recon; sid:200014934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.bwxsxf.top"; classtype:attempted-recon; sid:200014935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.bxsxvy.top"; classtype:attempted-recon; sid:200014936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.cgogay.top"; classtype:attempted-recon; sid:200014937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.cmudlt.top"; classtype:attempted-recon; sid:200014938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ctdwug.top"; classtype:attempted-recon; sid:200014939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.cwpgoh.top"; classtype:attempted-recon; sid:200014940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.d5u49w.icu"; classtype:attempted-recon; sid:200014941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.dbezzz.top"; classtype:attempted-recon; sid:200014942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.dbhlbm.top"; classtype:attempted-recon; sid:200014943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.dqbdkl.top"; classtype:attempted-recon; sid:200014944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.drkild.icu"; classtype:attempted-recon; sid:200014945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.e7ie6j.icu"; classtype:attempted-recon; sid:200014946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.eahbrm.top"; classtype:attempted-recon; sid:200014947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.enioab.top"; classtype:attempted-recon; sid:200014948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.erkdnv.top"; classtype:attempted-recon; sid:200014949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.fn0aqh.icu"; classtype:attempted-recon; sid:200014950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.hblfhq.top"; classtype:attempted-recon; sid:200014951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.hefhjq.icu"; classtype:attempted-recon; sid:200014952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.hli3b0.icu"; classtype:attempted-recon; sid:200014953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.hlsyku.icu"; classtype:attempted-recon; sid:200014954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.hmziti.top"; classtype:attempted-recon; sid:200014955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.idenyq.top"; classtype:attempted-recon; sid:200014956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.inkblog.ink"; classtype:attempted-recon; sid:200014957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.j3tu3m.icu"; classtype:attempted-recon; sid:200014958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.j77o38.icu"; classtype:attempted-recon; sid:200014959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.jehe99.icu"; classtype:attempted-recon; sid:200014960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.juls8q.icu"; classtype:attempted-recon; sid:200014961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.k3ma2x.icu"; classtype:attempted-recon; sid:200014962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.k9pn0d.icu"; classtype:attempted-recon; sid:200014963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ka83cb.icu"; classtype:attempted-recon; sid:200014964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.kb5b6d.icu"; classtype:attempted-recon; sid:200014965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.kgfkdv.top"; classtype:attempted-recon; sid:200014966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.krjqpe.top"; classtype:attempted-recon; sid:200014967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.kvrhdp.top"; classtype:attempted-recon; sid:200014968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.lcazit.top"; classtype:attempted-recon; sid:200014969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.lfyacu.icu"; classtype:attempted-recon; sid:200014970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ljmuov.top"; classtype:attempted-recon; sid:200014971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ll64vg.icu"; classtype:attempted-recon; sid:200014972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.llufip.top"; classtype:attempted-recon; sid:200014973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.lmheln.top"; classtype:attempted-recon; sid:200014974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.lwgayp.top"; classtype:attempted-recon; sid:200014975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.lylxce.top"; classtype:attempted-recon; sid:200014976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.mcltim.top"; classtype:attempted-recon; sid:200014977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.mfx741.icu"; classtype:attempted-recon; sid:200014978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.mgjpjr.top"; classtype:attempted-recon; sid:200014979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.mjdnpt.top"; classtype:attempted-recon; sid:200014980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.nllyoh.top"; classtype:attempted-recon; sid:200014981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.nqveqi.top"; classtype:attempted-recon; sid:200014982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.nrhpkc.icu"; classtype:attempted-recon; sid:200014983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.nu57wl.icu"; classtype:attempted-recon; sid:200014984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.nv9dtw.icu"; classtype:attempted-recon; sid:200014985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ojyzcd.top"; classtype:attempted-recon; sid:200014986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.okbpku.icu"; classtype:attempted-recon; sid:200014987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.oppxsj.top"; classtype:attempted-recon; sid:200014988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.or1glf.icu"; classtype:attempted-recon; sid:200014989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.pe14pc.icu"; classtype:attempted-recon; sid:200014990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.psdexq.top"; classtype:attempted-recon; sid:200014991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.psdoni.top"; classtype:attempted-recon; sid:200014992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.pujapd.top"; classtype:attempted-recon; sid:200014993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.pzgoea.top"; classtype:attempted-recon; sid:200014994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.q0s2sm.icu"; classtype:attempted-recon; sid:200014995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.qclqjo.top"; classtype:attempted-recon; sid:200014996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.qeaogd.top"; classtype:attempted-recon; sid:200014997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.qnqwcs.icu"; classtype:attempted-recon; sid:200014998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.qpchzg.top"; classtype:attempted-recon; sid:200014999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.qqjjzi.top"; classtype:attempted-recon; sid:200015000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.qvgavp.top"; classtype:attempted-recon; sid:200015001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.rbyycn.top"; classtype:attempted-recon; sid:200015002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.rmgomo.top"; classtype:attempted-recon; sid:200015003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.rsxojx.top"; classtype:attempted-recon; sid:200015004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.sawjbk.top"; classtype:attempted-recon; sid:200015005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.slnb02.icu"; classtype:attempted-recon; sid:200015006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.srcwhi.top"; classtype:attempted-recon; sid:200015007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.srwwap.top"; classtype:attempted-recon; sid:200015008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.sthtuh.top"; classtype:attempted-recon; sid:200015009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.syeuaw.top"; classtype:attempted-recon; sid:200015010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.tazsl1.icu"; classtype:attempted-recon; sid:200015011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.tbnilj.top"; classtype:attempted-recon; sid:200015012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.tl86n6.icu"; classtype:attempted-recon; sid:200015013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.to5fb9.icu"; classtype:attempted-recon; sid:200015014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.u0c8sn.icu"; classtype:attempted-recon; sid:200015015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.uixah3.icu"; classtype:attempted-recon; sid:200015016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ukesvp.icu"; classtype:attempted-recon; sid:200015017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ukrtxd.top"; classtype:attempted-recon; sid:200015018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.upahh5.icu"; classtype:attempted-recon; sid:200015019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.uxdgpy.top"; classtype:attempted-recon; sid:200015020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.uxvqzp.top"; classtype:attempted-recon; sid:200015021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.vdpgwm.top"; classtype:attempted-recon; sid:200015022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.vqeyuo.top"; classtype:attempted-recon; sid:200015023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.vspjok.icu"; classtype:attempted-recon; sid:200015024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.vvkdlh.top"; classtype:attempted-recon; sid:200015025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.vxcrlo.top"; classtype:attempted-recon; sid:200015026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.werbdt.top"; classtype:attempted-recon; sid:200015027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.wfirhj.top"; classtype:attempted-recon; sid:200015028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.whnjwr.top"; classtype:attempted-recon; sid:200015029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.witojr.top"; classtype:attempted-recon; sid:200015030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.wmygyx.top"; classtype:attempted-recon; sid:200015031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.wpzqxg.top"; classtype:attempted-recon; sid:200015032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.wsojbg.icu"; classtype:attempted-recon; sid:200015033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.wxpckc.icu"; classtype:attempted-recon; sid:200015034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.xd1bpn.icu"; classtype:attempted-recon; sid:200015035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.xeygaj.top"; classtype:attempted-recon; sid:200015036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.xgysxo.top"; classtype:attempted-recon; sid:200015037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.xydvkg.top"; classtype:attempted-recon; sid:200015038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.xyuhnm.top"; classtype:attempted-recon; sid:200015039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.xztftf.top"; classtype:attempted-recon; sid:200015040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ymifv0.icu"; classtype:attempted-recon; sid:200015041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.yqasjy.icu"; classtype:attempted-recon; sid:200015042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.yuxvpc.top"; classtype:attempted-recon; sid:200015043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.yvjdgy.top"; classtype:attempted-recon; sid:200015044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.yybtfl.top"; classtype:attempted-recon; sid:200015045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.zhsntm.top"; classtype:attempted-recon; sid:200015046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.zhwpnq.top"; classtype:attempted-recon; sid:200015047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.zovh96.icu"; classtype:attempted-recon; sid:200015048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakcsrorcou.rakoeasaserouern.zoyqhl.top"; classtype:attempted-recon; sid:200015049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.037768888861.xyz"; classtype:attempted-recon; sid:200015050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.284nxw.icu"; classtype:attempted-recon; sid:200015051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.33hf19.icu"; classtype:attempted-recon; sid:200015052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.473glv.icu"; classtype:attempted-recon; sid:200015053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.4k2dci.icu"; classtype:attempted-recon; sid:200015054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.687cem.icu"; classtype:attempted-recon; sid:200015055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.69bn6b.icu"; classtype:attempted-recon; sid:200015056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.6c7bza.icu"; classtype:attempted-recon; sid:200015057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.6pw2wd.icu"; classtype:attempted-recon; sid:200015058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.6rtqht.icu"; classtype:attempted-recon; sid:200015059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.6t1vk7.icu"; classtype:attempted-recon; sid:200015060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.7a4s96.icu"; classtype:attempted-recon; sid:200015061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.82casa.icu"; classtype:attempted-recon; sid:200015062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.9d24dh.icu"; classtype:attempted-recon; sid:200015063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.9pw3lv.icu"; classtype:attempted-recon; sid:200015064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.9zv0ny.icu"; classtype:attempted-recon; sid:200015065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.aale2a.icu"; classtype:attempted-recon; sid:200015066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.aayldm.top"; classtype:attempted-recon; sid:200015067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.adldni.top"; classtype:attempted-recon; sid:200015068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.afqzgx.top"; classtype:attempted-recon; sid:200015069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ajxdpg.top"; classtype:attempted-recon; sid:200015070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ansklx.top"; classtype:attempted-recon; sid:200015071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ao0dkn.icu"; classtype:attempted-recon; sid:200015072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.aogild.top"; classtype:attempted-recon; sid:200015073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.bucyvo.top"; classtype:attempted-recon; sid:200015074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.bwxsxf.top"; classtype:attempted-recon; sid:200015075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.bxsxvy.top"; classtype:attempted-recon; sid:200015076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.cgogay.top"; classtype:attempted-recon; sid:200015077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.cmudlt.top"; classtype:attempted-recon; sid:200015078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ctdwug.top"; classtype:attempted-recon; sid:200015079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.cwpgoh.top"; classtype:attempted-recon; sid:200015080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.d5u49w.icu"; classtype:attempted-recon; sid:200015081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.dbezzz.top"; classtype:attempted-recon; sid:200015082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.dbhlbm.top"; classtype:attempted-recon; sid:200015083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.dqbdkl.top"; classtype:attempted-recon; sid:200015084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.drkild.icu"; classtype:attempted-recon; sid:200015085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.e7ie6j.icu"; classtype:attempted-recon; sid:200015086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.eahbrm.top"; classtype:attempted-recon; sid:200015087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.enioab.top"; classtype:attempted-recon; sid:200015088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.erkdnv.top"; classtype:attempted-recon; sid:200015089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.fn0aqh.icu"; classtype:attempted-recon; sid:200015090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.hblfhq.top"; classtype:attempted-recon; sid:200015091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.hefhjq.icu"; classtype:attempted-recon; sid:200015092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.hli3b0.icu"; classtype:attempted-recon; sid:200015093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.hlsyku.icu"; classtype:attempted-recon; sid:200015094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.hmziti.top"; classtype:attempted-recon; sid:200015095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.idenyq.top"; classtype:attempted-recon; sid:200015096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.inkblog.ink"; classtype:attempted-recon; sid:200015097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.j3tu3m.icu"; classtype:attempted-recon; sid:200015098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.j77o38.icu"; classtype:attempted-recon; sid:200015099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.jehe99.icu"; classtype:attempted-recon; sid:200015100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.juls8q.icu"; classtype:attempted-recon; sid:200015101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.k3ma2x.icu"; classtype:attempted-recon; sid:200015102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.k9pn0d.icu"; classtype:attempted-recon; sid:200015103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ka83cb.icu"; classtype:attempted-recon; sid:200015104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.kb5b6d.icu"; classtype:attempted-recon; sid:200015105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.kgfkdv.top"; classtype:attempted-recon; sid:200015106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.krjqpe.top"; classtype:attempted-recon; sid:200015107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.kvrhdp.top"; classtype:attempted-recon; sid:200015108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.lcazit.top"; classtype:attempted-recon; sid:200015109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.lfyacu.icu"; classtype:attempted-recon; sid:200015110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ljmuov.top"; classtype:attempted-recon; sid:200015111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ll64vg.icu"; classtype:attempted-recon; sid:200015112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.llufip.top"; classtype:attempted-recon; sid:200015113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.lmheln.top"; classtype:attempted-recon; sid:200015114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.lwgayp.top"; classtype:attempted-recon; sid:200015115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.lylxce.top"; classtype:attempted-recon; sid:200015116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.mcltim.top"; classtype:attempted-recon; sid:200015117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.mfx741.icu"; classtype:attempted-recon; sid:200015118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.mgjpjr.top"; classtype:attempted-recon; sid:200015119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.mjdnpt.top"; classtype:attempted-recon; sid:200015120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.nllyoh.top"; classtype:attempted-recon; sid:200015121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.nqveqi.top"; classtype:attempted-recon; sid:200015122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.nrhpkc.icu"; classtype:attempted-recon; sid:200015123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.nu57wl.icu"; classtype:attempted-recon; sid:200015124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.nv9dtw.icu"; classtype:attempted-recon; sid:200015125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ojyzcd.top"; classtype:attempted-recon; sid:200015126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.okbpku.icu"; classtype:attempted-recon; sid:200015127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.oppxsj.top"; classtype:attempted-recon; sid:200015128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.or1glf.icu"; classtype:attempted-recon; sid:200015129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.pe14pc.icu"; classtype:attempted-recon; sid:200015130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.psdexq.top"; classtype:attempted-recon; sid:200015131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.psdoni.top"; classtype:attempted-recon; sid:200015132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.pujapd.top"; classtype:attempted-recon; sid:200015133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.pzgoea.top"; classtype:attempted-recon; sid:200015134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.q0s2sm.icu"; classtype:attempted-recon; sid:200015135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.qclqjo.top"; classtype:attempted-recon; sid:200015136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.qeaogd.top"; classtype:attempted-recon; sid:200015137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.qnqwcs.icu"; classtype:attempted-recon; sid:200015138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.qpchzg.top"; classtype:attempted-recon; sid:200015139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.qqjjzi.top"; classtype:attempted-recon; sid:200015140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.qvgavp.top"; classtype:attempted-recon; sid:200015141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.rbyycn.top"; classtype:attempted-recon; sid:200015142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.rmgomo.top"; classtype:attempted-recon; sid:200015143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.rsxojx.top"; classtype:attempted-recon; sid:200015144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.sawjbk.top"; classtype:attempted-recon; sid:200015145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.slnb02.icu"; classtype:attempted-recon; sid:200015146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.srcwhi.top"; classtype:attempted-recon; sid:200015147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.srwwap.top"; classtype:attempted-recon; sid:200015148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.sthtuh.top"; classtype:attempted-recon; sid:200015149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.syeuaw.top"; classtype:attempted-recon; sid:200015150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.tazsl1.icu"; classtype:attempted-recon; sid:200015151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.tbnilj.top"; classtype:attempted-recon; sid:200015152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.tl86n6.icu"; classtype:attempted-recon; sid:200015153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.to5fb9.icu"; classtype:attempted-recon; sid:200015154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.u0c8sn.icu"; classtype:attempted-recon; sid:200015155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.uixah3.icu"; classtype:attempted-recon; sid:200015156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ukesvp.icu"; classtype:attempted-recon; sid:200015157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ukrtxd.top"; classtype:attempted-recon; sid:200015158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.upahh5.icu"; classtype:attempted-recon; sid:200015159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.uxdgpy.top"; classtype:attempted-recon; sid:200015160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.uxvqzp.top"; classtype:attempted-recon; sid:200015161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.vdpgwm.top"; classtype:attempted-recon; sid:200015162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.vqeyuo.top"; classtype:attempted-recon; sid:200015163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.vspjok.icu"; classtype:attempted-recon; sid:200015164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.vvkdlh.top"; classtype:attempted-recon; sid:200015165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.vxcrlo.top"; classtype:attempted-recon; sid:200015166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.werbdt.top"; classtype:attempted-recon; sid:200015167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.wfirhj.top"; classtype:attempted-recon; sid:200015168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.whnjwr.top"; classtype:attempted-recon; sid:200015169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.witojr.top"; classtype:attempted-recon; sid:200015170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.wmygyx.top"; classtype:attempted-recon; sid:200015171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.wpzqxg.top"; classtype:attempted-recon; sid:200015172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.wsojbg.icu"; classtype:attempted-recon; sid:200015173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.wxpckc.icu"; classtype:attempted-recon; sid:200015174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.xd1bpn.icu"; classtype:attempted-recon; sid:200015175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.xeygaj.top"; classtype:attempted-recon; sid:200015176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.xgysxo.top"; classtype:attempted-recon; sid:200015177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.xydvkg.top"; classtype:attempted-recon; sid:200015178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.xyuhnm.top"; classtype:attempted-recon; sid:200015179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.xztftf.top"; classtype:attempted-recon; sid:200015180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.yangnan.site"; classtype:attempted-recon; sid:200015181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.ymifv0.icu"; classtype:attempted-recon; sid:200015182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.yqasjy.icu"; classtype:attempted-recon; sid:200015183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.yuxvpc.top"; classtype:attempted-recon; sid:200015184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.yvjdgy.top"; classtype:attempted-recon; sid:200015185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.yybtfl.top"; classtype:attempted-recon; sid:200015186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.zhsntm.top"; classtype:attempted-recon; sid:200015187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.zhwpnq.top"; classtype:attempted-recon; sid:200015188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.zovh96.icu"; classtype:attempted-recon; sid:200015189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raoseakorcou.rakoeasuern.zoyqhl.top"; classtype:attempted-recon; sid:200015190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.037768888861.xyz"; classtype:attempted-recon; sid:200015191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.284nxw.icu"; classtype:attempted-recon; sid:200015192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.33hf19.icu"; classtype:attempted-recon; sid:200015193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.473glv.icu"; classtype:attempted-recon; sid:200015194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.4k2dci.icu"; classtype:attempted-recon; sid:200015195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.687cem.icu"; classtype:attempted-recon; sid:200015196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.69bn6b.icu"; classtype:attempted-recon; sid:200015197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.6c7bza.icu"; classtype:attempted-recon; sid:200015198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.6pw2wd.icu"; classtype:attempted-recon; sid:200015199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.6rtqht.icu"; classtype:attempted-recon; sid:200015200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.6t1vk7.icu"; classtype:attempted-recon; sid:200015201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.7a4s96.icu"; classtype:attempted-recon; sid:200015202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.82casa.icu"; classtype:attempted-recon; sid:200015203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.9d24dh.icu"; classtype:attempted-recon; sid:200015204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.9pw3lv.icu"; classtype:attempted-recon; sid:200015205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.9zv0ny.icu"; classtype:attempted-recon; sid:200015206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.aale2a.icu"; classtype:attempted-recon; sid:200015207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.aayldm.top"; classtype:attempted-recon; sid:200015208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.adldni.top"; classtype:attempted-recon; sid:200015209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.afqzgx.top"; classtype:attempted-recon; sid:200015210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ajxdpg.top"; classtype:attempted-recon; sid:200015211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ansklx.top"; classtype:attempted-recon; sid:200015212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ao0dkn.icu"; classtype:attempted-recon; sid:200015213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.aogild.top"; classtype:attempted-recon; sid:200015214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.bucyvo.top"; classtype:attempted-recon; sid:200015215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.bwxsxf.top"; classtype:attempted-recon; sid:200015216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.bxsxvy.top"; classtype:attempted-recon; sid:200015217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.cgogay.top"; classtype:attempted-recon; sid:200015218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.cmudlt.top"; classtype:attempted-recon; sid:200015219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ctdwug.top"; classtype:attempted-recon; sid:200015220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.cwpgoh.top"; classtype:attempted-recon; sid:200015221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.d5u49w.icu"; classtype:attempted-recon; sid:200015222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.dbezzz.top"; classtype:attempted-recon; sid:200015223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.dbhlbm.top"; classtype:attempted-recon; sid:200015224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.dqbdkl.top"; classtype:attempted-recon; sid:200015225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.drkild.icu"; classtype:attempted-recon; sid:200015226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.e7ie6j.icu"; classtype:attempted-recon; sid:200015227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.eahbrm.top"; classtype:attempted-recon; sid:200015228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.enioab.top"; classtype:attempted-recon; sid:200015229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.erkdnv.top"; classtype:attempted-recon; sid:200015230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.fn0aqh.icu"; classtype:attempted-recon; sid:200015231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.hblfhq.top"; classtype:attempted-recon; sid:200015232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.hefhjq.icu"; classtype:attempted-recon; sid:200015233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.hli3b0.icu"; classtype:attempted-recon; sid:200015234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.hlsyku.icu"; classtype:attempted-recon; sid:200015235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.hmziti.top"; classtype:attempted-recon; sid:200015236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.idenyq.top"; classtype:attempted-recon; sid:200015237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.inkblog.ink"; classtype:attempted-recon; sid:200015238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.j3tu3m.icu"; classtype:attempted-recon; sid:200015239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.j77o38.icu"; classtype:attempted-recon; sid:200015240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.jehe99.icu"; classtype:attempted-recon; sid:200015241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.juls8q.icu"; classtype:attempted-recon; sid:200015242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.k3ma2x.icu"; classtype:attempted-recon; sid:200015243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.k9pn0d.icu"; classtype:attempted-recon; sid:200015244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ka83cb.icu"; classtype:attempted-recon; sid:200015245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.kb5b6d.icu"; classtype:attempted-recon; sid:200015246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.kgfkdv.top"; classtype:attempted-recon; sid:200015247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.krjqpe.top"; classtype:attempted-recon; sid:200015248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.kvrhdp.top"; classtype:attempted-recon; sid:200015249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.lcazit.top"; classtype:attempted-recon; sid:200015250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.lfyacu.icu"; classtype:attempted-recon; sid:200015251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ljmuov.top"; classtype:attempted-recon; sid:200015252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ll64vg.icu"; classtype:attempted-recon; sid:200015253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.llufip.top"; classtype:attempted-recon; sid:200015254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.lmheln.top"; classtype:attempted-recon; sid:200015255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.lwgayp.top"; classtype:attempted-recon; sid:200015256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.lylxce.top"; classtype:attempted-recon; sid:200015257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.mcltim.top"; classtype:attempted-recon; sid:200015258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.mfx741.icu"; classtype:attempted-recon; sid:200015259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.mgjpjr.top"; classtype:attempted-recon; sid:200015260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.mjdnpt.top"; classtype:attempted-recon; sid:200015261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.nllyoh.top"; classtype:attempted-recon; sid:200015262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.nqveqi.top"; classtype:attempted-recon; sid:200015263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.nrhpkc.icu"; classtype:attempted-recon; sid:200015264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.nu57wl.icu"; classtype:attempted-recon; sid:200015265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.nv9dtw.icu"; classtype:attempted-recon; sid:200015266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ojyzcd.top"; classtype:attempted-recon; sid:200015267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.okbpku.icu"; classtype:attempted-recon; sid:200015268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.oppxsj.top"; classtype:attempted-recon; sid:200015269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.or1glf.icu"; classtype:attempted-recon; sid:200015270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.pe14pc.icu"; classtype:attempted-recon; sid:200015271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.psdexq.top"; classtype:attempted-recon; sid:200015272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.psdoni.top"; classtype:attempted-recon; sid:200015273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.pujapd.top"; classtype:attempted-recon; sid:200015274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.pzgoea.top"; classtype:attempted-recon; sid:200015275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.q0s2sm.icu"; classtype:attempted-recon; sid:200015276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.qclqjo.top"; classtype:attempted-recon; sid:200015277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.qeaogd.top"; classtype:attempted-recon; sid:200015278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.qnqwcs.icu"; classtype:attempted-recon; sid:200015279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.qpchzg.top"; classtype:attempted-recon; sid:200015280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.qqjjzi.top"; classtype:attempted-recon; sid:200015281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.qvgavp.top"; classtype:attempted-recon; sid:200015282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.rbyycn.top"; classtype:attempted-recon; sid:200015283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.rmgomo.top"; classtype:attempted-recon; sid:200015284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.rsxojx.top"; classtype:attempted-recon; sid:200015285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.sawjbk.top"; classtype:attempted-recon; sid:200015286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.slnb02.icu"; classtype:attempted-recon; sid:200015287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.srcwhi.top"; classtype:attempted-recon; sid:200015288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.srwwap.top"; classtype:attempted-recon; sid:200015289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.sthtuh.top"; classtype:attempted-recon; sid:200015290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.syeuaw.top"; classtype:attempted-recon; sid:200015291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.tazsl1.icu"; classtype:attempted-recon; sid:200015292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.tbnilj.top"; classtype:attempted-recon; sid:200015293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.tl86n6.icu"; classtype:attempted-recon; sid:200015294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.to5fb9.icu"; classtype:attempted-recon; sid:200015295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.u0c8sn.icu"; classtype:attempted-recon; sid:200015296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.uixah3.icu"; classtype:attempted-recon; sid:200015297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ukesvp.icu"; classtype:attempted-recon; sid:200015298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ukrtxd.top"; classtype:attempted-recon; sid:200015299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.upahh5.icu"; classtype:attempted-recon; sid:200015300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.uxdgpy.top"; classtype:attempted-recon; sid:200015301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.uxvqzp.top"; classtype:attempted-recon; sid:200015302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.vads.fun"; classtype:attempted-recon; sid:200015303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.vdpgwm.top"; classtype:attempted-recon; sid:200015304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.vqeyuo.top"; classtype:attempted-recon; sid:200015305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.vspjok.icu"; classtype:attempted-recon; sid:200015306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.vvkdlh.top"; classtype:attempted-recon; sid:200015307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.vxcrlo.top"; classtype:attempted-recon; sid:200015308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.werbdt.top"; classtype:attempted-recon; sid:200015309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.wfirhj.top"; classtype:attempted-recon; sid:200015310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.whnjwr.top"; classtype:attempted-recon; sid:200015311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.witojr.top"; classtype:attempted-recon; sid:200015312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.wmygyx.top"; classtype:attempted-recon; sid:200015313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.wpzqxg.top"; classtype:attempted-recon; sid:200015314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.wsojbg.icu"; classtype:attempted-recon; sid:200015315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.wxpckc.icu"; classtype:attempted-recon; sid:200015316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.xd1bpn.icu"; classtype:attempted-recon; sid:200015317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.xeygaj.top"; classtype:attempted-recon; sid:200015318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.xgysxo.top"; classtype:attempted-recon; sid:200015319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.xydvkg.top"; classtype:attempted-recon; sid:200015320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.xyuhnm.top"; classtype:attempted-recon; sid:200015321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.xztftf.top"; classtype:attempted-recon; sid:200015322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.ymifv0.icu"; classtype:attempted-recon; sid:200015323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.yqasjy.icu"; classtype:attempted-recon; sid:200015324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.yuxvpc.top"; classtype:attempted-recon; sid:200015325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.yvjdgy.top"; classtype:attempted-recon; sid:200015326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.yybtfl.top"; classtype:attempted-recon; sid:200015327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.zhsntm.top"; classtype:attempted-recon; sid:200015328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.zhwpnq.top"; classtype:attempted-recon; sid:200015329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.zovh96.icu"; classtype:attempted-recon; sid:200015330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekocsrrou.rakoasuenasero.zoyqhl.top"; classtype:attempted-recon; sid:200015331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.037768888861.xyz"; classtype:attempted-recon; sid:200015332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.284nxw.icu"; classtype:attempted-recon; sid:200015333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.33hf19.icu"; classtype:attempted-recon; sid:200015334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.473glv.icu"; classtype:attempted-recon; sid:200015335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.4k2dci.icu"; classtype:attempted-recon; sid:200015336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.687cem.icu"; classtype:attempted-recon; sid:200015337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.69bn6b.icu"; classtype:attempted-recon; sid:200015338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.6c7bza.icu"; classtype:attempted-recon; sid:200015339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.6pw2wd.icu"; classtype:attempted-recon; sid:200015340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.6rtqht.icu"; classtype:attempted-recon; sid:200015341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.6t1vk7.icu"; classtype:attempted-recon; sid:200015342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.7a4s96.icu"; classtype:attempted-recon; sid:200015343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.82casa.icu"; classtype:attempted-recon; sid:200015344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.9d24dh.icu"; classtype:attempted-recon; sid:200015345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.9pw3lv.icu"; classtype:attempted-recon; sid:200015346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.9zv0ny.icu"; classtype:attempted-recon; sid:200015347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.aale2a.icu"; classtype:attempted-recon; sid:200015348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.aayldm.top"; classtype:attempted-recon; sid:200015349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.adldni.top"; classtype:attempted-recon; sid:200015350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.afqzgx.top"; classtype:attempted-recon; sid:200015351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ajxdpg.top"; classtype:attempted-recon; sid:200015352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ansklx.top"; classtype:attempted-recon; sid:200015353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ao0dkn.icu"; classtype:attempted-recon; sid:200015354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.aogild.top"; classtype:attempted-recon; sid:200015355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.bucyvo.top"; classtype:attempted-recon; sid:200015356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.bwxsxf.top"; classtype:attempted-recon; sid:200015357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.bxsxvy.top"; classtype:attempted-recon; sid:200015358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.cgogay.top"; classtype:attempted-recon; sid:200015359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.cmudlt.top"; classtype:attempted-recon; sid:200015360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ctdwug.top"; classtype:attempted-recon; sid:200015361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.cwpgoh.top"; classtype:attempted-recon; sid:200015362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.d5u49w.icu"; classtype:attempted-recon; sid:200015363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.dbezzz.top"; classtype:attempted-recon; sid:200015364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.dbhlbm.top"; classtype:attempted-recon; sid:200015365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.dqbdkl.top"; classtype:attempted-recon; sid:200015366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.drkild.icu"; classtype:attempted-recon; sid:200015367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.e7ie6j.icu"; classtype:attempted-recon; sid:200015368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.eahbrm.top"; classtype:attempted-recon; sid:200015369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.enioab.top"; classtype:attempted-recon; sid:200015370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.erkdnv.top"; classtype:attempted-recon; sid:200015371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.fn0aqh.icu"; classtype:attempted-recon; sid:200015372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.hblfhq.top"; classtype:attempted-recon; sid:200015373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.hefhjq.icu"; classtype:attempted-recon; sid:200015374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.hli3b0.icu"; classtype:attempted-recon; sid:200015375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.hlsyku.icu"; classtype:attempted-recon; sid:200015376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.hmziti.top"; classtype:attempted-recon; sid:200015377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.idenyq.top"; classtype:attempted-recon; sid:200015378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.inkblog.ink"; classtype:attempted-recon; sid:200015379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.j3tu3m.icu"; classtype:attempted-recon; sid:200015380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.j77o38.icu"; classtype:attempted-recon; sid:200015381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.jehe99.icu"; classtype:attempted-recon; sid:200015382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.juls8q.icu"; classtype:attempted-recon; sid:200015383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.k3ma2x.icu"; classtype:attempted-recon; sid:200015384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.k9pn0d.icu"; classtype:attempted-recon; sid:200015385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ka83cb.icu"; classtype:attempted-recon; sid:200015386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.kb5b6d.icu"; classtype:attempted-recon; sid:200015387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.kgfkdv.top"; classtype:attempted-recon; sid:200015388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.krjqpe.top"; classtype:attempted-recon; sid:200015389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.kvrhdp.top"; classtype:attempted-recon; sid:200015390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.lcazit.top"; classtype:attempted-recon; sid:200015391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.lfyacu.icu"; classtype:attempted-recon; sid:200015392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ljmuov.top"; classtype:attempted-recon; sid:200015393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ll64vg.icu"; classtype:attempted-recon; sid:200015394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.llufip.top"; classtype:attempted-recon; sid:200015395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.lmheln.top"; classtype:attempted-recon; sid:200015396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.lwgayp.top"; classtype:attempted-recon; sid:200015397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.lylxce.top"; classtype:attempted-recon; sid:200015398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.mcltim.top"; classtype:attempted-recon; sid:200015399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.mfx741.icu"; classtype:attempted-recon; sid:200015400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.mgjpjr.top"; classtype:attempted-recon; sid:200015401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.mjdnpt.top"; classtype:attempted-recon; sid:200015402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.nllyoh.top"; classtype:attempted-recon; sid:200015403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.nqveqi.top"; classtype:attempted-recon; sid:200015404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.nrhpkc.icu"; classtype:attempted-recon; sid:200015405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.nu57wl.icu"; classtype:attempted-recon; sid:200015406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.nv9dtw.icu"; classtype:attempted-recon; sid:200015407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ojyzcd.top"; classtype:attempted-recon; sid:200015408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.okbpku.icu"; classtype:attempted-recon; sid:200015409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.oppxsj.top"; classtype:attempted-recon; sid:200015410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.or1glf.icu"; classtype:attempted-recon; sid:200015411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.pe14pc.icu"; classtype:attempted-recon; sid:200015412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.psdexq.top"; classtype:attempted-recon; sid:200015413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.psdoni.top"; classtype:attempted-recon; sid:200015414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.pujapd.top"; classtype:attempted-recon; sid:200015415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.pzgoea.top"; classtype:attempted-recon; sid:200015416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.q0s2sm.icu"; classtype:attempted-recon; sid:200015417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.qclqjo.top"; classtype:attempted-recon; sid:200015418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.qeaogd.top"; classtype:attempted-recon; sid:200015419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.qnqwcs.icu"; classtype:attempted-recon; sid:200015420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.qpchzg.top"; classtype:attempted-recon; sid:200015421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.qqjjzi.top"; classtype:attempted-recon; sid:200015422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.qvgavp.top"; classtype:attempted-recon; sid:200015423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.rbyycn.top"; classtype:attempted-recon; sid:200015424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.rmgomo.top"; classtype:attempted-recon; sid:200015425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.rsxojx.top"; classtype:attempted-recon; sid:200015426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.sawjbk.top"; classtype:attempted-recon; sid:200015427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.slnb02.icu"; classtype:attempted-recon; sid:200015428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.srcwhi.top"; classtype:attempted-recon; sid:200015429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.srwwap.top"; classtype:attempted-recon; sid:200015430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.sthtuh.top"; classtype:attempted-recon; sid:200015431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.syeuaw.top"; classtype:attempted-recon; sid:200015432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.tazsl1.icu"; classtype:attempted-recon; sid:200015433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.tbnilj.top"; classtype:attempted-recon; sid:200015434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.tl86n6.icu"; classtype:attempted-recon; sid:200015435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.to5fb9.icu"; classtype:attempted-recon; sid:200015436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.u0c8sn.icu"; classtype:attempted-recon; sid:200015437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.uixah3.icu"; classtype:attempted-recon; sid:200015438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ukesvp.icu"; classtype:attempted-recon; sid:200015439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ukrtxd.top"; classtype:attempted-recon; sid:200015440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.upahh5.icu"; classtype:attempted-recon; sid:200015441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.uxdgpy.top"; classtype:attempted-recon; sid:200015442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.uxvqzp.top"; classtype:attempted-recon; sid:200015443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.vdpgwm.top"; classtype:attempted-recon; sid:200015444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.vqeyuo.top"; classtype:attempted-recon; sid:200015445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.vspjok.icu"; classtype:attempted-recon; sid:200015446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.vvkdlh.top"; classtype:attempted-recon; sid:200015447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.vxcrlo.top"; classtype:attempted-recon; sid:200015448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.werbdt.top"; classtype:attempted-recon; sid:200015449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.wfirhj.top"; classtype:attempted-recon; sid:200015450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.whnjwr.top"; classtype:attempted-recon; sid:200015451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.wmygyx.top"; classtype:attempted-recon; sid:200015452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.wpzqxg.top"; classtype:attempted-recon; sid:200015453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.wsojbg.icu"; classtype:attempted-recon; sid:200015454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.wxpckc.icu"; classtype:attempted-recon; sid:200015455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.xd1bpn.icu"; classtype:attempted-recon; sid:200015456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.xeygaj.top"; classtype:attempted-recon; sid:200015457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.xgysxo.top"; classtype:attempted-recon; sid:200015458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.xydvkg.top"; classtype:attempted-recon; sid:200015459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.xyuhnm.top"; classtype:attempted-recon; sid:200015460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.xztftf.top"; classtype:attempted-recon; sid:200015461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.ymifv0.icu"; classtype:attempted-recon; sid:200015462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.yqasjy.icu"; classtype:attempted-recon; sid:200015463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.yuxvpc.top"; classtype:attempted-recon; sid:200015464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.yvjdgy.top"; classtype:attempted-recon; sid:200015465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.yybtfl.top"; classtype:attempted-recon; sid:200015466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.zhsntm.top"; classtype:attempted-recon; sid:200015467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.zhwpnq.top"; classtype:attempted-recon; sid:200015468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.zovh96.icu"; classtype:attempted-recon; sid:200015469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raosekorou.rakoasuen.zoyqhl.top"; classtype:attempted-recon; sid:200015470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rapid-disk-caef.anyrag8021015.workers.dev"; classtype:attempted-recon; sid:200015471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raqumipyos.duckdns.org"; classtype:attempted-recon; sid:200015472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rarbille.com"; classtype:attempted-recon; sid:200015473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rarebli.blogspot.com"; classtype:attempted-recon; sid:200015474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rarvkzfjmc.duckdns.org"; classtype:attempted-recon; sid:200015475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rarwakvecj.duckdns.org"; classtype:attempted-recon; sid:200015476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.037768888861.xyz"; classtype:attempted-recon; sid:200015477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.284nxw.icu"; classtype:attempted-recon; sid:200015478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.33hf19.icu"; classtype:attempted-recon; sid:200015479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.473glv.icu"; classtype:attempted-recon; sid:200015480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.4k2dci.icu"; classtype:attempted-recon; sid:200015481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.687cem.icu"; classtype:attempted-recon; sid:200015482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.69bn6b.icu"; classtype:attempted-recon; sid:200015483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.6c7bza.icu"; classtype:attempted-recon; sid:200015484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.6pw2wd.icu"; classtype:attempted-recon; sid:200015485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.6rtqht.icu"; classtype:attempted-recon; sid:200015486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.6t1vk7.icu"; classtype:attempted-recon; sid:200015487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.7a4s96.icu"; classtype:attempted-recon; sid:200015488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.82casa.icu"; classtype:attempted-recon; sid:200015489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.9d24dh.icu"; classtype:attempted-recon; sid:200015490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.9pw3lv.icu"; classtype:attempted-recon; sid:200015491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.9zv0ny.icu"; classtype:attempted-recon; sid:200015492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.aale2a.icu"; classtype:attempted-recon; sid:200015493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.aayldm.top"; classtype:attempted-recon; sid:200015494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.adldni.top"; classtype:attempted-recon; sid:200015495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.afqzgx.top"; classtype:attempted-recon; sid:200015496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ajxdpg.top"; classtype:attempted-recon; sid:200015497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ansklx.top"; classtype:attempted-recon; sid:200015498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ao0dkn.icu"; classtype:attempted-recon; sid:200015499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.aogild.top"; classtype:attempted-recon; sid:200015500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.bucyvo.top"; classtype:attempted-recon; sid:200015501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.bwxsxf.top"; classtype:attempted-recon; sid:200015502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.bxsxvy.top"; classtype:attempted-recon; sid:200015503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.cgogay.top"; classtype:attempted-recon; sid:200015504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.cmudlt.top"; classtype:attempted-recon; sid:200015505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ctdwug.top"; classtype:attempted-recon; sid:200015506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.cwpgoh.top"; classtype:attempted-recon; sid:200015507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.d5u49w.icu"; classtype:attempted-recon; sid:200015508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.dbezzz.top"; classtype:attempted-recon; sid:200015509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.dbhlbm.top"; classtype:attempted-recon; sid:200015510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.dqbdkl.top"; classtype:attempted-recon; sid:200015511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.drkild.icu"; classtype:attempted-recon; sid:200015512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.e7ie6j.icu"; classtype:attempted-recon; sid:200015513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.eahbrm.top"; classtype:attempted-recon; sid:200015514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.enioab.top"; classtype:attempted-recon; sid:200015515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.erkdnv.top"; classtype:attempted-recon; sid:200015516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.fn0aqh.icu"; classtype:attempted-recon; sid:200015517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.hblfhq.top"; classtype:attempted-recon; sid:200015518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.hefhjq.icu"; classtype:attempted-recon; sid:200015519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.hli3b0.icu"; classtype:attempted-recon; sid:200015520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.hlsyku.icu"; classtype:attempted-recon; sid:200015521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.hmziti.top"; classtype:attempted-recon; sid:200015522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.idenyq.top"; classtype:attempted-recon; sid:200015523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.inkblog.ink"; classtype:attempted-recon; sid:200015524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.j3tu3m.icu"; classtype:attempted-recon; sid:200015525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.j77o38.icu"; classtype:attempted-recon; sid:200015526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.jehe99.icu"; classtype:attempted-recon; sid:200015527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.juls8q.icu"; classtype:attempted-recon; sid:200015528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.k3ma2x.icu"; classtype:attempted-recon; sid:200015529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.k9pn0d.icu"; classtype:attempted-recon; sid:200015530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ka83cb.icu"; classtype:attempted-recon; sid:200015531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.kb5b6d.icu"; classtype:attempted-recon; sid:200015532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.kgfkdv.top"; classtype:attempted-recon; sid:200015533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.krjqpe.top"; classtype:attempted-recon; sid:200015534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.kvrhdp.top"; classtype:attempted-recon; sid:200015535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.lcazit.top"; classtype:attempted-recon; sid:200015536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.lfyacu.icu"; classtype:attempted-recon; sid:200015537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ljmuov.top"; classtype:attempted-recon; sid:200015538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ll64vg.icu"; classtype:attempted-recon; sid:200015539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.llufip.top"; classtype:attempted-recon; sid:200015540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.lmheln.top"; classtype:attempted-recon; sid:200015541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.lwgayp.top"; classtype:attempted-recon; sid:200015542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.lylxce.top"; classtype:attempted-recon; sid:200015543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.mcltim.top"; classtype:attempted-recon; sid:200015544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.mfx741.icu"; classtype:attempted-recon; sid:200015545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.mgjpjr.top"; classtype:attempted-recon; sid:200015546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.mjdnpt.top"; classtype:attempted-recon; sid:200015547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.nllyoh.top"; classtype:attempted-recon; sid:200015548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.nqveqi.top"; classtype:attempted-recon; sid:200015549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.nrhpkc.icu"; classtype:attempted-recon; sid:200015550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.nu57wl.icu"; classtype:attempted-recon; sid:200015551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.nv9dtw.icu"; classtype:attempted-recon; sid:200015552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ojyzcd.top"; classtype:attempted-recon; sid:200015553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.okbpku.icu"; classtype:attempted-recon; sid:200015554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.oppxsj.top"; classtype:attempted-recon; sid:200015555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.or1glf.icu"; classtype:attempted-recon; sid:200015556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.pe14pc.icu"; classtype:attempted-recon; sid:200015557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.psdexq.top"; classtype:attempted-recon; sid:200015558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.psdoni.top"; classtype:attempted-recon; sid:200015559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.pujapd.top"; classtype:attempted-recon; sid:200015560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.pzgoea.top"; classtype:attempted-recon; sid:200015561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.q0s2sm.icu"; classtype:attempted-recon; sid:200015562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.qclqjo.top"; classtype:attempted-recon; sid:200015563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.qeaogd.top"; classtype:attempted-recon; sid:200015564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.qnqwcs.icu"; classtype:attempted-recon; sid:200015565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.qpchzg.top"; classtype:attempted-recon; sid:200015566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.qqjjzi.top"; classtype:attempted-recon; sid:200015567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.qvgavp.top"; classtype:attempted-recon; sid:200015568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.rbyycn.top"; classtype:attempted-recon; sid:200015569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.rmgomo.top"; classtype:attempted-recon; sid:200015570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.rsxojx.top"; classtype:attempted-recon; sid:200015571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.sawjbk.top"; classtype:attempted-recon; sid:200015572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.slnb02.icu"; classtype:attempted-recon; sid:200015573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.srcwhi.top"; classtype:attempted-recon; sid:200015574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.srwwap.top"; classtype:attempted-recon; sid:200015575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.sthtuh.top"; classtype:attempted-recon; sid:200015576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.syeuaw.top"; classtype:attempted-recon; sid:200015577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.tazsl1.icu"; classtype:attempted-recon; sid:200015578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.tbnilj.top"; classtype:attempted-recon; sid:200015579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.tl86n6.icu"; classtype:attempted-recon; sid:200015580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.to5fb9.icu"; classtype:attempted-recon; sid:200015581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.u0c8sn.icu"; classtype:attempted-recon; sid:200015582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.uixah3.icu"; classtype:attempted-recon; sid:200015583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ukesvp.icu"; classtype:attempted-recon; sid:200015584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ukrtxd.top"; classtype:attempted-recon; sid:200015585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.upahh5.icu"; classtype:attempted-recon; sid:200015586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.uxdgpy.top"; classtype:attempted-recon; sid:200015587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.uxvqzp.top"; classtype:attempted-recon; sid:200015588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.vdpgwm.top"; classtype:attempted-recon; sid:200015589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.vqeyuo.top"; classtype:attempted-recon; sid:200015590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.vspjok.icu"; classtype:attempted-recon; sid:200015591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.vvkdlh.top"; classtype:attempted-recon; sid:200015592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.vxcrlo.top"; classtype:attempted-recon; sid:200015593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.werbdt.top"; classtype:attempted-recon; sid:200015594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.wfirhj.top"; classtype:attempted-recon; sid:200015595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.whnjwr.top"; classtype:attempted-recon; sid:200015596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.witojr.top"; classtype:attempted-recon; sid:200015597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.wmygyx.top"; classtype:attempted-recon; sid:200015598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.wpzqxg.top"; classtype:attempted-recon; sid:200015599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.wsojbg.icu"; classtype:attempted-recon; sid:200015600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.wxpckc.icu"; classtype:attempted-recon; sid:200015601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.xd1bpn.icu"; classtype:attempted-recon; sid:200015602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.xeygaj.top"; classtype:attempted-recon; sid:200015603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.xgysxo.top"; classtype:attempted-recon; sid:200015604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.xydvkg.top"; classtype:attempted-recon; sid:200015605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.xyuhnm.top"; classtype:attempted-recon; sid:200015606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.xztftf.top"; classtype:attempted-recon; sid:200015607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.yangnan.site"; classtype:attempted-recon; sid:200015608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ymifv0.icu"; classtype:attempted-recon; sid:200015609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.yqasjy.icu"; classtype:attempted-recon; sid:200015610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.yuxvpc.top"; classtype:attempted-recon; sid:200015611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.yvjdgy.top"; classtype:attempted-recon; sid:200015612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.yybtfl.top"; classtype:attempted-recon; sid:200015613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.zhsntm.top"; classtype:attempted-recon; sid:200015614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.zhwpnq.top"; classtype:attempted-recon; sid:200015615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.zovh96.icu"; classtype:attempted-recon; sid:200015616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.zoyqhl.top"; classtype:attempted-recon; sid:200015617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.037768888861.xyz"; classtype:attempted-recon; sid:200015618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.284nxw.icu"; classtype:attempted-recon; sid:200015619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.33hf19.icu"; classtype:attempted-recon; sid:200015620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.473glv.icu"; classtype:attempted-recon; sid:200015621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.4k2dci.icu"; classtype:attempted-recon; sid:200015622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.687cem.icu"; classtype:attempted-recon; sid:200015623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.69bn6b.icu"; classtype:attempted-recon; sid:200015624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.6c7bza.icu"; classtype:attempted-recon; sid:200015625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.6pw2wd.icu"; classtype:attempted-recon; sid:200015626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.6rtqht.icu"; classtype:attempted-recon; sid:200015627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.6t1vk7.icu"; classtype:attempted-recon; sid:200015628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.7a4s96.icu"; classtype:attempted-recon; sid:200015629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.82casa.icu"; classtype:attempted-recon; sid:200015630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.9d24dh.icu"; classtype:attempted-recon; sid:200015631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.9pw3lv.icu"; classtype:attempted-recon; sid:200015632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.9zv0ny.icu"; classtype:attempted-recon; sid:200015633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.aale2a.icu"; classtype:attempted-recon; sid:200015634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.aayldm.top"; classtype:attempted-recon; sid:200015635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.adldni.top"; classtype:attempted-recon; sid:200015636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.afqzgx.top"; classtype:attempted-recon; sid:200015637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ajxdpg.top"; classtype:attempted-recon; sid:200015638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ansklx.top"; classtype:attempted-recon; sid:200015639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ao0dkn.icu"; classtype:attempted-recon; sid:200015640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.aogild.top"; classtype:attempted-recon; sid:200015641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.bucyvo.top"; classtype:attempted-recon; sid:200015642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.bwxsxf.top"; classtype:attempted-recon; sid:200015643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.bxsxvy.top"; classtype:attempted-recon; sid:200015644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.cgogay.top"; classtype:attempted-recon; sid:200015645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.cmudlt.top"; classtype:attempted-recon; sid:200015646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ctdwug.top"; classtype:attempted-recon; sid:200015647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.cwpgoh.top"; classtype:attempted-recon; sid:200015648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.d5u49w.icu"; classtype:attempted-recon; sid:200015649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.dbezzz.top"; classtype:attempted-recon; sid:200015650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.dbhlbm.top"; classtype:attempted-recon; sid:200015651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.dqbdkl.top"; classtype:attempted-recon; sid:200015652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.drkild.icu"; classtype:attempted-recon; sid:200015653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.e7ie6j.icu"; classtype:attempted-recon; sid:200015654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.eahbrm.top"; classtype:attempted-recon; sid:200015655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.enioab.top"; classtype:attempted-recon; sid:200015656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.erkdnv.top"; classtype:attempted-recon; sid:200015657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.fn0aqh.icu"; classtype:attempted-recon; sid:200015658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.hblfhq.top"; classtype:attempted-recon; sid:200015659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.hefhjq.icu"; classtype:attempted-recon; sid:200015660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.hli3b0.icu"; classtype:attempted-recon; sid:200015661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.hlsyku.icu"; classtype:attempted-recon; sid:200015662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.hmziti.top"; classtype:attempted-recon; sid:200015663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.idenyq.top"; classtype:attempted-recon; sid:200015664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.inkblog.ink"; classtype:attempted-recon; sid:200015665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.j3tu3m.icu"; classtype:attempted-recon; sid:200015666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.j77o38.icu"; classtype:attempted-recon; sid:200015667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.jehe99.icu"; classtype:attempted-recon; sid:200015668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.juls8q.icu"; classtype:attempted-recon; sid:200015669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.k3ma2x.icu"; classtype:attempted-recon; sid:200015670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.k9pn0d.icu"; classtype:attempted-recon; sid:200015671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ka83cb.icu"; classtype:attempted-recon; sid:200015672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.kb5b6d.icu"; classtype:attempted-recon; sid:200015673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.kgfkdv.top"; classtype:attempted-recon; sid:200015674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.krjqpe.top"; classtype:attempted-recon; sid:200015675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.kvrhdp.top"; classtype:attempted-recon; sid:200015676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.lcazit.top"; classtype:attempted-recon; sid:200015677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.lfyacu.icu"; classtype:attempted-recon; sid:200015678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ljmuov.top"; classtype:attempted-recon; sid:200015679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ll64vg.icu"; classtype:attempted-recon; sid:200015680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.llufip.top"; classtype:attempted-recon; sid:200015681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.lmheln.top"; classtype:attempted-recon; sid:200015682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.lwgayp.top"; classtype:attempted-recon; sid:200015683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.lylxce.top"; classtype:attempted-recon; sid:200015684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.mcltim.top"; classtype:attempted-recon; sid:200015685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.mfx741.icu"; classtype:attempted-recon; sid:200015686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.mgjpjr.top"; classtype:attempted-recon; sid:200015687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.mjdnpt.top"; classtype:attempted-recon; sid:200015688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.nllyoh.top"; classtype:attempted-recon; sid:200015689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.nqveqi.top"; classtype:attempted-recon; sid:200015690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.nrhpkc.icu"; classtype:attempted-recon; sid:200015691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.nu57wl.icu"; classtype:attempted-recon; sid:200015692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.nv9dtw.icu"; classtype:attempted-recon; sid:200015693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ojyzcd.top"; classtype:attempted-recon; sid:200015694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.okbpku.icu"; classtype:attempted-recon; sid:200015695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.oppxsj.top"; classtype:attempted-recon; sid:200015696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.or1glf.icu"; classtype:attempted-recon; sid:200015697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.pe14pc.icu"; classtype:attempted-recon; sid:200015698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.psdexq.top"; classtype:attempted-recon; sid:200015699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.psdoni.top"; classtype:attempted-recon; sid:200015700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.pujapd.top"; classtype:attempted-recon; sid:200015701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.pzgoea.top"; classtype:attempted-recon; sid:200015702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.q0s2sm.icu"; classtype:attempted-recon; sid:200015703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.qclqjo.top"; classtype:attempted-recon; sid:200015704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.qeaogd.top"; classtype:attempted-recon; sid:200015705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.qnqwcs.icu"; classtype:attempted-recon; sid:200015706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.qpchzg.top"; classtype:attempted-recon; sid:200015707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.qqjjzi.top"; classtype:attempted-recon; sid:200015708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.qvgavp.top"; classtype:attempted-recon; sid:200015709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.rbyycn.top"; classtype:attempted-recon; sid:200015710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.rmgomo.top"; classtype:attempted-recon; sid:200015711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.rsxojx.top"; classtype:attempted-recon; sid:200015712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.sawjbk.top"; classtype:attempted-recon; sid:200015713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.slnb02.icu"; classtype:attempted-recon; sid:200015714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.srcwhi.top"; classtype:attempted-recon; sid:200015715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.srwwap.top"; classtype:attempted-recon; sid:200015716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.sthtuh.top"; classtype:attempted-recon; sid:200015717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.syeuaw.top"; classtype:attempted-recon; sid:200015718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.tazsl1.icu"; classtype:attempted-recon; sid:200015719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.tbnilj.top"; classtype:attempted-recon; sid:200015720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.tl86n6.icu"; classtype:attempted-recon; sid:200015721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.to5fb9.icu"; classtype:attempted-recon; sid:200015722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.u0c8sn.icu"; classtype:attempted-recon; sid:200015723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.uixah3.icu"; classtype:attempted-recon; sid:200015724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ukesvp.icu"; classtype:attempted-recon; sid:200015725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ukrtxd.top"; classtype:attempted-recon; sid:200015726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.upahh5.icu"; classtype:attempted-recon; sid:200015727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.uxdgpy.top"; classtype:attempted-recon; sid:200015728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.uxvqzp.top"; classtype:attempted-recon; sid:200015729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.vdpgwm.top"; classtype:attempted-recon; sid:200015730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.vqeyuo.top"; classtype:attempted-recon; sid:200015731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.vspjok.icu"; classtype:attempted-recon; sid:200015732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.vvkdlh.top"; classtype:attempted-recon; sid:200015733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.vxcrlo.top"; classtype:attempted-recon; sid:200015734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.werbdt.top"; classtype:attempted-recon; sid:200015735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.wfirhj.top"; classtype:attempted-recon; sid:200015736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.whnjwr.top"; classtype:attempted-recon; sid:200015737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.witojr.top"; classtype:attempted-recon; sid:200015738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.wmygyx.top"; classtype:attempted-recon; sid:200015739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.wpzqxg.top"; classtype:attempted-recon; sid:200015740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.wsojbg.icu"; classtype:attempted-recon; sid:200015741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.wxpckc.icu"; classtype:attempted-recon; sid:200015742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.xd1bpn.icu"; classtype:attempted-recon; sid:200015743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.xeygaj.top"; classtype:attempted-recon; sid:200015744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.xgysxo.top"; classtype:attempted-recon; sid:200015745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.xydvkg.top"; classtype:attempted-recon; sid:200015746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.xyuhnm.top"; classtype:attempted-recon; sid:200015747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.xztftf.top"; classtype:attempted-recon; sid:200015748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ymifv0.icu"; classtype:attempted-recon; sid:200015749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.yqasjy.icu"; classtype:attempted-recon; sid:200015750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.yuxvpc.top"; classtype:attempted-recon; sid:200015751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.yvjdgy.top"; classtype:attempted-recon; sid:200015752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.yybtfl.top"; classtype:attempted-recon; sid:200015753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.zhsntm.top"; classtype:attempted-recon; sid:200015754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.zhwpnq.top"; classtype:attempted-recon; sid:200015755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.zovh96.icu"; classtype:attempted-recon; sid:200015756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekoatcnocn.rakaseeeeooaur.zoyqhl.top"; classtype:attempted-recon; sid:200015757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.037768888861.xyz"; classtype:attempted-recon; sid:200015758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.284nxw.icu"; classtype:attempted-recon; sid:200015759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.33hf19.icu"; classtype:attempted-recon; sid:200015760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.473glv.icu"; classtype:attempted-recon; sid:200015761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.4k2dci.icu"; classtype:attempted-recon; sid:200015762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.687cem.icu"; classtype:attempted-recon; sid:200015763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.69bn6b.icu"; classtype:attempted-recon; sid:200015764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.6c7bza.icu"; classtype:attempted-recon; sid:200015765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.6pw2wd.icu"; classtype:attempted-recon; sid:200015766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.6rtqht.icu"; classtype:attempted-recon; sid:200015767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.6t1vk7.icu"; classtype:attempted-recon; sid:200015768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.7a4s96.icu"; classtype:attempted-recon; sid:200015769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.82casa.icu"; classtype:attempted-recon; sid:200015770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.9d24dh.icu"; classtype:attempted-recon; sid:200015771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.9pw3lv.icu"; classtype:attempted-recon; sid:200015772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.9zv0ny.icu"; classtype:attempted-recon; sid:200015773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.aale2a.icu"; classtype:attempted-recon; sid:200015774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.aayldm.top"; classtype:attempted-recon; sid:200015775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.adldni.top"; classtype:attempted-recon; sid:200015776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.afqzgx.top"; classtype:attempted-recon; sid:200015777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ajxdpg.top"; classtype:attempted-recon; sid:200015778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ansklx.top"; classtype:attempted-recon; sid:200015779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ao0dkn.icu"; classtype:attempted-recon; sid:200015780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.aogild.top"; classtype:attempted-recon; sid:200015781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.bucyvo.top"; classtype:attempted-recon; sid:200015782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.bwxsxf.top"; classtype:attempted-recon; sid:200015783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.bxsxvy.top"; classtype:attempted-recon; sid:200015784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.cgogay.top"; classtype:attempted-recon; sid:200015785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.cmudlt.top"; classtype:attempted-recon; sid:200015786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ctdwug.top"; classtype:attempted-recon; sid:200015787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.cwpgoh.top"; classtype:attempted-recon; sid:200015788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.d5u49w.icu"; classtype:attempted-recon; sid:200015789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.dbezzz.top"; classtype:attempted-recon; sid:200015790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.dbhlbm.top"; classtype:attempted-recon; sid:200015791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.dqbdkl.top"; classtype:attempted-recon; sid:200015792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.drkild.icu"; classtype:attempted-recon; sid:200015793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.e7ie6j.icu"; classtype:attempted-recon; sid:200015794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.eahbrm.top"; classtype:attempted-recon; sid:200015795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.enioab.top"; classtype:attempted-recon; sid:200015796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.erkdnv.top"; classtype:attempted-recon; sid:200015797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.fn0aqh.icu"; classtype:attempted-recon; sid:200015798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.hblfhq.top"; classtype:attempted-recon; sid:200015799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.hefhjq.icu"; classtype:attempted-recon; sid:200015800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.hli3b0.icu"; classtype:attempted-recon; sid:200015801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.hlsyku.icu"; classtype:attempted-recon; sid:200015802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.hmziti.top"; classtype:attempted-recon; sid:200015803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.idenyq.top"; classtype:attempted-recon; sid:200015804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.inkblog.ink"; classtype:attempted-recon; sid:200015805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.j3tu3m.icu"; classtype:attempted-recon; sid:200015806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.j77o38.icu"; classtype:attempted-recon; sid:200015807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.jehe99.icu"; classtype:attempted-recon; sid:200015808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.juls8q.icu"; classtype:attempted-recon; sid:200015809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.k3ma2x.icu"; classtype:attempted-recon; sid:200015810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.k9pn0d.icu"; classtype:attempted-recon; sid:200015811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ka83cb.icu"; classtype:attempted-recon; sid:200015812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.kb5b6d.icu"; classtype:attempted-recon; sid:200015813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.kgfkdv.top"; classtype:attempted-recon; sid:200015814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.krjqpe.top"; classtype:attempted-recon; sid:200015815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.kvrhdp.top"; classtype:attempted-recon; sid:200015816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.lcazit.top"; classtype:attempted-recon; sid:200015817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.lfyacu.icu"; classtype:attempted-recon; sid:200015818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ljmuov.top"; classtype:attempted-recon; sid:200015819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ll64vg.icu"; classtype:attempted-recon; sid:200015820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.llufip.top"; classtype:attempted-recon; sid:200015821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.lmheln.top"; classtype:attempted-recon; sid:200015822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.lwgayp.top"; classtype:attempted-recon; sid:200015823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.lylxce.top"; classtype:attempted-recon; sid:200015824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.mcltim.top"; classtype:attempted-recon; sid:200015825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.mfx741.icu"; classtype:attempted-recon; sid:200015826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.mgjpjr.top"; classtype:attempted-recon; sid:200015827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.mjdnpt.top"; classtype:attempted-recon; sid:200015828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.nllyoh.top"; classtype:attempted-recon; sid:200015829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.nqveqi.top"; classtype:attempted-recon; sid:200015830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.nrhpkc.icu"; classtype:attempted-recon; sid:200015831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.nu57wl.icu"; classtype:attempted-recon; sid:200015832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.nv9dtw.icu"; classtype:attempted-recon; sid:200015833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.oads.fun"; classtype:attempted-recon; sid:200015834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ojyzcd.top"; classtype:attempted-recon; sid:200015835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.okbpku.icu"; classtype:attempted-recon; sid:200015836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.oppxsj.top"; classtype:attempted-recon; sid:200015837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.or1glf.icu"; classtype:attempted-recon; sid:200015838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.pe14pc.icu"; classtype:attempted-recon; sid:200015839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.psdexq.top"; classtype:attempted-recon; sid:200015840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.psdoni.top"; classtype:attempted-recon; sid:200015841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.pujapd.top"; classtype:attempted-recon; sid:200015842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.pzgoea.top"; classtype:attempted-recon; sid:200015843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.q0s2sm.icu"; classtype:attempted-recon; sid:200015844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.qclqjo.top"; classtype:attempted-recon; sid:200015845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.qeaogd.top"; classtype:attempted-recon; sid:200015846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.qnqwcs.icu"; classtype:attempted-recon; sid:200015847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.qpchzg.top"; classtype:attempted-recon; sid:200015848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.qqjjzi.top"; classtype:attempted-recon; sid:200015849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.qvgavp.top"; classtype:attempted-recon; sid:200015850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.rbyycn.top"; classtype:attempted-recon; sid:200015851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.rmgomo.top"; classtype:attempted-recon; sid:200015852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.rsxojx.top"; classtype:attempted-recon; sid:200015853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.sawjbk.top"; classtype:attempted-recon; sid:200015854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.slnb02.icu"; classtype:attempted-recon; sid:200015855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.srcwhi.top"; classtype:attempted-recon; sid:200015856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.srwwap.top"; classtype:attempted-recon; sid:200015857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.sthtuh.top"; classtype:attempted-recon; sid:200015858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.syeuaw.top"; classtype:attempted-recon; sid:200015859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.tazsl1.icu"; classtype:attempted-recon; sid:200015860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.tbnilj.top"; classtype:attempted-recon; sid:200015861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.tl86n6.icu"; classtype:attempted-recon; sid:200015862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.to5fb9.icu"; classtype:attempted-recon; sid:200015863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.u0c8sn.icu"; classtype:attempted-recon; sid:200015864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.uixah3.icu"; classtype:attempted-recon; sid:200015865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ukesvp.icu"; classtype:attempted-recon; sid:200015866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ukrtxd.top"; classtype:attempted-recon; sid:200015867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.upahh5.icu"; classtype:attempted-recon; sid:200015868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.uxdgpy.top"; classtype:attempted-recon; sid:200015869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.uxvqzp.top"; classtype:attempted-recon; sid:200015870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.vdpgwm.top"; classtype:attempted-recon; sid:200015871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.vqeyuo.top"; classtype:attempted-recon; sid:200015872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.vspjok.icu"; classtype:attempted-recon; sid:200015873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.vvkdlh.top"; classtype:attempted-recon; sid:200015874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.vxcrlo.top"; classtype:attempted-recon; sid:200015875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.werbdt.top"; classtype:attempted-recon; sid:200015876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.wfirhj.top"; classtype:attempted-recon; sid:200015877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.whnjwr.top"; classtype:attempted-recon; sid:200015878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.witojr.top"; classtype:attempted-recon; sid:200015879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.wmygyx.top"; classtype:attempted-recon; sid:200015880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.wpzqxg.top"; classtype:attempted-recon; sid:200015881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.wsojbg.icu"; classtype:attempted-recon; sid:200015882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.wxpckc.icu"; classtype:attempted-recon; sid:200015883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.xd1bpn.icu"; classtype:attempted-recon; sid:200015884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.xeygaj.top"; classtype:attempted-recon; sid:200015885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.xgysxo.top"; classtype:attempted-recon; sid:200015886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.xydvkg.top"; classtype:attempted-recon; sid:200015887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.xyuhnm.top"; classtype:attempted-recon; sid:200015888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.xztftf.top"; classtype:attempted-recon; sid:200015889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ymifv0.icu"; classtype:attempted-recon; sid:200015890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.yqasjy.icu"; classtype:attempted-recon; sid:200015891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.yuxvpc.top"; classtype:attempted-recon; sid:200015892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.yvjdgy.top"; classtype:attempted-recon; sid:200015893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.yybtfl.top"; classtype:attempted-recon; sid:200015894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.zhsntm.top"; classtype:attempted-recon; sid:200015895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.zhwpnq.top"; classtype:attempted-recon; sid:200015896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.zovh96.icu"; classtype:attempted-recon; sid:200015897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotcsrncon.rakaseooaseroueea.zoyqhl.top"; classtype:attempted-recon; sid:200015898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.037768888861.xyz"; classtype:attempted-recon; sid:200015899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.284nxw.icu"; classtype:attempted-recon; sid:200015900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.33hf19.icu"; classtype:attempted-recon; sid:200015901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.473glv.icu"; classtype:attempted-recon; sid:200015902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.4k2dci.icu"; classtype:attempted-recon; sid:200015903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.687cem.icu"; classtype:attempted-recon; sid:200015904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.69bn6b.icu"; classtype:attempted-recon; sid:200015905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.6c7bza.icu"; classtype:attempted-recon; sid:200015906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.6pw2wd.icu"; classtype:attempted-recon; sid:200015907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.6rtqht.icu"; classtype:attempted-recon; sid:200015908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.6t1vk7.icu"; classtype:attempted-recon; sid:200015909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.7a4s96.icu"; classtype:attempted-recon; sid:200015910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.82casa.icu"; classtype:attempted-recon; sid:200015911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.9d24dh.icu"; classtype:attempted-recon; sid:200015912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.9pw3lv.icu"; classtype:attempted-recon; sid:200015913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.9zv0ny.icu"; classtype:attempted-recon; sid:200015914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.aale2a.icu"; classtype:attempted-recon; sid:200015915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.aayldm.top"; classtype:attempted-recon; sid:200015916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.adldni.top"; classtype:attempted-recon; sid:200015917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.afqzgx.top"; classtype:attempted-recon; sid:200015918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ajxdpg.top"; classtype:attempted-recon; sid:200015919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ansklx.top"; classtype:attempted-recon; sid:200015920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ao0dkn.icu"; classtype:attempted-recon; sid:200015921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.aogild.top"; classtype:attempted-recon; sid:200015922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.bucyvo.top"; classtype:attempted-recon; sid:200015923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.bwxsxf.top"; classtype:attempted-recon; sid:200015924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.bxsxvy.top"; classtype:attempted-recon; sid:200015925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.cgogay.top"; classtype:attempted-recon; sid:200015926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.cmudlt.top"; classtype:attempted-recon; sid:200015927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ctdwug.top"; classtype:attempted-recon; sid:200015928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.cwpgoh.top"; classtype:attempted-recon; sid:200015929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.d5u49w.icu"; classtype:attempted-recon; sid:200015930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.dbezzz.top"; classtype:attempted-recon; sid:200015931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.dbhlbm.top"; classtype:attempted-recon; sid:200015932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.dqbdkl.top"; classtype:attempted-recon; sid:200015933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.drkild.icu"; classtype:attempted-recon; sid:200015934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.e7ie6j.icu"; classtype:attempted-recon; sid:200015935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.eahbrm.top"; classtype:attempted-recon; sid:200015936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.enioab.top"; classtype:attempted-recon; sid:200015937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.erkdnv.top"; classtype:attempted-recon; sid:200015938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.fn0aqh.icu"; classtype:attempted-recon; sid:200015939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.hblfhq.top"; classtype:attempted-recon; sid:200015940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.hefhjq.icu"; classtype:attempted-recon; sid:200015941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.hli3b0.icu"; classtype:attempted-recon; sid:200015942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.hlsyku.icu"; classtype:attempted-recon; sid:200015943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.hmziti.top"; classtype:attempted-recon; sid:200015944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.idenyq.top"; classtype:attempted-recon; sid:200015945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.inkblog.ink"; classtype:attempted-recon; sid:200015946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.j3tu3m.icu"; classtype:attempted-recon; sid:200015947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.j77o38.icu"; classtype:attempted-recon; sid:200015948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.jehe99.icu"; classtype:attempted-recon; sid:200015949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.juls8q.icu"; classtype:attempted-recon; sid:200015950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.k3ma2x.icu"; classtype:attempted-recon; sid:200015951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.k9pn0d.icu"; classtype:attempted-recon; sid:200015952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ka83cb.icu"; classtype:attempted-recon; sid:200015953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.kb5b6d.icu"; classtype:attempted-recon; sid:200015954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.kgfkdv.top"; classtype:attempted-recon; sid:200015955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.krjqpe.top"; classtype:attempted-recon; sid:200015956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.kvrhdp.top"; classtype:attempted-recon; sid:200015957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.lcazit.top"; classtype:attempted-recon; sid:200015958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.lfyacu.icu"; classtype:attempted-recon; sid:200015959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ljmuov.top"; classtype:attempted-recon; sid:200015960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ll64vg.icu"; classtype:attempted-recon; sid:200015961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.llufip.top"; classtype:attempted-recon; sid:200015962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.lmheln.top"; classtype:attempted-recon; sid:200015963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.lwgayp.top"; classtype:attempted-recon; sid:200015964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.lylxce.top"; classtype:attempted-recon; sid:200015965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.mcltim.top"; classtype:attempted-recon; sid:200015966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.mfx741.icu"; classtype:attempted-recon; sid:200015967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.mgjpjr.top"; classtype:attempted-recon; sid:200015968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.mjdnpt.top"; classtype:attempted-recon; sid:200015969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.nllyoh.top"; classtype:attempted-recon; sid:200015970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.nqveqi.top"; classtype:attempted-recon; sid:200015971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.nrhpkc.icu"; classtype:attempted-recon; sid:200015972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.nu57wl.icu"; classtype:attempted-recon; sid:200015973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.nv9dtw.icu"; classtype:attempted-recon; sid:200015974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.oads.fun"; classtype:attempted-recon; sid:200015975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ojyzcd.top"; classtype:attempted-recon; sid:200015976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.okbpku.icu"; classtype:attempted-recon; sid:200015977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.oppxsj.top"; classtype:attempted-recon; sid:200015978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.or1glf.icu"; classtype:attempted-recon; sid:200015979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.pe14pc.icu"; classtype:attempted-recon; sid:200015980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.psdexq.top"; classtype:attempted-recon; sid:200015981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.psdoni.top"; classtype:attempted-recon; sid:200015982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.pujapd.top"; classtype:attempted-recon; sid:200015983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.pzgoea.top"; classtype:attempted-recon; sid:200015984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.q0s2sm.icu"; classtype:attempted-recon; sid:200015985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.qclqjo.top"; classtype:attempted-recon; sid:200015986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.qeaogd.top"; classtype:attempted-recon; sid:200015987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.qnqwcs.icu"; classtype:attempted-recon; sid:200015988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.qpchzg.top"; classtype:attempted-recon; sid:200015989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.qqjjzi.top"; classtype:attempted-recon; sid:200015990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.qvgavp.top"; classtype:attempted-recon; sid:200015991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.rbyycn.top"; classtype:attempted-recon; sid:200015992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.rmgomo.top"; classtype:attempted-recon; sid:200015993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.rsxojx.top"; classtype:attempted-recon; sid:200015994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.sawjbk.top"; classtype:attempted-recon; sid:200015995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.slnb02.icu"; classtype:attempted-recon; sid:200015996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.srcwhi.top"; classtype:attempted-recon; sid:200015997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.srwwap.top"; classtype:attempted-recon; sid:200015998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.sthtuh.top"; classtype:attempted-recon; sid:200015999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.syeuaw.top"; classtype:attempted-recon; sid:200016000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.tazsl1.icu"; classtype:attempted-recon; sid:200016001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.tbnilj.top"; classtype:attempted-recon; sid:200016002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.tl86n6.icu"; classtype:attempted-recon; sid:200016003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.to5fb9.icu"; classtype:attempted-recon; sid:200016004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.u0c8sn.icu"; classtype:attempted-recon; sid:200016005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.uixah3.icu"; classtype:attempted-recon; sid:200016006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ukesvp.icu"; classtype:attempted-recon; sid:200016007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ukrtxd.top"; classtype:attempted-recon; sid:200016008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.upahh5.icu"; classtype:attempted-recon; sid:200016009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.uxdgpy.top"; classtype:attempted-recon; sid:200016010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.uxvqzp.top"; classtype:attempted-recon; sid:200016011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.vdpgwm.top"; classtype:attempted-recon; sid:200016012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.vqeyuo.top"; classtype:attempted-recon; sid:200016013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.vspjok.icu"; classtype:attempted-recon; sid:200016014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.vvkdlh.top"; classtype:attempted-recon; sid:200016015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.vxcrlo.top"; classtype:attempted-recon; sid:200016016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.werbdt.top"; classtype:attempted-recon; sid:200016017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.wfirhj.top"; classtype:attempted-recon; sid:200016018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.whnjwr.top"; classtype:attempted-recon; sid:200016019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.witojr.top"; classtype:attempted-recon; sid:200016020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.wmygyx.top"; classtype:attempted-recon; sid:200016021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.wpzqxg.top"; classtype:attempted-recon; sid:200016022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.wsojbg.icu"; classtype:attempted-recon; sid:200016023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.wxpckc.icu"; classtype:attempted-recon; sid:200016024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.xd1bpn.icu"; classtype:attempted-recon; sid:200016025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.xeygaj.top"; classtype:attempted-recon; sid:200016026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.xgysxo.top"; classtype:attempted-recon; sid:200016027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.xydvkg.top"; classtype:attempted-recon; sid:200016028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.xyuhnm.top"; classtype:attempted-recon; sid:200016029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.xztftf.top"; classtype:attempted-recon; sid:200016030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.ymifv0.icu"; classtype:attempted-recon; sid:200016031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.yqasjy.icu"; classtype:attempted-recon; sid:200016032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.yuxvpc.top"; classtype:attempted-recon; sid:200016033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.yvjdgy.top"; classtype:attempted-recon; sid:200016034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.yybtfl.top"; classtype:attempted-recon; sid:200016035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.zhsntm.top"; classtype:attempted-recon; sid:200016036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.zhwpnq.top"; classtype:attempted-recon; sid:200016037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.zovh96.icu"; classtype:attempted-recon; sid:200016038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasekotncon.rakaseooueea.zoyqhl.top"; classtype:attempted-recon; sid:200016039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.037768888861.xyz"; classtype:attempted-recon; sid:200016040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.284nxw.icu"; classtype:attempted-recon; sid:200016041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.33hf19.icu"; classtype:attempted-recon; sid:200016042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.473glv.icu"; classtype:attempted-recon; sid:200016043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.4k2dci.icu"; classtype:attempted-recon; sid:200016044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.687cem.icu"; classtype:attempted-recon; sid:200016045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.69bn6b.icu"; classtype:attempted-recon; sid:200016046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.6c7bza.icu"; classtype:attempted-recon; sid:200016047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.6pw2wd.icu"; classtype:attempted-recon; sid:200016048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.6rtqht.icu"; classtype:attempted-recon; sid:200016049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.6t1vk7.icu"; classtype:attempted-recon; sid:200016050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.7a4s96.icu"; classtype:attempted-recon; sid:200016051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.82casa.icu"; classtype:attempted-recon; sid:200016052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.9d24dh.icu"; classtype:attempted-recon; sid:200016053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.9pw3lv.icu"; classtype:attempted-recon; sid:200016054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.9zv0ny.icu"; classtype:attempted-recon; sid:200016055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.aale2a.icu"; classtype:attempted-recon; sid:200016056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.aayldm.top"; classtype:attempted-recon; sid:200016057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.adldni.top"; classtype:attempted-recon; sid:200016058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.afqzgx.top"; classtype:attempted-recon; sid:200016059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ajxdpg.top"; classtype:attempted-recon; sid:200016060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ansklx.top"; classtype:attempted-recon; sid:200016061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ao0dkn.icu"; classtype:attempted-recon; sid:200016062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.aogild.top"; classtype:attempted-recon; sid:200016063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.bucyvo.top"; classtype:attempted-recon; sid:200016064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.bwxsxf.top"; classtype:attempted-recon; sid:200016065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.bxsxvy.top"; classtype:attempted-recon; sid:200016066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.cgogay.top"; classtype:attempted-recon; sid:200016067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.cmudlt.top"; classtype:attempted-recon; sid:200016068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ctdwug.top"; classtype:attempted-recon; sid:200016069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.cwpgoh.top"; classtype:attempted-recon; sid:200016070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.d5u49w.icu"; classtype:attempted-recon; sid:200016071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.dbezzz.top"; classtype:attempted-recon; sid:200016072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.dbhlbm.top"; classtype:attempted-recon; sid:200016073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.dqbdkl.top"; classtype:attempted-recon; sid:200016074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.drkild.icu"; classtype:attempted-recon; sid:200016075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.e7ie6j.icu"; classtype:attempted-recon; sid:200016076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.eahbrm.top"; classtype:attempted-recon; sid:200016077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.enioab.top"; classtype:attempted-recon; sid:200016078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.erkdnv.top"; classtype:attempted-recon; sid:200016079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.fn0aqh.icu"; classtype:attempted-recon; sid:200016080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.hblfhq.top"; classtype:attempted-recon; sid:200016081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.hefhjq.icu"; classtype:attempted-recon; sid:200016082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.hli3b0.icu"; classtype:attempted-recon; sid:200016083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.hlsyku.icu"; classtype:attempted-recon; sid:200016084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.hmziti.top"; classtype:attempted-recon; sid:200016085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.idenyq.top"; classtype:attempted-recon; sid:200016086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.inkblog.ink"; classtype:attempted-recon; sid:200016087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.j3tu3m.icu"; classtype:attempted-recon; sid:200016088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.j77o38.icu"; classtype:attempted-recon; sid:200016089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.jehe99.icu"; classtype:attempted-recon; sid:200016090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.juls8q.icu"; classtype:attempted-recon; sid:200016091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.k3ma2x.icu"; classtype:attempted-recon; sid:200016092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.k9pn0d.icu"; classtype:attempted-recon; sid:200016093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ka83cb.icu"; classtype:attempted-recon; sid:200016094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.kb5b6d.icu"; classtype:attempted-recon; sid:200016095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.kgfkdv.top"; classtype:attempted-recon; sid:200016096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.krjqpe.top"; classtype:attempted-recon; sid:200016097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.kvrhdp.top"; classtype:attempted-recon; sid:200016098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.lcazit.top"; classtype:attempted-recon; sid:200016099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.lfyacu.icu"; classtype:attempted-recon; sid:200016100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ljmuov.top"; classtype:attempted-recon; sid:200016101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ll64vg.icu"; classtype:attempted-recon; sid:200016102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.llufip.top"; classtype:attempted-recon; sid:200016103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.lmheln.top"; classtype:attempted-recon; sid:200016104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.lwgayp.top"; classtype:attempted-recon; sid:200016105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.lylxce.top"; classtype:attempted-recon; sid:200016106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.mcltim.top"; classtype:attempted-recon; sid:200016107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.mfx741.icu"; classtype:attempted-recon; sid:200016108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.mgjpjr.top"; classtype:attempted-recon; sid:200016109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.mjdnpt.top"; classtype:attempted-recon; sid:200016110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.nllyoh.top"; classtype:attempted-recon; sid:200016111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.nqveqi.top"; classtype:attempted-recon; sid:200016112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.nrhpkc.icu"; classtype:attempted-recon; sid:200016113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.nu57wl.icu"; classtype:attempted-recon; sid:200016114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.nv9dtw.icu"; classtype:attempted-recon; sid:200016115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ojyzcd.top"; classtype:attempted-recon; sid:200016116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.okbpku.icu"; classtype:attempted-recon; sid:200016117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.oppxsj.top"; classtype:attempted-recon; sid:200016118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.or1glf.icu"; classtype:attempted-recon; sid:200016119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.pe14pc.icu"; classtype:attempted-recon; sid:200016120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.psdexq.top"; classtype:attempted-recon; sid:200016121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.psdoni.top"; classtype:attempted-recon; sid:200016122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.pujapd.top"; classtype:attempted-recon; sid:200016123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.pzgoea.top"; classtype:attempted-recon; sid:200016124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.q0s2sm.icu"; classtype:attempted-recon; sid:200016125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.qclqjo.top"; classtype:attempted-recon; sid:200016126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.qeaogd.top"; classtype:attempted-recon; sid:200016127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.qnqwcs.icu"; classtype:attempted-recon; sid:200016128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.qpchzg.top"; classtype:attempted-recon; sid:200016129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.qqjjzi.top"; classtype:attempted-recon; sid:200016130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.qvgavp.top"; classtype:attempted-recon; sid:200016131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.rbyycn.top"; classtype:attempted-recon; sid:200016132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.rmgomo.top"; classtype:attempted-recon; sid:200016133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.rsxojx.top"; classtype:attempted-recon; sid:200016134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.sawjbk.top"; classtype:attempted-recon; sid:200016135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.slnb02.icu"; classtype:attempted-recon; sid:200016136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.srcwhi.top"; classtype:attempted-recon; sid:200016137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.srwwap.top"; classtype:attempted-recon; sid:200016138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.sthtuh.top"; classtype:attempted-recon; sid:200016139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.syeuaw.top"; classtype:attempted-recon; sid:200016140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.tazsl1.icu"; classtype:attempted-recon; sid:200016141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.tbnilj.top"; classtype:attempted-recon; sid:200016142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.tl86n6.icu"; classtype:attempted-recon; sid:200016143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.to5fb9.icu"; classtype:attempted-recon; sid:200016144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.u0c8sn.icu"; classtype:attempted-recon; sid:200016145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.uixah3.icu"; classtype:attempted-recon; sid:200016146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ukesvp.icu"; classtype:attempted-recon; sid:200016147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ukrtxd.top"; classtype:attempted-recon; sid:200016148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.upahh5.icu"; classtype:attempted-recon; sid:200016149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.uxdgpy.top"; classtype:attempted-recon; sid:200016150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.uxvqzp.top"; classtype:attempted-recon; sid:200016151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.vdpgwm.top"; classtype:attempted-recon; sid:200016152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.vqeyuo.top"; classtype:attempted-recon; sid:200016153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.vspjok.icu"; classtype:attempted-recon; sid:200016154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.vvkdlh.top"; classtype:attempted-recon; sid:200016155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.vxcrlo.top"; classtype:attempted-recon; sid:200016156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.werbdt.top"; classtype:attempted-recon; sid:200016157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.wfirhj.top"; classtype:attempted-recon; sid:200016158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.whnjwr.top"; classtype:attempted-recon; sid:200016159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.witojr.top"; classtype:attempted-recon; sid:200016160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.wmygyx.top"; classtype:attempted-recon; sid:200016161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.wpzqxg.top"; classtype:attempted-recon; sid:200016162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.wsojbg.icu"; classtype:attempted-recon; sid:200016163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.wxpckc.icu"; classtype:attempted-recon; sid:200016164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.xd1bpn.icu"; classtype:attempted-recon; sid:200016165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.xeygaj.top"; classtype:attempted-recon; sid:200016166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.xgysxo.top"; classtype:attempted-recon; sid:200016167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.xydvkg.top"; classtype:attempted-recon; sid:200016168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.xyuhnm.top"; classtype:attempted-recon; sid:200016169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.xztftf.top"; classtype:attempted-recon; sid:200016170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ymifv0.icu"; classtype:attempted-recon; sid:200016171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.yqasjy.icu"; classtype:attempted-recon; sid:200016172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.yuxvpc.top"; classtype:attempted-recon; sid:200016173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.yvjdgy.top"; classtype:attempted-recon; sid:200016174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.yybtfl.top"; classtype:attempted-recon; sid:200016175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.zhsntm.top"; classtype:attempted-recon; sid:200016176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.zhwpnq.top"; classtype:attempted-recon; sid:200016177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.zovh96.icu"; classtype:attempted-recon; sid:200016178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.zoyqhl.top"; classtype:attempted-recon; sid:200016179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.037768888861.xyz"; classtype:attempted-recon; sid:200016180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.284nxw.icu"; classtype:attempted-recon; sid:200016181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.33hf19.icu"; classtype:attempted-recon; sid:200016182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.473glv.icu"; classtype:attempted-recon; sid:200016183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.4k2dci.icu"; classtype:attempted-recon; sid:200016184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.687cem.icu"; classtype:attempted-recon; sid:200016185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.69bn6b.icu"; classtype:attempted-recon; sid:200016186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.6c7bza.icu"; classtype:attempted-recon; sid:200016187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.6pw2wd.icu"; classtype:attempted-recon; sid:200016188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.6rtqht.icu"; classtype:attempted-recon; sid:200016189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.6t1vk7.icu"; classtype:attempted-recon; sid:200016190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.7a4s96.icu"; classtype:attempted-recon; sid:200016191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.82casa.icu"; classtype:attempted-recon; sid:200016192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.9d24dh.icu"; classtype:attempted-recon; sid:200016193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.9pw3lv.icu"; classtype:attempted-recon; sid:200016194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.9zv0ny.icu"; classtype:attempted-recon; sid:200016195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.aale2a.icu"; classtype:attempted-recon; sid:200016196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.aayldm.top"; classtype:attempted-recon; sid:200016197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.adldni.top"; classtype:attempted-recon; sid:200016198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.afqzgx.top"; classtype:attempted-recon; sid:200016199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ajxdpg.top"; classtype:attempted-recon; sid:200016200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ansklx.top"; classtype:attempted-recon; sid:200016201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ao0dkn.icu"; classtype:attempted-recon; sid:200016202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.aogild.top"; classtype:attempted-recon; sid:200016203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.bucyvo.top"; classtype:attempted-recon; sid:200016204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.bwxsxf.top"; classtype:attempted-recon; sid:200016205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.bxsxvy.top"; classtype:attempted-recon; sid:200016206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.cgogay.top"; classtype:attempted-recon; sid:200016207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.cmudlt.top"; classtype:attempted-recon; sid:200016208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ctdwug.top"; classtype:attempted-recon; sid:200016209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.cwpgoh.top"; classtype:attempted-recon; sid:200016210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.d5u49w.icu"; classtype:attempted-recon; sid:200016211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.dbezzz.top"; classtype:attempted-recon; sid:200016212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.dbhlbm.top"; classtype:attempted-recon; sid:200016213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.dqbdkl.top"; classtype:attempted-recon; sid:200016214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.drkild.icu"; classtype:attempted-recon; sid:200016215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.e7ie6j.icu"; classtype:attempted-recon; sid:200016216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.eahbrm.top"; classtype:attempted-recon; sid:200016217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.enioab.top"; classtype:attempted-recon; sid:200016218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.erkdnv.top"; classtype:attempted-recon; sid:200016219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.fn0aqh.icu"; classtype:attempted-recon; sid:200016220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.hblfhq.top"; classtype:attempted-recon; sid:200016221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.hefhjq.icu"; classtype:attempted-recon; sid:200016222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.hli3b0.icu"; classtype:attempted-recon; sid:200016223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.hlsyku.icu"; classtype:attempted-recon; sid:200016224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.hmziti.top"; classtype:attempted-recon; sid:200016225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.idenyq.top"; classtype:attempted-recon; sid:200016226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.inkblog.ink"; classtype:attempted-recon; sid:200016227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.j3tu3m.icu"; classtype:attempted-recon; sid:200016228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.j77o38.icu"; classtype:attempted-recon; sid:200016229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.jehe99.icu"; classtype:attempted-recon; sid:200016230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.juls8q.icu"; classtype:attempted-recon; sid:200016231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.k3ma2x.icu"; classtype:attempted-recon; sid:200016232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.k9pn0d.icu"; classtype:attempted-recon; sid:200016233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ka83cb.icu"; classtype:attempted-recon; sid:200016234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.kb5b6d.icu"; classtype:attempted-recon; sid:200016235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.kgfkdv.top"; classtype:attempted-recon; sid:200016236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.krjqpe.top"; classtype:attempted-recon; sid:200016237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.kvrhdp.top"; classtype:attempted-recon; sid:200016238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.lcazit.top"; classtype:attempted-recon; sid:200016239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.lfyacu.icu"; classtype:attempted-recon; sid:200016240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ljmuov.top"; classtype:attempted-recon; sid:200016241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ll64vg.icu"; classtype:attempted-recon; sid:200016242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.llufip.top"; classtype:attempted-recon; sid:200016243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.lmheln.top"; classtype:attempted-recon; sid:200016244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.lwgayp.top"; classtype:attempted-recon; sid:200016245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.lylxce.top"; classtype:attempted-recon; sid:200016246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.mcltim.top"; classtype:attempted-recon; sid:200016247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.mfx741.icu"; classtype:attempted-recon; sid:200016248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.mgjpjr.top"; classtype:attempted-recon; sid:200016249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.mjdnpt.top"; classtype:attempted-recon; sid:200016250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.nllyoh.top"; classtype:attempted-recon; sid:200016251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.nqveqi.top"; classtype:attempted-recon; sid:200016252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.nrhpkc.icu"; classtype:attempted-recon; sid:200016253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.nu57wl.icu"; classtype:attempted-recon; sid:200016254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.nv9dtw.icu"; classtype:attempted-recon; sid:200016255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ojyzcd.top"; classtype:attempted-recon; sid:200016256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.okbpku.icu"; classtype:attempted-recon; sid:200016257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.oppxsj.top"; classtype:attempted-recon; sid:200016258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.or1glf.icu"; classtype:attempted-recon; sid:200016259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.pe14pc.icu"; classtype:attempted-recon; sid:200016260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.psdexq.top"; classtype:attempted-recon; sid:200016261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.psdoni.top"; classtype:attempted-recon; sid:200016262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.pujapd.top"; classtype:attempted-recon; sid:200016263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.pzgoea.top"; classtype:attempted-recon; sid:200016264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.q0s2sm.icu"; classtype:attempted-recon; sid:200016265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.qclqjo.top"; classtype:attempted-recon; sid:200016266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.qeaogd.top"; classtype:attempted-recon; sid:200016267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.qnqwcs.icu"; classtype:attempted-recon; sid:200016268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.qpchzg.top"; classtype:attempted-recon; sid:200016269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.qqjjzi.top"; classtype:attempted-recon; sid:200016270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.qvgavp.top"; classtype:attempted-recon; sid:200016271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.rbyycn.top"; classtype:attempted-recon; sid:200016272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.rmgomo.top"; classtype:attempted-recon; sid:200016273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.rsxojx.top"; classtype:attempted-recon; sid:200016274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.sawjbk.top"; classtype:attempted-recon; sid:200016275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.slnb02.icu"; classtype:attempted-recon; sid:200016276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.srcwhi.top"; classtype:attempted-recon; sid:200016277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.srwwap.top"; classtype:attempted-recon; sid:200016278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.sthtuh.top"; classtype:attempted-recon; sid:200016279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.syeuaw.top"; classtype:attempted-recon; sid:200016280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.tazsl1.icu"; classtype:attempted-recon; sid:200016281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.tbnilj.top"; classtype:attempted-recon; sid:200016282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.tl86n6.icu"; classtype:attempted-recon; sid:200016283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.to5fb9.icu"; classtype:attempted-recon; sid:200016284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.u0c8sn.icu"; classtype:attempted-recon; sid:200016285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.uixah3.icu"; classtype:attempted-recon; sid:200016286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ukesvp.icu"; classtype:attempted-recon; sid:200016287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ukrtxd.top"; classtype:attempted-recon; sid:200016288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.upahh5.icu"; classtype:attempted-recon; sid:200016289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.uxdgpy.top"; classtype:attempted-recon; sid:200016290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.uxvqzp.top"; classtype:attempted-recon; sid:200016291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.vdpgwm.top"; classtype:attempted-recon; sid:200016292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.vqeyuo.top"; classtype:attempted-recon; sid:200016293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.vspjok.icu"; classtype:attempted-recon; sid:200016294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.vvkdlh.top"; classtype:attempted-recon; sid:200016295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.vxcrlo.top"; classtype:attempted-recon; sid:200016296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.werbdt.top"; classtype:attempted-recon; sid:200016297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.wfirhj.top"; classtype:attempted-recon; sid:200016298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.whnjwr.top"; classtype:attempted-recon; sid:200016299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.witojr.top"; classtype:attempted-recon; sid:200016300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.wmygyx.top"; classtype:attempted-recon; sid:200016301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.wpzqxg.top"; classtype:attempted-recon; sid:200016302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.wsojbg.icu"; classtype:attempted-recon; sid:200016303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.wxpckc.icu"; classtype:attempted-recon; sid:200016304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.xd1bpn.icu"; classtype:attempted-recon; sid:200016305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.xeygaj.top"; classtype:attempted-recon; sid:200016306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.xgysxo.top"; classtype:attempted-recon; sid:200016307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.xydvkg.top"; classtype:attempted-recon; sid:200016308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.xyuhnm.top"; classtype:attempted-recon; sid:200016309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.xztftf.top"; classtype:attempted-recon; sid:200016310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.ymifv0.icu"; classtype:attempted-recon; sid:200016311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.yqasjy.icu"; classtype:attempted-recon; sid:200016312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.yuxvpc.top"; classtype:attempted-recon; sid:200016313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.yvjdgy.top"; classtype:attempted-recon; sid:200016314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.yybtfl.top"; classtype:attempted-recon; sid:200016315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.zhsntm.top"; classtype:attempted-recon; sid:200016316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.zhwpnq.top"; classtype:attempted-recon; sid:200016317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.zovh96.icu"; classtype:attempted-recon; sid:200016318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasaecoocu.raekoeteenoanr.zoyqhl.top"; classtype:attempted-recon; sid:200016319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.037768888861.xyz"; classtype:attempted-recon; sid:200016320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.284nxw.icu"; classtype:attempted-recon; sid:200016321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.33hf19.icu"; classtype:attempted-recon; sid:200016322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.473glv.icu"; classtype:attempted-recon; sid:200016323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.4k2dci.icu"; classtype:attempted-recon; sid:200016324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.687cem.icu"; classtype:attempted-recon; sid:200016325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.69bn6b.icu"; classtype:attempted-recon; sid:200016326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.6c7bza.icu"; classtype:attempted-recon; sid:200016327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.6pw2wd.icu"; classtype:attempted-recon; sid:200016328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.6rtqht.icu"; classtype:attempted-recon; sid:200016329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.6t1vk7.icu"; classtype:attempted-recon; sid:200016330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.7a4s96.icu"; classtype:attempted-recon; sid:200016331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.82casa.icu"; classtype:attempted-recon; sid:200016332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.9d24dh.icu"; classtype:attempted-recon; sid:200016333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.9pw3lv.icu"; classtype:attempted-recon; sid:200016334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.9zv0ny.icu"; classtype:attempted-recon; sid:200016335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.aale2a.icu"; classtype:attempted-recon; sid:200016336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.aayldm.top"; classtype:attempted-recon; sid:200016337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.adldni.top"; classtype:attempted-recon; sid:200016338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.afqzgx.top"; classtype:attempted-recon; sid:200016339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ajxdpg.top"; classtype:attempted-recon; sid:200016340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ansklx.top"; classtype:attempted-recon; sid:200016341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ao0dkn.icu"; classtype:attempted-recon; sid:200016342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.aogild.top"; classtype:attempted-recon; sid:200016343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.bucyvo.top"; classtype:attempted-recon; sid:200016344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.bwxsxf.top"; classtype:attempted-recon; sid:200016345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.bxsxvy.top"; classtype:attempted-recon; sid:200016346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.cgogay.top"; classtype:attempted-recon; sid:200016347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.cmudlt.top"; classtype:attempted-recon; sid:200016348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ctdwug.top"; classtype:attempted-recon; sid:200016349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.cwpgoh.top"; classtype:attempted-recon; sid:200016350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.d5u49w.icu"; classtype:attempted-recon; sid:200016351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.dbezzz.top"; classtype:attempted-recon; sid:200016352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.dbhlbm.top"; classtype:attempted-recon; sid:200016353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.dqbdkl.top"; classtype:attempted-recon; sid:200016354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.drkild.icu"; classtype:attempted-recon; sid:200016355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.e7ie6j.icu"; classtype:attempted-recon; sid:200016356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.eahbrm.top"; classtype:attempted-recon; sid:200016357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.enioab.top"; classtype:attempted-recon; sid:200016358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.erkdnv.top"; classtype:attempted-recon; sid:200016359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.fn0aqh.icu"; classtype:attempted-recon; sid:200016360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.hblfhq.top"; classtype:attempted-recon; sid:200016361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.hefhjq.icu"; classtype:attempted-recon; sid:200016362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.herbertweb.site"; classtype:attempted-recon; sid:200016363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.hli3b0.icu"; classtype:attempted-recon; sid:200016364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.hlsyku.icu"; classtype:attempted-recon; sid:200016365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.hmziti.top"; classtype:attempted-recon; sid:200016366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.idenyq.top"; classtype:attempted-recon; sid:200016367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.inkblog.ink"; classtype:attempted-recon; sid:200016368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.j3tu3m.icu"; classtype:attempted-recon; sid:200016369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.j77o38.icu"; classtype:attempted-recon; sid:200016370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.jehe99.icu"; classtype:attempted-recon; sid:200016371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.jianhudong.site"; classtype:attempted-recon; sid:200016372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.juls8q.icu"; classtype:attempted-recon; sid:200016373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.k3ma2x.icu"; classtype:attempted-recon; sid:200016374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.k9pn0d.icu"; classtype:attempted-recon; sid:200016375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ka83cb.icu"; classtype:attempted-recon; sid:200016376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.kb5b6d.icu"; classtype:attempted-recon; sid:200016377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.kgfkdv.top"; classtype:attempted-recon; sid:200016378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.krjqpe.top"; classtype:attempted-recon; sid:200016379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.kvrhdp.top"; classtype:attempted-recon; sid:200016380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.lcazit.top"; classtype:attempted-recon; sid:200016381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.lfyacu.icu"; classtype:attempted-recon; sid:200016382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ljmuov.top"; classtype:attempted-recon; sid:200016383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ll64vg.icu"; classtype:attempted-recon; sid:200016384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.llufip.top"; classtype:attempted-recon; sid:200016385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.lmheln.top"; classtype:attempted-recon; sid:200016386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.lwgayp.top"; classtype:attempted-recon; sid:200016387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.lylxce.top"; classtype:attempted-recon; sid:200016388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.mcltim.top"; classtype:attempted-recon; sid:200016389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.mfx741.icu"; classtype:attempted-recon; sid:200016390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.mgjpjr.top"; classtype:attempted-recon; sid:200016391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.mjdnpt.top"; classtype:attempted-recon; sid:200016392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.nllyoh.top"; classtype:attempted-recon; sid:200016393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.nqveqi.top"; classtype:attempted-recon; sid:200016394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.nrhpkc.icu"; classtype:attempted-recon; sid:200016395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.nu57wl.icu"; classtype:attempted-recon; sid:200016396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.nv9dtw.icu"; classtype:attempted-recon; sid:200016397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ojyzcd.top"; classtype:attempted-recon; sid:200016398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.okbpku.icu"; classtype:attempted-recon; sid:200016399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.oppxsj.top"; classtype:attempted-recon; sid:200016400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.or1glf.icu"; classtype:attempted-recon; sid:200016401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.pe14pc.icu"; classtype:attempted-recon; sid:200016402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.psdexq.top"; classtype:attempted-recon; sid:200016403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.psdoni.top"; classtype:attempted-recon; sid:200016404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.pujapd.top"; classtype:attempted-recon; sid:200016405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.pzgoea.top"; classtype:attempted-recon; sid:200016406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.q0s2sm.icu"; classtype:attempted-recon; sid:200016407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.qclqjo.top"; classtype:attempted-recon; sid:200016408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.qeaogd.top"; classtype:attempted-recon; sid:200016409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.qnqwcs.icu"; classtype:attempted-recon; sid:200016410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.qpchzg.top"; classtype:attempted-recon; sid:200016411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.qqjjzi.top"; classtype:attempted-recon; sid:200016412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.qvgavp.top"; classtype:attempted-recon; sid:200016413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.rbyycn.top"; classtype:attempted-recon; sid:200016414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.rmgomo.top"; classtype:attempted-recon; sid:200016415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.rsxojx.top"; classtype:attempted-recon; sid:200016416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.sawjbk.top"; classtype:attempted-recon; sid:200016417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.slnb02.icu"; classtype:attempted-recon; sid:200016418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.srcwhi.top"; classtype:attempted-recon; sid:200016419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.srwwap.top"; classtype:attempted-recon; sid:200016420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.sthtuh.top"; classtype:attempted-recon; sid:200016421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.syeuaw.top"; classtype:attempted-recon; sid:200016422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.tazsl1.icu"; classtype:attempted-recon; sid:200016423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.tbnilj.top"; classtype:attempted-recon; sid:200016424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.tl86n6.icu"; classtype:attempted-recon; sid:200016425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.to5fb9.icu"; classtype:attempted-recon; sid:200016426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.u0c8sn.icu"; classtype:attempted-recon; sid:200016427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.uixah3.icu"; classtype:attempted-recon; sid:200016428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ukesvp.icu"; classtype:attempted-recon; sid:200016429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ukrtxd.top"; classtype:attempted-recon; sid:200016430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.upahh5.icu"; classtype:attempted-recon; sid:200016431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.uxdgpy.top"; classtype:attempted-recon; sid:200016432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.uxvqzp.top"; classtype:attempted-recon; sid:200016433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.vdpgwm.top"; classtype:attempted-recon; sid:200016434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.vqeyuo.top"; classtype:attempted-recon; sid:200016435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.vspjok.icu"; classtype:attempted-recon; sid:200016436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.vvkdlh.top"; classtype:attempted-recon; sid:200016437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.vxcrlo.top"; classtype:attempted-recon; sid:200016438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.werbdt.top"; classtype:attempted-recon; sid:200016439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.wfirhj.top"; classtype:attempted-recon; sid:200016440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.whnjwr.top"; classtype:attempted-recon; sid:200016441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.witojr.top"; classtype:attempted-recon; sid:200016442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.wmygyx.top"; classtype:attempted-recon; sid:200016443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.wpzqxg.top"; classtype:attempted-recon; sid:200016444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.wsojbg.icu"; classtype:attempted-recon; sid:200016445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.wxpckc.icu"; classtype:attempted-recon; sid:200016446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.xd1bpn.icu"; classtype:attempted-recon; sid:200016447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.xeygaj.top"; classtype:attempted-recon; sid:200016448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.xgysxo.top"; classtype:attempted-recon; sid:200016449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.xydvkg.top"; classtype:attempted-recon; sid:200016450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.xyuhnm.top"; classtype:attempted-recon; sid:200016451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.xztftf.top"; classtype:attempted-recon; sid:200016452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.ymifv0.icu"; classtype:attempted-recon; sid:200016453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.yqasjy.icu"; classtype:attempted-recon; sid:200016454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.yuxvpc.top"; classtype:attempted-recon; sid:200016455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.yvjdgy.top"; classtype:attempted-recon; sid:200016456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.yybtfl.top"; classtype:attempted-recon; sid:200016457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.zhsntm.top"; classtype:attempted-recon; sid:200016458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.zhwpnq.top"; classtype:attempted-recon; sid:200016459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.zovh96.icu"; classtype:attempted-recon; sid:200016460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskasecsrocou.raekotnoaseroneea.zoyqhl.top"; classtype:attempted-recon; sid:200016461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.037768888861.xyz"; classtype:attempted-recon; sid:200016462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.284nxw.icu"; classtype:attempted-recon; sid:200016463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.33hf19.icu"; classtype:attempted-recon; sid:200016464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.473glv.icu"; classtype:attempted-recon; sid:200016465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.4k2dci.icu"; classtype:attempted-recon; sid:200016466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.687cem.icu"; classtype:attempted-recon; sid:200016467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.69bn6b.icu"; classtype:attempted-recon; sid:200016468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.6c7bza.icu"; classtype:attempted-recon; sid:200016469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.6pw2wd.icu"; classtype:attempted-recon; sid:200016470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.6rtqht.icu"; classtype:attempted-recon; sid:200016471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.6t1vk7.icu"; classtype:attempted-recon; sid:200016472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.7a4s96.icu"; classtype:attempted-recon; sid:200016473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.82casa.icu"; classtype:attempted-recon; sid:200016474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.9d24dh.icu"; classtype:attempted-recon; sid:200016475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.9pw3lv.icu"; classtype:attempted-recon; sid:200016476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.9zv0ny.icu"; classtype:attempted-recon; sid:200016477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.aale2a.icu"; classtype:attempted-recon; sid:200016478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.aayldm.top"; classtype:attempted-recon; sid:200016479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.adldni.top"; classtype:attempted-recon; sid:200016480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.afqzgx.top"; classtype:attempted-recon; sid:200016481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ajxdpg.top"; classtype:attempted-recon; sid:200016482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ansklx.top"; classtype:attempted-recon; sid:200016483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ao0dkn.icu"; classtype:attempted-recon; sid:200016484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.aogild.top"; classtype:attempted-recon; sid:200016485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.bucyvo.top"; classtype:attempted-recon; sid:200016486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.bwxsxf.top"; classtype:attempted-recon; sid:200016487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.bxsxvy.top"; classtype:attempted-recon; sid:200016488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.cgogay.top"; classtype:attempted-recon; sid:200016489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.cmudlt.top"; classtype:attempted-recon; sid:200016490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ctdwug.top"; classtype:attempted-recon; sid:200016491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.cwpgoh.top"; classtype:attempted-recon; sid:200016492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.d5u49w.icu"; classtype:attempted-recon; sid:200016493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.dbezzz.top"; classtype:attempted-recon; sid:200016494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.dbhlbm.top"; classtype:attempted-recon; sid:200016495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.dqbdkl.top"; classtype:attempted-recon; sid:200016496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.drkild.icu"; classtype:attempted-recon; sid:200016497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.e7ie6j.icu"; classtype:attempted-recon; sid:200016498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.eahbrm.top"; classtype:attempted-recon; sid:200016499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.enioab.top"; classtype:attempted-recon; sid:200016500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.erkdnv.top"; classtype:attempted-recon; sid:200016501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.fn0aqh.icu"; classtype:attempted-recon; sid:200016502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.hblfhq.top"; classtype:attempted-recon; sid:200016503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.hefhjq.icu"; classtype:attempted-recon; sid:200016504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.hli3b0.icu"; classtype:attempted-recon; sid:200016505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.hlsyku.icu"; classtype:attempted-recon; sid:200016506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.hmziti.top"; classtype:attempted-recon; sid:200016507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.idenyq.top"; classtype:attempted-recon; sid:200016508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.inkblog.ink"; classtype:attempted-recon; sid:200016509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.j3tu3m.icu"; classtype:attempted-recon; sid:200016510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.j77o38.icu"; classtype:attempted-recon; sid:200016511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.jehe99.icu"; classtype:attempted-recon; sid:200016512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.juls8q.icu"; classtype:attempted-recon; sid:200016513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.k3ma2x.icu"; classtype:attempted-recon; sid:200016514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.k9pn0d.icu"; classtype:attempted-recon; sid:200016515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ka83cb.icu"; classtype:attempted-recon; sid:200016516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.kb5b6d.icu"; classtype:attempted-recon; sid:200016517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.kgfkdv.top"; classtype:attempted-recon; sid:200016518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.krjqpe.top"; classtype:attempted-recon; sid:200016519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.kvrhdp.top"; classtype:attempted-recon; sid:200016520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.lcazit.top"; classtype:attempted-recon; sid:200016521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.lfyacu.icu"; classtype:attempted-recon; sid:200016522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ljmuov.top"; classtype:attempted-recon; sid:200016523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ll64vg.icu"; classtype:attempted-recon; sid:200016524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.llufip.top"; classtype:attempted-recon; sid:200016525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.lmheln.top"; classtype:attempted-recon; sid:200016526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.lwgayp.top"; classtype:attempted-recon; sid:200016527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.lylxce.top"; classtype:attempted-recon; sid:200016528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.mcltim.top"; classtype:attempted-recon; sid:200016529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.mfx741.icu"; classtype:attempted-recon; sid:200016530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.mgjpjr.top"; classtype:attempted-recon; sid:200016531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.mjdnpt.top"; classtype:attempted-recon; sid:200016532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.nllyoh.top"; classtype:attempted-recon; sid:200016533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.nqveqi.top"; classtype:attempted-recon; sid:200016534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.nrhpkc.icu"; classtype:attempted-recon; sid:200016535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.nu57wl.icu"; classtype:attempted-recon; sid:200016536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.nv9dtw.icu"; classtype:attempted-recon; sid:200016537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ojyzcd.top"; classtype:attempted-recon; sid:200016538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.okbpku.icu"; classtype:attempted-recon; sid:200016539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.oppxsj.top"; classtype:attempted-recon; sid:200016540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.or1glf.icu"; classtype:attempted-recon; sid:200016541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.pe14pc.icu"; classtype:attempted-recon; sid:200016542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.psdexq.top"; classtype:attempted-recon; sid:200016543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.psdoni.top"; classtype:attempted-recon; sid:200016544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.pujapd.top"; classtype:attempted-recon; sid:200016545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.pzgoea.top"; classtype:attempted-recon; sid:200016546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.q0s2sm.icu"; classtype:attempted-recon; sid:200016547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.qclqjo.top"; classtype:attempted-recon; sid:200016548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.qeaogd.top"; classtype:attempted-recon; sid:200016549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.qnqwcs.icu"; classtype:attempted-recon; sid:200016550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.qpchzg.top"; classtype:attempted-recon; sid:200016551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.qqjjzi.top"; classtype:attempted-recon; sid:200016552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.qvgavp.top"; classtype:attempted-recon; sid:200016553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.rbyycn.top"; classtype:attempted-recon; sid:200016554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.rmgomo.top"; classtype:attempted-recon; sid:200016555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.rsxojx.top"; classtype:attempted-recon; sid:200016556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.sawjbk.top"; classtype:attempted-recon; sid:200016557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.slnb02.icu"; classtype:attempted-recon; sid:200016558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.srcwhi.top"; classtype:attempted-recon; sid:200016559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.srwwap.top"; classtype:attempted-recon; sid:200016560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.sthtuh.top"; classtype:attempted-recon; sid:200016561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.syeuaw.top"; classtype:attempted-recon; sid:200016562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.tazsl1.icu"; classtype:attempted-recon; sid:200016563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.tbnilj.top"; classtype:attempted-recon; sid:200016564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.tl86n6.icu"; classtype:attempted-recon; sid:200016565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.to5fb9.icu"; classtype:attempted-recon; sid:200016566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.u0c8sn.icu"; classtype:attempted-recon; sid:200016567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.uixah3.icu"; classtype:attempted-recon; sid:200016568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ukesvp.icu"; classtype:attempted-recon; sid:200016569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ukrtxd.top"; classtype:attempted-recon; sid:200016570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.upahh5.icu"; classtype:attempted-recon; sid:200016571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.uxdgpy.top"; classtype:attempted-recon; sid:200016572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.uxvqzp.top"; classtype:attempted-recon; sid:200016573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.vdpgwm.top"; classtype:attempted-recon; sid:200016574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.vqeyuo.top"; classtype:attempted-recon; sid:200016575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.vspjok.icu"; classtype:attempted-recon; sid:200016576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.vvkdlh.top"; classtype:attempted-recon; sid:200016577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.vxcrlo.top"; classtype:attempted-recon; sid:200016578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.werbdt.top"; classtype:attempted-recon; sid:200016579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.wfirhj.top"; classtype:attempted-recon; sid:200016580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.whnjwr.top"; classtype:attempted-recon; sid:200016581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.witojr.top"; classtype:attempted-recon; sid:200016582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.wmygyx.top"; classtype:attempted-recon; sid:200016583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.wpzqxg.top"; classtype:attempted-recon; sid:200016584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.wsojbg.icu"; classtype:attempted-recon; sid:200016585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.wxpckc.icu"; classtype:attempted-recon; sid:200016586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.xd1bpn.icu"; classtype:attempted-recon; sid:200016587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.xeygaj.top"; classtype:attempted-recon; sid:200016588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.xgysxo.top"; classtype:attempted-recon; sid:200016589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.xydvkg.top"; classtype:attempted-recon; sid:200016590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.xyuhnm.top"; classtype:attempted-recon; sid:200016591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.xztftf.top"; classtype:attempted-recon; sid:200016592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.ymifv0.icu"; classtype:attempted-recon; sid:200016593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.yqasjy.icu"; classtype:attempted-recon; sid:200016594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.yuxvpc.top"; classtype:attempted-recon; sid:200016595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.yvjdgy.top"; classtype:attempted-recon; sid:200016596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.yybtfl.top"; classtype:attempted-recon; sid:200016597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.zhsntm.top"; classtype:attempted-recon; sid:200016598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.zhwpnq.top"; classtype:attempted-recon; sid:200016599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.zovh96.icu"; classtype:attempted-recon; sid:200016600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raskaseocou.raekotnoneea.zoyqhl.top"; classtype:attempted-recon; sid:200016601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.037768888861.xyz"; classtype:attempted-recon; sid:200016602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.284nxw.icu"; classtype:attempted-recon; sid:200016603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.33hf19.icu"; classtype:attempted-recon; sid:200016604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.473glv.icu"; classtype:attempted-recon; sid:200016605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.4k2dci.icu"; classtype:attempted-recon; sid:200016606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.687cem.icu"; classtype:attempted-recon; sid:200016607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.69bn6b.icu"; classtype:attempted-recon; sid:200016608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.6c7bza.icu"; classtype:attempted-recon; sid:200016609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.6pw2wd.icu"; classtype:attempted-recon; sid:200016610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.6rtqht.icu"; classtype:attempted-recon; sid:200016611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.6t1vk7.icu"; classtype:attempted-recon; sid:200016612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.7a4s96.icu"; classtype:attempted-recon; sid:200016613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.82casa.icu"; classtype:attempted-recon; sid:200016614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.9d24dh.icu"; classtype:attempted-recon; sid:200016615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.9pw3lv.icu"; classtype:attempted-recon; sid:200016616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.9zv0ny.icu"; classtype:attempted-recon; sid:200016617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.aale2a.icu"; classtype:attempted-recon; sid:200016618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.aayldm.top"; classtype:attempted-recon; sid:200016619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.adldni.top"; classtype:attempted-recon; sid:200016620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.afqzgx.top"; classtype:attempted-recon; sid:200016621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ajxdpg.top"; classtype:attempted-recon; sid:200016622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ansklx.top"; classtype:attempted-recon; sid:200016623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ao0dkn.icu"; classtype:attempted-recon; sid:200016624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.aogild.top"; classtype:attempted-recon; sid:200016625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.bucyvo.top"; classtype:attempted-recon; sid:200016626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.bwxsxf.top"; classtype:attempted-recon; sid:200016627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.bxsxvy.top"; classtype:attempted-recon; sid:200016628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.cgogay.top"; classtype:attempted-recon; sid:200016629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.cmudlt.top"; classtype:attempted-recon; sid:200016630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ctdwug.top"; classtype:attempted-recon; sid:200016631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.cwpgoh.top"; classtype:attempted-recon; sid:200016632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.d5u49w.icu"; classtype:attempted-recon; sid:200016633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.dbezzz.top"; classtype:attempted-recon; sid:200016634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.dbhlbm.top"; classtype:attempted-recon; sid:200016635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.dqbdkl.top"; classtype:attempted-recon; sid:200016636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.drkild.icu"; classtype:attempted-recon; sid:200016637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.e7ie6j.icu"; classtype:attempted-recon; sid:200016638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.eahbrm.top"; classtype:attempted-recon; sid:200016639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.enioab.top"; classtype:attempted-recon; sid:200016640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.erkdnv.top"; classtype:attempted-recon; sid:200016641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.fn0aqh.icu"; classtype:attempted-recon; sid:200016642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.hblfhq.top"; classtype:attempted-recon; sid:200016643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.hefhjq.icu"; classtype:attempted-recon; sid:200016644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.hli3b0.icu"; classtype:attempted-recon; sid:200016645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.hlsyku.icu"; classtype:attempted-recon; sid:200016646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.hmziti.top"; classtype:attempted-recon; sid:200016647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.idenyq.top"; classtype:attempted-recon; sid:200016648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.inkblog.ink"; classtype:attempted-recon; sid:200016649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.j3tu3m.icu"; classtype:attempted-recon; sid:200016650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.j77o38.icu"; classtype:attempted-recon; sid:200016651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.jehe99.icu"; classtype:attempted-recon; sid:200016652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.juls8q.icu"; classtype:attempted-recon; sid:200016653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.k3ma2x.icu"; classtype:attempted-recon; sid:200016654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.k9pn0d.icu"; classtype:attempted-recon; sid:200016655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ka83cb.icu"; classtype:attempted-recon; sid:200016656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.kb5b6d.icu"; classtype:attempted-recon; sid:200016657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.kgfkdv.top"; classtype:attempted-recon; sid:200016658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.krjqpe.top"; classtype:attempted-recon; sid:200016659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.kvrhdp.top"; classtype:attempted-recon; sid:200016660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.lcazit.top"; classtype:attempted-recon; sid:200016661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.lfyacu.icu"; classtype:attempted-recon; sid:200016662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ljmuov.top"; classtype:attempted-recon; sid:200016663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ll64vg.icu"; classtype:attempted-recon; sid:200016664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.llufip.top"; classtype:attempted-recon; sid:200016665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.lmheln.top"; classtype:attempted-recon; sid:200016666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.lwgayp.top"; classtype:attempted-recon; sid:200016667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.lylxce.top"; classtype:attempted-recon; sid:200016668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.mcltim.top"; classtype:attempted-recon; sid:200016669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.mfx741.icu"; classtype:attempted-recon; sid:200016670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.mgjpjr.top"; classtype:attempted-recon; sid:200016671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.mjdnpt.top"; classtype:attempted-recon; sid:200016672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.nllyoh.top"; classtype:attempted-recon; sid:200016673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.nqveqi.top"; classtype:attempted-recon; sid:200016674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.nrhpkc.icu"; classtype:attempted-recon; sid:200016675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.nu57wl.icu"; classtype:attempted-recon; sid:200016676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.nv9dtw.icu"; classtype:attempted-recon; sid:200016677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ojyzcd.top"; classtype:attempted-recon; sid:200016678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.okbpku.icu"; classtype:attempted-recon; sid:200016679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.oppxsj.top"; classtype:attempted-recon; sid:200016680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.or1glf.icu"; classtype:attempted-recon; sid:200016681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.pe14pc.icu"; classtype:attempted-recon; sid:200016682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.psdexq.top"; classtype:attempted-recon; sid:200016683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.psdoni.top"; classtype:attempted-recon; sid:200016684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.pujapd.top"; classtype:attempted-recon; sid:200016685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.pzgoea.top"; classtype:attempted-recon; sid:200016686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.q0s2sm.icu"; classtype:attempted-recon; sid:200016687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.qclqjo.top"; classtype:attempted-recon; sid:200016688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.qeaogd.top"; classtype:attempted-recon; sid:200016689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.qnqwcs.icu"; classtype:attempted-recon; sid:200016690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.qpchzg.top"; classtype:attempted-recon; sid:200016691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.qqjjzi.top"; classtype:attempted-recon; sid:200016692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.qvgavp.top"; classtype:attempted-recon; sid:200016693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.rbyycn.top"; classtype:attempted-recon; sid:200016694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.rmgomo.top"; classtype:attempted-recon; sid:200016695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.rsxojx.top"; classtype:attempted-recon; sid:200016696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.sawjbk.top"; classtype:attempted-recon; sid:200016697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.slnb02.icu"; classtype:attempted-recon; sid:200016698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.srcwhi.top"; classtype:attempted-recon; sid:200016699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.srwwap.top"; classtype:attempted-recon; sid:200016700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.sthtuh.top"; classtype:attempted-recon; sid:200016701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.syeuaw.top"; classtype:attempted-recon; sid:200016702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.tazsl1.icu"; classtype:attempted-recon; sid:200016703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.tbnilj.top"; classtype:attempted-recon; sid:200016704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.tl86n6.icu"; classtype:attempted-recon; sid:200016705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.to5fb9.icu"; classtype:attempted-recon; sid:200016706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.u0c8sn.icu"; classtype:attempted-recon; sid:200016707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.uixah3.icu"; classtype:attempted-recon; sid:200016708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ukesvp.icu"; classtype:attempted-recon; sid:200016709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ukrtxd.top"; classtype:attempted-recon; sid:200016710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.upahh5.icu"; classtype:attempted-recon; sid:200016711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.uxdgpy.top"; classtype:attempted-recon; sid:200016712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.uxvqzp.top"; classtype:attempted-recon; sid:200016713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.vdpgwm.top"; classtype:attempted-recon; sid:200016714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.vqeyuo.top"; classtype:attempted-recon; sid:200016715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.vspjok.icu"; classtype:attempted-recon; sid:200016716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.vvkdlh.top"; classtype:attempted-recon; sid:200016717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.vxcrlo.top"; classtype:attempted-recon; sid:200016718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.werbdt.top"; classtype:attempted-recon; sid:200016719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.wfirhj.top"; classtype:attempted-recon; sid:200016720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.whnjwr.top"; classtype:attempted-recon; sid:200016721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.witojr.top"; classtype:attempted-recon; sid:200016722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.wmygyx.top"; classtype:attempted-recon; sid:200016723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.wpzqxg.top"; classtype:attempted-recon; sid:200016724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.wsojbg.icu"; classtype:attempted-recon; sid:200016725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.wxpckc.icu"; classtype:attempted-recon; sid:200016726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.xd1bpn.icu"; classtype:attempted-recon; sid:200016727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.xeygaj.top"; classtype:attempted-recon; sid:200016728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.xgysxo.top"; classtype:attempted-recon; sid:200016729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.xydvkg.top"; classtype:attempted-recon; sid:200016730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.xyuhnm.top"; classtype:attempted-recon; sid:200016731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.xztftf.top"; classtype:attempted-recon; sid:200016732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ymifv0.icu"; classtype:attempted-recon; sid:200016733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.yqasjy.icu"; classtype:attempted-recon; sid:200016734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.yuxvpc.top"; classtype:attempted-recon; sid:200016735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.yvjdgy.top"; classtype:attempted-recon; sid:200016736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.yybtfl.top"; classtype:attempted-recon; sid:200016737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.zhsntm.top"; classtype:attempted-recon; sid:200016738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.zhwpnq.top"; classtype:attempted-recon; sid:200016739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.zovh96.icu"; classtype:attempted-recon; sid:200016740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.zoyqhl.top"; classtype:attempted-recon; sid:200016741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.037768888861.xyz"; classtype:attempted-recon; sid:200016742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.284nxw.icu"; classtype:attempted-recon; sid:200016743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.33hf19.icu"; classtype:attempted-recon; sid:200016744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.473glv.icu"; classtype:attempted-recon; sid:200016745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.4k2dci.icu"; classtype:attempted-recon; sid:200016746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.687cem.icu"; classtype:attempted-recon; sid:200016747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.69bn6b.icu"; classtype:attempted-recon; sid:200016748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.6c7bza.icu"; classtype:attempted-recon; sid:200016749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.6pw2wd.icu"; classtype:attempted-recon; sid:200016750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.6rtqht.icu"; classtype:attempted-recon; sid:200016751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.6t1vk7.icu"; classtype:attempted-recon; sid:200016752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.7a4s96.icu"; classtype:attempted-recon; sid:200016753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.82casa.icu"; classtype:attempted-recon; sid:200016754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.9d24dh.icu"; classtype:attempted-recon; sid:200016755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.9pw3lv.icu"; classtype:attempted-recon; sid:200016756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.9zv0ny.icu"; classtype:attempted-recon; sid:200016757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.aale2a.icu"; classtype:attempted-recon; sid:200016758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.aayldm.top"; classtype:attempted-recon; sid:200016759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.adldni.top"; classtype:attempted-recon; sid:200016760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.afqzgx.top"; classtype:attempted-recon; sid:200016761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ajxdpg.top"; classtype:attempted-recon; sid:200016762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ansklx.top"; classtype:attempted-recon; sid:200016763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ao0dkn.icu"; classtype:attempted-recon; sid:200016764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.aogild.top"; classtype:attempted-recon; sid:200016765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.bucyvo.top"; classtype:attempted-recon; sid:200016766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.bwxsxf.top"; classtype:attempted-recon; sid:200016767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.bxsxvy.top"; classtype:attempted-recon; sid:200016768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.cgogay.top"; classtype:attempted-recon; sid:200016769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.cmudlt.top"; classtype:attempted-recon; sid:200016770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ctdwug.top"; classtype:attempted-recon; sid:200016771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.cwpgoh.top"; classtype:attempted-recon; sid:200016772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.d5u49w.icu"; classtype:attempted-recon; sid:200016773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.dbezzz.top"; classtype:attempted-recon; sid:200016774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.dbhlbm.top"; classtype:attempted-recon; sid:200016775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.dqbdkl.top"; classtype:attempted-recon; sid:200016776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.drkild.icu"; classtype:attempted-recon; sid:200016777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.e7ie6j.icu"; classtype:attempted-recon; sid:200016778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.eahbrm.top"; classtype:attempted-recon; sid:200016779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.enioab.top"; classtype:attempted-recon; sid:200016780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.erkdnv.top"; classtype:attempted-recon; sid:200016781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.fn0aqh.icu"; classtype:attempted-recon; sid:200016782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.hblfhq.top"; classtype:attempted-recon; sid:200016783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.hefhjq.icu"; classtype:attempted-recon; sid:200016784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.hli3b0.icu"; classtype:attempted-recon; sid:200016785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.hlsyku.icu"; classtype:attempted-recon; sid:200016786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.hmziti.top"; classtype:attempted-recon; sid:200016787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.idenyq.top"; classtype:attempted-recon; sid:200016788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.inkblog.ink"; classtype:attempted-recon; sid:200016789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.j3tu3m.icu"; classtype:attempted-recon; sid:200016790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.j77o38.icu"; classtype:attempted-recon; sid:200016791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.jehe99.icu"; classtype:attempted-recon; sid:200016792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.juls8q.icu"; classtype:attempted-recon; sid:200016793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.k3ma2x.icu"; classtype:attempted-recon; sid:200016794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.k9pn0d.icu"; classtype:attempted-recon; sid:200016795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ka83cb.icu"; classtype:attempted-recon; sid:200016796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.kb5b6d.icu"; classtype:attempted-recon; sid:200016797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.kgfkdv.top"; classtype:attempted-recon; sid:200016798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.krjqpe.top"; classtype:attempted-recon; sid:200016799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.kvrhdp.top"; classtype:attempted-recon; sid:200016800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.lcazit.top"; classtype:attempted-recon; sid:200016801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.lfyacu.icu"; classtype:attempted-recon; sid:200016802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ljmuov.top"; classtype:attempted-recon; sid:200016803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ll64vg.icu"; classtype:attempted-recon; sid:200016804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.llufip.top"; classtype:attempted-recon; sid:200016805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.lmheln.top"; classtype:attempted-recon; sid:200016806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.lwgayp.top"; classtype:attempted-recon; sid:200016807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.lylxce.top"; classtype:attempted-recon; sid:200016808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.mcltim.top"; classtype:attempted-recon; sid:200016809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.mfx741.icu"; classtype:attempted-recon; sid:200016810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.mgjpjr.top"; classtype:attempted-recon; sid:200016811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.mjdnpt.top"; classtype:attempted-recon; sid:200016812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.nllyoh.top"; classtype:attempted-recon; sid:200016813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.nqveqi.top"; classtype:attempted-recon; sid:200016814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.nrhpkc.icu"; classtype:attempted-recon; sid:200016815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.nu57wl.icu"; classtype:attempted-recon; sid:200016816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.nv9dtw.icu"; classtype:attempted-recon; sid:200016817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ojyzcd.top"; classtype:attempted-recon; sid:200016818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.okbpku.icu"; classtype:attempted-recon; sid:200016819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.oppxsj.top"; classtype:attempted-recon; sid:200016820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.or1glf.icu"; classtype:attempted-recon; sid:200016821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.pe14pc.icu"; classtype:attempted-recon; sid:200016822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.psdexq.top"; classtype:attempted-recon; sid:200016823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.psdoni.top"; classtype:attempted-recon; sid:200016824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.pujapd.top"; classtype:attempted-recon; sid:200016825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.pzgoea.top"; classtype:attempted-recon; sid:200016826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.q0s2sm.icu"; classtype:attempted-recon; sid:200016827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.qclqjo.top"; classtype:attempted-recon; sid:200016828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.qeaogd.top"; classtype:attempted-recon; sid:200016829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.qnqwcs.icu"; classtype:attempted-recon; sid:200016830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.qpchzg.top"; classtype:attempted-recon; sid:200016831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.qqjjzi.top"; classtype:attempted-recon; sid:200016832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.qvgavp.top"; classtype:attempted-recon; sid:200016833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.rbyycn.top"; classtype:attempted-recon; sid:200016834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.rmgomo.top"; classtype:attempted-recon; sid:200016835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.rsxojx.top"; classtype:attempted-recon; sid:200016836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.sawjbk.top"; classtype:attempted-recon; sid:200016837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.slnb02.icu"; classtype:attempted-recon; sid:200016838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.srcwhi.top"; classtype:attempted-recon; sid:200016839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.srwwap.top"; classtype:attempted-recon; sid:200016840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.sthtuh.top"; classtype:attempted-recon; sid:200016841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.syeuaw.top"; classtype:attempted-recon; sid:200016842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.tazsl1.icu"; classtype:attempted-recon; sid:200016843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.tbnilj.top"; classtype:attempted-recon; sid:200016844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.tl86n6.icu"; classtype:attempted-recon; sid:200016845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.to5fb9.icu"; classtype:attempted-recon; sid:200016846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.u0c8sn.icu"; classtype:attempted-recon; sid:200016847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.uixah3.icu"; classtype:attempted-recon; sid:200016848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ukesvp.icu"; classtype:attempted-recon; sid:200016849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ukrtxd.top"; classtype:attempted-recon; sid:200016850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.upahh5.icu"; classtype:attempted-recon; sid:200016851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.uxdgpy.top"; classtype:attempted-recon; sid:200016852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.uxvqzp.top"; classtype:attempted-recon; sid:200016853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.vdpgwm.top"; classtype:attempted-recon; sid:200016854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.vqeyuo.top"; classtype:attempted-recon; sid:200016855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.vspjok.icu"; classtype:attempted-recon; sid:200016856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.vvkdlh.top"; classtype:attempted-recon; sid:200016857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.vxcrlo.top"; classtype:attempted-recon; sid:200016858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.werbdt.top"; classtype:attempted-recon; sid:200016859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.wfirhj.top"; classtype:attempted-recon; sid:200016860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.whnjwr.top"; classtype:attempted-recon; sid:200016861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.witojr.top"; classtype:attempted-recon; sid:200016862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.wmygyx.top"; classtype:attempted-recon; sid:200016863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.wpzqxg.top"; classtype:attempted-recon; sid:200016864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.wsojbg.icu"; classtype:attempted-recon; sid:200016865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.wxpckc.icu"; classtype:attempted-recon; sid:200016866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.xd1bpn.icu"; classtype:attempted-recon; sid:200016867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.xeygaj.top"; classtype:attempted-recon; sid:200016868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.xgysxo.top"; classtype:attempted-recon; sid:200016869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.xydvkg.top"; classtype:attempted-recon; sid:200016870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.xyuhnm.top"; classtype:attempted-recon; sid:200016871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.xztftf.top"; classtype:attempted-recon; sid:200016872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ymifv0.icu"; classtype:attempted-recon; sid:200016873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.yqasjy.icu"; classtype:attempted-recon; sid:200016874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.yuxvpc.top"; classtype:attempted-recon; sid:200016875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.yvjdgy.top"; classtype:attempted-recon; sid:200016876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.yybtfl.top"; classtype:attempted-recon; sid:200016877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.zhsntm.top"; classtype:attempted-recon; sid:200016878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.zhwpnq.top"; classtype:attempted-recon; sid:200016879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.zovh96.icu"; classtype:attempted-recon; sid:200016880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasoseakcorcou.rakoeaeesuaern.zoyqhl.top"; classtype:attempted-recon; sid:200016881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.037768888861.xyz"; classtype:attempted-recon; sid:200016882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.284nxw.icu"; classtype:attempted-recon; sid:200016883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.33hf19.icu"; classtype:attempted-recon; sid:200016884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.473glv.icu"; classtype:attempted-recon; sid:200016885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.4k2dci.icu"; classtype:attempted-recon; sid:200016886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.687cem.icu"; classtype:attempted-recon; sid:200016887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.69bn6b.icu"; classtype:attempted-recon; sid:200016888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.6c7bza.icu"; classtype:attempted-recon; sid:200016889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.6pw2wd.icu"; classtype:attempted-recon; sid:200016890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.6rtqht.icu"; classtype:attempted-recon; sid:200016891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.6t1vk7.icu"; classtype:attempted-recon; sid:200016892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.7a4s96.icu"; classtype:attempted-recon; sid:200016893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.82casa.icu"; classtype:attempted-recon; sid:200016894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.9d24dh.icu"; classtype:attempted-recon; sid:200016895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.9pw3lv.icu"; classtype:attempted-recon; sid:200016896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.9zv0ny.icu"; classtype:attempted-recon; sid:200016897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.aale2a.icu"; classtype:attempted-recon; sid:200016898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.aayldm.top"; classtype:attempted-recon; sid:200016899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.adldni.top"; classtype:attempted-recon; sid:200016900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.afqzgx.top"; classtype:attempted-recon; sid:200016901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ajxdpg.top"; classtype:attempted-recon; sid:200016902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ansklx.top"; classtype:attempted-recon; sid:200016903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ao0dkn.icu"; classtype:attempted-recon; sid:200016904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.aogild.top"; classtype:attempted-recon; sid:200016905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.bucyvo.top"; classtype:attempted-recon; sid:200016906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.bwxsxf.top"; classtype:attempted-recon; sid:200016907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.bxsxvy.top"; classtype:attempted-recon; sid:200016908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.cgogay.top"; classtype:attempted-recon; sid:200016909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.cmudlt.top"; classtype:attempted-recon; sid:200016910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ctdwug.top"; classtype:attempted-recon; sid:200016911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.cwpgoh.top"; classtype:attempted-recon; sid:200016912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.d5u49w.icu"; classtype:attempted-recon; sid:200016913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.dbezzz.top"; classtype:attempted-recon; sid:200016914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.dbhlbm.top"; classtype:attempted-recon; sid:200016915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.dqbdkl.top"; classtype:attempted-recon; sid:200016916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.drkild.icu"; classtype:attempted-recon; sid:200016917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.e7ie6j.icu"; classtype:attempted-recon; sid:200016918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.eahbrm.top"; classtype:attempted-recon; sid:200016919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.enioab.top"; classtype:attempted-recon; sid:200016920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.erkdnv.top"; classtype:attempted-recon; sid:200016921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.fanyedong.site"; classtype:attempted-recon; sid:200016922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.fn0aqh.icu"; classtype:attempted-recon; sid:200016923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.hblfhq.top"; classtype:attempted-recon; sid:200016924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.hefhjq.icu"; classtype:attempted-recon; sid:200016925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.hli3b0.icu"; classtype:attempted-recon; sid:200016926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.hlsyku.icu"; classtype:attempted-recon; sid:200016927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.hmziti.top"; classtype:attempted-recon; sid:200016928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.idenyq.top"; classtype:attempted-recon; sid:200016929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.inkblog.ink"; classtype:attempted-recon; sid:200016930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.j3tu3m.icu"; classtype:attempted-recon; sid:200016931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.j77o38.icu"; classtype:attempted-recon; sid:200016932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.jehe99.icu"; classtype:attempted-recon; sid:200016933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.juls8q.icu"; classtype:attempted-recon; sid:200016934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.k3ma2x.icu"; classtype:attempted-recon; sid:200016935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.k9pn0d.icu"; classtype:attempted-recon; sid:200016936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ka83cb.icu"; classtype:attempted-recon; sid:200016937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.kb5b6d.icu"; classtype:attempted-recon; sid:200016938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.kgfkdv.top"; classtype:attempted-recon; sid:200016939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.krjqpe.top"; classtype:attempted-recon; sid:200016940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.kvrhdp.top"; classtype:attempted-recon; sid:200016941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.lcazit.top"; classtype:attempted-recon; sid:200016942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.lfyacu.icu"; classtype:attempted-recon; sid:200016943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ljmuov.top"; classtype:attempted-recon; sid:200016944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ll64vg.icu"; classtype:attempted-recon; sid:200016945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.llufip.top"; classtype:attempted-recon; sid:200016946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.lmheln.top"; classtype:attempted-recon; sid:200016947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.lwgayp.top"; classtype:attempted-recon; sid:200016948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.lylxce.top"; classtype:attempted-recon; sid:200016949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.mcltim.top"; classtype:attempted-recon; sid:200016950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.mfx741.icu"; classtype:attempted-recon; sid:200016951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.mgjpjr.top"; classtype:attempted-recon; sid:200016952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.mjdnpt.top"; classtype:attempted-recon; sid:200016953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.nllyoh.top"; classtype:attempted-recon; sid:200016954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.nqveqi.top"; classtype:attempted-recon; sid:200016955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.nrhpkc.icu"; classtype:attempted-recon; sid:200016956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.nu57wl.icu"; classtype:attempted-recon; sid:200016957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.nv9dtw.icu"; classtype:attempted-recon; sid:200016958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ojyzcd.top"; classtype:attempted-recon; sid:200016959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.okbpku.icu"; classtype:attempted-recon; sid:200016960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.oppxsj.top"; classtype:attempted-recon; sid:200016961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.or1glf.icu"; classtype:attempted-recon; sid:200016962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.pe14pc.icu"; classtype:attempted-recon; sid:200016963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.psdexq.top"; classtype:attempted-recon; sid:200016964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.psdoni.top"; classtype:attempted-recon; sid:200016965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.pujapd.top"; classtype:attempted-recon; sid:200016966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.pzgoea.top"; classtype:attempted-recon; sid:200016967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.q0s2sm.icu"; classtype:attempted-recon; sid:200016968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.qclqjo.top"; classtype:attempted-recon; sid:200016969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.qeaogd.top"; classtype:attempted-recon; sid:200016970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.qnqwcs.icu"; classtype:attempted-recon; sid:200016971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.qpchzg.top"; classtype:attempted-recon; sid:200016972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.qqjjzi.top"; classtype:attempted-recon; sid:200016973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.qvgavp.top"; classtype:attempted-recon; sid:200016974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.rbyycn.top"; classtype:attempted-recon; sid:200016975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.rmgomo.top"; classtype:attempted-recon; sid:200016976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.rsxojx.top"; classtype:attempted-recon; sid:200016977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.sawjbk.top"; classtype:attempted-recon; sid:200016978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.slnb02.icu"; classtype:attempted-recon; sid:200016979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.srcwhi.top"; classtype:attempted-recon; sid:200016980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.srwwap.top"; classtype:attempted-recon; sid:200016981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.sthtuh.top"; classtype:attempted-recon; sid:200016982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.syeuaw.top"; classtype:attempted-recon; sid:200016983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.tazsl1.icu"; classtype:attempted-recon; sid:200016984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.tbnilj.top"; classtype:attempted-recon; sid:200016985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.tl86n6.icu"; classtype:attempted-recon; sid:200016986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.to5fb9.icu"; classtype:attempted-recon; sid:200016987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.u0c8sn.icu"; classtype:attempted-recon; sid:200016988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.uixah3.icu"; classtype:attempted-recon; sid:200016989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ukesvp.icu"; classtype:attempted-recon; sid:200016990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ukrtxd.top"; classtype:attempted-recon; sid:200016991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.upahh5.icu"; classtype:attempted-recon; sid:200016992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.uxdgpy.top"; classtype:attempted-recon; sid:200016993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.uxvqzp.top"; classtype:attempted-recon; sid:200016994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.vdpgwm.top"; classtype:attempted-recon; sid:200016995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.vqeyuo.top"; classtype:attempted-recon; sid:200016996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.vspjok.icu"; classtype:attempted-recon; sid:200016997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.vvkdlh.top"; classtype:attempted-recon; sid:200016998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.vxcrlo.top"; classtype:attempted-recon; sid:200016999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.werbdt.top"; classtype:attempted-recon; sid:200017000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.wfirhj.top"; classtype:attempted-recon; sid:200017001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.whnjwr.top"; classtype:attempted-recon; sid:200017002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.witojr.top"; classtype:attempted-recon; sid:200017003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.wmygyx.top"; classtype:attempted-recon; sid:200017004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.wpzqxg.top"; classtype:attempted-recon; sid:200017005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.wsojbg.icu"; classtype:attempted-recon; sid:200017006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.wxpckc.icu"; classtype:attempted-recon; sid:200017007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.xd1bpn.icu"; classtype:attempted-recon; sid:200017008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.xeygaj.top"; classtype:attempted-recon; sid:200017009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.xgysxo.top"; classtype:attempted-recon; sid:200017010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.xydvkg.top"; classtype:attempted-recon; sid:200017011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.xyuhnm.top"; classtype:attempted-recon; sid:200017012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.xztftf.top"; classtype:attempted-recon; sid:200017013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ymifv0.icu"; classtype:attempted-recon; sid:200017014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.yqasjy.icu"; classtype:attempted-recon; sid:200017015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.yuxvpc.top"; classtype:attempted-recon; sid:200017016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.yvjdgy.top"; classtype:attempted-recon; sid:200017017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.yybtfl.top"; classtype:attempted-recon; sid:200017018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.zhsntm.top"; classtype:attempted-recon; sid:200017019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.zhwpnq.top"; classtype:attempted-recon; sid:200017020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.zovh96.icu"; classtype:attempted-recon; sid:200017021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.zoyqhl.top"; classtype:attempted-recon; sid:200017022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.037768888861.xyz"; classtype:attempted-recon; sid:200017023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.284nxw.icu"; classtype:attempted-recon; sid:200017024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.33hf19.icu"; classtype:attempted-recon; sid:200017025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.473glv.icu"; classtype:attempted-recon; sid:200017026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.4k2dci.icu"; classtype:attempted-recon; sid:200017027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.687cem.icu"; classtype:attempted-recon; sid:200017028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.69bn6b.icu"; classtype:attempted-recon; sid:200017029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.6c7bza.icu"; classtype:attempted-recon; sid:200017030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.6pw2wd.icu"; classtype:attempted-recon; sid:200017031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.6rtqht.icu"; classtype:attempted-recon; sid:200017032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.6t1vk7.icu"; classtype:attempted-recon; sid:200017033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.7a4s96.icu"; classtype:attempted-recon; sid:200017034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.82casa.icu"; classtype:attempted-recon; sid:200017035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.9d24dh.icu"; classtype:attempted-recon; sid:200017036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.9pw3lv.icu"; classtype:attempted-recon; sid:200017037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.9zv0ny.icu"; classtype:attempted-recon; sid:200017038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.aale2a.icu"; classtype:attempted-recon; sid:200017039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.aayldm.top"; classtype:attempted-recon; sid:200017040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.adldni.top"; classtype:attempted-recon; sid:200017041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.afqzgx.top"; classtype:attempted-recon; sid:200017042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ajxdpg.top"; classtype:attempted-recon; sid:200017043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ansklx.top"; classtype:attempted-recon; sid:200017044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ao0dkn.icu"; classtype:attempted-recon; sid:200017045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.aogild.top"; classtype:attempted-recon; sid:200017046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.bucyvo.top"; classtype:attempted-recon; sid:200017047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.bwxsxf.top"; classtype:attempted-recon; sid:200017048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.bxsxvy.top"; classtype:attempted-recon; sid:200017049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.cgogay.top"; classtype:attempted-recon; sid:200017050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.cmudlt.top"; classtype:attempted-recon; sid:200017051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ctdwug.top"; classtype:attempted-recon; sid:200017052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.cwpgoh.top"; classtype:attempted-recon; sid:200017053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.d5u49w.icu"; classtype:attempted-recon; sid:200017054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.dbezzz.top"; classtype:attempted-recon; sid:200017055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.dbhlbm.top"; classtype:attempted-recon; sid:200017056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.dqbdkl.top"; classtype:attempted-recon; sid:200017057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.drkild.icu"; classtype:attempted-recon; sid:200017058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.e7ie6j.icu"; classtype:attempted-recon; sid:200017059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.eahbrm.top"; classtype:attempted-recon; sid:200017060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.enioab.top"; classtype:attempted-recon; sid:200017061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.erkdnv.top"; classtype:attempted-recon; sid:200017062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.fn0aqh.icu"; classtype:attempted-recon; sid:200017063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.hblfhq.top"; classtype:attempted-recon; sid:200017064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.hefhjq.icu"; classtype:attempted-recon; sid:200017065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.hli3b0.icu"; classtype:attempted-recon; sid:200017066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.hlsyku.icu"; classtype:attempted-recon; sid:200017067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.hmziti.top"; classtype:attempted-recon; sid:200017068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.idenyq.top"; classtype:attempted-recon; sid:200017069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.inkblog.ink"; classtype:attempted-recon; sid:200017070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.j3tu3m.icu"; classtype:attempted-recon; sid:200017071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.j77o38.icu"; classtype:attempted-recon; sid:200017072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.jehe99.icu"; classtype:attempted-recon; sid:200017073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.jianhudong.site"; classtype:attempted-recon; sid:200017074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.juls8q.icu"; classtype:attempted-recon; sid:200017075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.k3ma2x.icu"; classtype:attempted-recon; sid:200017076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.k9pn0d.icu"; classtype:attempted-recon; sid:200017077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ka83cb.icu"; classtype:attempted-recon; sid:200017078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.kb5b6d.icu"; classtype:attempted-recon; sid:200017079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.kgfkdv.top"; classtype:attempted-recon; sid:200017080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.krjqpe.top"; classtype:attempted-recon; sid:200017081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.kvrhdp.top"; classtype:attempted-recon; sid:200017082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.lcazit.top"; classtype:attempted-recon; sid:200017083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.lfyacu.icu"; classtype:attempted-recon; sid:200017084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ljmuov.top"; classtype:attempted-recon; sid:200017085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ll64vg.icu"; classtype:attempted-recon; sid:200017086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.llufip.top"; classtype:attempted-recon; sid:200017087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.lmheln.top"; classtype:attempted-recon; sid:200017088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.lwgayp.top"; classtype:attempted-recon; sid:200017089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.lylxce.top"; classtype:attempted-recon; sid:200017090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.mcltim.top"; classtype:attempted-recon; sid:200017091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.mfx741.icu"; classtype:attempted-recon; sid:200017092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.mgjpjr.top"; classtype:attempted-recon; sid:200017093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.mjdnpt.top"; classtype:attempted-recon; sid:200017094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.nllyoh.top"; classtype:attempted-recon; sid:200017095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.nqveqi.top"; classtype:attempted-recon; sid:200017096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.nrhpkc.icu"; classtype:attempted-recon; sid:200017097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.nu57wl.icu"; classtype:attempted-recon; sid:200017098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.nv9dtw.icu"; classtype:attempted-recon; sid:200017099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ojyzcd.top"; classtype:attempted-recon; sid:200017100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.okbpku.icu"; classtype:attempted-recon; sid:200017101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.oppxsj.top"; classtype:attempted-recon; sid:200017102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.or1glf.icu"; classtype:attempted-recon; sid:200017103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.pe14pc.icu"; classtype:attempted-recon; sid:200017104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.psdexq.top"; classtype:attempted-recon; sid:200017105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.psdoni.top"; classtype:attempted-recon; sid:200017106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.pujapd.top"; classtype:attempted-recon; sid:200017107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.pzgoea.top"; classtype:attempted-recon; sid:200017108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.q0s2sm.icu"; classtype:attempted-recon; sid:200017109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.qclqjo.top"; classtype:attempted-recon; sid:200017110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.qeaogd.top"; classtype:attempted-recon; sid:200017111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.qnqwcs.icu"; classtype:attempted-recon; sid:200017112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.qpchzg.top"; classtype:attempted-recon; sid:200017113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.qqjjzi.top"; classtype:attempted-recon; sid:200017114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.qvgavp.top"; classtype:attempted-recon; sid:200017115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.rbyycn.top"; classtype:attempted-recon; sid:200017116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.rmgomo.top"; classtype:attempted-recon; sid:200017117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.rsxojx.top"; classtype:attempted-recon; sid:200017118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.sawjbk.top"; classtype:attempted-recon; sid:200017119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.slnb02.icu"; classtype:attempted-recon; sid:200017120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.srcwhi.top"; classtype:attempted-recon; sid:200017121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.srwwap.top"; classtype:attempted-recon; sid:200017122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.sthtuh.top"; classtype:attempted-recon; sid:200017123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.syeuaw.top"; classtype:attempted-recon; sid:200017124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.tazsl1.icu"; classtype:attempted-recon; sid:200017125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.tbnilj.top"; classtype:attempted-recon; sid:200017126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.tl86n6.icu"; classtype:attempted-recon; sid:200017127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.to5fb9.icu"; classtype:attempted-recon; sid:200017128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.u0c8sn.icu"; classtype:attempted-recon; sid:200017129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.uixah3.icu"; classtype:attempted-recon; sid:200017130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ukesvp.icu"; classtype:attempted-recon; sid:200017131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ukrtxd.top"; classtype:attempted-recon; sid:200017132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.upahh5.icu"; classtype:attempted-recon; sid:200017133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.uxdgpy.top"; classtype:attempted-recon; sid:200017134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.uxvqzp.top"; classtype:attempted-recon; sid:200017135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.vdpgwm.top"; classtype:attempted-recon; sid:200017136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.vqeyuo.top"; classtype:attempted-recon; sid:200017137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.vspjok.icu"; classtype:attempted-recon; sid:200017138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.vvkdlh.top"; classtype:attempted-recon; sid:200017139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.vxcrlo.top"; classtype:attempted-recon; sid:200017140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.werbdt.top"; classtype:attempted-recon; sid:200017141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.wfirhj.top"; classtype:attempted-recon; sid:200017142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.whnjwr.top"; classtype:attempted-recon; sid:200017143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.witojr.top"; classtype:attempted-recon; sid:200017144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.wmygyx.top"; classtype:attempted-recon; sid:200017145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.wpzqxg.top"; classtype:attempted-recon; sid:200017146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.wsojbg.icu"; classtype:attempted-recon; sid:200017147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.wxpckc.icu"; classtype:attempted-recon; sid:200017148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.xd1bpn.icu"; classtype:attempted-recon; sid:200017149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.xeygaj.top"; classtype:attempted-recon; sid:200017150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.xgysxo.top"; classtype:attempted-recon; sid:200017151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.xydvkg.top"; classtype:attempted-recon; sid:200017152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.xyuhnm.top"; classtype:attempted-recon; sid:200017153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.xztftf.top"; classtype:attempted-recon; sid:200017154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.ymifv0.icu"; classtype:attempted-recon; sid:200017155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.yqasjy.icu"; classtype:attempted-recon; sid:200017156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.yuxvpc.top"; classtype:attempted-recon; sid:200017157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.yvjdgy.top"; classtype:attempted-recon; sid:200017158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.yybtfl.top"; classtype:attempted-recon; sid:200017159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.zhsntm.top"; classtype:attempted-recon; sid:200017160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.zhwpnq.top"; classtype:attempted-recon; sid:200017161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.zovh96.icu"; classtype:attempted-recon; sid:200017162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rasosekocrou.rakoasueeena.zoyqhl.top"; classtype:attempted-recon; sid:200017163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raspy-king-4ed0.settingspaqesapp.workers.dev"; classtype:attempted-recon; sid:200017164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raspy-water-dcc2.beanwoodnode.workers.dev"; classtype:attempted-recon; sid:200017165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rauchenbergerlenggries.clickfunnels.com"; classtype:attempted-recon; sid:200017166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raupnwqbmc.duckdns.org"; classtype:attempted-recon; sid:200017167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rauxumfhwo.duckdns.org"; classtype:attempted-recon; sid:200017168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raycargo.com"; classtype:attempted-recon; sid:200017169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rayddium.us"; classtype:attempted-recon; sid:200017170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raydiummon.com"; classtype:attempted-recon; sid:200017171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raydiumprotocol.net"; classtype:attempted-recon; sid:200017172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raydnium.us"; classtype:attempted-recon; sid:200017173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rayhanbusiness.my.id"; classtype:attempted-recon; sid:200017174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raynau.hyperphp.com"; classtype:attempted-recon; sid:200017175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"razcpufynr.duckdns.org"; classtype:attempted-recon; sid:200017176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rbcmontgomery.com"; classtype:attempted-recon; sid:200017177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rbkavqyorf.duckdns.org"; classtype:attempted-recon; sid:200017178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rbkfytqwfv.duckdns.org"; classtype:attempted-recon; sid:200017179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rbnsgrlaij.duckdns.org"; classtype:attempted-recon; sid:200017180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rbtnr.hostfree.pw"; classtype:attempted-recon; sid:200017181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rbyyvjwhkk.duckdns.org"; classtype:attempted-recon; sid:200017182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcacbqnjja.duckdns.org"; classtype:attempted-recon; sid:200017183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcbcxblmvy.duckdns.org"; classtype:attempted-recon; sid:200017184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rchsopqtwe.duckdns.org"; classtype:attempted-recon; sid:200017185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcicpzlbps.duckdns.org"; classtype:attempted-recon; sid:200017186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcimxjqvry.duckdns.org"; classtype:attempted-recon; sid:200017187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcjtcbfbsm.duckdns.org"; classtype:attempted-recon; sid:200017188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcntwfphyw.duckdns.org"; classtype:attempted-recon; sid:200017189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcoghzwdof.duckdns.org"; classtype:attempted-recon; sid:200017190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcpeqmrokq.duckdns.org"; classtype:attempted-recon; sid:200017191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcqsdpfnte.duckdns.org"; classtype:attempted-recon; sid:200017192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcsvzumimd.duckdns.org"; classtype:attempted-recon; sid:200017193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000001.firebaseapp.com"; classtype:attempted-recon; sid:200017194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000001.web.app"; classtype:attempted-recon; sid:200017195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000002.firebaseapp.com"; classtype:attempted-recon; sid:200017196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000002.web.app"; classtype:attempted-recon; sid:200017197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000005.firebaseapp.com"; classtype:attempted-recon; sid:200017198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000005.web.app"; classtype:attempted-recon; sid:200017199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000006.firebaseapp.com"; classtype:attempted-recon; sid:200017200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000006.web.app"; classtype:attempted-recon; sid:200017201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000008.firebaseapp.com"; classtype:attempted-recon; sid:200017202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000008.web.app"; classtype:attempted-recon; sid:200017203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000009.firebaseapp.com"; classtype:attempted-recon; sid:200017204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube000009.web.app"; classtype:attempted-recon; sid:200017205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube111112.firebaseapp.com"; classtype:attempted-recon; sid:200017206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube111112.web.app"; classtype:attempted-recon; sid:200017207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube111114.firebaseapp.com"; classtype:attempted-recon; sid:200017208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcube111114.web.app"; classtype:attempted-recon; sid:200017209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcubebit.bitbucket.io"; classtype:attempted-recon; sid:200017210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcvry.sftyacn.scrthlp.workers.dev"; classtype:attempted-recon; sid:200017211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcvry.sprt.acn-cnfrm.workers.dev"; classtype:attempted-recon; sid:200017212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcw-mivaan.onrender.com"; classtype:attempted-recon; sid:200017213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcwcuxpnns.duckdns.org"; classtype:attempted-recon; sid:200017214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rcwnpdtdwn.duckdns.org"; classtype:attempted-recon; sid:200017215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdcpcihhuh.duckdns.org"; classtype:attempted-recon; sid:200017216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdhcwcnutp.duckdns.org"; classtype:attempted-recon; sid:200017217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdhtire.net"; classtype:attempted-recon; sid:200017218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdlyau.ga"; classtype:attempted-recon; sid:200017219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdmytqwnow.duckdns.org"; classtype:attempted-recon; sid:200017220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdogjgpldt.duckdns.org"; classtype:attempted-recon; sid:200017221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdrtybyfeu.duckdns.org"; classtype:attempted-recon; sid:200017222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rdshqtdxpv.duckdns.org"; classtype:attempted-recon; sid:200017223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"re-redirection-acc-id923872635122.blogspot.com"; classtype:attempted-recon; sid:200017224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"re.golflakegarda.com"; classtype:attempted-recon; sid:200017225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"re2ions.firebaseapp.com"; classtype:attempted-recon; sid:200017226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"re2ions.web.app"; classtype:attempted-recon; sid:200017227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"re7d89uevhusah8c.lavzewwclkpiipe-uiguiui-yutriug.workers.dev"; classtype:attempted-recon; sid:200017228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reactivate-device-au.firebaseapp.com"; classtype:attempted-recon; sid:200017229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reactivate-device-au.web.app"; classtype:attempted-recon; sid:200017230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reactivate-device.firebaseapp.com"; classtype:attempted-recon; sid:200017231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reactivate-device.web.app"; classtype:attempted-recon; sid:200017232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reactiwqsdadsd3a.hostfree.pw"; classtype:attempted-recon; sid:200017233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"realesign.com"; classtype:attempted-recon; sid:200017234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"realonlineincome.info"; classtype:attempted-recon; sid:200017235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"realorigin.org"; classtype:attempted-recon; sid:200017236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rebeccasokol.com"; classtype:attempted-recon; sid:200017237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"record-cloud-file.product-list.workers.dev"; classtype:attempted-recon; sid:200017238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"records.ozspace.cn"; classtype:attempted-recon; sid:200017239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"recovery-fb.secure-acct.workers.dev"; classtype:attempted-recon; sid:200017240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"recovery-protection2022.42web.io"; classtype:attempted-recon; sid:200017241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"recreatorme.github.io"; classtype:attempted-recon; sid:200017242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"recruiting.rs.ba"; classtype:attempted-recon; sid:200017243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rectifydapps.net"; classtype:attempted-recon; sid:200017244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"recuperaciondecuenta-12b0.czemarkojo.workers.dev"; classtype:attempted-recon; sid:200017245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"red-b90738.ingress-earth.ewp.live"; classtype:attempted-recon; sid:200017246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redbysfrgroupebox.myfreesites.net"; classtype:attempted-recon; sid:200017247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rede-gerenciadorcx-multiassistencia.blogspot.com"; classtype:attempted-recon; sid:200017248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redeem-microsoft-code.sitey.me"; classtype:attempted-recon; sid:200017249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redeliver-parcel-au.firebaseapp.com"; classtype:attempted-recon; sid:200017250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redeliver-parcel-au.web.app"; classtype:attempted-recon; sid:200017251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redelivery-evri-gb.firebaseapp.com"; classtype:attempted-recon; sid:200017252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redelivery.gbroyaltracking.20-214-234-184.cprapid.com"; classtype:attempted-recon; sid:200017253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redesign.randolphunlimited.net"; classtype:attempted-recon; sid:200017254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rediractionid547012016089540218057.blogspot.com"; classtype:attempted-recon; sid:200017255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redirect-service.xyz"; classtype:attempted-recon; sid:200017256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redirection-b836d.web.app"; classtype:attempted-recon; sid:200017257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redmanphnf.duckdns.org"; classtype:attempted-recon; sid:200017258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redtailfriday0004.firebaseapp.com"; classtype:attempted-recon; sid:200017259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"redtailfriday0004.web.app"; classtype:attempted-recon; sid:200017260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"refund.tax.wvnid.live"; classtype:attempted-recon; sid:200017261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reg.tax.s17f.live"; classtype:attempted-recon; sid:200017262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reg.tax.s48f.live"; classtype:attempted-recon; sid:200017263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reg123r.web.app"; classtype:attempted-recon; sid:200017264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"regenerations.eu"; classtype:attempted-recon; sid:200017265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"regionalezeknozoyda.flazio.com"; classtype:attempted-recon; sid:200017266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"register.animonda.de"; classtype:attempted-recon; sid:200017267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"register.templejoy.net"; classtype:attempted-recon; sid:200017268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"registergalicia.registergalicia.repl.co"; classtype:attempted-recon; sid:200017269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"registerschwein.com"; classtype:attempted-recon; sid:200017270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"registradigital.com"; classtype:attempted-recon; sid:200017271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"registro.solicitudes-superefectivo-preferente.com"; classtype:attempted-recon; sid:200017272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"regngfubxe.duckdns.org"; classtype:attempted-recon; sid:200017273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"regularizaautorepuve.com"; classtype:attempted-recon; sid:200017274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reinforcementdetail.co.uk"; classtype:attempted-recon; sid:200017275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reinoo1.co.vu"; classtype:attempted-recon; sid:200017276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reiskos.website"; classtype:attempted-recon; sid:200017277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"relevantmenacingembeds.daviplataverifi.repl.co"; classtype:attempted-recon; sid:200017278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reliancedigitalbootupindia.upflockdigitalconference.com"; classtype:attempted-recon; sid:200017279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reliancedigitalcompany.com"; classtype:attempted-recon; sid:200017280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reliancejiojob.blogspot.com"; classtype:attempted-recon; sid:200017281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"remixethereumcompiler.org"; classtype:attempted-recon; sid:200017282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"remototarget.ihostfull.com"; classtype:attempted-recon; sid:200017283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"remzicakar.com.tr"; classtype:attempted-recon; sid:200017284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"renew-104287.square.site"; classtype:attempted-recon; sid:200017285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rent4ever.in"; classtype:attempted-recon; sid:200017286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rentapb.com"; classtype:attempted-recon; sid:200017287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reowoczgqm.duckdns.org"; classtype:attempted-recon; sid:200017288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"repareactive.santurcefil.repl.co"; classtype:attempted-recon; sid:200017289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"repl-mess.myfreesites.net"; classtype:attempted-recon; sid:200017290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"repo4u536ihg.club"; classtype:attempted-recon; sid:200017291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reports-package-summary.delivery-ups.com.smksbinaputrajaksel.sch.id"; classtype:attempted-recon; sid:200017292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"repspdtijz.duckdns.org"; classtype:attempted-recon; sid:200017293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"request.br.ironmountain.com"; classtype:attempted-recon; sid:200017294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"required.tbmax.cn"; classtype:attempted-recon; sid:200017295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"requisitoexitoso.portrolerperu.com"; classtype:attempted-recon; sid:200017296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rersoahjap.duckdns.org"; classtype:attempted-recon; sid:200017297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"res-va.web.app"; classtype:attempted-recon; sid:200017298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resect-alert-confrimation-ionos.glitch.me"; classtype:attempted-recon; sid:200017299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resolvendo-registro-solucoes.com"; classtype:attempted-recon; sid:200017300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"respondwithlife.com"; classtype:attempted-recon; sid:200017301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"restles.ndkdjndnnd.workers.dev"; classtype:attempted-recon; sid:200017302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"restless-queen-64bf.dotmay820.workers.dev"; classtype:attempted-recon; sid:200017303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"restrizioneaccedi.com"; classtype:attempted-recon; sid:200017304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"retaggle.com"; classtype:attempted-recon; sid:200017305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"retiro.cl"; classtype:attempted-recon; sid:200017306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"retvwycxds.duckdns.org"; classtype:attempted-recon; sid:200017307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reuafdhala.duckdns.org"; classtype:attempted-recon; sid:200017308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"revalidate-107439.square.site"; classtype:attempted-recon; sid:200017309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reviewctb.com"; classtype:attempted-recon; sid:200017310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reviewmailnhfhffg.myportfolio.com"; classtype:attempted-recon; sid:200017311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"revolut-account-limited.com"; classtype:attempted-recon; sid:200017312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"revolut-email.com"; classtype:attempted-recon; sid:200017313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"revtvxypgc.duckdns.org"; classtype:attempted-recon; sid:200017314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rewardsyncdappssconnect.web.app"; classtype:attempted-recon; sid:200017315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rexqeaaqab.duckdns.org"; classtype:attempted-recon; sid:200017316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfcnhduxcn.duckdns.org"; classtype:attempted-recon; sid:200017317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfgegdsfghdfhfds.x10.mx"; classtype:attempted-recon; sid:200017318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfgegdsfghdfhfdssada.x10.mx"; classtype:attempted-recon; sid:200017319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfoictghuq.duckdns.org"; classtype:attempted-recon; sid:200017320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfphomesmke.myportfolio.com"; classtype:attempted-recon; sid:200017321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfrcvqdfzn.duckdns.org"; classtype:attempted-recon; sid:200017322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfrhuvvxle.duckdns.org"; classtype:attempted-recon; sid:200017323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfsnycutwy.duckdns.org"; classtype:attempted-recon; sid:200017324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfvxtydwuj.duckdns.org"; classtype:attempted-recon; sid:200017325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfypwwmvvp.duckdns.org"; classtype:attempted-recon; sid:200017326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rfzachzkur.duckdns.org"; classtype:attempted-recon; sid:200017327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rg0iq4e8p1mpfc77j66q7pah4tq0h1jmm6rn0mbe1pt3r7g8u9q6ru0.siasky.net"; classtype:attempted-recon; sid:200017328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rg0jvgaaemu88q9uo7cmjv5chvs8hvtk5sd7nebna7n5snln57tmaeo.siasky.net"; classtype:attempted-recon; sid:200017329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgghhxstgd.duckdns.org"; classtype:attempted-recon; sid:200017330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rghujhawan.duckdns.org"; classtype:attempted-recon; sid:200017331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgkjougqaw.duckdns.org"; classtype:attempted-recon; sid:200017332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgkkvyjzjb.duckdns.org"; classtype:attempted-recon; sid:200017333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgkyuxvkei.duckdns.org"; classtype:attempted-recon; sid:200017334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgmzibhqks.duckdns.org"; classtype:attempted-recon; sid:200017335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgsolutions.com.br"; classtype:attempted-recon; sid:200017336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rguunimlaz.duckdns.org"; classtype:attempted-recon; sid:200017337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgvqlrqpyo.duckdns.org"; classtype:attempted-recon; sid:200017338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgyzhqnryt.duckdns.org"; classtype:attempted-recon; sid:200017339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhafjaqvej.duckdns.org"; classtype:attempted-recon; sid:200017340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhazaeyjnn.duckdns.org"; classtype:attempted-recon; sid:200017341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhbxqpunso.duckdns.org"; classtype:attempted-recon; sid:200017342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rheazipbyt.duckdns.org"; classtype:attempted-recon; sid:200017343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhglyrmlnx.duckdns.org"; classtype:attempted-recon; sid:200017344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhnozepciw.duckdns.org"; classtype:attempted-recon; sid:200017345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhqxlyskrr.duckdns.org"; classtype:attempted-recon; sid:200017346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhuqywzjml.duckdns.org"; classtype:attempted-recon; sid:200017347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhutoecckm.duckdns.org"; classtype:attempted-recon; sid:200017348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhvmqpbyqi.duckdns.org"; classtype:attempted-recon; sid:200017349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhxxidetxd.duckdns.org"; classtype:attempted-recon; sid:200017350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rhykvljkop.duckdns.org"; classtype:attempted-recon; sid:200017351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riagnlew.hyperphp.com"; classtype:attempted-recon; sid:200017352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ribcrdzhkb.duckdns.org"; classtype:attempted-recon; sid:200017353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riconsegnacarta.com"; classtype:attempted-recon; sid:200017354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rigdoedosw.duckdns.org"; classtype:attempted-recon; sid:200017355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rigpfdapoh.duckdns.org"; classtype:attempted-recon; sid:200017356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rigxepeqbr.duckdns.org"; classtype:attempted-recon; sid:200017357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rigxnurrkl.duckdns.org"; classtype:attempted-recon; sid:200017358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rigzkquwno.duckdns.org"; classtype:attempted-recon; sid:200017359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riivwjpipw.duckdns.org"; classtype:attempted-recon; sid:200017360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rikdkugmmd.duckdns.org"; classtype:attempted-recon; sid:200017361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rilevanzabperitaonline.com"; classtype:attempted-recon; sid:200017362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rilfruwwwf.duckdns.org"; classtype:attempted-recon; sid:200017363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rinprdcmjs.duckdns.org"; classtype:attempted-recon; sid:200017364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rioivytewj.duckdns.org"; classtype:attempted-recon; sid:200017365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ripristinaportaleaccesso.com"; classtype:attempted-recon; sid:200017366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ripristinarestrizione.com"; classtype:attempted-recon; sid:200017367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ripristinawebdispositivo.com"; classtype:attempted-recon; sid:200017368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"risedefenders.io"; classtype:attempted-recon; sid:200017369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"risemedicalmarijuanadisp.blogspot.com"; classtype:attempted-recon; sid:200017370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"risersmn.com"; classtype:attempted-recon; sid:200017371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riserva.000webhostapp.com"; classtype:attempted-recon; sid:200017372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"risoluzione.problemi.northeastmobilephonenumberlist.com"; classtype:attempted-recon; sid:200017373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riugqqlrew.duckdns.org"; classtype:attempted-recon; sid:200017374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riveroflife.org.in"; classtype:attempted-recon; sid:200017375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riverviewtire.com"; classtype:attempted-recon; sid:200017376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"riverwidemusic.com"; classtype:attempted-recon; sid:200017377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rixqtnjqve.duckdns.org"; classtype:attempted-recon; sid:200017378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rjczlzrgtr.duckdns.org"; classtype:attempted-recon; sid:200017379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rjh788.cc"; classtype:attempted-recon; sid:200017380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rjnnhjlcde.duckdns.org"; classtype:attempted-recon; sid:200017381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rjnztctalb.duckdns.org"; classtype:attempted-recon; sid:200017382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rjrktzbtyq.duckdns.org"; classtype:attempted-recon; sid:200017383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkeinqnwdm.duckdns.org"; classtype:attempted-recon; sid:200017384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkgroupss.com"; classtype:attempted-recon; sid:200017385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkhdyezryl.duckdns.org"; classtype:attempted-recon; sid:200017386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkkchmnerv.duckdns.org"; classtype:attempted-recon; sid:200017387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkmiipiibo.duckdns.org"; classtype:attempted-recon; sid:200017388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkosceuebe.duckdns.org"; classtype:attempted-recon; sid:200017389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkoxiubuck.duckdns.org"; classtype:attempted-recon; sid:200017390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkoxxzdgsi.duckdns.org"; classtype:attempted-recon; sid:200017391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkryblxtum.duckdns.org"; classtype:attempted-recon; sid:200017392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rktqsqakuq.duckdns.org"; classtype:attempted-recon; sid:200017393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkurobzwzw.duckdns.org"; classtype:attempted-recon; sid:200017394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkuypnvpjd.duckdns.org"; classtype:attempted-recon; sid:200017395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkwkhadxtu.duckdns.org"; classtype:attempted-recon; sid:200017396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rkyyyozrtk.duckdns.org"; classtype:attempted-recon; sid:200017397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlcuhrkciy.duckdns.org"; classtype:attempted-recon; sid:200017398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rleclomzvc.duckdns.org"; classtype:attempted-recon; sid:200017399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlgzbahcoq.duckdns.org"; classtype:attempted-recon; sid:200017400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rllfqcoyoh.duckdns.org"; classtype:attempted-recon; sid:200017401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlltjshdyy.duckdns.org"; classtype:attempted-recon; sid:200017402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlmjcofqgf.duckdns.org"; classtype:attempted-recon; sid:200017403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlogpaduxi.duckdns.org"; classtype:attempted-recon; sid:200017404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rloxie1e60.myportfolio.com"; classtype:attempted-recon; sid:200017405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlprszpotg.duckdns.org"; classtype:attempted-recon; sid:200017406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlqsmasrmt.duckdns.org"; classtype:attempted-recon; sid:200017407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlwxdpomqh.duckdns.org"; classtype:attempted-recon; sid:200017408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlwyxbxvrg.duckdns.org"; classtype:attempted-recon; sid:200017409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmcdzbzxca.duckdns.org"; classtype:attempted-recon; sid:200017410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmcrvprvck.duckdns.org"; classtype:attempted-recon; sid:200017411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmddhptbqv.duckdns.org"; classtype:attempted-recon; sid:200017412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmegskjnjl.duckdns.org"; classtype:attempted-recon; sid:200017413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmelwsx.hyperphp.com"; classtype:attempted-recon; sid:200017414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmeryzyyvi.duckdns.org"; classtype:attempted-recon; sid:200017415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmidbmfqny.duckdns.org"; classtype:attempted-recon; sid:200017416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmjasgfqme.duckdns.org"; classtype:attempted-recon; sid:200017417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmngggnkal.duckdns.org"; classtype:attempted-recon; sid:200017418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmpcnyugbw.duckdns.org"; classtype:attempted-recon; sid:200017419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmpnffpuup.duckdns.org"; classtype:attempted-recon; sid:200017420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmslpftxhb.duckdns.org"; classtype:attempted-recon; sid:200017421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmtwmxprro.duckdns.org"; classtype:attempted-recon; sid:200017422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmuaugslsr.duckdns.org"; classtype:attempted-recon; sid:200017423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmwftwgnad.duckdns.org"; classtype:attempted-recon; sid:200017424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmybajdbmn.duckdns.org"; classtype:attempted-recon; sid:200017425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmyqpccppt.duckdns.org"; classtype:attempted-recon; sid:200017426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rmzdpjokxm.duckdns.org"; classtype:attempted-recon; sid:200017427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnaepyeztz.duckdns.org"; classtype:attempted-recon; sid:200017428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnanwsx.hyperphp.com"; classtype:attempted-recon; sid:200017429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rncfaeiddp.duckdns.org"; classtype:attempted-recon; sid:200017430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnfcfmwtzp.duckdns.org"; classtype:attempted-recon; sid:200017431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnfpysrrup.duckdns.org"; classtype:attempted-recon; sid:200017432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnglfzksmc.duckdns.org"; classtype:attempted-recon; sid:200017433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnlvqnjrmt.duckdns.org"; classtype:attempted-recon; sid:200017434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnvuuoyevx.duckdns.org"; classtype:attempted-recon; sid:200017435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rnwfvxahym.duckdns.org"; classtype:attempted-recon; sid:200017436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ro0vc.app.link"; classtype:attempted-recon; sid:200017437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"road-fuschia-shroud.glitch.me"; classtype:attempted-recon; sid:200017438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"robertcarlsonlaw.com"; classtype:attempted-recon; sid:200017439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"robsuninc.com"; classtype:attempted-recon; sid:200017440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roccobonheur1-my-cheetah-website-copy.cheetah.builderall.com"; classtype:attempted-recon; sid:200017441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rocksageroom.com"; classtype:attempted-recon; sid:200017442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rockstheme.com"; classtype:attempted-recon; sid:200017443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rodriguezadams.com"; classtype:attempted-recon; sid:200017444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roisnoob.github.io"; classtype:attempted-recon; sid:200017445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rojfugizra.duckdns.org"; classtype:attempted-recon; sid:200017446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rolkpamqty.duckdns.org"; classtype:attempted-recon; sid:200017447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"romaeribsm.duckdns.org"; classtype:attempted-recon; sid:200017448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"romxn96.de"; classtype:attempted-recon; sid:200017449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ronhjkngdq.duckdns.org"; classtype:attempted-recon; sid:200017450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ronin-help.club"; classtype:attempted-recon; sid:200017451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ronin-help.us"; classtype:attempted-recon; sid:200017452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ronin-wallet.firebaseapp.com"; classtype:attempted-recon; sid:200017453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ronin-wallet.web.app"; classtype:attempted-recon; sid:200017454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roninchain.website"; classtype:attempted-recon; sid:200017455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roninwallet-official.com"; classtype:attempted-recon; sid:200017456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roninwallet.cm"; classtype:attempted-recon; sid:200017457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ronobe.com"; classtype:attempted-recon; sid:200017458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rootscomm.cam"; classtype:attempted-recon; sid:200017459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ropvcjcabe.duckdns.org"; classtype:attempted-recon; sid:200017460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rorgvugqrr.firebaseapp.com"; classtype:attempted-recon; sid:200017461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rorgvugqrr.web.app"; classtype:attempted-recon; sid:200017462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roselaka.cloudaccess.host"; classtype:attempted-recon; sid:200017463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rosshw.com"; classtype:attempted-recon; sid:200017464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rothschild-ag.de"; classtype:attempted-recon; sid:200017465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rough-dawn-ccf0.spectrumservdc5308.workers.dev"; classtype:attempted-recon; sid:200017466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rough-wood-4310.on.fleek.co"; classtype:attempted-recon; sid:200017467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"round-violet-c0fe.henhigay285.workers.dev"; classtype:attempted-recon; sid:200017468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube-5ae8a.firebaseapp.com"; classtype:attempted-recon; sid:200017469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube-5ae8a.web.app"; classtype:attempted-recon; sid:200017470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube-cpanel-wren.surge.sh"; classtype:attempted-recon; sid:200017471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube-production-cf.tx1.mailhostbox.com"; classtype:attempted-recon; sid:200017472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube-updatealx.firebaseapp.com"; classtype:attempted-recon; sid:200017473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube-updatealx.web.app"; classtype:attempted-recon; sid:200017474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube0004.firebaseapp.com"; classtype:attempted-recon; sid:200017475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcube0004.web.app"; classtype:attempted-recon; sid:200017476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcubemanday001.firebaseapp.com"; classtype:attempted-recon; sid:200017477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcubemanday001.web.app"; classtype:attempted-recon; sid:200017478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcubemiinday0005.firebaseapp.com"; classtype:attempted-recon; sid:200017479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roundcubemiinday0005.web.app"; classtype:attempted-recon; sid:200017480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rovmiglqaw.duckdns.org"; classtype:attempted-recon; sid:200017481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rovuhomszh.duckdns.org"; classtype:attempted-recon; sid:200017482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"royal-meat.eu"; classtype:attempted-recon; sid:200017483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"royaleboxm11.com"; classtype:attempted-recon; sid:200017484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roydium.io"; classtype:attempted-recon; sid:200017485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roylnkwzma.duckdns.org"; classtype:attempted-recon; sid:200017486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rpdplfwaww.duckdns.org"; classtype:attempted-recon; sid:200017487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rpfeiowlfz.duckdns.org"; classtype:attempted-recon; sid:200017488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rphjvuhqcm.duckdns.org"; classtype:attempted-recon; sid:200017489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rpihwqzzya.duckdns.org"; classtype:attempted-recon; sid:200017490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rpnsvgesmy.duckdns.org"; classtype:attempted-recon; sid:200017491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rppcprerer.duckdns.org"; classtype:attempted-recon; sid:200017492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rprtcsaqqy.duckdns.org"; classtype:attempted-recon; sid:200017493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rptpcdshor.duckdns.org"; classtype:attempted-recon; sid:200017494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rptrufnpbc.duckdns.org"; classtype:attempted-recon; sid:200017495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rpxhvbxjre.duckdns.org"; classtype:attempted-recon; sid:200017496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rpyyrcznld.duckdns.org"; classtype:attempted-recon; sid:200017497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqehnztoyk.duckdns.org"; classtype:attempted-recon; sid:200017498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqerqfnlss.duckdns.org"; classtype:attempted-recon; sid:200017499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqgqxstzij.duckdns.org"; classtype:attempted-recon; sid:200017500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqksbughpo.duckdns.org"; classtype:attempted-recon; sid:200017501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqkxbbmiwq.duckdns.org"; classtype:attempted-recon; sid:200017502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqqesegstt.duckdns.org"; classtype:attempted-recon; sid:200017503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqqmlukmgf.duckdns.org"; classtype:attempted-recon; sid:200017504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqril-ble.com"; classtype:attempted-recon; sid:200017505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqtxcshlop.duckdns.org"; classtype:attempted-recon; sid:200017506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqvxzqkhlk.duckdns.org"; classtype:attempted-recon; sid:200017507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rqypntgufp.duckdns.org"; classtype:attempted-recon; sid:200017508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrbazttuen.duckdns.org"; classtype:attempted-recon; sid:200017509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rregdpnpeh.duckdns.org"; classtype:attempted-recon; sid:200017510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rriwy8.webwave.dev"; classtype:attempted-recon; sid:200017511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrmhcwaefd.duckdns.org"; classtype:attempted-recon; sid:200017512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrogvviwdr.duckdns.org"; classtype:attempted-recon; sid:200017513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrrrett543.firebaseapp.com"; classtype:attempted-recon; sid:200017514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrrrett543.web.app"; classtype:attempted-recon; sid:200017515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrttbghacp.duckdns.org"; classtype:attempted-recon; sid:200017516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrursdmcgq.duckdns.org"; classtype:attempted-recon; sid:200017517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrvgpltfva.duckdns.org"; classtype:attempted-recon; sid:200017518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrvuhhjiao.duckdns.org"; classtype:attempted-recon; sid:200017519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrxscarwcf.duckdns.org"; classtype:attempted-recon; sid:200017520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rrzwoyeqbk.duckdns.org"; classtype:attempted-recon; sid:200017521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rsaliruiht.duckdns.org"; classtype:attempted-recon; sid:200017522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rshbokilqu.duckdns.org"; classtype:attempted-recon; sid:200017523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rshplgeliq.duckdns.org"; classtype:attempted-recon; sid:200017524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rslhlmezbkdlzatkdhm-f-qktyrrzwlnjcrttvhp-vpmghxuffbxiauricsw.glitch.me"; classtype:attempted-recon; sid:200017525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rsqhzsippf.duckdns.org"; classtype:attempted-recon; sid:200017526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rsvoidsczq.duckdns.org"; classtype:attempted-recon; sid:200017527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtdosagvrv.duckdns.org"; classtype:attempted-recon; sid:200017528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtfklt.com"; classtype:attempted-recon; sid:200017529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtfkt.minting-pre.com"; classtype:attempted-recon; sid:200017530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtfvpecptl.duckdns.org"; classtype:attempted-recon; sid:200017531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtgifujjvi.duckdns.org"; classtype:attempted-recon; sid:200017532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtiibxydwx.duckdns.org"; classtype:attempted-recon; sid:200017533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtlpgamuqz.duckdns.org"; classtype:attempted-recon; sid:200017534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtoujypznt.duckdns.org"; classtype:attempted-recon; sid:200017535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtpebfxozt.duckdns.org"; classtype:attempted-recon; sid:200017536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtpzmnvorq.duckdns.org"; classtype:attempted-recon; sid:200017537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtrovbplap.duckdns.org"; classtype:attempted-recon; sid:200017538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtudonsxyc.duckdns.org"; classtype:attempted-recon; sid:200017539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtwdsnlmjy.duckdns.org"; classtype:attempted-recon; sid:200017540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtxequzrqt.duckdns.org"; classtype:attempted-recon; sid:200017541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtxknqlddf.duckdns.org"; classtype:attempted-recon; sid:200017542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtzdruljam.duckdns.org"; classtype:attempted-recon; sid:200017543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtzyvuzmpp.duckdns.org"; classtype:attempted-recon; sid:200017544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ruhxsqrioc.duckdns.org"; classtype:attempted-recon; sid:200017545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rujcrdgipg.duckdns.org"; classtype:attempted-recon; sid:200017546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ruls463256.sapm183.repl.co"; classtype:attempted-recon; sid:200017547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ruoqubzzgk.duckdns.org"; classtype:attempted-recon; sid:200017548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rupiephillips.org"; classtype:attempted-recon; sid:200017549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"russian-shein.online"; classtype:attempted-recon; sid:200017550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rususia.weebly.com"; classtype:attempted-recon; sid:200017551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rutnteawjf.duckdns.org"; classtype:attempted-recon; sid:200017552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ruxxskcbuu.duckdns.org"; classtype:attempted-recon; sid:200017553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ruykbmcddm.duckdns.org"; classtype:attempted-recon; sid:200017554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rvacdnyopj.duckdns.org"; classtype:attempted-recon; sid:200017555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rvgowysnxw.duckdns.org"; classtype:attempted-recon; sid:200017556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rvldtjiaoz.duckdns.org"; classtype:attempted-recon; sid:200017557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rvnnvxabaz.duckdns.org"; classtype:attempted-recon; sid:200017558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rvyuodwdkt.duckdns.org"; classtype:attempted-recon; sid:200017559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rvzulldont.duckdns.org"; classtype:attempted-recon; sid:200017560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwbzrgzqzx.duckdns.org"; classtype:attempted-recon; sid:200017561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwfmsfowdm.duckdns.org"; classtype:attempted-recon; sid:200017562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwguxrsxwl.duckdns.org"; classtype:attempted-recon; sid:200017563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwimyhuxpi.duckdns.org"; classtype:attempted-recon; sid:200017564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwmxiicjgq.duckdns.org"; classtype:attempted-recon; sid:200017565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwopinfqcf.duckdns.org"; classtype:attempted-recon; sid:200017566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwsnzkpoem.duckdns.org"; classtype:attempted-recon; sid:200017567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxenmtepgb.duckdns.org"; classtype:attempted-recon; sid:200017568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxklipemdq.duckdns.org"; classtype:attempted-recon; sid:200017569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxkvlqfbxu.duckdns.org"; classtype:attempted-recon; sid:200017570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxmfzmzese.duckdns.org"; classtype:attempted-recon; sid:200017571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxonoimjji.duckdns.org"; classtype:attempted-recon; sid:200017572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxqifplbuj.duckdns.org"; classtype:attempted-recon; sid:200017573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxuxlpidgv.duckdns.org"; classtype:attempted-recon; sid:200017574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rxzgezfzot.duckdns.org"; classtype:attempted-recon; sid:200017575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ryebcysxer.duckdns.org"; classtype:attempted-recon; sid:200017576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ryjprnemut.duckdns.org"; classtype:attempted-recon; sid:200017577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ryjtqclnbm.duckdns.org"; classtype:attempted-recon; sid:200017578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rykbpbqhzn.duckdns.org"; classtype:attempted-recon; sid:200017579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rypgwwycxj.duckdns.org"; classtype:attempted-recon; sid:200017580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ryrlxcjgls.duckdns.org"; classtype:attempted-recon; sid:200017581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rytmhtouyp.duckdns.org"; classtype:attempted-recon; sid:200017582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ryvtvtefsc.duckdns.org"; classtype:attempted-recon; sid:200017583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ryzjikrluy.duckdns.org"; classtype:attempted-recon; sid:200017584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzbxwvtbsf.duckdns.org"; classtype:attempted-recon; sid:200017585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzckerurbp.duckdns.org"; classtype:attempted-recon; sid:200017586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzfshxobxj.duckdns.org"; classtype:attempted-recon; sid:200017587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzhgfn.com"; classtype:attempted-recon; sid:200017588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzixcizgsm.duckdns.org"; classtype:attempted-recon; sid:200017589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzkmihxaec.duckdns.org"; classtype:attempted-recon; sid:200017590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzo478t7.hyperphp.com"; classtype:attempted-recon; sid:200017591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rzvhralszj.duckdns.org"; classtype:attempted-recon; sid:200017592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s-fa31f3-i.sgizmo.com"; classtype:attempted-recon; sid:200017593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s-id-sp.de"; classtype:attempted-recon; sid:200017594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s-online.xyz"; classtype:attempted-recon; sid:200017595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.free.fr"; classtype:attempted-recon; sid:200017596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.infidefi-smartsync.live"; classtype:attempted-recon; sid:200017597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.yam.com"; classtype:attempted-recon; sid:200017598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s104318.gridserver.com"; classtype:attempted-recon; sid:200017599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s1mple-case.ru"; classtype:attempted-recon; sid:200017600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s23.proserv.ge"; classtype:attempted-recon; sid:200017601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s4r9mj97.r.us-east-1.awstrack.me"; classtype:attempted-recon; sid:200017602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s5r7pt.webwave.dev"; classtype:attempted-recon; sid:200017603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sa963554-9293.firebaseapp.com"; classtype:attempted-recon; sid:200017604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sa963554-9293.web.app"; classtype:attempted-recon; sid:200017605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaaeieccsercsooan.seesaacrcoesniorcnii.ezqrhd.top"; classtype:attempted-recon; sid:200017606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaaeieccsercsooan.seesaacrcoesniorcnii.qqwhps.top"; classtype:attempted-recon; sid:200017607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaaeisccecrsoona.seeascacrsoeoninrii.cwadib.top"; classtype:attempted-recon; sid:200017608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaicescecson.seaircarseoini.bsoflw.za.com"; classtype:attempted-recon; sid:200017609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaiecsecson.seaarcesiocni.nx3f132.tokyo"; classtype:attempted-recon; sid:200017610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieescecsrono.aseaecsescoconinri.93544117.icu"; classtype:attempted-recon; sid:200017611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieescecsrono.aseaecsescoconinri.gyzt808.xyz"; classtype:attempted-recon; sid:200017612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieescecsrono.aseaecsescoconinri.zjrvox.shop"; classtype:attempted-recon; sid:200017613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieiecseercsooan.seesaccoeosoncnrii.1223478.xyz"; classtype:attempted-recon; sid:200017614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieisceecrsoona.seeascscoeoonniri.owekid.top"; classtype:attempted-recon; sid:200017615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieisceecrsoona.seeascscoeoonniri.swixid.top"; classtype:attempted-recon; sid:200017616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieisceecrsoona.seeascscoeoonniri.xubnkg.top"; classtype:attempted-recon; sid:200017617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaieseccsorn.osaeacesseocnionri.ptyslj.top"; classtype:attempted-recon; sid:200017618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaiscecson.seacarseoini.dqfpgl.bar"; classtype:attempted-recon; sid:200017619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaiscecson.seacarseoini.mu70eqq.tokyo"; classtype:attempted-recon; sid:200017620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaaiscecson.seacarseoini.uvmqsl.cyou"; classtype:attempted-recon; sid:200017621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaiesecson.seacesocni.uhstcj.id"; classtype:attempted-recon; sid:200017622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaiiseecson.seacsoeoni.wddvzd.za.com"; classtype:attempted-recon; sid:200017623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaisceecson.seacsireoni.uqchzt.cyou"; classtype:attempted-recon; sid:200017624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaisecson.seacseoni.kmpops.za.com"; classtype:attempted-recon; sid:200017625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaisecson.seacseoni.zzjlis.bar"; classtype:attempted-recon; sid:200017626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saapktnnsm.duckdns.org"; classtype:attempted-recon; sid:200017627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sabadellpagofacil.com"; classtype:attempted-recon; sid:200017628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sacmhs.org"; classtype:attempted-recon; sid:200017629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saddylexou.duckdns.org"; classtype:attempted-recon; sid:200017630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sadervoyages.intnet.mu"; classtype:attempted-recon; sid:200017631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sadjknyqko.duckdns.org"; classtype:attempted-recon; sid:200017632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"safemoonstk.com"; classtype:attempted-recon; sid:200017633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"safjaufklx.duckdns.org"; classtype:attempted-recon; sid:200017634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"safraempresas.com.br.mcas-df.ms"; classtype:attempted-recon; sid:200017635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"safty.summarycheck.workers.dev"; classtype:attempted-recon; sid:200017636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"safuu-launchpad.com"; classtype:attempted-recon; sid:200017637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sahleymadison.com"; classtype:attempted-recon; sid:200017638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaaeesccecrsoona.seeascacrsoocninrii.bnmgde.top"; classtype:attempted-recon; sid:200017639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaaeesccecrsoona.seeascacrsoocninrii.wzsoeh.top"; classtype:attempted-recon; sid:200017640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaeeseccsorn.osaeacessoccnionri.enkzhe.top"; classtype:attempted-recon; sid:200017641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaieesceecrsoona.seeascscooocnniri.qtbvdy.top"; classtype:attempted-recon; sid:200017642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaieesceecrsoona.seeascscooocnniri.shanchuta15.shop"; classtype:attempted-recon; sid:200017643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaieseccesrono.aseaecssoconoinri.bnmgde.top"; classtype:attempted-recon; sid:200017644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaieseccesrono.aseaecssoconoinri.krgvgp.top"; classtype:attempted-recon; sid:200017645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaseccson.seacsaronii.geojvn.cyou"; classtype:attempted-recon; sid:200017646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiaseeccsonr.soeaacseosniconri.dcpmfp.top"; classtype:attempted-recon; sid:200017647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saicasioen.a.axrcbx.top"; classtype:attempted-recon; sid:200017648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saicasioen.a.svfocp.top"; classtype:attempted-recon; sid:200017649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiccosoiaecsien.oc.svfocp.top"; classtype:attempted-recon; sid:200017650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saicecsoisisoen.o.kbroxv.top"; classtype:attempted-recon; sid:200017651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saicescsoicssien.o.wiqlcn.top"; classtype:attempted-recon; sid:200017652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiesceecson.seacsirocni.rln1tn9.tokyo"; classtype:attempted-recon; sid:200017653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiesecson.seacsocni.cqfqae.za.com"; classtype:attempted-recon; sid:200017654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiieceseecson.seaircsoocni.82xbza3.tokyo"; classtype:attempted-recon; sid:200017655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saiiseceson.seacsooni.bnxryd.bar"; classtype:attempted-recon; sid:200017656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saika69sex.monster"; classtype:attempted-recon; sid:200017657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saintbarkleyshoes.com"; classtype:attempted-recon; sid:200017658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saisecson.seacsoni.hruuwy.za.com"; classtype:attempted-recon; sid:200017659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saisecson.seacsoni.qjpov54.tokyo"; classtype:attempted-recon; sid:200017660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saitadobrasil.com.br"; classtype:attempted-recon; sid:200017661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sajiuz.com"; classtype:attempted-recon; sid:200017662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sakf.co.za"; classtype:attempted-recon; sid:200017663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"salamalands.com"; classtype:attempted-recon; sid:200017664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sales-1inch.com"; classtype:attempted-recon; sid:200017665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"salesdoc.evdpl.com"; classtype:attempted-recon; sid:200017666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saliksnas.lojaintegrada.com.br"; classtype:attempted-recon; sid:200017667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"salmanfarsi01.github.io"; classtype:attempted-recon; sid:200017668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"salvvrbwib.duckdns.org"; classtype:attempted-recon; sid:200017669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"samakalinsangbad.com"; classtype:attempted-recon; sid:200017670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"samilitaria.com"; classtype:attempted-recon; sid:200017671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"samjgdpkhc.duckdns.org"; classtype:attempted-recon; sid:200017672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"samlikanada.it"; classtype:attempted-recon; sid:200017673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"samparkinfra.com"; classtype:attempted-recon; sid:200017674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"samrockchem.com"; classtype:attempted-recon; sid:200017675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"samvision.com.tr"; classtype:attempted-recon; sid:200017676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"san-dbox-home-lojaprincipessa.blogspot.com"; classtype:attempted-recon; sid:200017677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sanatanastrology.com"; classtype:attempted-recon; sid:200017678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sandalychacosklep.com"; classtype:attempted-recon; sid:200017679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sandbox.the-cave.co.uk"; classtype:attempted-recon; sid:200017680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sandeeppk03.github.io"; classtype:attempted-recon; sid:200017681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sandersonphotosonline.com"; classtype:attempted-recon; sid:200017682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sanjilkumar.com"; classtype:attempted-recon; sid:200017683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sankyo-m.jp"; classtype:attempted-recon; sid:200017684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sans-cravates.com"; classtype:attempted-recon; sid:200017685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"santa-tarjeta.es.swtest.ru"; classtype:attempted-recon; sid:200017686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"santa565sac.ultimatefreehost.in"; classtype:attempted-recon; sid:200017687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"santande40.temp.swtest.ru"; classtype:attempted-recon; sid:200017688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"santander-banc06.es.swtest.ru"; classtype:attempted-recon; sid:200017689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sante-client.fr"; classtype:attempted-recon; sid:200017690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"santyyeyod.duckdns.org"; classtype:attempted-recon; sid:200017691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saoikmuvet.duckdns.org"; classtype:attempted-recon; sid:200017692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saosnifqre.duckdns.org"; classtype:attempted-recon; sid:200017693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sapeme3412.temp.swtest.ru"; classtype:attempted-recon; sid:200017694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saqvididcp.duckdns.org"; classtype:attempted-recon; sid:200017695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasaaieeescecscronor.aseaiecsescioconiinrii.bovqgo.top"; classtype:attempted-recon; sid:200017696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasaaieseeccsocrn.orsaeaciesseocinionriii.gjedqs.top"; classtype:attempted-recon; sid:200017697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasaaieseeccsocrn.orsaeaciesseocinionriii.jtpyia.top"; classtype:attempted-recon; sid:200017698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasaeiiceceseercsoni.seioraceoessocninveri.wjavjf.shop"; classtype:attempted-recon; sid:200017699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasaeiicecseecrson.iseaiorcseoeosninveri.swixid.top"; classtype:attempted-recon; sid:200017700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasaeiicecseecrson.iseaiorcseoeosninveri.yfnvfr.top"; classtype:attempted-recon; sid:200017701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaaeeescceccrsoorna.seieascacirsoocininriii.sjmogv.top"; classtype:attempted-recon; sid:200017702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaaeseecccscronor.aseaiecssacirooniinirii.jnklqn.shop"; classtype:attempted-recon; sid:200017703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaaeseecccscronor.aseaiecssacirooniinirii.ykykqm.shop"; classtype:attempted-recon; sid:200017704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaeeseeccsocrn.orsaeaciessoccinionriii.6366778.xyz"; classtype:attempted-recon; sid:200017705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaeeseeccsocrn.orsaeaciessoccinionriii.ptyslj.top"; classtype:attempted-recon; sid:200017706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaeeseeccsocrn.orsaeaciessoccinionriii.yfnvfr.top"; classtype:attempted-recon; sid:200017707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaieeesceeccrsoorna.seieascsciooocninirii.cpgspk.top"; classtype:attempted-recon; sid:200017708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaieeesceeccrsoorna.seieascsciooocninirii.mylnsr.top"; classtype:attempted-recon; sid:200017709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaieseeccescronor.aseaiecssocionoinirii.evyqhg.top"; classtype:attempted-recon; sid:200017710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaseeeccsoncr.soreaacsieosnicionriii.fbgnzp.top"; classtype:attempted-recon; sid:200017711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasiaseeeccsoncr.soreaacsieosnicionriii.jxlqcu.shop"; classtype:attempted-recon; sid:200017712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasieaececscecrson.iseaiorcaersoscininveri.kddqct.top"; classtype:attempted-recon; sid:200017713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasieascececcsron.sieaciorsaeronsiinveri.zcwxrx.top"; classtype:attempted-recon; sid:200017714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasnqyksyr.duckdns.org"; classtype:attempted-recon; sid:200017715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassaeaiecececcsercrsoni.iseioraiaerceissiocinniveri.cbslzw.top"; classtype:attempted-recon; sid:200017716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassaeaiececsccecrsron.isieaiorciaerseisoiniinveri.onveal.top"; classtype:attempted-recon; sid:200017717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassaeisecececcsornr.seiaicsioreioenisinverii.ojvntr.top"; classtype:attempted-recon; sid:200017718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassieesecececcsornr.seiaicsioroicenisinverii.gyzt808.xyz"; classtype:attempted-recon; sid:200017719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassieesecececcsornr.seiaicsioroicenisinverii.mylnsr.top"; classtype:attempted-recon; sid:200017720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassieesecececcsornr.seiaicsioroicenisinverii.sjmogv.top"; classtype:attempted-recon; sid:200017721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassieisecececcesrorn.sieiaciorsioeoniisnverii.xjyfjd.top"; classtype:attempted-recon; sid:200017722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassieseececcsconr.rseaicisoiorniiesnvierii.3354788.xyz"; classtype:attempted-recon; sid:200017723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassieseececcsconr.rseaicisoiorniiesnvierii.osqsyc.top"; classtype:attempted-recon; sid:200017724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sassieseececcsconr.rseaicisoiorniiesnvierii.owekid.top"; classtype:attempted-recon; sid:200017725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"satanoxz.co.vu"; classtype:attempted-recon; sid:200017726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"satay-secur.reconfimations.pagedisabled.workers.dev"; classtype:attempted-recon; sid:200017727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"satexportsandimports.com"; classtype:attempted-recon; sid:200017728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"satisfying.tn182.cn"; classtype:attempted-recon; sid:200017729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saujgrnjia.duckdns.org"; classtype:attempted-recon; sid:200017730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"savingsfordentalcare.com"; classtype:attempted-recon; sid:200017731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"savvy-brains.com"; classtype:attempted-recon; sid:200017732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"savvycraftymom.com"; classtype:attempted-recon; sid:200017733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sayscodlte.duckdns.org"; classtype:attempted-recon; sid:200017734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbamfvcypc.duckdns.org"; classtype:attempted-recon; sid:200017735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbawdlytsp.duckdns.org"; classtype:attempted-recon; sid:200017736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbcglobal-secure.weebly.com"; classtype:attempted-recon; sid:200017737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbcglobal-verification62.yolasite.com"; classtype:attempted-recon; sid:200017738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbcglobalnotifications.square.site"; classtype:attempted-recon; sid:200017739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbcglobalverification83.yolasite.com"; classtype:attempted-recon; sid:200017740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbdfb.q2myse4.cn"; classtype:attempted-recon; sid:200017741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbdxxczsjb.duckdns.org"; classtype:attempted-recon; sid:200017742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sberbank.id4541.ru"; classtype:attempted-recon; sid:200017743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sberbank.id7362.ru"; classtype:attempted-recon; sid:200017744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbgaytzdjp.duckdns.org"; classtype:attempted-recon; sid:200017745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbhdvnkovt.duckdns.org"; classtype:attempted-recon; sid:200017746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbioafdkfh.duckdns.org"; classtype:attempted-recon; sid:200017747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbneefnwbe.duckdns.org"; classtype:attempted-recon; sid:200017748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbrkhsraio.duckdns.org"; classtype:attempted-recon; sid:200017749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbs-siebanlagen.de"; classtype:attempted-recon; sid:200017750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbujamdpof.duckdns.org"; classtype:attempted-recon; sid:200017751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbuwbutmbk.duckdns.org"; classtype:attempted-recon; sid:200017752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sc-01111000.ihostfull.com"; classtype:attempted-recon; sid:200017753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sc.apartmentbardolino.it"; classtype:attempted-recon; sid:200017754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scacsoieisasono.kvdxks.top"; classtype:attempted-recon; sid:200017755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scacsoieisasono.wezouj.top"; classtype:attempted-recon; sid:200017756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scandaconsulting.com"; classtype:attempted-recon; sid:200017757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanoffice365-owa4874.microsoft365scan.workers.dev"; classtype:attempted-recon; sid:200017758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scapes01.bitbucket.io"; classtype:attempted-recon; sid:200017759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scaseeissason.a.azrsog.top"; classtype:attempted-recon; sid:200017760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scaseeissason.a.tvbcmo.top"; classtype:attempted-recon; sid:200017761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scaseoecsoeissason.oc.rgqjka.top"; classtype:attempted-recon; sid:200017762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scaseros.filesusr.com"; classtype:attempted-recon; sid:200017763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sccklxqxvt.duckdns.org"; classtype:attempted-recon; sid:200017764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sceiplc.com"; classtype:attempted-recon; sid:200017765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scess-facil-factura-magzine-aqui02.com"; classtype:attempted-recon; sid:200017766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scfgg.bsyhart.cn"; classtype:attempted-recon; sid:200017767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scfgg.hnqszjw.cn"; classtype:attempted-recon; sid:200017768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scgbb.ruideconsultation.cn"; classtype:attempted-recon; sid:200017769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scgengemlv.duckdns.org"; classtype:attempted-recon; sid:200017770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"schbh.chenkaicpa.cn"; classtype:attempted-recon; sid:200017771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"schjh.qeo8uyb.cn"; classtype:attempted-recon; sid:200017772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"schmittner.us"; classtype:attempted-recon; sid:200017773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"school.greenislandtrust.org"; classtype:attempted-recon; sid:200017774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"schryoebfy.duckdns.org"; classtype:attempted-recon; sid:200017775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scimhfwjmn.duckdns.org"; classtype:attempted-recon; sid:200017776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scliuffdwz.duckdns.org"; classtype:attempted-recon; sid:200017777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sclswisscom.flazio.com"; classtype:attempted-recon; sid:200017778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sco1992999.ultimatefreehost.in"; classtype:attempted-recon; sid:200017779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scooterx.biz"; classtype:attempted-recon; sid:200017780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scotiabankseguridad.simon12345679.repl.co"; classtype:attempted-recon; sid:200017781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scratched-silly-manx.glitch.me"; classtype:attempted-recon; sid:200017782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scrty.cold-thunder-d531.siteacn.workers.dev"; classtype:attempted-recon; sid:200017783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scruty-80000035698698745201.tk"; classtype:attempted-recon; sid:200017784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scsltwuidb.duckdns.org"; classtype:attempted-recon; sid:200017785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scubadiving.it"; classtype:attempted-recon; sid:200017786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scwvcvpkbl.duckdns.org"; classtype:attempted-recon; sid:200017787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scxpaczbms.duckdns.org"; classtype:attempted-recon; sid:200017788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sczomcexas.site"; classtype:attempted-recon; sid:200017789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sd.2zi1hb8.cn"; classtype:attempted-recon; sid:200017790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sd.y8kc0ek.cn"; classtype:attempted-recon; sid:200017791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdbf.sk3f5ju.cn"; classtype:attempted-recon; sid:200017792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdffgg.vgyn1m.cn"; classtype:attempted-recon; sid:200017793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdffsf.hyperphp.com"; classtype:attempted-recon; sid:200017794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdgh765.hostfree.pw"; classtype:attempted-recon; sid:200017795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdgvsdvsdvs.blogspot.com"; classtype:attempted-recon; sid:200017796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdiqvhqpam.duckdns.org"; classtype:attempted-recon; sid:200017797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdnllibybb.duckdns.org"; classtype:attempted-recon; sid:200017798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdresrtfre.duckdns.org"; classtype:attempted-recon; sid:200017799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdsgf.0qxnt4u.cn"; classtype:attempted-recon; sid:200017800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdsmggsrwb.duckdns.org"; classtype:attempted-recon; sid:200017801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdswdat.ml"; classtype:attempted-recon; sid:200017802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdv.changshengwhuakej.cn"; classtype:attempted-recon; sid:200017803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdv.mkuades.cn"; classtype:attempted-recon; sid:200017804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sdvd.66726.cn"; classtype:attempted-recon; sid:200017805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seabnb.ca"; classtype:attempted-recon; sid:200017806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.5sime.icu"; classtype:attempted-recon; sid:200017807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.650pt.icu"; classtype:attempted-recon; sid:200017808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.7hml9e.icu"; classtype:attempted-recon; sid:200017809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.cdpthi.top"; classtype:attempted-recon; sid:200017810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.com-deals.shop"; classtype:attempted-recon; sid:200017811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.dnmsu6.icu"; classtype:attempted-recon; sid:200017812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.elhicw.top"; classtype:attempted-recon; sid:200017813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.eucvbc.top"; classtype:attempted-recon; sid:200017814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.fhqemq.top"; classtype:attempted-recon; sid:200017815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.ioxsho.shop"; classtype:attempted-recon; sid:200017816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.jryuds.top"; classtype:attempted-recon; sid:200017817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.kfpxyn.top"; classtype:attempted-recon; sid:200017818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.ladyul.top"; classtype:attempted-recon; sid:200017819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.mvqlzn.top"; classtype:attempted-recon; sid:200017820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.neidee.top"; classtype:attempted-recon; sid:200017821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.nphgoc.top"; classtype:attempted-recon; sid:200017822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.pdndft.top"; classtype:attempted-recon; sid:200017823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.pxnctk.top"; classtype:attempted-recon; sid:200017824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.qexccc.top"; classtype:attempted-recon; sid:200017825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.qlmenm.top"; classtype:attempted-recon; sid:200017826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.qskgtg.top"; classtype:attempted-recon; sid:200017827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.runjin007.icu"; classtype:attempted-recon; sid:200017828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.rvpepb.top"; classtype:attempted-recon; sid:200017829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.tfodbq.top"; classtype:attempted-recon; sid:200017830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.u25r5u.icu"; classtype:attempted-recon; sid:200017831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.upjhye.top"; classtype:attempted-recon; sid:200017832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.vkpock.shop"; classtype:attempted-recon; sid:200017833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.wwffoj.shop"; classtype:attempted-recon; sid:200017834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.xgjt.pro"; classtype:attempted-recon; sid:200017835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.xqpwkk.top"; classtype:attempted-recon; sid:200017836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.xwitwq.top"; classtype:attempted-recon; sid:200017837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.yphurc.top"; classtype:attempted-recon; sid:200017838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceccsaonrir.soeaacseosniaoeosnmer.ytwbnq.top"; classtype:attempted-recon; sid:200017839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.3p1yb.icu"; classtype:attempted-recon; sid:200017840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200017841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200017842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.5uzz0h.icu"; classtype:attempted-recon; sid:200017843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.adlxbh.top"; classtype:attempted-recon; sid:200017844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.bbl7ef.icu"; classtype:attempted-recon; sid:200017845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.cdpthi.top"; classtype:attempted-recon; sid:200017846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.coxrdc.top"; classtype:attempted-recon; sid:200017847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.dkmimw.top"; classtype:attempted-recon; sid:200017848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.doenfd.top"; classtype:attempted-recon; sid:200017849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.exqkjx.top"; classtype:attempted-recon; sid:200017850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.fhqemq.top"; classtype:attempted-recon; sid:200017851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.fprrlq.top"; classtype:attempted-recon; sid:200017852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.gjglse.shop"; classtype:attempted-recon; sid:200017853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.gntozh.top"; classtype:attempted-recon; sid:200017854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.gs3do.icu"; classtype:attempted-recon; sid:200017855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.jryuds.top"; classtype:attempted-recon; sid:200017856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.kfpxyn.top"; classtype:attempted-recon; sid:200017857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.klgmfj.top"; classtype:attempted-recon; sid:200017858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200017859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.kutlzl.top"; classtype:attempted-recon; sid:200017860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200017861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.nhewlh.top"; classtype:attempted-recon; sid:200017862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.notwe.icu"; classtype:attempted-recon; sid:200017863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.ph29h.icu"; classtype:attempted-recon; sid:200017864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.qvcxln.shop"; classtype:attempted-recon; sid:200017865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.rgdpsh.top"; classtype:attempted-recon; sid:200017866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.rhwdsq.top"; classtype:attempted-recon; sid:200017867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.rzuxzq.shop"; classtype:attempted-recon; sid:200017868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.sftqjs.top"; classtype:attempted-recon; sid:200017869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.tgmqlg.top"; classtype:attempted-recon; sid:200017870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.uhia8h.icu"; classtype:attempted-recon; sid:200017871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.vcacks.top"; classtype:attempted-recon; sid:200017872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.vrbvro.top"; classtype:attempted-recon; sid:200017873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.xwitwq.top"; classtype:attempted-recon; sid:200017874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeecacsoirncr.soreaacsieosnaiciaoeosnmer.yhuvzv.top"; classtype:attempted-recon; sid:200017875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.2sae6k.icu"; classtype:attempted-recon; sid:200017876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200017877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.7hml9e.icu"; classtype:attempted-recon; sid:200017878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.8fgrh.icu"; classtype:attempted-recon; sid:200017879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.bs7dc.icu"; classtype:attempted-recon; sid:200017880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.chkmuq.shop"; classtype:attempted-recon; sid:200017881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.coxrdc.top"; classtype:attempted-recon; sid:200017882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.dkmimw.top"; classtype:attempted-recon; sid:200017883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.fprrlq.top"; classtype:attempted-recon; sid:200017884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.glhdpz.top"; classtype:attempted-recon; sid:200017885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.gtqklv.top"; classtype:attempted-recon; sid:200017886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.gzmvuo.top"; classtype:attempted-recon; sid:200017887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.hhxulg.top"; classtype:attempted-recon; sid:200017888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.hweypy.top"; classtype:attempted-recon; sid:200017889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.hycxop.top"; classtype:attempted-recon; sid:200017890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.ilfbdb.top"; classtype:attempted-recon; sid:200017891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.kutlzl.top"; classtype:attempted-recon; sid:200017892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.mbirgc.top"; classtype:attempted-recon; sid:200017893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.mxeanv.top"; classtype:attempted-recon; sid:200017894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.nhewlh.top"; classtype:attempted-recon; sid:200017895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.notwe.icu"; classtype:attempted-recon; sid:200017896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.ogzbtb.top"; classtype:attempted-recon; sid:200017897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.pxzjwk.top"; classtype:attempted-recon; sid:200017898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.qlmenm.top"; classtype:attempted-recon; sid:200017899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.qoefmk.top"; classtype:attempted-recon; sid:200017900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.qwuchl.top"; classtype:attempted-recon; sid:200017901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.xvlbws.top"; classtype:attempted-recon; sid:200017902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.yhuvzv.top"; classtype:attempted-recon; sid:200017903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.4i3si1.icu"; classtype:attempted-recon; sid:200017904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.5uzz0h.icu"; classtype:attempted-recon; sid:200017905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.7lnki4.icu"; classtype:attempted-recon; sid:200017906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.doenfd.top"; classtype:attempted-recon; sid:200017907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.fhqemq.top"; classtype:attempted-recon; sid:200017908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.gyzt809.xyz"; classtype:attempted-recon; sid:200017909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.gzmvuo.top"; classtype:attempted-recon; sid:200017910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.hycxop.top"; classtype:attempted-recon; sid:200017911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.invpbv.top"; classtype:attempted-recon; sid:200017912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.jivdhm.top"; classtype:attempted-recon; sid:200017913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.klgmfj.top"; classtype:attempted-recon; sid:200017914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200017915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.lgwjlm.shop"; classtype:attempted-recon; sid:200017916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.mxeanv.top"; classtype:attempted-recon; sid:200017917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.nphgoc.top"; classtype:attempted-recon; sid:200017918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.nrmzy6.icu"; classtype:attempted-recon; sid:200017919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.pdndft.top"; classtype:attempted-recon; sid:200017920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.pqdxev.top"; classtype:attempted-recon; sid:200017921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.puoo9.icu"; classtype:attempted-recon; sid:200017922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.pxnctk.top"; classtype:attempted-recon; sid:200017923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.pysitg.top"; classtype:attempted-recon; sid:200017924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.qvcxln.shop"; classtype:attempted-recon; sid:200017925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.rhwdsq.top"; classtype:attempted-recon; sid:200017926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.saveyr.top"; classtype:attempted-recon; sid:200017927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.tbntv.icu"; classtype:attempted-recon; sid:200017928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.vfqske.shop"; classtype:attempted-recon; sid:200017929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesacecirscronor.aseaiecseascioconaoeosnmer.yyzded.top"; classtype:attempted-recon; sid:200017930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200017931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200017932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.6788665.xyz"; classtype:attempted-recon; sid:200017933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.6876578.xyz"; classtype:attempted-recon; sid:200017934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200017935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.9v9w2y.icu"; classtype:attempted-recon; sid:200017936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.abluwk.top"; classtype:attempted-recon; sid:200017937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.bsnpag.top"; classtype:attempted-recon; sid:200017938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.cjezmf.top"; classtype:attempted-recon; sid:200017939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.coxrdc.top"; classtype:attempted-recon; sid:200017940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.ejvocy.top"; classtype:attempted-recon; sid:200017941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.glhdpz.top"; classtype:attempted-recon; sid:200017942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.gs3do.icu"; classtype:attempted-recon; sid:200017943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.ihfo5.icu"; classtype:attempted-recon; sid:200017944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200017945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.ladyul.top"; classtype:attempted-recon; sid:200017946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200017947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200017948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.nphgoc.top"; classtype:attempted-recon; sid:200017949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.qoefmk.top"; classtype:attempted-recon; sid:200017950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.tbntv.icu"; classtype:attempted-recon; sid:200017951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.u25r5u.icu"; classtype:attempted-recon; sid:200017952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.voadax.top"; classtype:attempted-recon; sid:200017953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.wl85i.icu"; classtype:attempted-recon; sid:200017954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.xwitwq.top"; classtype:attempted-recon; sid:200017955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.yhuvzv.top"; classtype:attempted-recon; sid:200017956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.ytwbnq.top"; classtype:attempted-recon; sid:200017957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceeesaceeirccrsoorna.seieascasciooocnaoeosnmer.yyzded.top"; classtype:attempted-recon; sid:200017958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.3p1yb.icu"; classtype:attempted-recon; sid:200017959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200017960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.650pt.icu"; classtype:attempted-recon; sid:200017961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200017962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.cdpthi.top"; classtype:attempted-recon; sid:200017963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.com-deals.shop"; classtype:attempted-recon; sid:200017964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.eaelbi.top"; classtype:attempted-recon; sid:200017965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.ehgmml.top"; classtype:attempted-recon; sid:200017966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.flscly.top"; classtype:attempted-recon; sid:200017967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.fukjzs.top"; classtype:attempted-recon; sid:200017968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.fvkhnr.top"; classtype:attempted-recon; sid:200017969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.fzfweo.top"; classtype:attempted-recon; sid:200017970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.gjglse.shop"; classtype:attempted-recon; sid:200017971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.gntozh.top"; classtype:attempted-recon; sid:200017972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.hixcny.top"; classtype:attempted-recon; sid:200017973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.jryuds.top"; classtype:attempted-recon; sid:200017974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.kutlzl.top"; classtype:attempted-recon; sid:200017975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.llsoxx.top"; classtype:attempted-recon; sid:200017976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200017977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.pbykwg.top"; classtype:attempted-recon; sid:200017978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.pdndft.top"; classtype:attempted-recon; sid:200017979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.ph29h.icu"; classtype:attempted-recon; sid:200017980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.pxbkkk.top"; classtype:attempted-recon; sid:200017981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.rn5mu.icu"; classtype:attempted-recon; sid:200017982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.runjin007.icu"; classtype:attempted-recon; sid:200017983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.tbntv.icu"; classtype:attempted-recon; sid:200017984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.vcacks.top"; classtype:attempted-recon; sid:200017985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.wcpjfd.top"; classtype:attempted-recon; sid:200017986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.xqpwkk.top"; classtype:attempted-recon; sid:200017987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.xzlnlm.top"; classtype:attempted-recon; sid:200017988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.2sae6k.icu"; classtype:attempted-recon; sid:200017989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.650pt.icu"; classtype:attempted-recon; sid:200017990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.awsgn.top"; classtype:attempted-recon; sid:200017991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.b4eqf.icu"; classtype:attempted-recon; sid:200017992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.bs7dc.icu"; classtype:attempted-recon; sid:200017993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.citcfi.top"; classtype:attempted-recon; sid:200017994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.cjezmf.top"; classtype:attempted-recon; sid:200017995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.coxrdc.top"; classtype:attempted-recon; sid:200017996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.demtjo.top"; classtype:attempted-recon; sid:200017997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.dkmimw.top"; classtype:attempted-recon; sid:200017998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.doenfd.top"; classtype:attempted-recon; sid:200017999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.fprrlq.top"; classtype:attempted-recon; sid:200018000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.fukjzs.top"; classtype:attempted-recon; sid:200018001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.fvkhnr.top"; classtype:attempted-recon; sid:200018002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.gjglse.shop"; classtype:attempted-recon; sid:200018003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.glhdpz.top"; classtype:attempted-recon; sid:200018004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.gntozh.top"; classtype:attempted-recon; sid:200018005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.gtqklv.top"; classtype:attempted-recon; sid:200018006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.gxdhfa.top"; classtype:attempted-recon; sid:200018007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.hixcny.top"; classtype:attempted-recon; sid:200018008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.mvqlzn.top"; classtype:attempted-recon; sid:200018009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.mwdrbx.top"; classtype:attempted-recon; sid:200018010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.mxeanv.top"; classtype:attempted-recon; sid:200018011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.nhewlh.top"; classtype:attempted-recon; sid:200018012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.nkjfmc.top"; classtype:attempted-recon; sid:200018013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.nrmzy6.icu"; classtype:attempted-recon; sid:200018014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.pjt9os.icu"; classtype:attempted-recon; sid:200018015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.pxbkkk.top"; classtype:attempted-recon; sid:200018016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.qlmenm.top"; classtype:attempted-recon; sid:200018017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.qoefmk.top"; classtype:attempted-recon; sid:200018018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.qskgtg.top"; classtype:attempted-recon; sid:200018019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.rjbvwt.top"; classtype:attempted-recon; sid:200018020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.royjjy.shop"; classtype:attempted-recon; sid:200018021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.runjin007.icu"; classtype:attempted-recon; sid:200018022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.rvpepb.top"; classtype:attempted-recon; sid:200018023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.vfqske.shop"; classtype:attempted-recon; sid:200018024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.wwffoj.shop"; classtype:attempted-recon; sid:200018025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.xgtofb.top"; classtype:attempted-recon; sid:200018026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.xvlbws.top"; classtype:attempted-recon; sid:200018027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.yifpgd.top"; classtype:attempted-recon; sid:200018028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.ytwbnq.top"; classtype:attempted-recon; sid:200018029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceieeacseirecrcsoroan.sieesaaccioeosoinaoeosnmer.zrbfzw.top"; classtype:attempted-recon; sid:200018030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.1112458.xyz"; classtype:attempted-recon; sid:200018031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.5sime.icu"; classtype:attempted-recon; sid:200018032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200018033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.7lnki4.icu"; classtype:attempted-recon; sid:200018034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.bbl7ef.icu"; classtype:attempted-recon; sid:200018035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.chashanchu21.shop"; classtype:attempted-recon; sid:200018036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.dgqqxx.top"; classtype:attempted-recon; sid:200018037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.djulad.top"; classtype:attempted-recon; sid:200018038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.ehgmml.top"; classtype:attempted-recon; sid:200018039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.eucvbc.top"; classtype:attempted-recon; sid:200018040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.fhqemq.top"; classtype:attempted-recon; sid:200018041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.fzfweo.top"; classtype:attempted-recon; sid:200018042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.gntozh.top"; classtype:attempted-recon; sid:200018043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.mvqlzn.top"; classtype:attempted-recon; sid:200018044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.n21so.icu"; classtype:attempted-recon; sid:200018045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.neidee.top"; classtype:attempted-recon; sid:200018046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.notwe.icu"; classtype:attempted-recon; sid:200018047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.patcfp.top"; classtype:attempted-recon; sid:200018048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.puoo9.icu"; classtype:attempted-recon; sid:200018049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.pysitg.top"; classtype:attempted-recon; sid:200018050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.vcacks.top"; classtype:attempted-recon; sid:200018051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.wl85i.icu"; classtype:attempted-recon; sid:200018052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.xaexmo.top"; classtype:attempted-recon; sid:200018053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.xqpwkk.top"; classtype:attempted-recon; sid:200018054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.xwitwq.top"; classtype:attempted-recon; sid:200018055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.xzlnlm.top"; classtype:attempted-recon; sid:200018056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.1112458.xyz"; classtype:attempted-recon; sid:200018057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.3p1yb.icu"; classtype:attempted-recon; sid:200018058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200018059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.b4eqf.icu"; classtype:attempted-recon; sid:200018060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.b6x80w.icu"; classtype:attempted-recon; sid:200018061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.bbl7ef.icu"; classtype:attempted-recon; sid:200018062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.bvdadv.top"; classtype:attempted-recon; sid:200018063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.citcfi.top"; classtype:attempted-recon; sid:200018064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.com-deals.shop"; classtype:attempted-recon; sid:200018065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.contius.shop"; classtype:attempted-recon; sid:200018066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.demtjo.top"; classtype:attempted-recon; sid:200018067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.dgqqxx.top"; classtype:attempted-recon; sid:200018068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.dnmsu6.icu"; classtype:attempted-recon; sid:200018069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.fahxqk.shop"; classtype:attempted-recon; sid:200018070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.flscly.top"; classtype:attempted-recon; sid:200018071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.fzfweo.top"; classtype:attempted-recon; sid:200018072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.gtqklv.top"; classtype:attempted-recon; sid:200018073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.hhxulg.top"; classtype:attempted-recon; sid:200018074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.hixcny.top"; classtype:attempted-recon; sid:200018075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.kbqnmz.top"; classtype:attempted-recon; sid:200018076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200018077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.n21so.icu"; classtype:attempted-recon; sid:200018078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.nqsaby.top"; classtype:attempted-recon; sid:200018079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.nrmzy6.icu"; classtype:attempted-recon; sid:200018080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.pxnctk.top"; classtype:attempted-recon; sid:200018081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.qexccc.top"; classtype:attempted-recon; sid:200018082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.qwuchl.top"; classtype:attempted-recon; sid:200018083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.rzuxzq.shop"; classtype:attempted-recon; sid:200018084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.sftqjs.top"; classtype:attempted-recon; sid:200018085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.voadax.top"; classtype:attempted-recon; sid:200018086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.yifpgd.top"; classtype:attempted-recon; sid:200018087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.1112458.xyz"; classtype:attempted-recon; sid:200018088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.2sae6k.icu"; classtype:attempted-recon; sid:200018089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.3p1yb.icu"; classtype:attempted-recon; sid:200018090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.5uzz0h.icu"; classtype:attempted-recon; sid:200018091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.650pt.icu"; classtype:attempted-recon; sid:200018092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.9v9w2y.icu"; classtype:attempted-recon; sid:200018093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.adlxbh.top"; classtype:attempted-recon; sid:200018094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.b4eqf.icu"; classtype:attempted-recon; sid:200018095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.chashanchu21.shop"; classtype:attempted-recon; sid:200018096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.chkmuq.shop"; classtype:attempted-recon; sid:200018097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.demtjo.top"; classtype:attempted-recon; sid:200018098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.dnmsu6.icu"; classtype:attempted-recon; sid:200018099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.elhicw.top"; classtype:attempted-recon; sid:200018100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.exqkjx.top"; classtype:attempted-recon; sid:200018101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.flscly.top"; classtype:attempted-recon; sid:200018102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.gtqklv.top"; classtype:attempted-recon; sid:200018103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.jubsfg.top"; classtype:attempted-recon; sid:200018104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.ladyul.top"; classtype:attempted-recon; sid:200018105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.lgwjlm.shop"; classtype:attempted-recon; sid:200018106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.pbykwg.top"; classtype:attempted-recon; sid:200018107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.pxbkkk.top"; classtype:attempted-recon; sid:200018108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.pxnctk.top"; classtype:attempted-recon; sid:200018109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.rjbvwt.top"; classtype:attempted-recon; sid:200018110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.shanchuta27.shop"; classtype:attempted-recon; sid:200018111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.u25r5u.icu"; classtype:attempted-recon; sid:200018112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.upjhye.top"; classtype:attempted-recon; sid:200018113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.vfqske.shop"; classtype:attempted-recon; sid:200018114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.yhuvzv.top"; classtype:attempted-recon; sid:200018115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.yifpgd.top"; classtype:attempted-recon; sid:200018116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200018117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.7hml9e.icu"; classtype:attempted-recon; sid:200018118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.7ngywp.icu"; classtype:attempted-recon; sid:200018119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.bs7dc.icu"; classtype:attempted-recon; sid:200018120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.chkmuq.shop"; classtype:attempted-recon; sid:200018121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.dgqqxx.top"; classtype:attempted-recon; sid:200018122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.eaelbi.top"; classtype:attempted-recon; sid:200018123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.fhqemq.top"; classtype:attempted-recon; sid:200018124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.fukjzs.top"; classtype:attempted-recon; sid:200018125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.fvkhnr.top"; classtype:attempted-recon; sid:200018126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.gjglse.shop"; classtype:attempted-recon; sid:200018127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.hhxulg.top"; classtype:attempted-recon; sid:200018128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.iaklie.top"; classtype:attempted-recon; sid:200018129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.l4p2g1.icu"; classtype:attempted-recon; sid:200018130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.n21so.icu"; classtype:attempted-recon; sid:200018131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.neidee.top"; classtype:attempted-recon; sid:200018132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.nhewlh.top"; classtype:attempted-recon; sid:200018133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.nkjfmc.top"; classtype:attempted-recon; sid:200018134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.nphgoc.top"; classtype:attempted-recon; sid:200018135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.nrmzy6.icu"; classtype:attempted-recon; sid:200018136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.pqdxev.top"; classtype:attempted-recon; sid:200018137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.pugxbo.top"; classtype:attempted-recon; sid:200018138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.qlmenm.top"; classtype:attempted-recon; sid:200018139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.rhwdsq.top"; classtype:attempted-recon; sid:200018140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.rjbvwt.top"; classtype:attempted-recon; sid:200018141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.royjjy.shop"; classtype:attempted-recon; sid:200018142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.tfodbq.top"; classtype:attempted-recon; sid:200018143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.u25r5u.icu"; classtype:attempted-recon; sid:200018144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.uhia8h.icu"; classtype:attempted-recon; sid:200018145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.usivdv.top"; classtype:attempted-recon; sid:200018146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.voadax.top"; classtype:attempted-recon; sid:200018147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.vrbvro.top"; classtype:attempted-recon; sid:200018148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.wolvps.shop"; classtype:attempted-recon; sid:200018149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.yphurc.top"; classtype:attempted-recon; sid:200018150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.ytwbnq.top"; classtype:attempted-recon; sid:200018151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.yyzded.top"; classtype:attempted-recon; sid:200018152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceacsrirono.aseaecsescocoaoeosnmer.zmlyhs.top"; classtype:attempted-recon; sid:200018153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.1112458.xyz"; classtype:attempted-recon; sid:200018154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.2sae6k.icu"; classtype:attempted-recon; sid:200018155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.b32mgr.icu"; classtype:attempted-recon; sid:200018156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.bsnpag.top"; classtype:attempted-recon; sid:200018157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.com-deals.shop"; classtype:attempted-recon; sid:200018158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.cstztf.top"; classtype:attempted-recon; sid:200018159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.demtjo.top"; classtype:attempted-recon; sid:200018160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.elhicw.top"; classtype:attempted-recon; sid:200018161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.glhdpz.top"; classtype:attempted-recon; sid:200018162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.gzmvuo.top"; classtype:attempted-recon; sid:200018163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.hixcny.top"; classtype:attempted-recon; sid:200018164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.l4p2g1.icu"; classtype:attempted-recon; sid:200018165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200018166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.n21so.icu"; classtype:attempted-recon; sid:200018167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.nphgoc.top"; classtype:attempted-recon; sid:200018168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.nqsaby.top"; classtype:attempted-recon; sid:200018169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.ofldnb.shop"; classtype:attempted-recon; sid:200018170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.oiknia.top"; classtype:attempted-recon; sid:200018171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.pugxbo.top"; classtype:attempted-recon; sid:200018172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.shanchuta27.shop"; classtype:attempted-recon; sid:200018173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.tilzhy.top"; classtype:attempted-recon; sid:200018174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.wcpjfd.top"; classtype:attempted-recon; sid:200018175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.xaexmo.top"; classtype:attempted-recon; sid:200018176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacesceaecrirsoona.seeascscoooaaoeosnmer.xwitwq.top"; classtype:attempted-recon; sid:200018177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.3dbbmp.icu"; classtype:attempted-recon; sid:200018178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.4i3si1.icu"; classtype:attempted-recon; sid:200018179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.5577778.xyz"; classtype:attempted-recon; sid:200018180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.8fgrh.icu"; classtype:attempted-recon; sid:200018181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.b4eqf.icu"; classtype:attempted-recon; sid:200018182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.b6x80w.icu"; classtype:attempted-recon; sid:200018183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.dfdnsx.top"; classtype:attempted-recon; sid:200018184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.dgqqxx.top"; classtype:attempted-recon; sid:200018185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.doenfd.top"; classtype:attempted-recon; sid:200018186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.elhicw.top"; classtype:attempted-recon; sid:200018187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.fahxqk.shop"; classtype:attempted-recon; sid:200018188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.gzmvuo.top"; classtype:attempted-recon; sid:200018189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.iytxjk.top"; classtype:attempted-recon; sid:200018190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.kfpxyn.top"; classtype:attempted-recon; sid:200018191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.kpgvbn.top"; classtype:attempted-recon; sid:200018192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.n21so.icu"; classtype:attempted-recon; sid:200018193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.nkjfmc.top"; classtype:attempted-recon; sid:200018194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.notwe.icu"; classtype:attempted-recon; sid:200018195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.nrmzy6.icu"; classtype:attempted-recon; sid:200018196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.oipful.top"; classtype:attempted-recon; sid:200018197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.pdndft.top"; classtype:attempted-recon; sid:200018198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.pxbkkk.top"; classtype:attempted-recon; sid:200018199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.pysitg.top"; classtype:attempted-recon; sid:200018200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.sftqjs.top"; classtype:attempted-recon; sid:200018201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.usivdv.top"; classtype:attempted-recon; sid:200018202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.xzlnlm.top"; classtype:attempted-recon; sid:200018203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.ytnxwi.top"; classtype:attempted-recon; sid:200018204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.yyzded.top"; classtype:attempted-recon; sid:200018205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.650pt.icu"; classtype:attempted-recon; sid:200018206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.6876578.xyz"; classtype:attempted-recon; sid:200018207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.8fgrh.icu"; classtype:attempted-recon; sid:200018208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.b4eqf.icu"; classtype:attempted-recon; sid:200018209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.chashanchu21.shop"; classtype:attempted-recon; sid:200018210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.ehgmml.top"; classtype:attempted-recon; sid:200018211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.ejvocy.top"; classtype:attempted-recon; sid:200018212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.gntozh.top"; classtype:attempted-recon; sid:200018213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.gxdhfa.top"; classtype:attempted-recon; sid:200018214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.hyhznq.top"; classtype:attempted-recon; sid:200018215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.ihfo5.icu"; classtype:attempted-recon; sid:200018216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.jryuds.top"; classtype:attempted-recon; sid:200018217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.kbqnmz.top"; classtype:attempted-recon; sid:200018218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.kutlzl.top"; classtype:attempted-recon; sid:200018219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.kwoneq.top"; classtype:attempted-recon; sid:200018220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200018221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.lgwjlm.shop"; classtype:attempted-recon; sid:200018222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.nhewlh.top"; classtype:attempted-recon; sid:200018223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.notwe.icu"; classtype:attempted-recon; sid:200018224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.npibd.top"; classtype:attempted-recon; sid:200018225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.ohzctx.top"; classtype:attempted-recon; sid:200018226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.patcfp.top"; classtype:attempted-recon; sid:200018227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.ph29h.icu"; classtype:attempted-recon; sid:200018228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.ptrwmp.top"; classtype:attempted-recon; sid:200018229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.qexccc.top"; classtype:attempted-recon; sid:200018230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.qskgtg.top"; classtype:attempted-recon; sid:200018231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.qwuchl.top"; classtype:attempted-recon; sid:200018232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.sftqjs.top"; classtype:attempted-recon; sid:200018233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.xzlnlm.top"; classtype:attempted-recon; sid:200018234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.yhuvzv.top"; classtype:attempted-recon; sid:200018235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.yphurc.top"; classtype:attempted-recon; sid:200018236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeacceirscronor.aseaiecssaocionoaoeosnmer.ytnxwi.top"; classtype:attempted-recon; sid:200018237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200018238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.7ngywp.icu"; classtype:attempted-recon; sid:200018239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.abluwk.top"; classtype:attempted-recon; sid:200018240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.bvdadv.top"; classtype:attempted-recon; sid:200018241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.demtjo.top"; classtype:attempted-recon; sid:200018242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.ejvocy.top"; classtype:attempted-recon; sid:200018243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.epwnsr.top"; classtype:attempted-recon; sid:200018244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.mbirgc.top"; classtype:attempted-recon; sid:200018245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.npibd.top"; classtype:attempted-recon; sid:200018246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.nr5kfh.icu"; classtype:attempted-recon; sid:200018247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.oiknia.top"; classtype:attempted-recon; sid:200018248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.pugxbo.top"; classtype:attempted-recon; sid:200018249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.qfvbqx.shop"; classtype:attempted-recon; sid:200018250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.qlmenm.top"; classtype:attempted-recon; sid:200018251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.qwuchl.top"; classtype:attempted-recon; sid:200018252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.rhwdsq.top"; classtype:attempted-recon; sid:200018253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.royjjy.shop"; classtype:attempted-recon; sid:200018254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.rzuxzq.shop"; classtype:attempted-recon; sid:200018255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.tikoig.top"; classtype:attempted-recon; sid:200018256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.usivdv.top"; classtype:attempted-recon; sid:200018257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.xgtofb.top"; classtype:attempted-recon; sid:200018258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.yifpgd.top"; classtype:attempted-recon; sid:200018259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.ytwbnq.top"; classtype:attempted-recon; sid:200018260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciesseaociniaoeosnmer.zmlyhs.top"; classtype:attempted-recon; sid:200018261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.7lnki4.icu"; classtype:attempted-recon; sid:200018262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.7ngywp.icu"; classtype:attempted-recon; sid:200018263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.abluwk.top"; classtype:attempted-recon; sid:200018264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.bsnpag.top"; classtype:attempted-recon; sid:200018265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.chashanchu48.shop"; classtype:attempted-recon; sid:200018266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.citcfi.top"; classtype:attempted-recon; sid:200018267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.ehgmml.top"; classtype:attempted-recon; sid:200018268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.exqkjx.top"; classtype:attempted-recon; sid:200018269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.fvkhnr.top"; classtype:attempted-recon; sid:200018270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.gs3do.icu"; classtype:attempted-recon; sid:200018271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.hhxulg.top"; classtype:attempted-recon; sid:200018272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.invpbv.top"; classtype:attempted-recon; sid:200018273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.ioxsho.shop"; classtype:attempted-recon; sid:200018274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.jivdhm.top"; classtype:attempted-recon; sid:200018275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.ladyul.top"; classtype:attempted-recon; sid:200018276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.n6eonm.icu"; classtype:attempted-recon; sid:200018277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.neidee.top"; classtype:attempted-recon; sid:200018278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.notwe.icu"; classtype:attempted-recon; sid:200018279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.nphgoc.top"; classtype:attempted-recon; sid:200018280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.puoo9.icu"; classtype:attempted-recon; sid:200018281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.pysitg.top"; classtype:attempted-recon; sid:200018282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.royjjy.shop"; classtype:attempted-recon; sid:200018283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.rvpepb.top"; classtype:attempted-recon; sid:200018284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.saveyr.top"; classtype:attempted-recon; sid:200018285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.tikoig.top"; classtype:attempted-recon; sid:200018286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.vnbbks.top"; classtype:attempted-recon; sid:200018287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.wolvps.shop"; classtype:attempted-recon; sid:200018288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.xaexmo.top"; classtype:attempted-recon; sid:200018289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaceseeaccsirocrn.orsaeaciessoacciniaoeosnmer.zmlyhs.top"; classtype:attempted-recon; sid:200018290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.1112458.xyz"; classtype:attempted-recon; sid:200018291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200018292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.5sime.icu"; classtype:attempted-recon; sid:200018293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200018294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.7lnki4.icu"; classtype:attempted-recon; sid:200018295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.7ngywp.icu"; classtype:attempted-recon; sid:200018296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.9v9w2y.icu"; classtype:attempted-recon; sid:200018297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.cdpthi.top"; classtype:attempted-recon; sid:200018298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.cjezmf.top"; classtype:attempted-recon; sid:200018299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.dnmsu6.icu"; classtype:attempted-recon; sid:200018300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.fvkhnr.top"; classtype:attempted-recon; sid:200018301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.ohzctx.top"; classtype:attempted-recon; sid:200018302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.pjt9os.icu"; classtype:attempted-recon; sid:200018303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.pxbkkk.top"; classtype:attempted-recon; sid:200018304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.pxzjwk.top"; classtype:attempted-recon; sid:200018305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.qexccc.top"; classtype:attempted-recon; sid:200018306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.qfvbqx.shop"; classtype:attempted-recon; sid:200018307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.rhwdsq.top"; classtype:attempted-recon; sid:200018308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.tilzhy.top"; classtype:attempted-recon; sid:200018309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.u25r5u.icu"; classtype:attempted-recon; sid:200018310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.vkpock.shop"; classtype:attempted-recon; sid:200018311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.ytnxwi.top"; classtype:attempted-recon; sid:200018312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.3p1yb.icu"; classtype:attempted-recon; sid:200018313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200018314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200018315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.7ngywp.icu"; classtype:attempted-recon; sid:200018316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.8fgrh.icu"; classtype:attempted-recon; sid:200018317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.afohvv.top"; classtype:attempted-recon; sid:200018318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.b32mgr.icu"; classtype:attempted-recon; sid:200018319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.bbl7ef.icu"; classtype:attempted-recon; sid:200018320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.bsnpag.top"; classtype:attempted-recon; sid:200018321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.bvdadv.top"; classtype:attempted-recon; sid:200018322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.chashanchu21.shop"; classtype:attempted-recon; sid:200018323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.exqkjx.top"; classtype:attempted-recon; sid:200018324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.fahxqk.shop"; classtype:attempted-recon; sid:200018325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.flscly.top"; classtype:attempted-recon; sid:200018326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.fukjzs.top"; classtype:attempted-recon; sid:200018327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.gtqklv.top"; classtype:attempted-recon; sid:200018328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.ihfo5.icu"; classtype:attempted-recon; sid:200018329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.jivdhm.top"; classtype:attempted-recon; sid:200018330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.jryuds.top"; classtype:attempted-recon; sid:200018331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200018332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.lgwjlm.shop"; classtype:attempted-recon; sid:200018333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.notwe.icu"; classtype:attempted-recon; sid:200018334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.npibd.top"; classtype:attempted-recon; sid:200018335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.nr5kfh.icu"; classtype:attempted-recon; sid:200018336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.ph29h.icu"; classtype:attempted-recon; sid:200018337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.vcgsip.top"; classtype:attempted-recon; sid:200018338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.vkpock.shop"; classtype:attempted-recon; sid:200018339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.voadax.top"; classtype:attempted-recon; sid:200018340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.xqpwkk.top"; classtype:attempted-recon; sid:200018341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaciecsaeerircsooan.seesaccoeoasoaoeosnmer.zrbfzw.top"; classtype:attempted-recon; sid:200018342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.5577778.xyz"; classtype:attempted-recon; sid:200018343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.5uzz0h.icu"; classtype:attempted-recon; sid:200018344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.7lnki4.icu"; classtype:attempted-recon; sid:200018345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.adlxbh.top"; classtype:attempted-recon; sid:200018346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.bfsngf.top"; classtype:attempted-recon; sid:200018347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.coxrdc.top"; classtype:attempted-recon; sid:200018348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.ejvocy.top"; classtype:attempted-recon; sid:200018349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.epwnsr.top"; classtype:attempted-recon; sid:200018350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.fahxqk.shop"; classtype:attempted-recon; sid:200018351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.glhdpz.top"; classtype:attempted-recon; sid:200018352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.hixcny.top"; classtype:attempted-recon; sid:200018353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.hpbzkc.top"; classtype:attempted-recon; sid:200018354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.invpbv.top"; classtype:attempted-recon; sid:200018355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.jryuds.top"; classtype:attempted-recon; sid:200018356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.kutlzl.top"; classtype:attempted-recon; sid:200018357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.mbirgc.top"; classtype:attempted-recon; sid:200018358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.nlujo.top"; classtype:attempted-recon; sid:200018359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.patcfp.top"; classtype:attempted-recon; sid:200018360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.qfvbqx.shop"; classtype:attempted-recon; sid:200018361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.qskgtg.top"; classtype:attempted-recon; sid:200018362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.rvpepb.top"; classtype:attempted-recon; sid:200018363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.upjhye.top"; classtype:attempted-recon; sid:200018364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.wcpjfd.top"; classtype:attempted-recon; sid:200018365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisccaecrirsoona.seeascacrsoaeoaoeosnmer.yphurc.top"; classtype:attempted-recon; sid:200018366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.3p1yb.icu"; classtype:attempted-recon; sid:200018367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200018368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.5577778.xyz"; classtype:attempted-recon; sid:200018369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200018370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.7hml9e.icu"; classtype:attempted-recon; sid:200018371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.afohvv.top"; classtype:attempted-recon; sid:200018372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.cdpthi.top"; classtype:attempted-recon; sid:200018373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.coxrdc.top"; classtype:attempted-recon; sid:200018374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.demtjo.top"; classtype:attempted-recon; sid:200018375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.dfdnsx.top"; classtype:attempted-recon; sid:200018376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.dgqqxx.top"; classtype:attempted-recon; sid:200018377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.elhicw.top"; classtype:attempted-recon; sid:200018378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.eucvbc.top"; classtype:attempted-recon; sid:200018379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.fzfweo.top"; classtype:attempted-recon; sid:200018380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.gamxhl.shop"; classtype:attempted-recon; sid:200018381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.gjglse.shop"; classtype:attempted-recon; sid:200018382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.hpbzkc.top"; classtype:attempted-recon; sid:200018383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.invpbv.top"; classtype:attempted-recon; sid:200018384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.ioxsho.shop"; classtype:attempted-recon; sid:200018385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.kbqnmz.top"; classtype:attempted-recon; sid:200018386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200018387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.kwoneq.top"; classtype:attempted-recon; sid:200018388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.mvqlzn.top"; classtype:attempted-recon; sid:200018389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.n6eonm.icu"; classtype:attempted-recon; sid:200018390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.ohzctx.top"; classtype:attempted-recon; sid:200018391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.pqdxev.top"; classtype:attempted-recon; sid:200018392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.pysitg.top"; classtype:attempted-recon; sid:200018393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.rzuxzq.shop"; classtype:attempted-recon; sid:200018394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.shanchuta27.shop"; classtype:attempted-recon; sid:200018395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.tilzhy.top"; classtype:attempted-recon; sid:200018396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.vfqske.shop"; classtype:attempted-recon; sid:200018397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.vkpock.shop"; classtype:attempted-recon; sid:200018398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.vrbvro.top"; classtype:attempted-recon; sid:200018399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.xgtofb.top"; classtype:attempted-recon; sid:200018400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.xqpwkk.top"; classtype:attempted-recon; sid:200018401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.xwitwq.top"; classtype:attempted-recon; sid:200018402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.yphurc.top"; classtype:attempted-recon; sid:200018403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.ytnxwi.top"; classtype:attempted-recon; sid:200018404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.2sae6k.icu"; classtype:attempted-recon; sid:200018405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.3dbbmp.icu"; classtype:attempted-recon; sid:200018406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.4i3si1.icu"; classtype:attempted-recon; sid:200018407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.6788665.xyz"; classtype:attempted-recon; sid:200018408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.6876578.xyz"; classtype:attempted-recon; sid:200018409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.7hml9e.icu"; classtype:attempted-recon; sid:200018410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.adlxbh.top"; classtype:attempted-recon; sid:200018411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.afohvv.top"; classtype:attempted-recon; sid:200018412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.awsgn.top"; classtype:attempted-recon; sid:200018413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.cdpthi.top"; classtype:attempted-recon; sid:200018414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.dfdnsx.top"; classtype:attempted-recon; sid:200018415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.djulad.top"; classtype:attempted-recon; sid:200018416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.elhicw.top"; classtype:attempted-recon; sid:200018417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.gdmdxy.top"; classtype:attempted-recon; sid:200018418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.glhdpz.top"; classtype:attempted-recon; sid:200018419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.gs3do.icu"; classtype:attempted-recon; sid:200018420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.gxdhfa.top"; classtype:attempted-recon; sid:200018421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.ihfo5.icu"; classtype:attempted-recon; sid:200018422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.jivdhm.top"; classtype:attempted-recon; sid:200018423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.kwoneq.top"; classtype:attempted-recon; sid:200018424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.lfvlpt.top"; classtype:attempted-recon; sid:200018425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.n6eonm.icu"; classtype:attempted-recon; sid:200018426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.neidee.top"; classtype:attempted-recon; sid:200018427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.npibd.top"; classtype:attempted-recon; sid:200018428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.nqsaby.top"; classtype:attempted-recon; sid:200018429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.pysitg.top"; classtype:attempted-recon; sid:200018430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.qskgtg.top"; classtype:attempted-recon; sid:200018431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.rvpepb.top"; classtype:attempted-recon; sid:200018432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.vcacks.top"; classtype:attempted-recon; sid:200018433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.vkpock.shop"; classtype:attempted-recon; sid:200018434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.vnbbks.top"; classtype:attempted-recon; sid:200018435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.wwffoj.shop"; classtype:attempted-recon; sid:200018436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.xgtofb.top"; classtype:attempted-recon; sid:200018437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccacsrirono.aseaecssacrooaaoeosnmer.yyzded.top"; classtype:attempted-recon; sid:200018438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.457e0p.icu"; classtype:attempted-recon; sid:200018439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.5sime.icu"; classtype:attempted-recon; sid:200018440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.9v9w2y.icu"; classtype:attempted-recon; sid:200018441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.coxrdc.top"; classtype:attempted-recon; sid:200018442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.dfdnsx.top"; classtype:attempted-recon; sid:200018443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.ehgmml.top"; classtype:attempted-recon; sid:200018444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.ejvocy.top"; classtype:attempted-recon; sid:200018445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.hixcny.top"; classtype:attempted-recon; sid:200018446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.hweypy.top"; classtype:attempted-recon; sid:200018447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.invpbv.top"; classtype:attempted-recon; sid:200018448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.iytxjk.top"; classtype:attempted-recon; sid:200018449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.jryuds.top"; classtype:attempted-recon; sid:200018450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.jubsfg.top"; classtype:attempted-recon; sid:200018451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.kutlzl.top"; classtype:attempted-recon; sid:200018452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.l4p2g1.icu"; classtype:attempted-recon; sid:200018453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.mwdrbx.top"; classtype:attempted-recon; sid:200018454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.nhewlh.top"; classtype:attempted-recon; sid:200018455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.nrmzy6.icu"; classtype:attempted-recon; sid:200018456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.ofldnb.shop"; classtype:attempted-recon; sid:200018457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.patcfp.top"; classtype:attempted-recon; sid:200018458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.pjt9os.icu"; classtype:attempted-recon; sid:200018459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.pysitg.top"; classtype:attempted-recon; sid:200018460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.rgdpsh.top"; classtype:attempted-recon; sid:200018461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.uhia8h.icu"; classtype:attempted-recon; sid:200018462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.ytnxwi.top"; classtype:attempted-recon; sid:200018463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccaesrirono.aseaecssoconaoeosnmer.zmlyhs.top"; classtype:attempted-recon; sid:200018464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.1112458.xyz"; classtype:attempted-recon; sid:200018465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.abluwk.top"; classtype:attempted-recon; sid:200018466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.b4eqf.icu"; classtype:attempted-recon; sid:200018467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.bfsngf.top"; classtype:attempted-recon; sid:200018468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.chkmuq.shop"; classtype:attempted-recon; sid:200018469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.djulad.top"; classtype:attempted-recon; sid:200018470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.eaelbi.top"; classtype:attempted-recon; sid:200018471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.exqkjx.top"; classtype:attempted-recon; sid:200018472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.gamxhl.shop"; classtype:attempted-recon; sid:200018473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.hpbzkc.top"; classtype:attempted-recon; sid:200018474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.hycxop.top"; classtype:attempted-recon; sid:200018475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.klgmfj.top"; classtype:attempted-recon; sid:200018476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.kpgvbn.top"; classtype:attempted-recon; sid:200018477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.ladyul.top"; classtype:attempted-recon; sid:200018478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.nhewlh.top"; classtype:attempted-recon; sid:200018479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.npibd.top"; classtype:attempted-recon; sid:200018480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.oipful.top"; classtype:attempted-recon; sid:200018481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.ptrwmp.top"; classtype:attempted-recon; sid:200018482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.pxnctk.top"; classtype:attempted-recon; sid:200018483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.tbntv.icu"; classtype:attempted-recon; sid:200018484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.u25r5u.icu"; classtype:attempted-recon; sid:200018485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.vcacks.top"; classtype:attempted-recon; sid:200018486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.xvlbws.top"; classtype:attempted-recon; sid:200018487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.ytnxwi.top"; classtype:attempted-recon; sid:200018488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.zmlyhs.top"; classtype:attempted-recon; sid:200018489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.6mmfl.icu"; classtype:attempted-recon; sid:200018490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.7hml9e.icu"; classtype:attempted-recon; sid:200018491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.8fgrh.icu"; classtype:attempted-recon; sid:200018492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.b4eqf.icu"; classtype:attempted-recon; sid:200018493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.chashanchu21.shop"; classtype:attempted-recon; sid:200018494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.chkmuq.shop"; classtype:attempted-recon; sid:200018495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.cstztf.top"; classtype:attempted-recon; sid:200018496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.ehgmml.top"; classtype:attempted-recon; sid:200018497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.gdmdxy.top"; classtype:attempted-recon; sid:200018498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.gjglse.shop"; classtype:attempted-recon; sid:200018499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.gntozh.top"; classtype:attempted-recon; sid:200018500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.gs3do.icu"; classtype:attempted-recon; sid:200018501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.hpbzkc.top"; classtype:attempted-recon; sid:200018502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.ihfo5.icu"; classtype:attempted-recon; sid:200018503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.ilfbdb.top"; classtype:attempted-recon; sid:200018504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.iytxjk.top"; classtype:attempted-recon; sid:200018505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.kutlzl.top"; classtype:attempted-recon; sid:200018506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.pqdxev.top"; classtype:attempted-recon; sid:200018507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.qlmenm.top"; classtype:attempted-recon; sid:200018508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.rzuxzq.shop"; classtype:attempted-recon; sid:200018509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.shanchuta27.shop"; classtype:attempted-recon; sid:200018510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.tbntv.icu"; classtype:attempted-recon; sid:200018511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.vcacks.top"; classtype:attempted-recon; sid:200018512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.vkpock.shop"; classtype:attempted-recon; sid:200018513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.xvlbws.top"; classtype:attempted-recon; sid:200018514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.xzlnlm.top"; classtype:attempted-recon; sid:200018515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seacseccasorirn.osaeacessoccnaoeosnmer.yphurc.top"; classtype:attempted-recon; sid:200018516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seafooddeliveryapp.com"; classtype:attempted-recon; sid:200018517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seal-app-k2wcm.ondigitalocean.app"; classtype:attempted-recon; sid:200018518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seaquenceventures.com"; classtype:attempted-recon; sid:200018519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"searchgreen-hill-b1b0.rekaci1676.workers.dev"; classtype:attempted-recon; sid:200018520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.1112458.xyz"; classtype:attempted-recon; sid:200018521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.2sae6k.icu"; classtype:attempted-recon; sid:200018522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.3dbbmp.icu"; classtype:attempted-recon; sid:200018523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.3p1yb.icu"; classtype:attempted-recon; sid:200018524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200018525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.457e0p.icu"; classtype:attempted-recon; sid:200018526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.4i3si1.icu"; classtype:attempted-recon; sid:200018527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.5577778.xyz"; classtype:attempted-recon; sid:200018528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.5uzz0h.icu"; classtype:attempted-recon; sid:200018529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.6788665.xyz"; classtype:attempted-recon; sid:200018530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.6876578.xyz"; classtype:attempted-recon; sid:200018531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.6mmfl.icu"; classtype:attempted-recon; sid:200018532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.7hml9e.icu"; classtype:attempted-recon; sid:200018533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.7lnki4.icu"; classtype:attempted-recon; sid:200018534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.7ngywp.icu"; classtype:attempted-recon; sid:200018535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.8fgrh.icu"; classtype:attempted-recon; sid:200018536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.9v9w2y.icu"; classtype:attempted-recon; sid:200018537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.abluwk.top"; classtype:attempted-recon; sid:200018538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.adlxbh.top"; classtype:attempted-recon; sid:200018539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.afohvv.top"; classtype:attempted-recon; sid:200018540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.awsgn.top"; classtype:attempted-recon; sid:200018541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.b32mgr.icu"; classtype:attempted-recon; sid:200018542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.b4eqf.icu"; classtype:attempted-recon; sid:200018543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.b6x80w.icu"; classtype:attempted-recon; sid:200018544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.bfsngf.top"; classtype:attempted-recon; sid:200018545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.bs7dc.icu"; classtype:attempted-recon; sid:200018546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.bsnpag.top"; classtype:attempted-recon; sid:200018547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.bvdadv.top"; classtype:attempted-recon; sid:200018548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.cdpthi.top"; classtype:attempted-recon; sid:200018549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.chashanchu21.shop"; classtype:attempted-recon; sid:200018550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.chashanchu48.shop"; classtype:attempted-recon; sid:200018551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.chkmuq.shop"; classtype:attempted-recon; sid:200018552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.citcfi.top"; classtype:attempted-recon; sid:200018553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.cjezmf.top"; classtype:attempted-recon; sid:200018554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.com-deals.shop"; classtype:attempted-recon; sid:200018555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.contius.shop"; classtype:attempted-recon; sid:200018556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.coxrdc.top"; classtype:attempted-recon; sid:200018557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.cqvlsi.top"; classtype:attempted-recon; sid:200018558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.cstztf.top"; classtype:attempted-recon; sid:200018559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.demtjo.top"; classtype:attempted-recon; sid:200018560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.dfdnsx.top"; classtype:attempted-recon; sid:200018561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.dgqqxx.top"; classtype:attempted-recon; sid:200018562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.djulad.top"; classtype:attempted-recon; sid:200018563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.dkmimw.top"; classtype:attempted-recon; sid:200018564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.dnmsu6.icu"; classtype:attempted-recon; sid:200018565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.doenfd.top"; classtype:attempted-recon; sid:200018566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.eaelbi.top"; classtype:attempted-recon; sid:200018567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ehgmml.top"; classtype:attempted-recon; sid:200018568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ejvocy.top"; classtype:attempted-recon; sid:200018569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.elhicw.top"; classtype:attempted-recon; sid:200018570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.epwnsr.top"; classtype:attempted-recon; sid:200018571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.eucvbc.top"; classtype:attempted-recon; sid:200018572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.exqkjx.top"; classtype:attempted-recon; sid:200018573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.fhqemq.top"; classtype:attempted-recon; sid:200018574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.fprrlq.top"; classtype:attempted-recon; sid:200018575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.fukjzs.top"; classtype:attempted-recon; sid:200018576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.fvkhnr.top"; classtype:attempted-recon; sid:200018577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.fzfweo.top"; classtype:attempted-recon; sid:200018578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gamxhl.shop"; classtype:attempted-recon; sid:200018579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gdmdxy.top"; classtype:attempted-recon; sid:200018580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gjglse.shop"; classtype:attempted-recon; sid:200018581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.glhdpz.top"; classtype:attempted-recon; sid:200018582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gntozh.top"; classtype:attempted-recon; sid:200018583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gs3do.icu"; classtype:attempted-recon; sid:200018584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gtqklv.top"; classtype:attempted-recon; sid:200018585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gxdhfa.top"; classtype:attempted-recon; sid:200018586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gyzt809.xyz"; classtype:attempted-recon; sid:200018587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gzmvuo.top"; classtype:attempted-recon; sid:200018588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.hhxulg.top"; classtype:attempted-recon; sid:200018589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.hixcny.top"; classtype:attempted-recon; sid:200018590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.hpbzkc.top"; classtype:attempted-recon; sid:200018591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.hweypy.top"; classtype:attempted-recon; sid:200018592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.hycxop.top"; classtype:attempted-recon; sid:200018593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.hyhznq.top"; classtype:attempted-recon; sid:200018594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.iaklie.top"; classtype:attempted-recon; sid:200018595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ihfo5.icu"; classtype:attempted-recon; sid:200018596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ilfbdb.top"; classtype:attempted-recon; sid:200018597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.invpbv.top"; classtype:attempted-recon; sid:200018598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ioxsho.shop"; classtype:attempted-recon; sid:200018599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.iytxjk.top"; classtype:attempted-recon; sid:200018600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.jivdhm.top"; classtype:attempted-recon; sid:200018601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.jryuds.top"; classtype:attempted-recon; sid:200018602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.jubsfg.top"; classtype:attempted-recon; sid:200018603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.kbqnmz.top"; classtype:attempted-recon; sid:200018604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.klgmfj.top"; classtype:attempted-recon; sid:200018605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.kpgvbn.top"; classtype:attempted-recon; sid:200018606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.kutlzl.top"; classtype:attempted-recon; sid:200018607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.kwoneq.top"; classtype:attempted-recon; sid:200018608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.l4p2g1.icu"; classtype:attempted-recon; sid:200018609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ladyul.top"; classtype:attempted-recon; sid:200018610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.lfvlpt.top"; classtype:attempted-recon; sid:200018611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.lgwjlm.shop"; classtype:attempted-recon; sid:200018612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.llsoxx.top"; classtype:attempted-recon; sid:200018613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.mbirgc.top"; classtype:attempted-recon; sid:200018614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200018615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.mvqlzn.top"; classtype:attempted-recon; sid:200018616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.mwdrbx.top"; classtype:attempted-recon; sid:200018617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.mxeanv.top"; classtype:attempted-recon; sid:200018618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.n21so.icu"; classtype:attempted-recon; sid:200018619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.n6eonm.icu"; classtype:attempted-recon; sid:200018620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.neidee.top"; classtype:attempted-recon; sid:200018621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nfpdgp.top"; classtype:attempted-recon; sid:200018622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nhewlh.top"; classtype:attempted-recon; sid:200018623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nkjfmc.top"; classtype:attempted-recon; sid:200018624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nlujo.top"; classtype:attempted-recon; sid:200018625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.notwe.icu"; classtype:attempted-recon; sid:200018626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nphgoc.top"; classtype:attempted-recon; sid:200018627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.npibd.top"; classtype:attempted-recon; sid:200018628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nqsaby.top"; classtype:attempted-recon; sid:200018629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nr5kfh.icu"; classtype:attempted-recon; sid:200018630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.nrmzy6.icu"; classtype:attempted-recon; sid:200018631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ofldnb.shop"; classtype:attempted-recon; sid:200018632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ohzctx.top"; classtype:attempted-recon; sid:200018633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.oiknia.top"; classtype:attempted-recon; sid:200018634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.oipful.top"; classtype:attempted-recon; sid:200018635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.patcfp.top"; classtype:attempted-recon; sid:200018636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pbykwg.top"; classtype:attempted-recon; sid:200018637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pdndft.top"; classtype:attempted-recon; sid:200018638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ph29h.icu"; classtype:attempted-recon; sid:200018639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pjt9os.icu"; classtype:attempted-recon; sid:200018640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pqdxev.top"; classtype:attempted-recon; sid:200018641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ptrwmp.top"; classtype:attempted-recon; sid:200018642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pugxbo.top"; classtype:attempted-recon; sid:200018643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.puoo9.icu"; classtype:attempted-recon; sid:200018644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pxbkkk.top"; classtype:attempted-recon; sid:200018645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pxnctk.top"; classtype:attempted-recon; sid:200018646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pxzjwk.top"; classtype:attempted-recon; sid:200018647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.pysitg.top"; classtype:attempted-recon; sid:200018648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.qexccc.top"; classtype:attempted-recon; sid:200018649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.qfvbqx.shop"; classtype:attempted-recon; sid:200018650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.qlmenm.top"; classtype:attempted-recon; sid:200018651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.qoefmk.top"; classtype:attempted-recon; sid:200018652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.qskgtg.top"; classtype:attempted-recon; sid:200018653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.qvcxln.shop"; classtype:attempted-recon; sid:200018654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.qwuchl.top"; classtype:attempted-recon; sid:200018655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.rgdpsh.top"; classtype:attempted-recon; sid:200018656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.rhwdsq.top"; classtype:attempted-recon; sid:200018657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.rn5mu.icu"; classtype:attempted-recon; sid:200018658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.royjjy.shop"; classtype:attempted-recon; sid:200018659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.runjin007.icu"; classtype:attempted-recon; sid:200018660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.rvpepb.top"; classtype:attempted-recon; sid:200018661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.rzuxzq.shop"; classtype:attempted-recon; sid:200018662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.saveyr.top"; classtype:attempted-recon; sid:200018663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.sftqjs.top"; classtype:attempted-recon; sid:200018664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.shanchuta27.shop"; classtype:attempted-recon; sid:200018665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.tbntv.icu"; classtype:attempted-recon; sid:200018666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.tgmqlg.top"; classtype:attempted-recon; sid:200018667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.tikoig.top"; classtype:attempted-recon; sid:200018668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.u25r5u.icu"; classtype:attempted-recon; sid:200018669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.uhia8h.icu"; classtype:attempted-recon; sid:200018670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.upjhye.top"; classtype:attempted-recon; sid:200018671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.usivdv.top"; classtype:attempted-recon; sid:200018672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.vcacks.top"; classtype:attempted-recon; sid:200018673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.vfqske.shop"; classtype:attempted-recon; sid:200018674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.vkpock.shop"; classtype:attempted-recon; sid:200018675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.vnbbks.top"; classtype:attempted-recon; sid:200018676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.voadax.top"; classtype:attempted-recon; sid:200018677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.vrbvro.top"; classtype:attempted-recon; sid:200018678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.wcpjfd.top"; classtype:attempted-recon; sid:200018679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.wl85i.icu"; classtype:attempted-recon; sid:200018680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.wolvps.shop"; classtype:attempted-recon; sid:200018681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.wwffoj.shop"; classtype:attempted-recon; sid:200018682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xaexmo.top"; classtype:attempted-recon; sid:200018683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xgjt.pro"; classtype:attempted-recon; sid:200018684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xgtofb.top"; classtype:attempted-recon; sid:200018685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xqpwkk.top"; classtype:attempted-recon; sid:200018686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xvlbws.top"; classtype:attempted-recon; sid:200018687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xwitwq.top"; classtype:attempted-recon; sid:200018688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.xzlnlm.top"; classtype:attempted-recon; sid:200018689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.yhuvzv.top"; classtype:attempted-recon; sid:200018690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.yifpgd.top"; classtype:attempted-recon; sid:200018691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.yphurc.top"; classtype:attempted-recon; sid:200018692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ytnxwi.top"; classtype:attempted-recon; sid:200018693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.ytwbnq.top"; classtype:attempted-recon; sid:200018694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.yyzded.top"; classtype:attempted-recon; sid:200018695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.zmlyhs.top"; classtype:attempted-recon; sid:200018696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.zrbfzw.top"; classtype:attempted-recon; sid:200018697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.zxj6002.xyz"; classtype:attempted-recon; sid:200018698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.1112458.xyz"; classtype:attempted-recon; sid:200018699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.2sae6k.icu"; classtype:attempted-recon; sid:200018700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.3dbbmp.icu"; classtype:attempted-recon; sid:200018701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.3p1yb.icu"; classtype:attempted-recon; sid:200018702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.457e0p.icu"; classtype:attempted-recon; sid:200018703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.4i3si1.icu"; classtype:attempted-recon; sid:200018704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.5577778.xyz"; classtype:attempted-recon; sid:200018705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.5sime.icu"; classtype:attempted-recon; sid:200018706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.5uzz0h.icu"; classtype:attempted-recon; sid:200018707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.6788665.xyz"; classtype:attempted-recon; sid:200018708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.6876578.xyz"; classtype:attempted-recon; sid:200018709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.6mmfl.icu"; classtype:attempted-recon; sid:200018710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.7hml9e.icu"; classtype:attempted-recon; sid:200018711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.7lnki4.icu"; classtype:attempted-recon; sid:200018712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.7ngywp.icu"; classtype:attempted-recon; sid:200018713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.8fgrh.icu"; classtype:attempted-recon; sid:200018714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.9v9w2y.icu"; classtype:attempted-recon; sid:200018715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.abluwk.top"; classtype:attempted-recon; sid:200018716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.adlxbh.top"; classtype:attempted-recon; sid:200018717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.afohvv.top"; classtype:attempted-recon; sid:200018718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.awsgn.top"; classtype:attempted-recon; sid:200018719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.b32mgr.icu"; classtype:attempted-recon; sid:200018720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.b4eqf.icu"; classtype:attempted-recon; sid:200018721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.b6x80w.icu"; classtype:attempted-recon; sid:200018722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.bbl7ef.icu"; classtype:attempted-recon; sid:200018723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.bfsngf.top"; classtype:attempted-recon; sid:200018724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.bs7dc.icu"; classtype:attempted-recon; sid:200018725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.bsnpag.top"; classtype:attempted-recon; sid:200018726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.bvdadv.top"; classtype:attempted-recon; sid:200018727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.cdpthi.top"; classtype:attempted-recon; sid:200018728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.chashanchu48.shop"; classtype:attempted-recon; sid:200018729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.chkmuq.shop"; classtype:attempted-recon; sid:200018730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.citcfi.top"; classtype:attempted-recon; sid:200018731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.com-deals.shop"; classtype:attempted-recon; sid:200018732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.contius.shop"; classtype:attempted-recon; sid:200018733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.coxrdc.top"; classtype:attempted-recon; sid:200018734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.cqvlsi.top"; classtype:attempted-recon; sid:200018735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.cstztf.top"; classtype:attempted-recon; sid:200018736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.demtjo.top"; classtype:attempted-recon; sid:200018737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.dfdnsx.top"; classtype:attempted-recon; sid:200018738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.dgqqxx.top"; classtype:attempted-recon; sid:200018739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.djulad.top"; classtype:attempted-recon; sid:200018740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.dkmimw.top"; classtype:attempted-recon; sid:200018741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.dnmsu6.icu"; classtype:attempted-recon; sid:200018742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.doenfd.top"; classtype:attempted-recon; sid:200018743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.eaelbi.top"; classtype:attempted-recon; sid:200018744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ehgmml.top"; classtype:attempted-recon; sid:200018745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ejvocy.top"; classtype:attempted-recon; sid:200018746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.elhicw.top"; classtype:attempted-recon; sid:200018747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.epwnsr.top"; classtype:attempted-recon; sid:200018748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.eucvbc.top"; classtype:attempted-recon; sid:200018749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.exqkjx.top"; classtype:attempted-recon; sid:200018750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fahxqk.shop"; classtype:attempted-recon; sid:200018751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fhqemq.top"; classtype:attempted-recon; sid:200018752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fprrlq.top"; classtype:attempted-recon; sid:200018753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fukjzs.top"; classtype:attempted-recon; sid:200018754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fvkhnr.top"; classtype:attempted-recon; sid:200018755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fzfweo.top"; classtype:attempted-recon; sid:200018756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gamxhl.shop"; classtype:attempted-recon; sid:200018757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gdmdxy.top"; classtype:attempted-recon; sid:200018758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gjglse.shop"; classtype:attempted-recon; sid:200018759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.glhdpz.top"; classtype:attempted-recon; sid:200018760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gntozh.top"; classtype:attempted-recon; sid:200018761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gs3do.icu"; classtype:attempted-recon; sid:200018762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gtqklv.top"; classtype:attempted-recon; sid:200018763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gxdhfa.top"; classtype:attempted-recon; sid:200018764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gyzt809.xyz"; classtype:attempted-recon; sid:200018765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gzmvuo.top"; classtype:attempted-recon; sid:200018766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.hhxulg.top"; classtype:attempted-recon; sid:200018767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.hixcny.top"; classtype:attempted-recon; sid:200018768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.hpbzkc.top"; classtype:attempted-recon; sid:200018769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.hweypy.top"; classtype:attempted-recon; sid:200018770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.hycxop.top"; classtype:attempted-recon; sid:200018771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.iaklie.top"; classtype:attempted-recon; sid:200018772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ihfo5.icu"; classtype:attempted-recon; sid:200018773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ilfbdb.top"; classtype:attempted-recon; sid:200018774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.invpbv.top"; classtype:attempted-recon; sid:200018775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ioxsho.shop"; classtype:attempted-recon; sid:200018776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.iytxjk.top"; classtype:attempted-recon; sid:200018777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.jivdhm.top"; classtype:attempted-recon; sid:200018778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.jryuds.top"; classtype:attempted-recon; sid:200018779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.jubsfg.top"; classtype:attempted-recon; sid:200018780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.kbqnmz.top"; classtype:attempted-recon; sid:200018781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.kfpxyn.top"; classtype:attempted-recon; sid:200018782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.klgmfj.top"; classtype:attempted-recon; sid:200018783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.kpgvbn.top"; classtype:attempted-recon; sid:200018784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.kutlzl.top"; classtype:attempted-recon; sid:200018785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.kwoneq.top"; classtype:attempted-recon; sid:200018786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.l4p2g1.icu"; classtype:attempted-recon; sid:200018787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ladyul.top"; classtype:attempted-recon; sid:200018788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.lfvlpt.top"; classtype:attempted-recon; sid:200018789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.lgwjlm.shop"; classtype:attempted-recon; sid:200018790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.llsoxx.top"; classtype:attempted-recon; sid:200018791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200018792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.mvqlzn.top"; classtype:attempted-recon; sid:200018793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.mwdrbx.top"; classtype:attempted-recon; sid:200018794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.mxeanv.top"; classtype:attempted-recon; sid:200018795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.n21so.icu"; classtype:attempted-recon; sid:200018796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.n6eonm.icu"; classtype:attempted-recon; sid:200018797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.neidee.top"; classtype:attempted-recon; sid:200018798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nfpdgp.top"; classtype:attempted-recon; sid:200018799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nhewlh.top"; classtype:attempted-recon; sid:200018800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nkjfmc.top"; classtype:attempted-recon; sid:200018801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nlujo.top"; classtype:attempted-recon; sid:200018802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.notwe.icu"; classtype:attempted-recon; sid:200018803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nphgoc.top"; classtype:attempted-recon; sid:200018804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.npibd.top"; classtype:attempted-recon; sid:200018805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nqsaby.top"; classtype:attempted-recon; sid:200018806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.nrmzy6.icu"; classtype:attempted-recon; sid:200018807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ofldnb.shop"; classtype:attempted-recon; sid:200018808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ogzbtb.top"; classtype:attempted-recon; sid:200018809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ohzctx.top"; classtype:attempted-recon; sid:200018810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.oiknia.top"; classtype:attempted-recon; sid:200018811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.oipful.top"; classtype:attempted-recon; sid:200018812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.patcfp.top"; classtype:attempted-recon; sid:200018813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pbykwg.top"; classtype:attempted-recon; sid:200018814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pdndft.top"; classtype:attempted-recon; sid:200018815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ph29h.icu"; classtype:attempted-recon; sid:200018816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pjt9os.icu"; classtype:attempted-recon; sid:200018817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pqdxev.top"; classtype:attempted-recon; sid:200018818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pugxbo.top"; classtype:attempted-recon; sid:200018819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.puoo9.icu"; classtype:attempted-recon; sid:200018820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pxbkkk.top"; classtype:attempted-recon; sid:200018821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pxnctk.top"; classtype:attempted-recon; sid:200018822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pxzjwk.top"; classtype:attempted-recon; sid:200018823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.pysitg.top"; classtype:attempted-recon; sid:200018824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.qexccc.top"; classtype:attempted-recon; sid:200018825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.qfvbqx.shop"; classtype:attempted-recon; sid:200018826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.qlmenm.top"; classtype:attempted-recon; sid:200018827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.qoefmk.top"; classtype:attempted-recon; sid:200018828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.qvcxln.shop"; classtype:attempted-recon; sid:200018829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.qwuchl.top"; classtype:attempted-recon; sid:200018830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.rhwdsq.top"; classtype:attempted-recon; sid:200018831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.rjbvwt.top"; classtype:attempted-recon; sid:200018832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.rn5mu.icu"; classtype:attempted-recon; sid:200018833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.royjjy.shop"; classtype:attempted-recon; sid:200018834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.runjin007.icu"; classtype:attempted-recon; sid:200018835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.rvpepb.top"; classtype:attempted-recon; sid:200018836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.rzuxzq.shop"; classtype:attempted-recon; sid:200018837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.saveyr.top"; classtype:attempted-recon; sid:200018838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.sftqjs.top"; classtype:attempted-recon; sid:200018839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.shanchuta27.shop"; classtype:attempted-recon; sid:200018840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.tbntv.icu"; classtype:attempted-recon; sid:200018841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.tfodbq.top"; classtype:attempted-recon; sid:200018842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.tgmqlg.top"; classtype:attempted-recon; sid:200018843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.tikoig.top"; classtype:attempted-recon; sid:200018844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.tilzhy.top"; classtype:attempted-recon; sid:200018845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.u25r5u.icu"; classtype:attempted-recon; sid:200018846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.uhia8h.icu"; classtype:attempted-recon; sid:200018847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.usivdv.top"; classtype:attempted-recon; sid:200018848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.vcacks.top"; classtype:attempted-recon; sid:200018849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.vcgsip.top"; classtype:attempted-recon; sid:200018850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.vfqske.shop"; classtype:attempted-recon; sid:200018851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.vkpock.shop"; classtype:attempted-recon; sid:200018852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.vnbbks.top"; classtype:attempted-recon; sid:200018853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.voadax.top"; classtype:attempted-recon; sid:200018854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.vrbvro.top"; classtype:attempted-recon; sid:200018855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.wcpjfd.top"; classtype:attempted-recon; sid:200018856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.wl85i.icu"; classtype:attempted-recon; sid:200018857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.wwffoj.shop"; classtype:attempted-recon; sid:200018858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xaexmo.top"; classtype:attempted-recon; sid:200018859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xgjt.pro"; classtype:attempted-recon; sid:200018860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xgtofb.top"; classtype:attempted-recon; sid:200018861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xqpwkk.top"; classtype:attempted-recon; sid:200018862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xvlbws.top"; classtype:attempted-recon; sid:200018863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xwitwq.top"; classtype:attempted-recon; sid:200018864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.xzlnlm.top"; classtype:attempted-recon; sid:200018865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.yhuvzv.top"; classtype:attempted-recon; sid:200018866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.yifpgd.top"; classtype:attempted-recon; sid:200018867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.yphurc.top"; classtype:attempted-recon; sid:200018868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ytnxwi.top"; classtype:attempted-recon; sid:200018869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.ytwbnq.top"; classtype:attempted-recon; sid:200018870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.yyzded.top"; classtype:attempted-recon; sid:200018871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.zmlyhs.top"; classtype:attempted-recon; sid:200018872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.zrbfzw.top"; classtype:attempted-recon; sid:200018873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.zxj6002.xyz"; classtype:attempted-recon; sid:200018874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.1112458.xyz"; classtype:attempted-recon; sid:200018875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.2sae6k.icu"; classtype:attempted-recon; sid:200018876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.3dbbmp.icu"; classtype:attempted-recon; sid:200018877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.3p1yb.icu"; classtype:attempted-recon; sid:200018878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200018879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.457e0p.icu"; classtype:attempted-recon; sid:200018880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.4i3si1.icu"; classtype:attempted-recon; sid:200018881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.5577778.xyz"; classtype:attempted-recon; sid:200018882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.5sime.icu"; classtype:attempted-recon; sid:200018883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.5uzz0h.icu"; classtype:attempted-recon; sid:200018884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.650pt.icu"; classtype:attempted-recon; sid:200018885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.6788665.xyz"; classtype:attempted-recon; sid:200018886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.6876578.xyz"; classtype:attempted-recon; sid:200018887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.6mmfl.icu"; classtype:attempted-recon; sid:200018888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.7hml9e.icu"; classtype:attempted-recon; sid:200018889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.7lnki4.icu"; classtype:attempted-recon; sid:200018890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.7ngywp.icu"; classtype:attempted-recon; sid:200018891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.8fgrh.icu"; classtype:attempted-recon; sid:200018892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.9v9w2y.icu"; classtype:attempted-recon; sid:200018893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.abluwk.top"; classtype:attempted-recon; sid:200018894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.adlxbh.top"; classtype:attempted-recon; sid:200018895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.afohvv.top"; classtype:attempted-recon; sid:200018896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.awsgn.top"; classtype:attempted-recon; sid:200018897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.b32mgr.icu"; classtype:attempted-recon; sid:200018898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.b4eqf.icu"; classtype:attempted-recon; sid:200018899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.b6x80w.icu"; classtype:attempted-recon; sid:200018900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.bbl7ef.icu"; classtype:attempted-recon; sid:200018901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.bfsngf.top"; classtype:attempted-recon; sid:200018902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.bs7dc.icu"; classtype:attempted-recon; sid:200018903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.bsnpag.top"; classtype:attempted-recon; sid:200018904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.bvdadv.top"; classtype:attempted-recon; sid:200018905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.chashanchu48.shop"; classtype:attempted-recon; sid:200018906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.chkmuq.shop"; classtype:attempted-recon; sid:200018907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.citcfi.top"; classtype:attempted-recon; sid:200018908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.cjezmf.top"; classtype:attempted-recon; sid:200018909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.com-deals.shop"; classtype:attempted-recon; sid:200018910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.contius.shop"; classtype:attempted-recon; sid:200018911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.coxrdc.top"; classtype:attempted-recon; sid:200018912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.cstztf.top"; classtype:attempted-recon; sid:200018913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.demtjo.top"; classtype:attempted-recon; sid:200018914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.dfdnsx.top"; classtype:attempted-recon; sid:200018915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.dgqqxx.top"; classtype:attempted-recon; sid:200018916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.djulad.top"; classtype:attempted-recon; sid:200018917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.dkmimw.top"; classtype:attempted-recon; sid:200018918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.dnmsu6.icu"; classtype:attempted-recon; sid:200018919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.eaelbi.top"; classtype:attempted-recon; sid:200018920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ejvocy.top"; classtype:attempted-recon; sid:200018921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.elhicw.top"; classtype:attempted-recon; sid:200018922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.epwnsr.top"; classtype:attempted-recon; sid:200018923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.eucvbc.top"; classtype:attempted-recon; sid:200018924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.exqkjx.top"; classtype:attempted-recon; sid:200018925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fahxqk.shop"; classtype:attempted-recon; sid:200018926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fhqemq.top"; classtype:attempted-recon; sid:200018927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.flscly.top"; classtype:attempted-recon; sid:200018928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fprrlq.top"; classtype:attempted-recon; sid:200018929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fukjzs.top"; classtype:attempted-recon; sid:200018930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fvkhnr.top"; classtype:attempted-recon; sid:200018931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fzfweo.top"; classtype:attempted-recon; sid:200018932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gamxhl.shop"; classtype:attempted-recon; sid:200018933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gdmdxy.top"; classtype:attempted-recon; sid:200018934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gjglse.shop"; classtype:attempted-recon; sid:200018935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.glhdpz.top"; classtype:attempted-recon; sid:200018936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gntozh.top"; classtype:attempted-recon; sid:200018937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gs3do.icu"; classtype:attempted-recon; sid:200018938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gtqklv.top"; classtype:attempted-recon; sid:200018939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gxdhfa.top"; classtype:attempted-recon; sid:200018940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gyzt809.xyz"; classtype:attempted-recon; sid:200018941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gzmvuo.top"; classtype:attempted-recon; sid:200018942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.hhxulg.top"; classtype:attempted-recon; sid:200018943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.hixcny.top"; classtype:attempted-recon; sid:200018944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.hpbzkc.top"; classtype:attempted-recon; sid:200018945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.hweypy.top"; classtype:attempted-recon; sid:200018946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.hycxop.top"; classtype:attempted-recon; sid:200018947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.hyhznq.top"; classtype:attempted-recon; sid:200018948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.iaklie.top"; classtype:attempted-recon; sid:200018949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ihfo5.icu"; classtype:attempted-recon; sid:200018950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ilfbdb.top"; classtype:attempted-recon; sid:200018951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.invpbv.top"; classtype:attempted-recon; sid:200018952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ioxsho.shop"; classtype:attempted-recon; sid:200018953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.iytxjk.top"; classtype:attempted-recon; sid:200018954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.jivdhm.top"; classtype:attempted-recon; sid:200018955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.jryuds.top"; classtype:attempted-recon; sid:200018956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.jubsfg.top"; classtype:attempted-recon; sid:200018957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.kfpxyn.top"; classtype:attempted-recon; sid:200018958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.klgmfj.top"; classtype:attempted-recon; sid:200018959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.kpgvbn.top"; classtype:attempted-recon; sid:200018960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200018961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.kutlzl.top"; classtype:attempted-recon; sid:200018962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.kwoneq.top"; classtype:attempted-recon; sid:200018963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.l4p2g1.icu"; classtype:attempted-recon; sid:200018964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ladyul.top"; classtype:attempted-recon; sid:200018965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.lfvlpt.top"; classtype:attempted-recon; sid:200018966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.lgwjlm.shop"; classtype:attempted-recon; sid:200018967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.mbirgc.top"; classtype:attempted-recon; sid:200018968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200018969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.mvqlzn.top"; classtype:attempted-recon; sid:200018970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.mwdrbx.top"; classtype:attempted-recon; sid:200018971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.mxeanv.top"; classtype:attempted-recon; sid:200018972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.n21so.icu"; classtype:attempted-recon; sid:200018973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.n6eonm.icu"; classtype:attempted-recon; sid:200018974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.neidee.top"; classtype:attempted-recon; sid:200018975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nfpdgp.top"; classtype:attempted-recon; sid:200018976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nhewlh.top"; classtype:attempted-recon; sid:200018977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nkjfmc.top"; classtype:attempted-recon; sid:200018978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nlujo.top"; classtype:attempted-recon; sid:200018979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.notwe.icu"; classtype:attempted-recon; sid:200018980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nphgoc.top"; classtype:attempted-recon; sid:200018981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.npibd.top"; classtype:attempted-recon; sid:200018982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nqsaby.top"; classtype:attempted-recon; sid:200018983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nr5kfh.icu"; classtype:attempted-recon; sid:200018984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.nrmzy6.icu"; classtype:attempted-recon; sid:200018985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ofldnb.shop"; classtype:attempted-recon; sid:200018986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ogzbtb.top"; classtype:attempted-recon; sid:200018987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ohzctx.top"; classtype:attempted-recon; sid:200018988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.oiknia.top"; classtype:attempted-recon; sid:200018989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.oipful.top"; classtype:attempted-recon; sid:200018990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.patcfp.top"; classtype:attempted-recon; sid:200018991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pbykwg.top"; classtype:attempted-recon; sid:200018992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pdndft.top"; classtype:attempted-recon; sid:200018993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ph29h.icu"; classtype:attempted-recon; sid:200018994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pjt9os.icu"; classtype:attempted-recon; sid:200018995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pqdxev.top"; classtype:attempted-recon; sid:200018996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pugxbo.top"; classtype:attempted-recon; sid:200018997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.puoo9.icu"; classtype:attempted-recon; sid:200018998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pxbkkk.top"; classtype:attempted-recon; sid:200018999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pxnctk.top"; classtype:attempted-recon; sid:200019000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pxzjwk.top"; classtype:attempted-recon; sid:200019001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.pysitg.top"; classtype:attempted-recon; sid:200019002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.qexccc.top"; classtype:attempted-recon; sid:200019003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.qlmenm.top"; classtype:attempted-recon; sid:200019004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.qoefmk.top"; classtype:attempted-recon; sid:200019005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.qskgtg.top"; classtype:attempted-recon; sid:200019006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.qvcxln.shop"; classtype:attempted-recon; sid:200019007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.qwuchl.top"; classtype:attempted-recon; sid:200019008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.rgdpsh.top"; classtype:attempted-recon; sid:200019009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.rhwdsq.top"; classtype:attempted-recon; sid:200019010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.rjbvwt.top"; classtype:attempted-recon; sid:200019011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.rn5mu.icu"; classtype:attempted-recon; sid:200019012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.royjjy.shop"; classtype:attempted-recon; sid:200019013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.runjin007.icu"; classtype:attempted-recon; sid:200019014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.rvpepb.top"; classtype:attempted-recon; sid:200019015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.rzuxzq.shop"; classtype:attempted-recon; sid:200019016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.saveyr.top"; classtype:attempted-recon; sid:200019017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.sftqjs.top"; classtype:attempted-recon; sid:200019018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.shanchuta27.shop"; classtype:attempted-recon; sid:200019019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.tbntv.icu"; classtype:attempted-recon; sid:200019020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.tfodbq.top"; classtype:attempted-recon; sid:200019021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.tgmqlg.top"; classtype:attempted-recon; sid:200019022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.tikoig.top"; classtype:attempted-recon; sid:200019023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.tilzhy.top"; classtype:attempted-recon; sid:200019024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.u25r5u.icu"; classtype:attempted-recon; sid:200019025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.uhia8h.icu"; classtype:attempted-recon; sid:200019026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.upjhye.top"; classtype:attempted-recon; sid:200019027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.usivdv.top"; classtype:attempted-recon; sid:200019028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.vcacks.top"; classtype:attempted-recon; sid:200019029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.vcgsip.top"; classtype:attempted-recon; sid:200019030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.vfqske.shop"; classtype:attempted-recon; sid:200019031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.vkpock.shop"; classtype:attempted-recon; sid:200019032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.vnbbks.top"; classtype:attempted-recon; sid:200019033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.voadax.top"; classtype:attempted-recon; sid:200019034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.vrbvro.top"; classtype:attempted-recon; sid:200019035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.wcpjfd.top"; classtype:attempted-recon; sid:200019036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.wl85i.icu"; classtype:attempted-recon; sid:200019037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.wolvps.shop"; classtype:attempted-recon; sid:200019038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.wwffoj.shop"; classtype:attempted-recon; sid:200019039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.xaexmo.top"; classtype:attempted-recon; sid:200019040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.xgjt.pro"; classtype:attempted-recon; sid:200019041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.xgtofb.top"; classtype:attempted-recon; sid:200019042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.xvlbws.top"; classtype:attempted-recon; sid:200019043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.xwitwq.top"; classtype:attempted-recon; sid:200019044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.xzlnlm.top"; classtype:attempted-recon; sid:200019045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.yhuvzv.top"; classtype:attempted-recon; sid:200019046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.yifpgd.top"; classtype:attempted-recon; sid:200019047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.yphurc.top"; classtype:attempted-recon; sid:200019048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ytnxwi.top"; classtype:attempted-recon; sid:200019049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.ytwbnq.top"; classtype:attempted-recon; sid:200019050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.yyzded.top"; classtype:attempted-recon; sid:200019051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.zmlyhs.top"; classtype:attempted-recon; sid:200019052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.zrbfzw.top"; classtype:attempted-recon; sid:200019053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.zxj6002.xyz"; classtype:attempted-recon; sid:200019054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.1112458.xyz"; classtype:attempted-recon; sid:200019055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.2sae6k.icu"; classtype:attempted-recon; sid:200019056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.3dbbmp.icu"; classtype:attempted-recon; sid:200019057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.3p1yb.icu"; classtype:attempted-recon; sid:200019058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200019059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.457e0p.icu"; classtype:attempted-recon; sid:200019060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.4i3si1.icu"; classtype:attempted-recon; sid:200019061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.5577778.xyz"; classtype:attempted-recon; sid:200019062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.650pt.icu"; classtype:attempted-recon; sid:200019063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.6788665.xyz"; classtype:attempted-recon; sid:200019064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.6876578.xyz"; classtype:attempted-recon; sid:200019065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.6mmfl.icu"; classtype:attempted-recon; sid:200019066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.7hml9e.icu"; classtype:attempted-recon; sid:200019067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.7lnki4.icu"; classtype:attempted-recon; sid:200019068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.7ngywp.icu"; classtype:attempted-recon; sid:200019069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.8fgrh.icu"; classtype:attempted-recon; sid:200019070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.9v9w2y.icu"; classtype:attempted-recon; sid:200019071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.abluwk.top"; classtype:attempted-recon; sid:200019072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.adlxbh.top"; classtype:attempted-recon; sid:200019073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.afohvv.top"; classtype:attempted-recon; sid:200019074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.awsgn.top"; classtype:attempted-recon; sid:200019075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.b32mgr.icu"; classtype:attempted-recon; sid:200019076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.b4eqf.icu"; classtype:attempted-recon; sid:200019077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.b6x80w.icu"; classtype:attempted-recon; sid:200019078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.bfsngf.top"; classtype:attempted-recon; sid:200019079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.bs7dc.icu"; classtype:attempted-recon; sid:200019080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.bsnpag.top"; classtype:attempted-recon; sid:200019081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.bvdadv.top"; classtype:attempted-recon; sid:200019082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.cdpthi.top"; classtype:attempted-recon; sid:200019083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.chashanchu21.shop"; classtype:attempted-recon; sid:200019084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.chashanchu48.shop"; classtype:attempted-recon; sid:200019085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.chkmuq.shop"; classtype:attempted-recon; sid:200019086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.citcfi.top"; classtype:attempted-recon; sid:200019087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.cjezmf.top"; classtype:attempted-recon; sid:200019088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.com-deals.shop"; classtype:attempted-recon; sid:200019089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.contius.shop"; classtype:attempted-recon; sid:200019090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.coxrdc.top"; classtype:attempted-recon; sid:200019091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.cstztf.top"; classtype:attempted-recon; sid:200019092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.demtjo.top"; classtype:attempted-recon; sid:200019093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.dfdnsx.top"; classtype:attempted-recon; sid:200019094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.dgqqxx.top"; classtype:attempted-recon; sid:200019095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.djulad.top"; classtype:attempted-recon; sid:200019096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.dkmimw.top"; classtype:attempted-recon; sid:200019097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.dnmsu6.icu"; classtype:attempted-recon; sid:200019098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.eaelbi.top"; classtype:attempted-recon; sid:200019099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ehgmml.top"; classtype:attempted-recon; sid:200019100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ejvocy.top"; classtype:attempted-recon; sid:200019101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.elhicw.top"; classtype:attempted-recon; sid:200019102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.epwnsr.top"; classtype:attempted-recon; sid:200019103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.eucvbc.top"; classtype:attempted-recon; sid:200019104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.exqkjx.top"; classtype:attempted-recon; sid:200019105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.fahxqk.shop"; classtype:attempted-recon; sid:200019106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.fhqemq.top"; classtype:attempted-recon; sid:200019107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.flscly.top"; classtype:attempted-recon; sid:200019108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.fprrlq.top"; classtype:attempted-recon; sid:200019109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.fukjzs.top"; classtype:attempted-recon; sid:200019110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.fvkhnr.top"; classtype:attempted-recon; sid:200019111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.fzfweo.top"; classtype:attempted-recon; sid:200019112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gamxhl.shop"; classtype:attempted-recon; sid:200019113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gdmdxy.top"; classtype:attempted-recon; sid:200019114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gjglse.shop"; classtype:attempted-recon; sid:200019115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.glhdpz.top"; classtype:attempted-recon; sid:200019116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gntozh.top"; classtype:attempted-recon; sid:200019117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gs3do.icu"; classtype:attempted-recon; sid:200019118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gtqklv.top"; classtype:attempted-recon; sid:200019119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gxdhfa.top"; classtype:attempted-recon; sid:200019120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gyzt809.xyz"; classtype:attempted-recon; sid:200019121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gzmvuo.top"; classtype:attempted-recon; sid:200019122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.hhxulg.top"; classtype:attempted-recon; sid:200019123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.hixcny.top"; classtype:attempted-recon; sid:200019124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.hpbzkc.top"; classtype:attempted-recon; sid:200019125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.hweypy.top"; classtype:attempted-recon; sid:200019126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.hycxop.top"; classtype:attempted-recon; sid:200019127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.hyhznq.top"; classtype:attempted-recon; sid:200019128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.iaklie.top"; classtype:attempted-recon; sid:200019129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ihfo5.icu"; classtype:attempted-recon; sid:200019130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ilfbdb.top"; classtype:attempted-recon; sid:200019131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.invpbv.top"; classtype:attempted-recon; sid:200019132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ioxsho.shop"; classtype:attempted-recon; sid:200019133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.jivdhm.top"; classtype:attempted-recon; sid:200019134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.jryuds.top"; classtype:attempted-recon; sid:200019135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.jubsfg.top"; classtype:attempted-recon; sid:200019136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.kbqnmz.top"; classtype:attempted-recon; sid:200019137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.kfpxyn.top"; classtype:attempted-recon; sid:200019138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.klgmfj.top"; classtype:attempted-recon; sid:200019139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.kpgvbn.top"; classtype:attempted-recon; sid:200019140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200019141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.kutlzl.top"; classtype:attempted-recon; sid:200019142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.kwoneq.top"; classtype:attempted-recon; sid:200019143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.l4p2g1.icu"; classtype:attempted-recon; sid:200019144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ladyul.top"; classtype:attempted-recon; sid:200019145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.lfvlpt.top"; classtype:attempted-recon; sid:200019146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.lgwjlm.shop"; classtype:attempted-recon; sid:200019147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.llsoxx.top"; classtype:attempted-recon; sid:200019148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.mbirgc.top"; classtype:attempted-recon; sid:200019149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200019150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.mvqlzn.top"; classtype:attempted-recon; sid:200019151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.mwdrbx.top"; classtype:attempted-recon; sid:200019152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.mxeanv.top"; classtype:attempted-recon; sid:200019153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.n21so.icu"; classtype:attempted-recon; sid:200019154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.n6eonm.icu"; classtype:attempted-recon; sid:200019155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.neidee.top"; classtype:attempted-recon; sid:200019156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nfpdgp.top"; classtype:attempted-recon; sid:200019157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nhewlh.top"; classtype:attempted-recon; sid:200019158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nkjfmc.top"; classtype:attempted-recon; sid:200019159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nlujo.top"; classtype:attempted-recon; sid:200019160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.notwe.icu"; classtype:attempted-recon; sid:200019161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nphgoc.top"; classtype:attempted-recon; sid:200019162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.npibd.top"; classtype:attempted-recon; sid:200019163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nqsaby.top"; classtype:attempted-recon; sid:200019164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nr5kfh.icu"; classtype:attempted-recon; sid:200019165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.nrmzy6.icu"; classtype:attempted-recon; sid:200019166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ofldnb.shop"; classtype:attempted-recon; sid:200019167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ogzbtb.top"; classtype:attempted-recon; sid:200019168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ohzctx.top"; classtype:attempted-recon; sid:200019169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.oiknia.top"; classtype:attempted-recon; sid:200019170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.oipful.top"; classtype:attempted-recon; sid:200019171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.patcfp.top"; classtype:attempted-recon; sid:200019172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pbykwg.top"; classtype:attempted-recon; sid:200019173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ph29h.icu"; classtype:attempted-recon; sid:200019174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pjt9os.icu"; classtype:attempted-recon; sid:200019175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pqdxev.top"; classtype:attempted-recon; sid:200019176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ptrwmp.top"; classtype:attempted-recon; sid:200019177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pugxbo.top"; classtype:attempted-recon; sid:200019178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.puoo9.icu"; classtype:attempted-recon; sid:200019179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pxbkkk.top"; classtype:attempted-recon; sid:200019180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pxnctk.top"; classtype:attempted-recon; sid:200019181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pxzjwk.top"; classtype:attempted-recon; sid:200019182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.pysitg.top"; classtype:attempted-recon; sid:200019183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.qexccc.top"; classtype:attempted-recon; sid:200019184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.qfvbqx.shop"; classtype:attempted-recon; sid:200019185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.qlmenm.top"; classtype:attempted-recon; sid:200019186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.qoefmk.top"; classtype:attempted-recon; sid:200019187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.qskgtg.top"; classtype:attempted-recon; sid:200019188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.qvcxln.shop"; classtype:attempted-recon; sid:200019189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.qwuchl.top"; classtype:attempted-recon; sid:200019190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rgdpsh.top"; classtype:attempted-recon; sid:200019191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rhwdsq.top"; classtype:attempted-recon; sid:200019192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rjbvwt.top"; classtype:attempted-recon; sid:200019193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rn5mu.icu"; classtype:attempted-recon; sid:200019194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.royjjy.shop"; classtype:attempted-recon; sid:200019195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.runjin007.icu"; classtype:attempted-recon; sid:200019196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rvpepb.top"; classtype:attempted-recon; sid:200019197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.rzuxzq.shop"; classtype:attempted-recon; sid:200019198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.saveyr.top"; classtype:attempted-recon; sid:200019199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.sftqjs.top"; classtype:attempted-recon; sid:200019200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.shanchuta27.shop"; classtype:attempted-recon; sid:200019201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.tbntv.icu"; classtype:attempted-recon; sid:200019202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.tfodbq.top"; classtype:attempted-recon; sid:200019203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.tgmqlg.top"; classtype:attempted-recon; sid:200019204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.tikoig.top"; classtype:attempted-recon; sid:200019205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.tilzhy.top"; classtype:attempted-recon; sid:200019206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.u25r5u.icu"; classtype:attempted-recon; sid:200019207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.uhia8h.icu"; classtype:attempted-recon; sid:200019208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.upjhye.top"; classtype:attempted-recon; sid:200019209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.usivdv.top"; classtype:attempted-recon; sid:200019210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.vcacks.top"; classtype:attempted-recon; sid:200019211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.vcgsip.top"; classtype:attempted-recon; sid:200019212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.vfqske.shop"; classtype:attempted-recon; sid:200019213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.vkpock.shop"; classtype:attempted-recon; sid:200019214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.vnbbks.top"; classtype:attempted-recon; sid:200019215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.voadax.top"; classtype:attempted-recon; sid:200019216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.vrbvro.top"; classtype:attempted-recon; sid:200019217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.wcpjfd.top"; classtype:attempted-recon; sid:200019218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.wl85i.icu"; classtype:attempted-recon; sid:200019219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.wolvps.shop"; classtype:attempted-recon; sid:200019220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.wwffoj.shop"; classtype:attempted-recon; sid:200019221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.xaexmo.top"; classtype:attempted-recon; sid:200019222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.xgjt.pro"; classtype:attempted-recon; sid:200019223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.xgtofb.top"; classtype:attempted-recon; sid:200019224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.xqpwkk.top"; classtype:attempted-recon; sid:200019225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.xvlbws.top"; classtype:attempted-recon; sid:200019226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.xwitwq.top"; classtype:attempted-recon; sid:200019227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.xzlnlm.top"; classtype:attempted-recon; sid:200019228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.yhuvzv.top"; classtype:attempted-recon; sid:200019229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.yifpgd.top"; classtype:attempted-recon; sid:200019230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.yphurc.top"; classtype:attempted-recon; sid:200019231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ytnxwi.top"; classtype:attempted-recon; sid:200019232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.ytwbnq.top"; classtype:attempted-recon; sid:200019233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.yyzded.top"; classtype:attempted-recon; sid:200019234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.zmlyhs.top"; classtype:attempted-recon; sid:200019235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.zrbfzw.top"; classtype:attempted-recon; sid:200019236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.zxj6002.xyz"; classtype:attempted-recon; sid:200019237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.1112458.xyz"; classtype:attempted-recon; sid:200019238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.2sae6k.icu"; classtype:attempted-recon; sid:200019239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.3dbbmp.icu"; classtype:attempted-recon; sid:200019240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.3p1yb.icu"; classtype:attempted-recon; sid:200019241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200019242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.457e0p.icu"; classtype:attempted-recon; sid:200019243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.4i3si1.icu"; classtype:attempted-recon; sid:200019244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.5577778.xyz"; classtype:attempted-recon; sid:200019245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.5sime.icu"; classtype:attempted-recon; sid:200019246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.5uzz0h.icu"; classtype:attempted-recon; sid:200019247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.650pt.icu"; classtype:attempted-recon; sid:200019248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.6788665.xyz"; classtype:attempted-recon; sid:200019249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.6876578.xyz"; classtype:attempted-recon; sid:200019250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.6mmfl.icu"; classtype:attempted-recon; sid:200019251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.7hml9e.icu"; classtype:attempted-recon; sid:200019252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.7lnki4.icu"; classtype:attempted-recon; sid:200019253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.7ngywp.icu"; classtype:attempted-recon; sid:200019254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.8fgrh.icu"; classtype:attempted-recon; sid:200019255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.9v9w2y.icu"; classtype:attempted-recon; sid:200019256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.abluwk.top"; classtype:attempted-recon; sid:200019257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.adlxbh.top"; classtype:attempted-recon; sid:200019258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.afohvv.top"; classtype:attempted-recon; sid:200019259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.awsgn.top"; classtype:attempted-recon; sid:200019260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.b32mgr.icu"; classtype:attempted-recon; sid:200019261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.b4eqf.icu"; classtype:attempted-recon; sid:200019262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.b6x80w.icu"; classtype:attempted-recon; sid:200019263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.bbl7ef.icu"; classtype:attempted-recon; sid:200019264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.bfsngf.top"; classtype:attempted-recon; sid:200019265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.bs7dc.icu"; classtype:attempted-recon; sid:200019266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.bsnpag.top"; classtype:attempted-recon; sid:200019267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.bvdadv.top"; classtype:attempted-recon; sid:200019268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.cdpthi.top"; classtype:attempted-recon; sid:200019269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.chashanchu21.shop"; classtype:attempted-recon; sid:200019270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.chashanchu48.shop"; classtype:attempted-recon; sid:200019271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.chkmuq.shop"; classtype:attempted-recon; sid:200019272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.citcfi.top"; classtype:attempted-recon; sid:200019273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.cjezmf.top"; classtype:attempted-recon; sid:200019274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.com-deals.shop"; classtype:attempted-recon; sid:200019275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.contius.shop"; classtype:attempted-recon; sid:200019276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.coxrdc.top"; classtype:attempted-recon; sid:200019277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.cstztf.top"; classtype:attempted-recon; sid:200019278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.demtjo.top"; classtype:attempted-recon; sid:200019279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.dfdnsx.top"; classtype:attempted-recon; sid:200019280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.dgqqxx.top"; classtype:attempted-recon; sid:200019281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.dkmimw.top"; classtype:attempted-recon; sid:200019282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.dnmsu6.icu"; classtype:attempted-recon; sid:200019283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.doenfd.top"; classtype:attempted-recon; sid:200019284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.eaelbi.top"; classtype:attempted-recon; sid:200019285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ehgmml.top"; classtype:attempted-recon; sid:200019286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ejvocy.top"; classtype:attempted-recon; sid:200019287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.elhicw.top"; classtype:attempted-recon; sid:200019288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.epwnsr.top"; classtype:attempted-recon; sid:200019289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.eucvbc.top"; classtype:attempted-recon; sid:200019290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.exqkjx.top"; classtype:attempted-recon; sid:200019291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.fahxqk.shop"; classtype:attempted-recon; sid:200019292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.fhqemq.top"; classtype:attempted-recon; sid:200019293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.flscly.top"; classtype:attempted-recon; sid:200019294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.fprrlq.top"; classtype:attempted-recon; sid:200019295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.fvkhnr.top"; classtype:attempted-recon; sid:200019296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gamxhl.shop"; classtype:attempted-recon; sid:200019297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gdmdxy.top"; classtype:attempted-recon; sid:200019298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gjglse.shop"; classtype:attempted-recon; sid:200019299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.glhdpz.top"; classtype:attempted-recon; sid:200019300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gntozh.top"; classtype:attempted-recon; sid:200019301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gs3do.icu"; classtype:attempted-recon; sid:200019302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gtqklv.top"; classtype:attempted-recon; sid:200019303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gxdhfa.top"; classtype:attempted-recon; sid:200019304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gyzt809.xyz"; classtype:attempted-recon; sid:200019305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gzmvuo.top"; classtype:attempted-recon; sid:200019306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.hhxulg.top"; classtype:attempted-recon; sid:200019307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.hixcny.top"; classtype:attempted-recon; sid:200019308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.hpbzkc.top"; classtype:attempted-recon; sid:200019309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.hweypy.top"; classtype:attempted-recon; sid:200019310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.hycxop.top"; classtype:attempted-recon; sid:200019311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.iaklie.top"; classtype:attempted-recon; sid:200019312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ihfo5.icu"; classtype:attempted-recon; sid:200019313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ilfbdb.top"; classtype:attempted-recon; sid:200019314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.invpbv.top"; classtype:attempted-recon; sid:200019315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ioxsho.shop"; classtype:attempted-recon; sid:200019316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.iytxjk.top"; classtype:attempted-recon; sid:200019317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.jivdhm.top"; classtype:attempted-recon; sid:200019318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.jryuds.top"; classtype:attempted-recon; sid:200019319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.jubsfg.top"; classtype:attempted-recon; sid:200019320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.kbqnmz.top"; classtype:attempted-recon; sid:200019321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.kfpxyn.top"; classtype:attempted-recon; sid:200019322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.klgmfj.top"; classtype:attempted-recon; sid:200019323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.kpgvbn.top"; classtype:attempted-recon; sid:200019324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200019325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.kutlzl.top"; classtype:attempted-recon; sid:200019326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.kwoneq.top"; classtype:attempted-recon; sid:200019327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.l4p2g1.icu"; classtype:attempted-recon; sid:200019328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.lfvlpt.top"; classtype:attempted-recon; sid:200019329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.lgwjlm.shop"; classtype:attempted-recon; sid:200019330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.llsoxx.top"; classtype:attempted-recon; sid:200019331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.mbirgc.top"; classtype:attempted-recon; sid:200019332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200019333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.mvqlzn.top"; classtype:attempted-recon; sid:200019334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.mxeanv.top"; classtype:attempted-recon; sid:200019335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.n21so.icu"; classtype:attempted-recon; sid:200019336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.n6eonm.icu"; classtype:attempted-recon; sid:200019337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.neidee.top"; classtype:attempted-recon; sid:200019338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nfpdgp.top"; classtype:attempted-recon; sid:200019339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nhewlh.top"; classtype:attempted-recon; sid:200019340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nkjfmc.top"; classtype:attempted-recon; sid:200019341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nlujo.top"; classtype:attempted-recon; sid:200019342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.notwe.icu"; classtype:attempted-recon; sid:200019343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nphgoc.top"; classtype:attempted-recon; sid:200019344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.npibd.top"; classtype:attempted-recon; sid:200019345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nqsaby.top"; classtype:attempted-recon; sid:200019346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nr5kfh.icu"; classtype:attempted-recon; sid:200019347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.nrmzy6.icu"; classtype:attempted-recon; sid:200019348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ofldnb.shop"; classtype:attempted-recon; sid:200019349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ogzbtb.top"; classtype:attempted-recon; sid:200019350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ohzctx.top"; classtype:attempted-recon; sid:200019351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.oiknia.top"; classtype:attempted-recon; sid:200019352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.oipful.top"; classtype:attempted-recon; sid:200019353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pbykwg.top"; classtype:attempted-recon; sid:200019354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pdndft.top"; classtype:attempted-recon; sid:200019355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ph29h.icu"; classtype:attempted-recon; sid:200019356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pjt9os.icu"; classtype:attempted-recon; sid:200019357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pqdxev.top"; classtype:attempted-recon; sid:200019358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ptrwmp.top"; classtype:attempted-recon; sid:200019359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pugxbo.top"; classtype:attempted-recon; sid:200019360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.puoo9.icu"; classtype:attempted-recon; sid:200019361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pxbkkk.top"; classtype:attempted-recon; sid:200019362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pxnctk.top"; classtype:attempted-recon; sid:200019363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pxzjwk.top"; classtype:attempted-recon; sid:200019364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.pysitg.top"; classtype:attempted-recon; sid:200019365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.qexccc.top"; classtype:attempted-recon; sid:200019366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.qlmenm.top"; classtype:attempted-recon; sid:200019367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.qoefmk.top"; classtype:attempted-recon; sid:200019368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.qvcxln.shop"; classtype:attempted-recon; sid:200019369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.qwuchl.top"; classtype:attempted-recon; sid:200019370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.rgdpsh.top"; classtype:attempted-recon; sid:200019371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.rhwdsq.top"; classtype:attempted-recon; sid:200019372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.rjbvwt.top"; classtype:attempted-recon; sid:200019373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.rn5mu.icu"; classtype:attempted-recon; sid:200019374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.royjjy.shop"; classtype:attempted-recon; sid:200019375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.runjin007.icu"; classtype:attempted-recon; sid:200019376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.rvpepb.top"; classtype:attempted-recon; sid:200019377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.rzuxzq.shop"; classtype:attempted-recon; sid:200019378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.saveyr.top"; classtype:attempted-recon; sid:200019379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.sftqjs.top"; classtype:attempted-recon; sid:200019380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.shanchuta27.shop"; classtype:attempted-recon; sid:200019381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.tbntv.icu"; classtype:attempted-recon; sid:200019382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.tfodbq.top"; classtype:attempted-recon; sid:200019383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.tgmqlg.top"; classtype:attempted-recon; sid:200019384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.tikoig.top"; classtype:attempted-recon; sid:200019385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.tilzhy.top"; classtype:attempted-recon; sid:200019386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.u25r5u.icu"; classtype:attempted-recon; sid:200019387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.uhia8h.icu"; classtype:attempted-recon; sid:200019388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.upjhye.top"; classtype:attempted-recon; sid:200019389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.usivdv.top"; classtype:attempted-recon; sid:200019390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.vcacks.top"; classtype:attempted-recon; sid:200019391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.vfqske.shop"; classtype:attempted-recon; sid:200019392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.vkpock.shop"; classtype:attempted-recon; sid:200019393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.vnbbks.top"; classtype:attempted-recon; sid:200019394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.voadax.top"; classtype:attempted-recon; sid:200019395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.vrbvro.top"; classtype:attempted-recon; sid:200019396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.wcpjfd.top"; classtype:attempted-recon; sid:200019397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.wl85i.icu"; classtype:attempted-recon; sid:200019398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.wolvps.shop"; classtype:attempted-recon; sid:200019399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.xaexmo.top"; classtype:attempted-recon; sid:200019400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.xgjt.pro"; classtype:attempted-recon; sid:200019401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.xgtofb.top"; classtype:attempted-recon; sid:200019402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.xqpwkk.top"; classtype:attempted-recon; sid:200019403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.xvlbws.top"; classtype:attempted-recon; sid:200019404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.xwitwq.top"; classtype:attempted-recon; sid:200019405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.xzlnlm.top"; classtype:attempted-recon; sid:200019406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.yhuvzv.top"; classtype:attempted-recon; sid:200019407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.yifpgd.top"; classtype:attempted-recon; sid:200019408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.yphurc.top"; classtype:attempted-recon; sid:200019409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ytnxwi.top"; classtype:attempted-recon; sid:200019410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.ytwbnq.top"; classtype:attempted-recon; sid:200019411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.yyzded.top"; classtype:attempted-recon; sid:200019412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.zmlyhs.top"; classtype:attempted-recon; sid:200019413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.zrbfzw.top"; classtype:attempted-recon; sid:200019414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.zxj6002.xyz"; classtype:attempted-recon; sid:200019415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.1112458.xyz"; classtype:attempted-recon; sid:200019416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.2sae6k.icu"; classtype:attempted-recon; sid:200019417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.3dbbmp.icu"; classtype:attempted-recon; sid:200019418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.3p1yb.icu"; classtype:attempted-recon; sid:200019419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200019420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.457e0p.icu"; classtype:attempted-recon; sid:200019421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.4i3si1.icu"; classtype:attempted-recon; sid:200019422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.5577778.xyz"; classtype:attempted-recon; sid:200019423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.5sime.icu"; classtype:attempted-recon; sid:200019424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.5uzz0h.icu"; classtype:attempted-recon; sid:200019425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.6788665.xyz"; classtype:attempted-recon; sid:200019426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.6mmfl.icu"; classtype:attempted-recon; sid:200019427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.7hml9e.icu"; classtype:attempted-recon; sid:200019428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.7lnki4.icu"; classtype:attempted-recon; sid:200019429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.7ngywp.icu"; classtype:attempted-recon; sid:200019430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.8fgrh.icu"; classtype:attempted-recon; sid:200019431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.9v9w2y.icu"; classtype:attempted-recon; sid:200019432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.abluwk.top"; classtype:attempted-recon; sid:200019433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.adlxbh.top"; classtype:attempted-recon; sid:200019434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.afohvv.top"; classtype:attempted-recon; sid:200019435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.awsgn.top"; classtype:attempted-recon; sid:200019436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.b32mgr.icu"; classtype:attempted-recon; sid:200019437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.b4eqf.icu"; classtype:attempted-recon; sid:200019438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.b6x80w.icu"; classtype:attempted-recon; sid:200019439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.bbl7ef.icu"; classtype:attempted-recon; sid:200019440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.bfsngf.top"; classtype:attempted-recon; sid:200019441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.bs7dc.icu"; classtype:attempted-recon; sid:200019442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.bsnpag.top"; classtype:attempted-recon; sid:200019443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.bvdadv.top"; classtype:attempted-recon; sid:200019444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.cdpthi.top"; classtype:attempted-recon; sid:200019445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.chashanchu21.shop"; classtype:attempted-recon; sid:200019446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.chashanchu48.shop"; classtype:attempted-recon; sid:200019447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.chkmuq.shop"; classtype:attempted-recon; sid:200019448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.citcfi.top"; classtype:attempted-recon; sid:200019449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.cjezmf.top"; classtype:attempted-recon; sid:200019450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.com-deals.shop"; classtype:attempted-recon; sid:200019451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.contius.shop"; classtype:attempted-recon; sid:200019452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.coxrdc.top"; classtype:attempted-recon; sid:200019453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.cqvlsi.top"; classtype:attempted-recon; sid:200019454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.cstztf.top"; classtype:attempted-recon; sid:200019455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.demtjo.top"; classtype:attempted-recon; sid:200019456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.dfdnsx.top"; classtype:attempted-recon; sid:200019457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.dgqqxx.top"; classtype:attempted-recon; sid:200019458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.djulad.top"; classtype:attempted-recon; sid:200019459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.dkmimw.top"; classtype:attempted-recon; sid:200019460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.dnmsu6.icu"; classtype:attempted-recon; sid:200019461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.doenfd.top"; classtype:attempted-recon; sid:200019462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.eaelbi.top"; classtype:attempted-recon; sid:200019463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ejvocy.top"; classtype:attempted-recon; sid:200019464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.elhicw.top"; classtype:attempted-recon; sid:200019465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.epwnsr.top"; classtype:attempted-recon; sid:200019466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.eucvbc.top"; classtype:attempted-recon; sid:200019467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.exqkjx.top"; classtype:attempted-recon; sid:200019468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.fhqemq.top"; classtype:attempted-recon; sid:200019469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.flscly.top"; classtype:attempted-recon; sid:200019470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.fprrlq.top"; classtype:attempted-recon; sid:200019471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.fukjzs.top"; classtype:attempted-recon; sid:200019472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.fvkhnr.top"; classtype:attempted-recon; sid:200019473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.fzfweo.top"; classtype:attempted-recon; sid:200019474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gamxhl.shop"; classtype:attempted-recon; sid:200019475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gdmdxy.top"; classtype:attempted-recon; sid:200019476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gjglse.shop"; classtype:attempted-recon; sid:200019477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.glhdpz.top"; classtype:attempted-recon; sid:200019478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gntozh.top"; classtype:attempted-recon; sid:200019479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gs3do.icu"; classtype:attempted-recon; sid:200019480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gtqklv.top"; classtype:attempted-recon; sid:200019481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gxdhfa.top"; classtype:attempted-recon; sid:200019482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gyzt809.xyz"; classtype:attempted-recon; sid:200019483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gzmvuo.top"; classtype:attempted-recon; sid:200019484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.hhxulg.top"; classtype:attempted-recon; sid:200019485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.hixcny.top"; classtype:attempted-recon; sid:200019486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.hpbzkc.top"; classtype:attempted-recon; sid:200019487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.hycxop.top"; classtype:attempted-recon; sid:200019488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.hyhznq.top"; classtype:attempted-recon; sid:200019489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.iaklie.top"; classtype:attempted-recon; sid:200019490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ihfo5.icu"; classtype:attempted-recon; sid:200019491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ilfbdb.top"; classtype:attempted-recon; sid:200019492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ioxsho.shop"; classtype:attempted-recon; sid:200019493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.iytxjk.top"; classtype:attempted-recon; sid:200019494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.jivdhm.top"; classtype:attempted-recon; sid:200019495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.jryuds.top"; classtype:attempted-recon; sid:200019496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.jubsfg.top"; classtype:attempted-recon; sid:200019497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.kbqnmz.top"; classtype:attempted-recon; sid:200019498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.kfpxyn.top"; classtype:attempted-recon; sid:200019499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.klgmfj.top"; classtype:attempted-recon; sid:200019500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.kpgvbn.top"; classtype:attempted-recon; sid:200019501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200019502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.kutlzl.top"; classtype:attempted-recon; sid:200019503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.kwoneq.top"; classtype:attempted-recon; sid:200019504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.l4p2g1.icu"; classtype:attempted-recon; sid:200019505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ladyul.top"; classtype:attempted-recon; sid:200019506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.lfvlpt.top"; classtype:attempted-recon; sid:200019507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.lgwjlm.shop"; classtype:attempted-recon; sid:200019508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.llsoxx.top"; classtype:attempted-recon; sid:200019509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200019510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.mvqlzn.top"; classtype:attempted-recon; sid:200019511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.mwdrbx.top"; classtype:attempted-recon; sid:200019512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.mxeanv.top"; classtype:attempted-recon; sid:200019513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.n21so.icu"; classtype:attempted-recon; sid:200019514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.n6eonm.icu"; classtype:attempted-recon; sid:200019515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.neidee.top"; classtype:attempted-recon; sid:200019516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.nfpdgp.top"; classtype:attempted-recon; sid:200019517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.nhewlh.top"; classtype:attempted-recon; sid:200019518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.nkjfmc.top"; classtype:attempted-recon; sid:200019519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.nlujo.top"; classtype:attempted-recon; sid:200019520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.notwe.icu"; classtype:attempted-recon; sid:200019521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.nphgoc.top"; classtype:attempted-recon; sid:200019522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.npibd.top"; classtype:attempted-recon; sid:200019523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.nqsaby.top"; classtype:attempted-recon; sid:200019524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.nrmzy6.icu"; classtype:attempted-recon; sid:200019525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ofldnb.shop"; classtype:attempted-recon; sid:200019526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ogzbtb.top"; classtype:attempted-recon; sid:200019527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ohzctx.top"; classtype:attempted-recon; sid:200019528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.oiknia.top"; classtype:attempted-recon; sid:200019529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.oipful.top"; classtype:attempted-recon; sid:200019530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.patcfp.top"; classtype:attempted-recon; sid:200019531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pdndft.top"; classtype:attempted-recon; sid:200019532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ph29h.icu"; classtype:attempted-recon; sid:200019533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pjt9os.icu"; classtype:attempted-recon; sid:200019534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pqdxev.top"; classtype:attempted-recon; sid:200019535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pugxbo.top"; classtype:attempted-recon; sid:200019536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.puoo9.icu"; classtype:attempted-recon; sid:200019537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pxbkkk.top"; classtype:attempted-recon; sid:200019538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pxnctk.top"; classtype:attempted-recon; sid:200019539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pxzjwk.top"; classtype:attempted-recon; sid:200019540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.pysitg.top"; classtype:attempted-recon; sid:200019541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.qexccc.top"; classtype:attempted-recon; sid:200019542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.qlmenm.top"; classtype:attempted-recon; sid:200019543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.qoefmk.top"; classtype:attempted-recon; sid:200019544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.qskgtg.top"; classtype:attempted-recon; sid:200019545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.qvcxln.shop"; classtype:attempted-recon; sid:200019546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.qwuchl.top"; classtype:attempted-recon; sid:200019547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.rgdpsh.top"; classtype:attempted-recon; sid:200019548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.rhwdsq.top"; classtype:attempted-recon; sid:200019549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.rjbvwt.top"; classtype:attempted-recon; sid:200019550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.rn5mu.icu"; classtype:attempted-recon; sid:200019551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.royjjy.shop"; classtype:attempted-recon; sid:200019552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.runjin007.icu"; classtype:attempted-recon; sid:200019553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.rvpepb.top"; classtype:attempted-recon; sid:200019554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.rzuxzq.shop"; classtype:attempted-recon; sid:200019555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.saveyr.top"; classtype:attempted-recon; sid:200019556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.sftqjs.top"; classtype:attempted-recon; sid:200019557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.shanchuta27.shop"; classtype:attempted-recon; sid:200019558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.tbntv.icu"; classtype:attempted-recon; sid:200019559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.tgmqlg.top"; classtype:attempted-recon; sid:200019560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.tikoig.top"; classtype:attempted-recon; sid:200019561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.u25r5u.icu"; classtype:attempted-recon; sid:200019562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.uhia8h.icu"; classtype:attempted-recon; sid:200019563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.usivdv.top"; classtype:attempted-recon; sid:200019564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.vcacks.top"; classtype:attempted-recon; sid:200019565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.vfqske.shop"; classtype:attempted-recon; sid:200019566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.vkpock.shop"; classtype:attempted-recon; sid:200019567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.vnbbks.top"; classtype:attempted-recon; sid:200019568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.voadax.top"; classtype:attempted-recon; sid:200019569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.vrbvro.top"; classtype:attempted-recon; sid:200019570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.wcpjfd.top"; classtype:attempted-recon; sid:200019571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.wl85i.icu"; classtype:attempted-recon; sid:200019572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.wolvps.shop"; classtype:attempted-recon; sid:200019573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.wwffoj.shop"; classtype:attempted-recon; sid:200019574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xaexmo.top"; classtype:attempted-recon; sid:200019575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xgjt.pro"; classtype:attempted-recon; sid:200019576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xgtofb.top"; classtype:attempted-recon; sid:200019577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xqpwkk.top"; classtype:attempted-recon; sid:200019578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xvlbws.top"; classtype:attempted-recon; sid:200019579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xwitwq.top"; classtype:attempted-recon; sid:200019580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.xzlnlm.top"; classtype:attempted-recon; sid:200019581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.yhuvzv.top"; classtype:attempted-recon; sid:200019582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.yifpgd.top"; classtype:attempted-recon; sid:200019583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.yphurc.top"; classtype:attempted-recon; sid:200019584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ytnxwi.top"; classtype:attempted-recon; sid:200019585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.ytwbnq.top"; classtype:attempted-recon; sid:200019586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.yyzded.top"; classtype:attempted-recon; sid:200019587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.zmlyhs.top"; classtype:attempted-recon; sid:200019588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.zrbfzw.top"; classtype:attempted-recon; sid:200019589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.zxj6002.xyz"; classtype:attempted-recon; sid:200019590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.1112458.xyz"; classtype:attempted-recon; sid:200019591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.2sae6k.icu"; classtype:attempted-recon; sid:200019592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.3dbbmp.icu"; classtype:attempted-recon; sid:200019593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.3p1yb.icu"; classtype:attempted-recon; sid:200019594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200019595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.457e0p.icu"; classtype:attempted-recon; sid:200019596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.4i3si1.icu"; classtype:attempted-recon; sid:200019597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.5577778.xyz"; classtype:attempted-recon; sid:200019598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.5uzz0h.icu"; classtype:attempted-recon; sid:200019599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.650pt.icu"; classtype:attempted-recon; sid:200019600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.6788665.xyz"; classtype:attempted-recon; sid:200019601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.6876578.xyz"; classtype:attempted-recon; sid:200019602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.6mmfl.icu"; classtype:attempted-recon; sid:200019603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.7hml9e.icu"; classtype:attempted-recon; sid:200019604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.7lnki4.icu"; classtype:attempted-recon; sid:200019605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.7ngywp.icu"; classtype:attempted-recon; sid:200019606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.8fgrh.icu"; classtype:attempted-recon; sid:200019607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.9v9w2y.icu"; classtype:attempted-recon; sid:200019608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.abluwk.top"; classtype:attempted-recon; sid:200019609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.adlxbh.top"; classtype:attempted-recon; sid:200019610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.afohvv.top"; classtype:attempted-recon; sid:200019611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.b32mgr.icu"; classtype:attempted-recon; sid:200019612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.b4eqf.icu"; classtype:attempted-recon; sid:200019613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.b6x80w.icu"; classtype:attempted-recon; sid:200019614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.bbl7ef.icu"; classtype:attempted-recon; sid:200019615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.bfsngf.top"; classtype:attempted-recon; sid:200019616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.bs7dc.icu"; classtype:attempted-recon; sid:200019617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.bsnpag.top"; classtype:attempted-recon; sid:200019618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.bvdadv.top"; classtype:attempted-recon; sid:200019619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.cdpthi.top"; classtype:attempted-recon; sid:200019620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.chashanchu21.shop"; classtype:attempted-recon; sid:200019621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.chashanchu48.shop"; classtype:attempted-recon; sid:200019622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.chkmuq.shop"; classtype:attempted-recon; sid:200019623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.citcfi.top"; classtype:attempted-recon; sid:200019624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.cjezmf.top"; classtype:attempted-recon; sid:200019625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.com-deals.shop"; classtype:attempted-recon; sid:200019626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.contius.shop"; classtype:attempted-recon; sid:200019627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.coxrdc.top"; classtype:attempted-recon; sid:200019628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.cqvlsi.top"; classtype:attempted-recon; sid:200019629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.cstztf.top"; classtype:attempted-recon; sid:200019630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.demtjo.top"; classtype:attempted-recon; sid:200019631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.dfdnsx.top"; classtype:attempted-recon; sid:200019632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.dgqqxx.top"; classtype:attempted-recon; sid:200019633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.djulad.top"; classtype:attempted-recon; sid:200019634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.dkmimw.top"; classtype:attempted-recon; sid:200019635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.dnmsu6.icu"; classtype:attempted-recon; sid:200019636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.doenfd.top"; classtype:attempted-recon; sid:200019637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.eaelbi.top"; classtype:attempted-recon; sid:200019638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ejvocy.top"; classtype:attempted-recon; sid:200019639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.elhicw.top"; classtype:attempted-recon; sid:200019640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.epwnsr.top"; classtype:attempted-recon; sid:200019641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.eucvbc.top"; classtype:attempted-recon; sid:200019642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.exqkjx.top"; classtype:attempted-recon; sid:200019643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fhqemq.top"; classtype:attempted-recon; sid:200019644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.flscly.top"; classtype:attempted-recon; sid:200019645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fprrlq.top"; classtype:attempted-recon; sid:200019646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fukjzs.top"; classtype:attempted-recon; sid:200019647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fvkhnr.top"; classtype:attempted-recon; sid:200019648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fzfweo.top"; classtype:attempted-recon; sid:200019649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gamxhl.shop"; classtype:attempted-recon; sid:200019650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gdmdxy.top"; classtype:attempted-recon; sid:200019651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gjglse.shop"; classtype:attempted-recon; sid:200019652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.glhdpz.top"; classtype:attempted-recon; sid:200019653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gntozh.top"; classtype:attempted-recon; sid:200019654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gs3do.icu"; classtype:attempted-recon; sid:200019655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gtqklv.top"; classtype:attempted-recon; sid:200019656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gxdhfa.top"; classtype:attempted-recon; sid:200019657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gyzt809.xyz"; classtype:attempted-recon; sid:200019658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gzmvuo.top"; classtype:attempted-recon; sid:200019659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.hhxulg.top"; classtype:attempted-recon; sid:200019660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.hpbzkc.top"; classtype:attempted-recon; sid:200019661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.hweypy.top"; classtype:attempted-recon; sid:200019662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.hycxop.top"; classtype:attempted-recon; sid:200019663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.iaklie.top"; classtype:attempted-recon; sid:200019664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ihfo5.icu"; classtype:attempted-recon; sid:200019665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ilfbdb.top"; classtype:attempted-recon; sid:200019666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.invpbv.top"; classtype:attempted-recon; sid:200019667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ioxsho.shop"; classtype:attempted-recon; sid:200019668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.iytxjk.top"; classtype:attempted-recon; sid:200019669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.jivdhm.top"; classtype:attempted-recon; sid:200019670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.jryuds.top"; classtype:attempted-recon; sid:200019671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.jubsfg.top"; classtype:attempted-recon; sid:200019672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.kbqnmz.top"; classtype:attempted-recon; sid:200019673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.klgmfj.top"; classtype:attempted-recon; sid:200019674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.kpgvbn.top"; classtype:attempted-recon; sid:200019675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200019676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.kutlzl.top"; classtype:attempted-recon; sid:200019677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.kwoneq.top"; classtype:attempted-recon; sid:200019678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.l4p2g1.icu"; classtype:attempted-recon; sid:200019679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.lfvlpt.top"; classtype:attempted-recon; sid:200019680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.lgwjlm.shop"; classtype:attempted-recon; sid:200019681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.llsoxx.top"; classtype:attempted-recon; sid:200019682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200019683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.mvqlzn.top"; classtype:attempted-recon; sid:200019684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.mwdrbx.top"; classtype:attempted-recon; sid:200019685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.mxeanv.top"; classtype:attempted-recon; sid:200019686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.n21so.icu"; classtype:attempted-recon; sid:200019687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.n6eonm.icu"; classtype:attempted-recon; sid:200019688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.neidee.top"; classtype:attempted-recon; sid:200019689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nfpdgp.top"; classtype:attempted-recon; sid:200019690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nhewlh.top"; classtype:attempted-recon; sid:200019691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nkjfmc.top"; classtype:attempted-recon; sid:200019692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nlujo.top"; classtype:attempted-recon; sid:200019693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.notwe.icu"; classtype:attempted-recon; sid:200019694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nphgoc.top"; classtype:attempted-recon; sid:200019695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.npibd.top"; classtype:attempted-recon; sid:200019696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nqsaby.top"; classtype:attempted-recon; sid:200019697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nr5kfh.icu"; classtype:attempted-recon; sid:200019698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.nrmzy6.icu"; classtype:attempted-recon; sid:200019699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ofldnb.shop"; classtype:attempted-recon; sid:200019700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ogzbtb.top"; classtype:attempted-recon; sid:200019701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ohzctx.top"; classtype:attempted-recon; sid:200019702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.oiknia.top"; classtype:attempted-recon; sid:200019703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.oipful.top"; classtype:attempted-recon; sid:200019704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.patcfp.top"; classtype:attempted-recon; sid:200019705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pbykwg.top"; classtype:attempted-recon; sid:200019706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pdndft.top"; classtype:attempted-recon; sid:200019707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ph29h.icu"; classtype:attempted-recon; sid:200019708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pjt9os.icu"; classtype:attempted-recon; sid:200019709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pqdxev.top"; classtype:attempted-recon; sid:200019710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ptrwmp.top"; classtype:attempted-recon; sid:200019711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pugxbo.top"; classtype:attempted-recon; sid:200019712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.puoo9.icu"; classtype:attempted-recon; sid:200019713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pxbkkk.top"; classtype:attempted-recon; sid:200019714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pxnctk.top"; classtype:attempted-recon; sid:200019715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pxzjwk.top"; classtype:attempted-recon; sid:200019716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.pysitg.top"; classtype:attempted-recon; sid:200019717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.qexccc.top"; classtype:attempted-recon; sid:200019718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.qfvbqx.shop"; classtype:attempted-recon; sid:200019719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.qlmenm.top"; classtype:attempted-recon; sid:200019720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.qoefmk.top"; classtype:attempted-recon; sid:200019721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.qskgtg.top"; classtype:attempted-recon; sid:200019722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.qvcxln.shop"; classtype:attempted-recon; sid:200019723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.qwuchl.top"; classtype:attempted-recon; sid:200019724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.rgdpsh.top"; classtype:attempted-recon; sid:200019725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.rhwdsq.top"; classtype:attempted-recon; sid:200019726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.rjbvwt.top"; classtype:attempted-recon; sid:200019727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.rn5mu.icu"; classtype:attempted-recon; sid:200019728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.royjjy.shop"; classtype:attempted-recon; sid:200019729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.runjin007.icu"; classtype:attempted-recon; sid:200019730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.rvpepb.top"; classtype:attempted-recon; sid:200019731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.rzuxzq.shop"; classtype:attempted-recon; sid:200019732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.saveyr.top"; classtype:attempted-recon; sid:200019733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.sftqjs.top"; classtype:attempted-recon; sid:200019734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.shanchuta27.shop"; classtype:attempted-recon; sid:200019735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.tbntv.icu"; classtype:attempted-recon; sid:200019736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.tfodbq.top"; classtype:attempted-recon; sid:200019737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.tgmqlg.top"; classtype:attempted-recon; sid:200019738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.tikoig.top"; classtype:attempted-recon; sid:200019739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.tilzhy.top"; classtype:attempted-recon; sid:200019740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.u25r5u.icu"; classtype:attempted-recon; sid:200019741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.uhia8h.icu"; classtype:attempted-recon; sid:200019742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.upjhye.top"; classtype:attempted-recon; sid:200019743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.usivdv.top"; classtype:attempted-recon; sid:200019744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.vcacks.top"; classtype:attempted-recon; sid:200019745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.vcgsip.top"; classtype:attempted-recon; sid:200019746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.vfqske.shop"; classtype:attempted-recon; sid:200019747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.vkpock.shop"; classtype:attempted-recon; sid:200019748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.vnbbks.top"; classtype:attempted-recon; sid:200019749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.voadax.top"; classtype:attempted-recon; sid:200019750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.vrbvro.top"; classtype:attempted-recon; sid:200019751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.wcpjfd.top"; classtype:attempted-recon; sid:200019752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.wl85i.icu"; classtype:attempted-recon; sid:200019753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.wolvps.shop"; classtype:attempted-recon; sid:200019754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.wwffoj.shop"; classtype:attempted-recon; sid:200019755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xaexmo.top"; classtype:attempted-recon; sid:200019756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xgjt.pro"; classtype:attempted-recon; sid:200019757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xgtofb.top"; classtype:attempted-recon; sid:200019758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xqpwkk.top"; classtype:attempted-recon; sid:200019759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xvlbws.top"; classtype:attempted-recon; sid:200019760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xwitwq.top"; classtype:attempted-recon; sid:200019761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.xzlnlm.top"; classtype:attempted-recon; sid:200019762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.yhuvzv.top"; classtype:attempted-recon; sid:200019763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.yifpgd.top"; classtype:attempted-recon; sid:200019764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.yphurc.top"; classtype:attempted-recon; sid:200019765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.ytwbnq.top"; classtype:attempted-recon; sid:200019766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.yyzded.top"; classtype:attempted-recon; sid:200019767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.zmlyhs.top"; classtype:attempted-recon; sid:200019768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.zrbfzw.top"; classtype:attempted-recon; sid:200019769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.zxj6002.xyz"; classtype:attempted-recon; sid:200019770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.1112458.xyz"; classtype:attempted-recon; sid:200019771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.2sae6k.icu"; classtype:attempted-recon; sid:200019772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.3dbbmp.icu"; classtype:attempted-recon; sid:200019773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.3p1yb.icu"; classtype:attempted-recon; sid:200019774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200019775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.457e0p.icu"; classtype:attempted-recon; sid:200019776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.4i3si1.icu"; classtype:attempted-recon; sid:200019777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.5577778.xyz"; classtype:attempted-recon; sid:200019778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.5uzz0h.icu"; classtype:attempted-recon; sid:200019779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.650pt.icu"; classtype:attempted-recon; sid:200019780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.6788665.xyz"; classtype:attempted-recon; sid:200019781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.6876578.xyz"; classtype:attempted-recon; sid:200019782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.6mmfl.icu"; classtype:attempted-recon; sid:200019783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.7hml9e.icu"; classtype:attempted-recon; sid:200019784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.7lnki4.icu"; classtype:attempted-recon; sid:200019785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.7ngywp.icu"; classtype:attempted-recon; sid:200019786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.8fgrh.icu"; classtype:attempted-recon; sid:200019787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.9v9w2y.icu"; classtype:attempted-recon; sid:200019788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.abluwk.top"; classtype:attempted-recon; sid:200019789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.adlxbh.top"; classtype:attempted-recon; sid:200019790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.afohvv.top"; classtype:attempted-recon; sid:200019791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.awsgn.top"; classtype:attempted-recon; sid:200019792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.b32mgr.icu"; classtype:attempted-recon; sid:200019793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.b4eqf.icu"; classtype:attempted-recon; sid:200019794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.b6x80w.icu"; classtype:attempted-recon; sid:200019795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.bbl7ef.icu"; classtype:attempted-recon; sid:200019796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.bfsngf.top"; classtype:attempted-recon; sid:200019797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.bs7dc.icu"; classtype:attempted-recon; sid:200019798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.bsnpag.top"; classtype:attempted-recon; sid:200019799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.bvdadv.top"; classtype:attempted-recon; sid:200019800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.cdpthi.top"; classtype:attempted-recon; sid:200019801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.chashanchu21.shop"; classtype:attempted-recon; sid:200019802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.chashanchu48.shop"; classtype:attempted-recon; sid:200019803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.chkmuq.shop"; classtype:attempted-recon; sid:200019804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.citcfi.top"; classtype:attempted-recon; sid:200019805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.cjezmf.top"; classtype:attempted-recon; sid:200019806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.com-deals.shop"; classtype:attempted-recon; sid:200019807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.contius.shop"; classtype:attempted-recon; sid:200019808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.coxrdc.top"; classtype:attempted-recon; sid:200019809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.demtjo.top"; classtype:attempted-recon; sid:200019810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.dfdnsx.top"; classtype:attempted-recon; sid:200019811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.dgqqxx.top"; classtype:attempted-recon; sid:200019812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.djulad.top"; classtype:attempted-recon; sid:200019813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.dkmimw.top"; classtype:attempted-recon; sid:200019814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.dnmsu6.icu"; classtype:attempted-recon; sid:200019815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.eaelbi.top"; classtype:attempted-recon; sid:200019816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ejvocy.top"; classtype:attempted-recon; sid:200019817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.elhicw.top"; classtype:attempted-recon; sid:200019818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.epwnsr.top"; classtype:attempted-recon; sid:200019819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.eucvbc.top"; classtype:attempted-recon; sid:200019820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.exqkjx.top"; classtype:attempted-recon; sid:200019821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.fahxqk.shop"; classtype:attempted-recon; sid:200019822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.fhqemq.top"; classtype:attempted-recon; sid:200019823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.flscly.top"; classtype:attempted-recon; sid:200019824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.fprrlq.top"; classtype:attempted-recon; sid:200019825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.fukjzs.top"; classtype:attempted-recon; sid:200019826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.fvkhnr.top"; classtype:attempted-recon; sid:200019827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gamxhl.shop"; classtype:attempted-recon; sid:200019828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gdmdxy.top"; classtype:attempted-recon; sid:200019829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gjglse.shop"; classtype:attempted-recon; sid:200019830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.glhdpz.top"; classtype:attempted-recon; sid:200019831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gntozh.top"; classtype:attempted-recon; sid:200019832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gs3do.icu"; classtype:attempted-recon; sid:200019833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gtqklv.top"; classtype:attempted-recon; sid:200019834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gxdhfa.top"; classtype:attempted-recon; sid:200019835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gyzt809.xyz"; classtype:attempted-recon; sid:200019836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gzmvuo.top"; classtype:attempted-recon; sid:200019837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.hhxulg.top"; classtype:attempted-recon; sid:200019838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.hixcny.top"; classtype:attempted-recon; sid:200019839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.hpbzkc.top"; classtype:attempted-recon; sid:200019840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.hweypy.top"; classtype:attempted-recon; sid:200019841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.hycxop.top"; classtype:attempted-recon; sid:200019842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.hyhznq.top"; classtype:attempted-recon; sid:200019843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.iaklie.top"; classtype:attempted-recon; sid:200019844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ihfo5.icu"; classtype:attempted-recon; sid:200019845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ilfbdb.top"; classtype:attempted-recon; sid:200019846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.invpbv.top"; classtype:attempted-recon; sid:200019847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ioxsho.shop"; classtype:attempted-recon; sid:200019848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.iytxjk.top"; classtype:attempted-recon; sid:200019849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.jivdhm.top"; classtype:attempted-recon; sid:200019850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.jryuds.top"; classtype:attempted-recon; sid:200019851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.jubsfg.top"; classtype:attempted-recon; sid:200019852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.kbqnmz.top"; classtype:attempted-recon; sid:200019853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.kfpxyn.top"; classtype:attempted-recon; sid:200019854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.klgmfj.top"; classtype:attempted-recon; sid:200019855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.kpgvbn.top"; classtype:attempted-recon; sid:200019856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200019857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.kutlzl.top"; classtype:attempted-recon; sid:200019858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.kwoneq.top"; classtype:attempted-recon; sid:200019859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.l4p2g1.icu"; classtype:attempted-recon; sid:200019860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.lfvlpt.top"; classtype:attempted-recon; sid:200019861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.lgwjlm.shop"; classtype:attempted-recon; sid:200019862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.llsoxx.top"; classtype:attempted-recon; sid:200019863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.mbirgc.top"; classtype:attempted-recon; sid:200019864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200019865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.mvqlzn.top"; classtype:attempted-recon; sid:200019866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.mwdrbx.top"; classtype:attempted-recon; sid:200019867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.mxeanv.top"; classtype:attempted-recon; sid:200019868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.n21so.icu"; classtype:attempted-recon; sid:200019869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.n6eonm.icu"; classtype:attempted-recon; sid:200019870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.neidee.top"; classtype:attempted-recon; sid:200019871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nhewlh.top"; classtype:attempted-recon; sid:200019872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nkjfmc.top"; classtype:attempted-recon; sid:200019873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nlujo.top"; classtype:attempted-recon; sid:200019874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.notwe.icu"; classtype:attempted-recon; sid:200019875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nphgoc.top"; classtype:attempted-recon; sid:200019876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.npibd.top"; classtype:attempted-recon; sid:200019877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nqsaby.top"; classtype:attempted-recon; sid:200019878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nr5kfh.icu"; classtype:attempted-recon; sid:200019879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.nrmzy6.icu"; classtype:attempted-recon; sid:200019880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ofldnb.shop"; classtype:attempted-recon; sid:200019881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ogzbtb.top"; classtype:attempted-recon; sid:200019882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ohzctx.top"; classtype:attempted-recon; sid:200019883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.oiknia.top"; classtype:attempted-recon; sid:200019884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.oipful.top"; classtype:attempted-recon; sid:200019885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.patcfp.top"; classtype:attempted-recon; sid:200019886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pbykwg.top"; classtype:attempted-recon; sid:200019887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pdndft.top"; classtype:attempted-recon; sid:200019888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ph29h.icu"; classtype:attempted-recon; sid:200019889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pjt9os.icu"; classtype:attempted-recon; sid:200019890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pqdxev.top"; classtype:attempted-recon; sid:200019891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ptrwmp.top"; classtype:attempted-recon; sid:200019892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pugxbo.top"; classtype:attempted-recon; sid:200019893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.puoo9.icu"; classtype:attempted-recon; sid:200019894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pxbkkk.top"; classtype:attempted-recon; sid:200019895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pxnctk.top"; classtype:attempted-recon; sid:200019896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pxzjwk.top"; classtype:attempted-recon; sid:200019897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.pysitg.top"; classtype:attempted-recon; sid:200019898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.qexccc.top"; classtype:attempted-recon; sid:200019899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.qfvbqx.shop"; classtype:attempted-recon; sid:200019900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.qlmenm.top"; classtype:attempted-recon; sid:200019901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.qoefmk.top"; classtype:attempted-recon; sid:200019902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.qskgtg.top"; classtype:attempted-recon; sid:200019903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.qvcxln.shop"; classtype:attempted-recon; sid:200019904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.qwuchl.top"; classtype:attempted-recon; sid:200019905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.rgdpsh.top"; classtype:attempted-recon; sid:200019906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.rhwdsq.top"; classtype:attempted-recon; sid:200019907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.rjbvwt.top"; classtype:attempted-recon; sid:200019908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.royjjy.shop"; classtype:attempted-recon; sid:200019909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.runjin007.icu"; classtype:attempted-recon; sid:200019910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.rvpepb.top"; classtype:attempted-recon; sid:200019911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.rzuxzq.shop"; classtype:attempted-recon; sid:200019912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.saveyr.top"; classtype:attempted-recon; sid:200019913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.sftqjs.top"; classtype:attempted-recon; sid:200019914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.shanchuta27.shop"; classtype:attempted-recon; sid:200019915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.tbntv.icu"; classtype:attempted-recon; sid:200019916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.tfodbq.top"; classtype:attempted-recon; sid:200019917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.tgmqlg.top"; classtype:attempted-recon; sid:200019918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.tikoig.top"; classtype:attempted-recon; sid:200019919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.tilzhy.top"; classtype:attempted-recon; sid:200019920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.u25r5u.icu"; classtype:attempted-recon; sid:200019921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.usivdv.top"; classtype:attempted-recon; sid:200019922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.vcacks.top"; classtype:attempted-recon; sid:200019923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.vcgsip.top"; classtype:attempted-recon; sid:200019924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.vfqske.shop"; classtype:attempted-recon; sid:200019925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.vkpock.shop"; classtype:attempted-recon; sid:200019926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.vnbbks.top"; classtype:attempted-recon; sid:200019927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.voadax.top"; classtype:attempted-recon; sid:200019928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.vrbvro.top"; classtype:attempted-recon; sid:200019929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.wcpjfd.top"; classtype:attempted-recon; sid:200019930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.wl85i.icu"; classtype:attempted-recon; sid:200019931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.wwffoj.shop"; classtype:attempted-recon; sid:200019932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xaexmo.top"; classtype:attempted-recon; sid:200019933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xgjt.pro"; classtype:attempted-recon; sid:200019934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xgtofb.top"; classtype:attempted-recon; sid:200019935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xqpwkk.top"; classtype:attempted-recon; sid:200019936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xvlbws.top"; classtype:attempted-recon; sid:200019937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xwitwq.top"; classtype:attempted-recon; sid:200019938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.xzlnlm.top"; classtype:attempted-recon; sid:200019939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.yhuvzv.top"; classtype:attempted-recon; sid:200019940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.yifpgd.top"; classtype:attempted-recon; sid:200019941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.yphurc.top"; classtype:attempted-recon; sid:200019942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ytnxwi.top"; classtype:attempted-recon; sid:200019943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.ytwbnq.top"; classtype:attempted-recon; sid:200019944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.yyzded.top"; classtype:attempted-recon; sid:200019945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.zmlyhs.top"; classtype:attempted-recon; sid:200019946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.zrbfzw.top"; classtype:attempted-recon; sid:200019947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.zxj6002.xyz"; classtype:attempted-recon; sid:200019948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.1112458.xyz"; classtype:attempted-recon; sid:200019949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.2sae6k.icu"; classtype:attempted-recon; sid:200019950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.3dbbmp.icu"; classtype:attempted-recon; sid:200019951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.3p1yb.icu"; classtype:attempted-recon; sid:200019952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200019953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.457e0p.icu"; classtype:attempted-recon; sid:200019954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.4i3si1.icu"; classtype:attempted-recon; sid:200019955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.5577778.xyz"; classtype:attempted-recon; sid:200019956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.5sime.icu"; classtype:attempted-recon; sid:200019957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.5uzz0h.icu"; classtype:attempted-recon; sid:200019958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.650pt.icu"; classtype:attempted-recon; sid:200019959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.6788665.xyz"; classtype:attempted-recon; sid:200019960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.6876578.xyz"; classtype:attempted-recon; sid:200019961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.6mmfl.icu"; classtype:attempted-recon; sid:200019962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.7hml9e.icu"; classtype:attempted-recon; sid:200019963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.7lnki4.icu"; classtype:attempted-recon; sid:200019964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.7ngywp.icu"; classtype:attempted-recon; sid:200019965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.8fgrh.icu"; classtype:attempted-recon; sid:200019966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.9v9w2y.icu"; classtype:attempted-recon; sid:200019967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.abluwk.top"; classtype:attempted-recon; sid:200019968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.adlxbh.top"; classtype:attempted-recon; sid:200019969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.afohvv.top"; classtype:attempted-recon; sid:200019970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.awsgn.top"; classtype:attempted-recon; sid:200019971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.b32mgr.icu"; classtype:attempted-recon; sid:200019972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.b4eqf.icu"; classtype:attempted-recon; sid:200019973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.b6x80w.icu"; classtype:attempted-recon; sid:200019974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.bfsngf.top"; classtype:attempted-recon; sid:200019975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.bs7dc.icu"; classtype:attempted-recon; sid:200019976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.bsnpag.top"; classtype:attempted-recon; sid:200019977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.bvdadv.top"; classtype:attempted-recon; sid:200019978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.cdpthi.top"; classtype:attempted-recon; sid:200019979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.chashanchu21.shop"; classtype:attempted-recon; sid:200019980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.chashanchu48.shop"; classtype:attempted-recon; sid:200019981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.chkmuq.shop"; classtype:attempted-recon; sid:200019982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.citcfi.top"; classtype:attempted-recon; sid:200019983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.cjezmf.top"; classtype:attempted-recon; sid:200019984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.com-deals.shop"; classtype:attempted-recon; sid:200019985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.contius.shop"; classtype:attempted-recon; sid:200019986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.coxrdc.top"; classtype:attempted-recon; sid:200019987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.cqvlsi.top"; classtype:attempted-recon; sid:200019988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.cstztf.top"; classtype:attempted-recon; sid:200019989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.demtjo.top"; classtype:attempted-recon; sid:200019990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.dfdnsx.top"; classtype:attempted-recon; sid:200019991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.dgqqxx.top"; classtype:attempted-recon; sid:200019992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.djulad.top"; classtype:attempted-recon; sid:200019993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.dkmimw.top"; classtype:attempted-recon; sid:200019994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.dnmsu6.icu"; classtype:attempted-recon; sid:200019995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.doenfd.top"; classtype:attempted-recon; sid:200019996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.eaelbi.top"; classtype:attempted-recon; sid:200019997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ehgmml.top"; classtype:attempted-recon; sid:200019998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ejvocy.top"; classtype:attempted-recon; sid:200019999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.elhicw.top"; classtype:attempted-recon; sid:200020000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.epwnsr.top"; classtype:attempted-recon; sid:200020001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.eucvbc.top"; classtype:attempted-recon; sid:200020002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.exqkjx.top"; classtype:attempted-recon; sid:200020003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.fahxqk.shop"; classtype:attempted-recon; sid:200020004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.fhqemq.top"; classtype:attempted-recon; sid:200020005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.flscly.top"; classtype:attempted-recon; sid:200020006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.fprrlq.top"; classtype:attempted-recon; sid:200020007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.fukjzs.top"; classtype:attempted-recon; sid:200020008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.fvkhnr.top"; classtype:attempted-recon; sid:200020009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gamxhl.shop"; classtype:attempted-recon; sid:200020010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gdmdxy.top"; classtype:attempted-recon; sid:200020011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gjglse.shop"; classtype:attempted-recon; sid:200020012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.glhdpz.top"; classtype:attempted-recon; sid:200020013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gntozh.top"; classtype:attempted-recon; sid:200020014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gs3do.icu"; classtype:attempted-recon; sid:200020015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gtqklv.top"; classtype:attempted-recon; sid:200020016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gxdhfa.top"; classtype:attempted-recon; sid:200020017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gyzt809.xyz"; classtype:attempted-recon; sid:200020018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gzmvuo.top"; classtype:attempted-recon; sid:200020019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.hhxulg.top"; classtype:attempted-recon; sid:200020020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.hixcny.top"; classtype:attempted-recon; sid:200020021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.hpbzkc.top"; classtype:attempted-recon; sid:200020022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.hweypy.top"; classtype:attempted-recon; sid:200020023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.hycxop.top"; classtype:attempted-recon; sid:200020024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.hyhznq.top"; classtype:attempted-recon; sid:200020025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.iaklie.top"; classtype:attempted-recon; sid:200020026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ihfo5.icu"; classtype:attempted-recon; sid:200020027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ilfbdb.top"; classtype:attempted-recon; sid:200020028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.invpbv.top"; classtype:attempted-recon; sid:200020029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ioxsho.shop"; classtype:attempted-recon; sid:200020030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.iytxjk.top"; classtype:attempted-recon; sid:200020031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.jivdhm.top"; classtype:attempted-recon; sid:200020032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.jryuds.top"; classtype:attempted-recon; sid:200020033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.jubsfg.top"; classtype:attempted-recon; sid:200020034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.kbqnmz.top"; classtype:attempted-recon; sid:200020035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.kfpxyn.top"; classtype:attempted-recon; sid:200020036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.klgmfj.top"; classtype:attempted-recon; sid:200020037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.kpgvbn.top"; classtype:attempted-recon; sid:200020038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200020039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.kutlzl.top"; classtype:attempted-recon; sid:200020040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.kwoneq.top"; classtype:attempted-recon; sid:200020041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.l4p2g1.icu"; classtype:attempted-recon; sid:200020042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ladyul.top"; classtype:attempted-recon; sid:200020043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.lfvlpt.top"; classtype:attempted-recon; sid:200020044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.lgwjlm.shop"; classtype:attempted-recon; sid:200020045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.llsoxx.top"; classtype:attempted-recon; sid:200020046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.mbirgc.top"; classtype:attempted-recon; sid:200020047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200020048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.mvqlzn.top"; classtype:attempted-recon; sid:200020049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.mwdrbx.top"; classtype:attempted-recon; sid:200020050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.mxeanv.top"; classtype:attempted-recon; sid:200020051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.n21so.icu"; classtype:attempted-recon; sid:200020052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.n6eonm.icu"; classtype:attempted-recon; sid:200020053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.neidee.top"; classtype:attempted-recon; sid:200020054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nfpdgp.top"; classtype:attempted-recon; sid:200020055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nhewlh.top"; classtype:attempted-recon; sid:200020056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nkjfmc.top"; classtype:attempted-recon; sid:200020057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nlujo.top"; classtype:attempted-recon; sid:200020058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.notwe.icu"; classtype:attempted-recon; sid:200020059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nphgoc.top"; classtype:attempted-recon; sid:200020060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.npibd.top"; classtype:attempted-recon; sid:200020061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nqsaby.top"; classtype:attempted-recon; sid:200020062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nr5kfh.icu"; classtype:attempted-recon; sid:200020063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.nrmzy6.icu"; classtype:attempted-recon; sid:200020064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ofldnb.shop"; classtype:attempted-recon; sid:200020065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ogzbtb.top"; classtype:attempted-recon; sid:200020066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ohzctx.top"; classtype:attempted-recon; sid:200020067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.oiknia.top"; classtype:attempted-recon; sid:200020068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.oipful.top"; classtype:attempted-recon; sid:200020069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.patcfp.top"; classtype:attempted-recon; sid:200020070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pbykwg.top"; classtype:attempted-recon; sid:200020071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pdndft.top"; classtype:attempted-recon; sid:200020072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ph29h.icu"; classtype:attempted-recon; sid:200020073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pjt9os.icu"; classtype:attempted-recon; sid:200020074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pqdxev.top"; classtype:attempted-recon; sid:200020075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pugxbo.top"; classtype:attempted-recon; sid:200020076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.puoo9.icu"; classtype:attempted-recon; sid:200020077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pxbkkk.top"; classtype:attempted-recon; sid:200020078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pxnctk.top"; classtype:attempted-recon; sid:200020079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pxzjwk.top"; classtype:attempted-recon; sid:200020080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.pysitg.top"; classtype:attempted-recon; sid:200020081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.qexccc.top"; classtype:attempted-recon; sid:200020082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.qfvbqx.shop"; classtype:attempted-recon; sid:200020083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.qlmenm.top"; classtype:attempted-recon; sid:200020084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.qskgtg.top"; classtype:attempted-recon; sid:200020085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.qvcxln.shop"; classtype:attempted-recon; sid:200020086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.qwuchl.top"; classtype:attempted-recon; sid:200020087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.rhwdsq.top"; classtype:attempted-recon; sid:200020088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.rjbvwt.top"; classtype:attempted-recon; sid:200020089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.rn5mu.icu"; classtype:attempted-recon; sid:200020090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.royjjy.shop"; classtype:attempted-recon; sid:200020091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.runjin007.icu"; classtype:attempted-recon; sid:200020092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.rvpepb.top"; classtype:attempted-recon; sid:200020093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.rzuxzq.shop"; classtype:attempted-recon; sid:200020094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.saveyr.top"; classtype:attempted-recon; sid:200020095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.sftqjs.top"; classtype:attempted-recon; sid:200020096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.shanchuta27.shop"; classtype:attempted-recon; sid:200020097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.tbntv.icu"; classtype:attempted-recon; sid:200020098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.tgmqlg.top"; classtype:attempted-recon; sid:200020099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.tikoig.top"; classtype:attempted-recon; sid:200020100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.tilzhy.top"; classtype:attempted-recon; sid:200020101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.u25r5u.icu"; classtype:attempted-recon; sid:200020102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.uhia8h.icu"; classtype:attempted-recon; sid:200020103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.upjhye.top"; classtype:attempted-recon; sid:200020104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.usivdv.top"; classtype:attempted-recon; sid:200020105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.vcacks.top"; classtype:attempted-recon; sid:200020106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.vcgsip.top"; classtype:attempted-recon; sid:200020107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.vfqske.shop"; classtype:attempted-recon; sid:200020108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.vkpock.shop"; classtype:attempted-recon; sid:200020109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.vnbbks.top"; classtype:attempted-recon; sid:200020110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.voadax.top"; classtype:attempted-recon; sid:200020111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.vrbvro.top"; classtype:attempted-recon; sid:200020112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.wcpjfd.top"; classtype:attempted-recon; sid:200020113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.wl85i.icu"; classtype:attempted-recon; sid:200020114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.wwffoj.shop"; classtype:attempted-recon; sid:200020115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xaexmo.top"; classtype:attempted-recon; sid:200020116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xgjt.pro"; classtype:attempted-recon; sid:200020117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xgtofb.top"; classtype:attempted-recon; sid:200020118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xqpwkk.top"; classtype:attempted-recon; sid:200020119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xvlbws.top"; classtype:attempted-recon; sid:200020120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xwitwq.top"; classtype:attempted-recon; sid:200020121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.xzlnlm.top"; classtype:attempted-recon; sid:200020122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.yhuvzv.top"; classtype:attempted-recon; sid:200020123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.yifpgd.top"; classtype:attempted-recon; sid:200020124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.yphurc.top"; classtype:attempted-recon; sid:200020125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ytnxwi.top"; classtype:attempted-recon; sid:200020126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.ytwbnq.top"; classtype:attempted-recon; sid:200020127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.yyzded.top"; classtype:attempted-recon; sid:200020128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.zmlyhs.top"; classtype:attempted-recon; sid:200020129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.zrbfzw.top"; classtype:attempted-recon; sid:200020130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.1112458.xyz"; classtype:attempted-recon; sid:200020131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.2sae6k.icu"; classtype:attempted-recon; sid:200020132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.3dbbmp.icu"; classtype:attempted-recon; sid:200020133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.3p1yb.icu"; classtype:attempted-recon; sid:200020134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200020135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.457e0p.icu"; classtype:attempted-recon; sid:200020136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.4i3si1.icu"; classtype:attempted-recon; sid:200020137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.5577778.xyz"; classtype:attempted-recon; sid:200020138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.5sime.icu"; classtype:attempted-recon; sid:200020139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.5uzz0h.icu"; classtype:attempted-recon; sid:200020140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.650pt.icu"; classtype:attempted-recon; sid:200020141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.6788665.xyz"; classtype:attempted-recon; sid:200020142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.6876578.xyz"; classtype:attempted-recon; sid:200020143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.6mmfl.icu"; classtype:attempted-recon; sid:200020144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.7hml9e.icu"; classtype:attempted-recon; sid:200020145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.7lnki4.icu"; classtype:attempted-recon; sid:200020146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.7ngywp.icu"; classtype:attempted-recon; sid:200020147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.8fgrh.icu"; classtype:attempted-recon; sid:200020148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.9v9w2y.icu"; classtype:attempted-recon; sid:200020149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.abluwk.top"; classtype:attempted-recon; sid:200020150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.adlxbh.top"; classtype:attempted-recon; sid:200020151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.afohvv.top"; classtype:attempted-recon; sid:200020152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.awsgn.top"; classtype:attempted-recon; sid:200020153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.b32mgr.icu"; classtype:attempted-recon; sid:200020154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.b4eqf.icu"; classtype:attempted-recon; sid:200020155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.b6x80w.icu"; classtype:attempted-recon; sid:200020156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.bfsngf.top"; classtype:attempted-recon; sid:200020157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.bs7dc.icu"; classtype:attempted-recon; sid:200020158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.bsnpag.top"; classtype:attempted-recon; sid:200020159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.bvdadv.top"; classtype:attempted-recon; sid:200020160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.cdpthi.top"; classtype:attempted-recon; sid:200020161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.chashanchu21.shop"; classtype:attempted-recon; sid:200020162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.chashanchu48.shop"; classtype:attempted-recon; sid:200020163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.chkmuq.shop"; classtype:attempted-recon; sid:200020164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.citcfi.top"; classtype:attempted-recon; sid:200020165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.cjezmf.top"; classtype:attempted-recon; sid:200020166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.com-deals.shop"; classtype:attempted-recon; sid:200020167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.contius.shop"; classtype:attempted-recon; sid:200020168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.coxrdc.top"; classtype:attempted-recon; sid:200020169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.cstztf.top"; classtype:attempted-recon; sid:200020170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.demtjo.top"; classtype:attempted-recon; sid:200020171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.dfdnsx.top"; classtype:attempted-recon; sid:200020172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.dgqqxx.top"; classtype:attempted-recon; sid:200020173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.djulad.top"; classtype:attempted-recon; sid:200020174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.dkmimw.top"; classtype:attempted-recon; sid:200020175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.dnmsu6.icu"; classtype:attempted-recon; sid:200020176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.doenfd.top"; classtype:attempted-recon; sid:200020177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.eaelbi.top"; classtype:attempted-recon; sid:200020178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ehgmml.top"; classtype:attempted-recon; sid:200020179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ejvocy.top"; classtype:attempted-recon; sid:200020180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.elhicw.top"; classtype:attempted-recon; sid:200020181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.epwnsr.top"; classtype:attempted-recon; sid:200020182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.eucvbc.top"; classtype:attempted-recon; sid:200020183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.exqkjx.top"; classtype:attempted-recon; sid:200020184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.fahxqk.shop"; classtype:attempted-recon; sid:200020185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.fhqemq.top"; classtype:attempted-recon; sid:200020186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.flscly.top"; classtype:attempted-recon; sid:200020187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.fprrlq.top"; classtype:attempted-recon; sid:200020188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.fukjzs.top"; classtype:attempted-recon; sid:200020189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.fvkhnr.top"; classtype:attempted-recon; sid:200020190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.fzfweo.top"; classtype:attempted-recon; sid:200020191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gamxhl.shop"; classtype:attempted-recon; sid:200020192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gdmdxy.top"; classtype:attempted-recon; sid:200020193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.glhdpz.top"; classtype:attempted-recon; sid:200020194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gntozh.top"; classtype:attempted-recon; sid:200020195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gs3do.icu"; classtype:attempted-recon; sid:200020196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gtqklv.top"; classtype:attempted-recon; sid:200020197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gxdhfa.top"; classtype:attempted-recon; sid:200020198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gyzt809.xyz"; classtype:attempted-recon; sid:200020199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gzmvuo.top"; classtype:attempted-recon; sid:200020200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.hhxulg.top"; classtype:attempted-recon; sid:200020201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.hixcny.top"; classtype:attempted-recon; sid:200020202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.hpbzkc.top"; classtype:attempted-recon; sid:200020203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.hweypy.top"; classtype:attempted-recon; sid:200020204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.hyhznq.top"; classtype:attempted-recon; sid:200020205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.iaklie.top"; classtype:attempted-recon; sid:200020206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ihfo5.icu"; classtype:attempted-recon; sid:200020207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ilfbdb.top"; classtype:attempted-recon; sid:200020208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.invpbv.top"; classtype:attempted-recon; sid:200020209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ioxsho.shop"; classtype:attempted-recon; sid:200020210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.iytxjk.top"; classtype:attempted-recon; sid:200020211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.jivdhm.top"; classtype:attempted-recon; sid:200020212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.jryuds.top"; classtype:attempted-recon; sid:200020213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.jubsfg.top"; classtype:attempted-recon; sid:200020214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.kbqnmz.top"; classtype:attempted-recon; sid:200020215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.kfpxyn.top"; classtype:attempted-recon; sid:200020216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.klgmfj.top"; classtype:attempted-recon; sid:200020217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.kpgvbn.top"; classtype:attempted-recon; sid:200020218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200020219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.kutlzl.top"; classtype:attempted-recon; sid:200020220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.kwoneq.top"; classtype:attempted-recon; sid:200020221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.l4p2g1.icu"; classtype:attempted-recon; sid:200020222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ladyul.top"; classtype:attempted-recon; sid:200020223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.lfvlpt.top"; classtype:attempted-recon; sid:200020224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.lgwjlm.shop"; classtype:attempted-recon; sid:200020225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.llsoxx.top"; classtype:attempted-recon; sid:200020226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.mbirgc.top"; classtype:attempted-recon; sid:200020227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200020228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.mvqlzn.top"; classtype:attempted-recon; sid:200020229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.mwdrbx.top"; classtype:attempted-recon; sid:200020230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.mxeanv.top"; classtype:attempted-recon; sid:200020231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.n21so.icu"; classtype:attempted-recon; sid:200020232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.n6eonm.icu"; classtype:attempted-recon; sid:200020233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.neidee.top"; classtype:attempted-recon; sid:200020234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nfpdgp.top"; classtype:attempted-recon; sid:200020235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nhewlh.top"; classtype:attempted-recon; sid:200020236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nkjfmc.top"; classtype:attempted-recon; sid:200020237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nlujo.top"; classtype:attempted-recon; sid:200020238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.notwe.icu"; classtype:attempted-recon; sid:200020239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nphgoc.top"; classtype:attempted-recon; sid:200020240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.npibd.top"; classtype:attempted-recon; sid:200020241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nqsaby.top"; classtype:attempted-recon; sid:200020242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nr5kfh.icu"; classtype:attempted-recon; sid:200020243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.nrmzy6.icu"; classtype:attempted-recon; sid:200020244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ofldnb.shop"; classtype:attempted-recon; sid:200020245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ohzctx.top"; classtype:attempted-recon; sid:200020246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.oiknia.top"; classtype:attempted-recon; sid:200020247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.oipful.top"; classtype:attempted-recon; sid:200020248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.patcfp.top"; classtype:attempted-recon; sid:200020249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pbykwg.top"; classtype:attempted-recon; sid:200020250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pdndft.top"; classtype:attempted-recon; sid:200020251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ph29h.icu"; classtype:attempted-recon; sid:200020252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pjt9os.icu"; classtype:attempted-recon; sid:200020253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pqdxev.top"; classtype:attempted-recon; sid:200020254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ptrwmp.top"; classtype:attempted-recon; sid:200020255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pugxbo.top"; classtype:attempted-recon; sid:200020256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.puoo9.icu"; classtype:attempted-recon; sid:200020257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pxbkkk.top"; classtype:attempted-recon; sid:200020258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pxnctk.top"; classtype:attempted-recon; sid:200020259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pxzjwk.top"; classtype:attempted-recon; sid:200020260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.pysitg.top"; classtype:attempted-recon; sid:200020261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.qexccc.top"; classtype:attempted-recon; sid:200020262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.qlmenm.top"; classtype:attempted-recon; sid:200020263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.qoefmk.top"; classtype:attempted-recon; sid:200020264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.qskgtg.top"; classtype:attempted-recon; sid:200020265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.qvcxln.shop"; classtype:attempted-recon; sid:200020266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.qwuchl.top"; classtype:attempted-recon; sid:200020267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.rgdpsh.top"; classtype:attempted-recon; sid:200020268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.rhwdsq.top"; classtype:attempted-recon; sid:200020269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.rjbvwt.top"; classtype:attempted-recon; sid:200020270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.rn5mu.icu"; classtype:attempted-recon; sid:200020271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.royjjy.shop"; classtype:attempted-recon; sid:200020272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.runjin007.icu"; classtype:attempted-recon; sid:200020273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.rvpepb.top"; classtype:attempted-recon; sid:200020274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.rzuxzq.shop"; classtype:attempted-recon; sid:200020275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.saveyr.top"; classtype:attempted-recon; sid:200020276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.sftqjs.top"; classtype:attempted-recon; sid:200020277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.shanchuta27.shop"; classtype:attempted-recon; sid:200020278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.tbntv.icu"; classtype:attempted-recon; sid:200020279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.tfodbq.top"; classtype:attempted-recon; sid:200020280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.tgmqlg.top"; classtype:attempted-recon; sid:200020281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.tikoig.top"; classtype:attempted-recon; sid:200020282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.tilzhy.top"; classtype:attempted-recon; sid:200020283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.u25r5u.icu"; classtype:attempted-recon; sid:200020284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.uhia8h.icu"; classtype:attempted-recon; sid:200020285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.upjhye.top"; classtype:attempted-recon; sid:200020286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.usivdv.top"; classtype:attempted-recon; sid:200020287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.vcacks.top"; classtype:attempted-recon; sid:200020288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.vfqske.shop"; classtype:attempted-recon; sid:200020289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.vkpock.shop"; classtype:attempted-recon; sid:200020290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.vnbbks.top"; classtype:attempted-recon; sid:200020291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.voadax.top"; classtype:attempted-recon; sid:200020292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.vrbvro.top"; classtype:attempted-recon; sid:200020293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.wcpjfd.top"; classtype:attempted-recon; sid:200020294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.wl85i.icu"; classtype:attempted-recon; sid:200020295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.wolvps.shop"; classtype:attempted-recon; sid:200020296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.wwffoj.shop"; classtype:attempted-recon; sid:200020297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xaexmo.top"; classtype:attempted-recon; sid:200020298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xgjt.pro"; classtype:attempted-recon; sid:200020299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xgtofb.top"; classtype:attempted-recon; sid:200020300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xqpwkk.top"; classtype:attempted-recon; sid:200020301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xvlbws.top"; classtype:attempted-recon; sid:200020302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xwitwq.top"; classtype:attempted-recon; sid:200020303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.xzlnlm.top"; classtype:attempted-recon; sid:200020304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.yhuvzv.top"; classtype:attempted-recon; sid:200020305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.yifpgd.top"; classtype:attempted-recon; sid:200020306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.yphurc.top"; classtype:attempted-recon; sid:200020307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ytnxwi.top"; classtype:attempted-recon; sid:200020308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.ytwbnq.top"; classtype:attempted-recon; sid:200020309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.yyzded.top"; classtype:attempted-recon; sid:200020310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.zmlyhs.top"; classtype:attempted-recon; sid:200020311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.zrbfzw.top"; classtype:attempted-recon; sid:200020312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.zxj6002.xyz"; classtype:attempted-recon; sid:200020313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.1112458.xyz"; classtype:attempted-recon; sid:200020314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.2sae6k.icu"; classtype:attempted-recon; sid:200020315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.3dbbmp.icu"; classtype:attempted-recon; sid:200020316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.3p1yb.icu"; classtype:attempted-recon; sid:200020317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200020318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.457e0p.icu"; classtype:attempted-recon; sid:200020319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.4i3si1.icu"; classtype:attempted-recon; sid:200020320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.5577778.xyz"; classtype:attempted-recon; sid:200020321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.5sime.icu"; classtype:attempted-recon; sid:200020322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.5uzz0h.icu"; classtype:attempted-recon; sid:200020323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.650pt.icu"; classtype:attempted-recon; sid:200020324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.6788665.xyz"; classtype:attempted-recon; sid:200020325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.6876578.xyz"; classtype:attempted-recon; sid:200020326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.6mmfl.icu"; classtype:attempted-recon; sid:200020327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.7hml9e.icu"; classtype:attempted-recon; sid:200020328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.7lnki4.icu"; classtype:attempted-recon; sid:200020329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.7ngywp.icu"; classtype:attempted-recon; sid:200020330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.8fgrh.icu"; classtype:attempted-recon; sid:200020331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.9v9w2y.icu"; classtype:attempted-recon; sid:200020332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.abluwk.top"; classtype:attempted-recon; sid:200020333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.adlxbh.top"; classtype:attempted-recon; sid:200020334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.afohvv.top"; classtype:attempted-recon; sid:200020335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.awsgn.top"; classtype:attempted-recon; sid:200020336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.b32mgr.icu"; classtype:attempted-recon; sid:200020337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.b4eqf.icu"; classtype:attempted-recon; sid:200020338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.b6x80w.icu"; classtype:attempted-recon; sid:200020339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.bbl7ef.icu"; classtype:attempted-recon; sid:200020340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.bfsngf.top"; classtype:attempted-recon; sid:200020341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.bs7dc.icu"; classtype:attempted-recon; sid:200020342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.bsnpag.top"; classtype:attempted-recon; sid:200020343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.bvdadv.top"; classtype:attempted-recon; sid:200020344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.cdpthi.top"; classtype:attempted-recon; sid:200020345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.chashanchu21.shop"; classtype:attempted-recon; sid:200020346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.chashanchu48.shop"; classtype:attempted-recon; sid:200020347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.chkmuq.shop"; classtype:attempted-recon; sid:200020348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.citcfi.top"; classtype:attempted-recon; sid:200020349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.cjezmf.top"; classtype:attempted-recon; sid:200020350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.com-deals.shop"; classtype:attempted-recon; sid:200020351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.contius.shop"; classtype:attempted-recon; sid:200020352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.coxrdc.top"; classtype:attempted-recon; sid:200020353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.cqvlsi.top"; classtype:attempted-recon; sid:200020354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.cstztf.top"; classtype:attempted-recon; sid:200020355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.demtjo.top"; classtype:attempted-recon; sid:200020356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.dfdnsx.top"; classtype:attempted-recon; sid:200020357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.dgqqxx.top"; classtype:attempted-recon; sid:200020358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.djulad.top"; classtype:attempted-recon; sid:200020359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.dkmimw.top"; classtype:attempted-recon; sid:200020360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.dnmsu6.icu"; classtype:attempted-recon; sid:200020361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.doenfd.top"; classtype:attempted-recon; sid:200020362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.eaelbi.top"; classtype:attempted-recon; sid:200020363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ejvocy.top"; classtype:attempted-recon; sid:200020364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.elhicw.top"; classtype:attempted-recon; sid:200020365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.epwnsr.top"; classtype:attempted-recon; sid:200020366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.eucvbc.top"; classtype:attempted-recon; sid:200020367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.exqkjx.top"; classtype:attempted-recon; sid:200020368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.fahxqk.shop"; classtype:attempted-recon; sid:200020369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.fhqemq.top"; classtype:attempted-recon; sid:200020370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.fprrlq.top"; classtype:attempted-recon; sid:200020371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.fukjzs.top"; classtype:attempted-recon; sid:200020372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.fvkhnr.top"; classtype:attempted-recon; sid:200020373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.fzfweo.top"; classtype:attempted-recon; sid:200020374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gamxhl.shop"; classtype:attempted-recon; sid:200020375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gdmdxy.top"; classtype:attempted-recon; sid:200020376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gjglse.shop"; classtype:attempted-recon; sid:200020377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.glhdpz.top"; classtype:attempted-recon; sid:200020378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gntozh.top"; classtype:attempted-recon; sid:200020379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gs3do.icu"; classtype:attempted-recon; sid:200020380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gtqklv.top"; classtype:attempted-recon; sid:200020381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gxdhfa.top"; classtype:attempted-recon; sid:200020382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gyzt809.xyz"; classtype:attempted-recon; sid:200020383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.gzmvuo.top"; classtype:attempted-recon; sid:200020384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.hhxulg.top"; classtype:attempted-recon; sid:200020385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.hixcny.top"; classtype:attempted-recon; sid:200020386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.hpbzkc.top"; classtype:attempted-recon; sid:200020387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.hweypy.top"; classtype:attempted-recon; sid:200020388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.hyhznq.top"; classtype:attempted-recon; sid:200020389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.iaklie.top"; classtype:attempted-recon; sid:200020390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ihfo5.icu"; classtype:attempted-recon; sid:200020391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ilfbdb.top"; classtype:attempted-recon; sid:200020392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.invpbv.top"; classtype:attempted-recon; sid:200020393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ioxsho.shop"; classtype:attempted-recon; sid:200020394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.jivdhm.top"; classtype:attempted-recon; sid:200020395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.jryuds.top"; classtype:attempted-recon; sid:200020396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.jubsfg.top"; classtype:attempted-recon; sid:200020397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.kbqnmz.top"; classtype:attempted-recon; sid:200020398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.kfpxyn.top"; classtype:attempted-recon; sid:200020399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.klgmfj.top"; classtype:attempted-recon; sid:200020400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.kpgvbn.top"; classtype:attempted-recon; sid:200020401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200020402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.kutlzl.top"; classtype:attempted-recon; sid:200020403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.kwoneq.top"; classtype:attempted-recon; sid:200020404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.l4p2g1.icu"; classtype:attempted-recon; sid:200020405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ladyul.top"; classtype:attempted-recon; sid:200020406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.lfvlpt.top"; classtype:attempted-recon; sid:200020407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.lgwjlm.shop"; classtype:attempted-recon; sid:200020408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.llsoxx.top"; classtype:attempted-recon; sid:200020409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.mbirgc.top"; classtype:attempted-recon; sid:200020410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200020411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.mvqlzn.top"; classtype:attempted-recon; sid:200020412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.mwdrbx.top"; classtype:attempted-recon; sid:200020413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.mxeanv.top"; classtype:attempted-recon; sid:200020414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.n21so.icu"; classtype:attempted-recon; sid:200020415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.n6eonm.icu"; classtype:attempted-recon; sid:200020416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.neidee.top"; classtype:attempted-recon; sid:200020417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.nfpdgp.top"; classtype:attempted-recon; sid:200020418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ohzctx.top"; classtype:attempted-recon; sid:200020419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.oiknia.top"; classtype:attempted-recon; sid:200020420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.oipful.top"; classtype:attempted-recon; sid:200020421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.patcfp.top"; classtype:attempted-recon; sid:200020422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pbykwg.top"; classtype:attempted-recon; sid:200020423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pdndft.top"; classtype:attempted-recon; sid:200020424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ph29h.icu"; classtype:attempted-recon; sid:200020425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pjt9os.icu"; classtype:attempted-recon; sid:200020426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pqdxev.top"; classtype:attempted-recon; sid:200020427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pugxbo.top"; classtype:attempted-recon; sid:200020428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.puoo9.icu"; classtype:attempted-recon; sid:200020429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pxbkkk.top"; classtype:attempted-recon; sid:200020430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pxnctk.top"; classtype:attempted-recon; sid:200020431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pxzjwk.top"; classtype:attempted-recon; sid:200020432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.pysitg.top"; classtype:attempted-recon; sid:200020433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.qexccc.top"; classtype:attempted-recon; sid:200020434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.qfvbqx.shop"; classtype:attempted-recon; sid:200020435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.qlmenm.top"; classtype:attempted-recon; sid:200020436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.qoefmk.top"; classtype:attempted-recon; sid:200020437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.qvcxln.shop"; classtype:attempted-recon; sid:200020438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.qwuchl.top"; classtype:attempted-recon; sid:200020439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.rgdpsh.top"; classtype:attempted-recon; sid:200020440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.rhwdsq.top"; classtype:attempted-recon; sid:200020441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.rjbvwt.top"; classtype:attempted-recon; sid:200020442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.rn5mu.icu"; classtype:attempted-recon; sid:200020443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.royjjy.shop"; classtype:attempted-recon; sid:200020444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.runjin007.icu"; classtype:attempted-recon; sid:200020445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.rvpepb.top"; classtype:attempted-recon; sid:200020446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.rzuxzq.shop"; classtype:attempted-recon; sid:200020447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.saveyr.top"; classtype:attempted-recon; sid:200020448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.sftqjs.top"; classtype:attempted-recon; sid:200020449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.shanchuta27.shop"; classtype:attempted-recon; sid:200020450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.tbntv.icu"; classtype:attempted-recon; sid:200020451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.tfodbq.top"; classtype:attempted-recon; sid:200020452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.wolvps.shop"; classtype:attempted-recon; sid:200020453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.wwffoj.shop"; classtype:attempted-recon; sid:200020454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xaexmo.top"; classtype:attempted-recon; sid:200020455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xgjt.pro"; classtype:attempted-recon; sid:200020456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xgtofb.top"; classtype:attempted-recon; sid:200020457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xqpwkk.top"; classtype:attempted-recon; sid:200020458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xvlbws.top"; classtype:attempted-recon; sid:200020459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xwitwq.top"; classtype:attempted-recon; sid:200020460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.xzlnlm.top"; classtype:attempted-recon; sid:200020461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.yhuvzv.top"; classtype:attempted-recon; sid:200020462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.yifpgd.top"; classtype:attempted-recon; sid:200020463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.yphurc.top"; classtype:attempted-recon; sid:200020464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ytnxwi.top"; classtype:attempted-recon; sid:200020465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.ytwbnq.top"; classtype:attempted-recon; sid:200020466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.yyzded.top"; classtype:attempted-recon; sid:200020467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.5577778.xyz"; classtype:attempted-recon; sid:200020468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.5sime.icu"; classtype:attempted-recon; sid:200020469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.5uzz0h.icu"; classtype:attempted-recon; sid:200020470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.650pt.icu"; classtype:attempted-recon; sid:200020471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.6788665.xyz"; classtype:attempted-recon; sid:200020472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.6876578.xyz"; classtype:attempted-recon; sid:200020473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.6mmfl.icu"; classtype:attempted-recon; sid:200020474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.7hml9e.icu"; classtype:attempted-recon; sid:200020475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.7lnki4.icu"; classtype:attempted-recon; sid:200020476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.7ngywp.icu"; classtype:attempted-recon; sid:200020477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.8fgrh.icu"; classtype:attempted-recon; sid:200020478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.9v9w2y.icu"; classtype:attempted-recon; sid:200020479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.abluwk.top"; classtype:attempted-recon; sid:200020480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.adlxbh.top"; classtype:attempted-recon; sid:200020481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.afohvv.top"; classtype:attempted-recon; sid:200020482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.chashanchu21.shop"; classtype:attempted-recon; sid:200020483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.chashanchu48.shop"; classtype:attempted-recon; sid:200020484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.chkmuq.shop"; classtype:attempted-recon; sid:200020485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.citcfi.top"; classtype:attempted-recon; sid:200020486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.com-deals.shop"; classtype:attempted-recon; sid:200020487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.contius.shop"; classtype:attempted-recon; sid:200020488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.coxrdc.top"; classtype:attempted-recon; sid:200020489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.cstztf.top"; classtype:attempted-recon; sid:200020490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.demtjo.top"; classtype:attempted-recon; sid:200020491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.dfdnsx.top"; classtype:attempted-recon; sid:200020492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.dgqqxx.top"; classtype:attempted-recon; sid:200020493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.dkmimw.top"; classtype:attempted-recon; sid:200020494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.dnmsu6.icu"; classtype:attempted-recon; sid:200020495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.doenfd.top"; classtype:attempted-recon; sid:200020496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.fprrlq.top"; classtype:attempted-recon; sid:200020497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.fukjzs.top"; classtype:attempted-recon; sid:200020498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.fvkhnr.top"; classtype:attempted-recon; sid:200020499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.fzfweo.top"; classtype:attempted-recon; sid:200020500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gamxhl.shop"; classtype:attempted-recon; sid:200020501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gdmdxy.top"; classtype:attempted-recon; sid:200020502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gjglse.shop"; classtype:attempted-recon; sid:200020503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.glhdpz.top"; classtype:attempted-recon; sid:200020504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gntozh.top"; classtype:attempted-recon; sid:200020505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gs3do.icu"; classtype:attempted-recon; sid:200020506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gtqklv.top"; classtype:attempted-recon; sid:200020507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gxdhfa.top"; classtype:attempted-recon; sid:200020508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gyzt809.xyz"; classtype:attempted-recon; sid:200020509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gzmvuo.top"; classtype:attempted-recon; sid:200020510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ioxsho.shop"; classtype:attempted-recon; sid:200020511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.jivdhm.top"; classtype:attempted-recon; sid:200020512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.jryuds.top"; classtype:attempted-recon; sid:200020513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.jubsfg.top"; classtype:attempted-recon; sid:200020514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.kbqnmz.top"; classtype:attempted-recon; sid:200020515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.klgmfj.top"; classtype:attempted-recon; sid:200020516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.kpgvbn.top"; classtype:attempted-recon; sid:200020517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200020518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.kutlzl.top"; classtype:attempted-recon; sid:200020519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.kwoneq.top"; classtype:attempted-recon; sid:200020520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.l4p2g1.icu"; classtype:attempted-recon; sid:200020521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ladyul.top"; classtype:attempted-recon; sid:200020522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.lfvlpt.top"; classtype:attempted-recon; sid:200020523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.lgwjlm.shop"; classtype:attempted-recon; sid:200020524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.llsoxx.top"; classtype:attempted-recon; sid:200020525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.mbirgc.top"; classtype:attempted-recon; sid:200020526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200020527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.mvqlzn.top"; classtype:attempted-recon; sid:200020528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.mwdrbx.top"; classtype:attempted-recon; sid:200020529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.mxeanv.top"; classtype:attempted-recon; sid:200020530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.n21so.icu"; classtype:attempted-recon; sid:200020531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.n6eonm.icu"; classtype:attempted-recon; sid:200020532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.neidee.top"; classtype:attempted-recon; sid:200020533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.nfpdgp.top"; classtype:attempted-recon; sid:200020534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.nhewlh.top"; classtype:attempted-recon; sid:200020535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.nkjfmc.top"; classtype:attempted-recon; sid:200020536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.nphgoc.top"; classtype:attempted-recon; sid:200020537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.npibd.top"; classtype:attempted-recon; sid:200020538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.nqsaby.top"; classtype:attempted-recon; sid:200020539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.nr5kfh.icu"; classtype:attempted-recon; sid:200020540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.nrmzy6.icu"; classtype:attempted-recon; sid:200020541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ofldnb.shop"; classtype:attempted-recon; sid:200020542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ogzbtb.top"; classtype:attempted-recon; sid:200020543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ohzctx.top"; classtype:attempted-recon; sid:200020544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.oiknia.top"; classtype:attempted-recon; sid:200020545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.oipful.top"; classtype:attempted-recon; sid:200020546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.patcfp.top"; classtype:attempted-recon; sid:200020547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.pbykwg.top"; classtype:attempted-recon; sid:200020548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.pdndft.top"; classtype:attempted-recon; sid:200020549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ph29h.icu"; classtype:attempted-recon; sid:200020550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.pjt9os.icu"; classtype:attempted-recon; sid:200020551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.pqdxev.top"; classtype:attempted-recon; sid:200020552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ptrwmp.top"; classtype:attempted-recon; sid:200020553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.pugxbo.top"; classtype:attempted-recon; sid:200020554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.puoo9.icu"; classtype:attempted-recon; sid:200020555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.pxbkkk.top"; classtype:attempted-recon; sid:200020556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.rgdpsh.top"; classtype:attempted-recon; sid:200020557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.rhwdsq.top"; classtype:attempted-recon; sid:200020558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.rjbvwt.top"; classtype:attempted-recon; sid:200020559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.rn5mu.icu"; classtype:attempted-recon; sid:200020560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.royjjy.shop"; classtype:attempted-recon; sid:200020561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.runjin007.icu"; classtype:attempted-recon; sid:200020562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.rvpepb.top"; classtype:attempted-recon; sid:200020563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.rzuxzq.shop"; classtype:attempted-recon; sid:200020564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.saveyr.top"; classtype:attempted-recon; sid:200020565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.sftqjs.top"; classtype:attempted-recon; sid:200020566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.shanchuta27.shop"; classtype:attempted-recon; sid:200020567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.tbntv.icu"; classtype:attempted-recon; sid:200020568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.tfodbq.top"; classtype:attempted-recon; sid:200020569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.tgmqlg.top"; classtype:attempted-recon; sid:200020570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.tikoig.top"; classtype:attempted-recon; sid:200020571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.tilzhy.top"; classtype:attempted-recon; sid:200020572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.vrbvro.top"; classtype:attempted-recon; sid:200020573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.wcpjfd.top"; classtype:attempted-recon; sid:200020574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.wl85i.icu"; classtype:attempted-recon; sid:200020575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.wolvps.shop"; classtype:attempted-recon; sid:200020576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.wwffoj.shop"; classtype:attempted-recon; sid:200020577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.xaexmo.top"; classtype:attempted-recon; sid:200020578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.xgjt.pro"; classtype:attempted-recon; sid:200020579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.xgtofb.top"; classtype:attempted-recon; sid:200020580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.xqpwkk.top"; classtype:attempted-recon; sid:200020581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.xvlbws.top"; classtype:attempted-recon; sid:200020582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.xwitwq.top"; classtype:attempted-recon; sid:200020583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.xzlnlm.top"; classtype:attempted-recon; sid:200020584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.yhuvzv.top"; classtype:attempted-recon; sid:200020585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.yifpgd.top"; classtype:attempted-recon; sid:200020586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.yphurc.top"; classtype:attempted-recon; sid:200020587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.ytnxwi.top"; classtype:attempted-recon; sid:200020588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sebat-dhl.blogspot.com"; classtype:attempted-recon; sid:200020589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sebene27.github.io"; classtype:attempted-recon; sid:200020590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secittystrisaccountsifnesotyss.co.vu"; classtype:attempted-recon; sid:200020591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secuartiry.safarity89.repl.co"; classtype:attempted-recon; sid:200020592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securdroyalcreditun1on.top"; classtype:attempted-recon; sid:200020593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-alpha-497da0be515757web.gidiagents.com"; classtype:attempted-recon; sid:200020594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-code-project.reseeoniwean.workers.dev"; classtype:attempted-recon; sid:200020595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-dashlane.com"; classtype:attempted-recon; sid:200020596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-document-project.ereoveisnot.workers.dev"; classtype:attempted-recon; sid:200020597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-login-dkb.ddns.ms"; classtype:attempted-recon; sid:200020598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-office365-onmicr0000.myportfolio.com"; classtype:attempted-recon; sid:200020599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-reconnect.dinamic-ourtime.workers.dev"; classtype:attempted-recon; sid:200020600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-runescape.xgm.rnp.mybluehost.me"; classtype:attempted-recon; sid:200020601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-sligth-document.ertoolfo.workers.dev"; classtype:attempted-recon; sid:200020602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure-ups-canada.com"; classtype:attempted-recon; sid:200020603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.oldschool.com-l.cz"; classtype:attempted-recon; sid:200020604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.oldschool.com-o.cz"; classtype:attempted-recon; sid:200020605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.oldschool.com-rs.cz"; classtype:attempted-recon; sid:200020606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.oldschool.com-t.cz"; classtype:attempted-recon; sid:200020607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.oldschool.com-v.cz"; classtype:attempted-recon; sid:200020608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.runescope.com-as.cz"; classtype:attempted-recon; sid:200020609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.staman.direct.quickconnect.to"; classtype:attempted-recon; sid:200020610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure03-linkedin.4nmn.com"; classtype:attempted-recon; sid:200020611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure03a-chase6b.info"; classtype:attempted-recon; sid:200020612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure296.inmotionhosting.com"; classtype:attempted-recon; sid:200020613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure318.inmotionhosting.com"; classtype:attempted-recon; sid:200020614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure55.webhostinghub.com"; classtype:attempted-recon; sid:200020615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure6y-commonwealth.4nmn.com"; classtype:attempted-recon; sid:200020616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure7-sfr.fr"; classtype:attempted-recon; sid:200020617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securealert.xyz"; classtype:attempted-recon; sid:200020618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securecuserver.co.uk"; classtype:attempted-recon; sid:200020619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secured-message.outlook10.workers.dev"; classtype:attempted-recon; sid:200020620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secured-message1.outlook10.workers.dev"; classtype:attempted-recon; sid:200020621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securedocs-office365-onmicro000.myportfolio.com"; classtype:attempted-recon; sid:200020622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securefile.jennitai.workers.dev"; classtype:attempted-recon; sid:200020623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securegateway-ovhcloud.csl-sl.de"; classtype:attempted-recon; sid:200020624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securesforyourechcomms.weebly.com"; classtype:attempted-recon; sid:200020625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secureus.top"; classtype:attempted-recon; sid:200020626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-1000000006983265874926859836591.tk"; classtype:attempted-recon; sid:200020627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-1000000006983265874926859836592.tk"; classtype:attempted-recon; sid:200020628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-1000000006983265874926859836593.tk"; classtype:attempted-recon; sid:200020629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-1000000006983265874926859836594.tk"; classtype:attempted-recon; sid:200020630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-1000000006983265874926859836597.tk"; classtype:attempted-recon; sid:200020631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-1000000006983265874926859836598.tk"; classtype:attempted-recon; sid:200020632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-1000000006983265874926859836599.tk"; classtype:attempted-recon; sid:200020633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-6000000659846985642369874659461.tk"; classtype:attempted-recon; sid:200020634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-6000000659846985642369874659463.tk"; classtype:attempted-recon; sid:200020635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-6000000659846985642369874659466.tk"; classtype:attempted-recon; sid:200020636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-6000000659846985642369874659469.tk"; classtype:attempted-recon; sid:200020637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-80000025897465325984698466980.ml"; classtype:attempted-recon; sid:200020638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-80000025897465325984698466983.ml"; classtype:attempted-recon; sid:200020639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-80000025897465325984698466984.ml"; classtype:attempted-recon; sid:200020640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-80000025897465325984698466985.ml"; classtype:attempted-recon; sid:200020641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-80000025897465325984698466987.ml"; classtype:attempted-recon; sid:200020642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-80000025897465325984698466988.ml"; classtype:attempted-recon; sid:200020643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"security-page-community-standards.blogspot.com"; classtype:attempted-recon; sid:200020644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securityaccountprotection32564.rf.gd"; classtype:attempted-recon; sid:200020645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securityexit.260mb.net"; classtype:attempted-recon; sid:200020646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securityhypers0109-com.preview-domain.com"; classtype:attempted-recon; sid:200020647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securreofficedocument.mystrikingly.com"; classtype:attempted-recon; sid:200020648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sedekahchip1-5b.com"; classtype:attempted-recon; sid:200020649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"see-my-blog.com"; classtype:attempted-recon; sid:200020650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seed-uat-apple.com"; classtype:attempted-recon; sid:200020651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seehere.trainercentral.com"; classtype:attempted-recon; sid:200020652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"segafrit.uno"; classtype:attempted-recon; sid:200020653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"segubisa.0hi.me"; classtype:attempted-recon; sid:200020654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"segunda-serve.blogspot.com"; classtype:attempted-recon; sid:200020655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridad02662.webcindario.com"; classtype:attempted-recon; sid:200020656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridad0662.webcindario.com"; classtype:attempted-recon; sid:200020657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridad902290.webcindario.com"; classtype:attempted-recon; sid:200020658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridad904490.webcindario.com"; classtype:attempted-recon; sid:200020659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridad9097.webcindario.com"; classtype:attempted-recon; sid:200020660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridadbancaria.lubrdmgalicia.repl.co"; classtype:attempted-recon; sid:200020661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridadpspsqw.daviseguridd.repl.co"; classtype:attempted-recon; sid:200020662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguridatoken0.repl.co"; classtype:attempted-recon; sid:200020663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguroitservices.com"; classtype:attempted-recon; sid:200020664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguronacionalcr.ultimatefreehost.in"; classtype:attempted-recon; sid:200020665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seguropagoapp.hostfree.pw"; classtype:attempted-recon; sid:200020666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"segurosernestovillarreal.com"; classtype:attempted-recon; sid:200020667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"segvxd.j40nf89.cn"; classtype:attempted-recon; sid:200020668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sehdnszizo.duckdns.org"; classtype:attempted-recon; sid:200020669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seipl.eu"; classtype:attempted-recon; sid:200020670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seiyxykjun.duckdns.org"; classtype:attempted-recon; sid:200020671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sejsloao6181.liveblog365.com"; classtype:attempted-recon; sid:200020672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"selecciondeempleocr.webnode.cr"; classtype:attempted-recon; sid:200020673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"semanario7dias.com"; classtype:attempted-recon; sid:200020674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"semt.futminna.edu.ng"; classtype:attempted-recon; sid:200020675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"semtmdetpr.duckdns.org"; classtype:attempted-recon; sid:200020676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sendungsnachverfolgung6-chpost.work"; classtype:attempted-recon; sid:200020677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"senhbhlhku.duckdns.org"; classtype:attempted-recon; sid:200020678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sensdapps.firebaseapp.com"; classtype:attempted-recon; sid:200020679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sensdapps.web.app"; classtype:attempted-recon; sid:200020680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sentander.com.swtest.ru"; classtype:attempted-recon; sid:200020681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"senvang.com.au"; classtype:attempted-recon; sid:200020682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seobywebitindia.com"; classtype:attempted-recon; sid:200020683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seoservicesiox.firebaseapp.com"; classtype:attempted-recon; sid:200020684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seoservicesiox.web.app"; classtype:attempted-recon; sid:200020685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sep2020.sarsk.net"; classtype:attempted-recon; sid:200020686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seqdqdukxk.duckdns.org"; classtype:attempted-recon; sid:200020687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seqsdufizr.duckdns.org"; classtype:attempted-recon; sid:200020688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serch26.biz"; classtype:attempted-recon; sid:200020689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sereneinfantiledigits.inforbancolom.repl.co"; classtype:attempted-recon; sid:200020690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serfrtgtgrf.byethost9.com"; classtype:attempted-recon; sid:200020691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serpienteonline.com"; classtype:attempted-recon; sid:200020692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sertel.com.do"; classtype:attempted-recon; sid:200020693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sertyxese.myfreesites.net"; classtype:attempted-recon; sid:200020694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serv0spk.de"; classtype:attempted-recon; sid:200020695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servding-updates.dyndns.info"; classtype:attempted-recon; sid:200020696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server-4-collab.land"; classtype:attempted-recon; sid:200020697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server-data-20d8d.firebaseapp.com"; classtype:attempted-recon; sid:200020698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server-data-20d8d.web.app"; classtype:attempted-recon; sid:200020699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server-networksolutions.web.app"; classtype:attempted-recon; sid:200020700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servertechnicalnoticeimmestae-reconecting.pages.dev"; classtype:attempted-recon; sid:200020701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servic-4096.awuqohsjo9847.workers.dev"; classtype:attempted-recon; sid:200020702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicdelivery.com"; classtype:attempted-recon; sid:200020703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"service-kunden-bb2a57.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200020704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"service-online.world29892893vhost246833.lowhost.ru"; classtype:attempted-recon; sid:200020705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serviceadhelpmeta.firebaseapp.com"; classtype:attempted-recon; sid:200020706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serviceadhelpmeta.web.app"; classtype:attempted-recon; sid:200020707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicecheckupaccounted.com"; classtype:attempted-recon; sid:200020708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicedoc001.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200020709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicefbhelpmeta.firebaseapp.com"; classtype:attempted-recon; sid:200020710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicefbhelpmeta.web.app"; classtype:attempted-recon; sid:200020711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicemms.weezbe.com"; classtype:attempted-recon; sid:200020712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicepage.service-page.workers.dev"; classtype:attempted-recon; sid:200020713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicepublics.info"; classtype:attempted-recon; sid:200020714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serviceresetaccount.ddns.net"; classtype:attempted-recon; sid:200020715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"services-enligne-web-ba84b3.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200020716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"services-lnfoguide.de"; classtype:attempted-recon; sid:200020717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"services.oldschool.com-as.cz"; classtype:attempted-recon; sid:200020718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicesbancaire.com"; classtype:attempted-recon; sid:200020719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicesupsshipping.com"; classtype:attempted-recon; sid:200020720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicioalclientebn.com"; classtype:attempted-recon; sid:200020721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicios.galahomeban.repl.co"; classtype:attempted-recon; sid:200020722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"serviciosegurit.repl.co"; classtype:attempted-recon; sid:200020723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servics.validationsecuradm.workers.dev"; classtype:attempted-recon; sid:200020724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servisaludec.com"; classtype:attempted-recon; sid:200020725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servizio-spedizioni-bp.com"; classtype:attempted-recon; sid:200020726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servmailclient2.duckdns.org"; classtype:attempted-recon; sid:200020727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servmailclient5.duckdns.org"; classtype:attempted-recon; sid:200020728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sesmugppkn.duckdns.org"; classtype:attempted-recon; sid:200020729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"setcezwept.duckdns.org"; classtype:attempted-recon; sid:200020730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"setda.tabalongkab.go.id"; classtype:attempted-recon; sid:200020731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"setupmynorton.square.site"; classtype:attempted-recon; sid:200020732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"setupyouraccounts.com"; classtype:attempted-recon; sid:200020733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seuihkgavi.duckdns.org"; classtype:attempted-recon; sid:200020734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seul.unilurio.ac.mz"; classtype:attempted-recon; sid:200020735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sevenlee-it-solutions.com"; classtype:attempted-recon; sid:200020736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sevenmaxguns.com"; classtype:attempted-recon; sid:200020737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sezionecarte.com"; classtype:attempted-recon; sid:200020738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sf.7nbmhzs.cn"; classtype:attempted-recon; sid:200020739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sf.eclafvg.cn"; classtype:attempted-recon; sid:200020740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfb.cfkreer.cn"; classtype:attempted-recon; sid:200020741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfbjtdbnhx.duckdns.org"; classtype:attempted-recon; sid:200020742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfc.com.vn"; classtype:attempted-recon; sid:200020743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfc.fruxcmk.cn"; classtype:attempted-recon; sid:200020744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sffxwszcaq.duckdns.org"; classtype:attempted-recon; sid:200020745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfggh.qqhhq.cn"; classtype:attempted-recon; sid:200020746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfgh.hsgfchffy.cn"; classtype:attempted-recon; sid:200020747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfghvn.55bfqx.cn"; classtype:attempted-recon; sid:200020748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfgvvanzze.duckdns.org"; classtype:attempted-recon; sid:200020749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfhvzxbdfi.duckdns.org"; classtype:attempted-recon; sid:200020750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfirstrepublic.coms.cso.gov.tt"; classtype:attempted-recon; sid:200020751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfjlowaobu.duckdns.org"; classtype:attempted-recon; sid:200020752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfnlcptpkc.duckdns.org"; classtype:attempted-recon; sid:200020753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfoevsgran.duckdns.org"; classtype:attempted-recon; sid:200020754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfqkscznwr.duckdns.org"; classtype:attempted-recon; sid:200020755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfqoacmzjg.duckdns.org"; classtype:attempted-recon; sid:200020756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfr-contact.fr"; classtype:attempted-recon; sid:200020757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfr-forfait.fr"; classtype:attempted-recon; sid:200020758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfr-telephone.fr"; classtype:attempted-recon; sid:200020759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfr.espace-verification.com"; classtype:attempted-recon; sid:200020760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfrpanel.lws.fr"; classtype:attempted-recon; sid:200020761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sfxsdf.hyperphp.com"; classtype:attempted-recon; sid:200020762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgebpqhmqb.duckdns.org"; classtype:attempted-recon; sid:200020763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgghh.0nnjmvn.cn"; classtype:attempted-recon; sid:200020764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgghh.mppuubj.cn"; classtype:attempted-recon; sid:200020765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgiaeyfnse.duckdns.org"; classtype:attempted-recon; sid:200020766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgljszogke.duckdns.org"; classtype:attempted-recon; sid:200020767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgoouauqnf.duckdns.org"; classtype:attempted-recon; sid:200020768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgpfsyavsz.duckdns.org"; classtype:attempted-recon; sid:200020769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgsgtshpvk.duckdns.org"; classtype:attempted-recon; sid:200020770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgtbalde991-dot-still-dynamics-321006.ue.r.appspot.com"; classtype:attempted-recon; sid:200020771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgumshcucl.duckdns.org"; classtype:attempted-recon; sid:200020772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgxhc.6fiui8.cn"; classtype:attempted-recon; sid:200020773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgxhx.mkkwxew.cn"; classtype:attempted-recon; sid:200020774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgxjagmqya.duckdns.org"; classtype:attempted-recon; sid:200020775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sgxr.zwrq1tu.cn"; classtype:attempted-recon; sid:200020776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sh.mfuture.co"; classtype:attempted-recon; sid:200020777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shabbywebsites.67bdp.repl.co"; classtype:attempted-recon; sid:200020778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shahjis.com"; classtype:attempted-recon; sid:200020779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shakibaart.com"; classtype:attempted-recon; sid:200020780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shanky0.github.io"; classtype:attempted-recon; sid:200020781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"share-eu1.hsforms.com"; classtype:attempted-recon; sid:200020782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"share-file-drive-device-local-disk.firebaseapp.com"; classtype:attempted-recon; sid:200020783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"share-file-drive-device-local-disk.web.app"; classtype:attempted-recon; sid:200020784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"share-file-login-pdf.firebaseapp.com"; classtype:attempted-recon; sid:200020785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"share-file-login-pdf.web.app"; classtype:attempted-recon; sid:200020786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"share-file-view-folder.firebaseapp.com"; classtype:attempted-recon; sid:200020787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"share.ebforms.com"; classtype:attempted-recon; sid:200020788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-cloud-preview.post-confirmation.workers.dev"; classtype:attempted-recon; sid:200020789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-cloud-project.reading-voicee.workers.dev"; classtype:attempted-recon; sid:200020790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-email-files.documents-project.workers.dev"; classtype:attempted-recon; sid:200020791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-files.dhaafand.workers.dev"; classtype:attempted-recon; sid:200020792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-files.messseg.workers.dev"; classtype:attempted-recon; sid:200020793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-folder-private.nhilenhil.workers.dev"; classtype:attempted-recon; sid:200020794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-private-folder.head-chat.workers.dev"; classtype:attempted-recon; sid:200020795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-private.files-auuth.workers.dev"; classtype:attempted-recon; sid:200020796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared.0294823229453195849205827592018491.workers.dev"; classtype:attempted-recon; sid:200020797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared.privatte-document.workers.dev"; classtype:attempted-recon; sid:200020798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharedfax815201376.wordpress.com"; classtype:attempted-recon; sid:200020799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharedfiles.officesharedfile5be386971041e60c041f4217230df1b2.workers.dev"; classtype:attempted-recon; sid:200020800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharedonline.myportfolio.com"; classtype:attempted-recon; sid:200020801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharedpointonlineauthentication.netlify.app"; classtype:attempted-recon; sid:200020802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharefilepoints343.myportfolio.com"; classtype:attempted-recon; sid:200020803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepixel2safe.myportfolio.com"; classtype:attempted-recon; sid:200020804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepoint.hi-old.workers.dev"; classtype:attempted-recon; sid:200020805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepoint.timelessincome.com"; classtype:attempted-recon; sid:200020806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepointdocsecure.myportfolio.com"; classtype:attempted-recon; sid:200020807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepointdrives6352.myportfolio.com"; classtype:attempted-recon; sid:200020808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepointoffice-365.myportfolio.com"; classtype:attempted-recon; sid:200020809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepointoutlookoffice.myportfolio.com"; classtype:attempted-recon; sid:200020810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepoints-viewoffice365.myportfolio.com"; classtype:attempted-recon; sid:200020811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepointsviewoffficer.myportfolio.com"; classtype:attempted-recon; sid:200020812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharepointvi726.myportfolio.com"; classtype:attempted-recon; sid:200020813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sharestion.com"; classtype:attempted-recon; sid:200020814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shbluwjfqp.duckdns.org"; classtype:attempted-recon; sid:200020815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shedaovacc.duckdns.org"; classtype:attempted-recon; sid:200020816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shee35.pages.dev"; classtype:attempted-recon; sid:200020817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sheet.invoice-remit-advance.workers.dev"; classtype:attempted-recon; sid:200020818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shein-com.com"; classtype:attempted-recon; sid:200020819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shein-us.com"; classtype:attempted-recon; sid:200020820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shein.ooc2.com"; classtype:attempted-recon; sid:200020821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sheinimporter.com"; classtype:attempted-recon; sid:200020822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sheinpromo.company.site"; classtype:attempted-recon; sid:200020823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sheinsize.com"; classtype:attempted-recon; sid:200020824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shiaondpenialodns.tk"; classtype:attempted-recon; sid:200020825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shibaswap.mypixieset.com"; classtype:attempted-recon; sid:200020826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shienbr.com"; classtype:attempted-recon; sid:200020827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shikimei.jp"; classtype:attempted-recon; sid:200020828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shiny-sound-a24a.rcvrysrvce.workers.dev"; classtype:attempted-recon; sid:200020829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shinybiodegradableshareware.aviso00.repl.co"; classtype:attempted-recon; sid:200020830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shipment-post-at.apolline-voyance.com"; classtype:attempted-recon; sid:200020831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shipp-udspscalculatoidshiptracksrvice3.oznemedya.com"; classtype:attempted-recon; sid:200020832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shipping.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200020833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shkzegydbz.duckdns.org"; classtype:attempted-recon; sid:200020834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shmqxraruy.duckdns.org"; classtype:attempted-recon; sid:200020835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shmxssjwfi.duckdns.org"; classtype:attempted-recon; sid:200020836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shn.pfstrau.cn"; classtype:attempted-recon; sid:200020837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shop.fixyourdirtbike.com"; classtype:attempted-recon; sid:200020838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopboodles.com"; classtype:attempted-recon; sid:200020839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopeecoins.blogspot.com"; classtype:attempted-recon; sid:200020840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopeeday2022.blogspot.com"; classtype:attempted-recon; sid:200020841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopfrontservices.coffeecup.com"; classtype:attempted-recon; sid:200020842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopmidassbuy.my.id"; classtype:attempted-recon; sid:200020843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopolx-product.8900076.xyz"; classtype:attempted-recon; sid:200020844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"short.mypaste.fun"; classtype:attempted-recon; sid:200020845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"short.upm.es"; classtype:attempted-recon; sid:200020846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shorturl-ddc.moph.go.th"; classtype:attempted-recon; sid:200020847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shorturl.ac"; classtype:attempted-recon; sid:200020848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shorturl.ae"; classtype:attempted-recon; sid:200020849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shr-sharedfile-file.firebaseapp.com"; classtype:attempted-recon; sid:200020850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shr-sharedfile-file.web.app"; classtype:attempted-recon; sid:200020851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shreebuildcon.in"; classtype:attempted-recon; sid:200020852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shrill-flower-70e7.wearesre.workers.dev"; classtype:attempted-recon; sid:200020853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shrill-waterfall-e99f.mooreslaw.workers.dev"; classtype:attempted-recon; sid:200020854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shrill.nxazenom.workers.dev"; classtype:attempted-recon; sid:200020855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shsksbnorl.duckdns.org"; classtype:attempted-recon; sid:200020856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shuixshuu.ml"; classtype:attempted-recon; sid:200020857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shutterislandsid2.blogspot.com"; classtype:attempted-recon; sid:200020858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shutterislandsid4.blogspot.com"; classtype:attempted-recon; sid:200020859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siatamask.com"; classtype:attempted-recon; sid:200020860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siayu.indramayukab.go.id"; classtype:attempted-recon; sid:200020861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sicheresloginservice.dyndns.info"; classtype:attempted-recon; sid:200020862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sichonwflq.duckdns.org"; classtype:attempted-recon; sid:200020863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sicurezzaapp-bper.000webhostapp.com"; classtype:attempted-recon; sid:200020864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sid-amiaz0on.xyz"; classtype:attempted-recon; sid:200020865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siddiquelawassociates.com"; classtype:attempted-recon; sid:200020866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siempredavivienda.davivienda3.repl.co"; classtype:attempted-recon; sid:200020867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siempredelamano.atwebpages.com"; classtype:attempted-recon; sid:200020868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sigjkusqgi.duckdns.org"; classtype:attempted-recon; sid:200020869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sign-in-verification-929bb.web.app"; classtype:attempted-recon; sid:200020870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"signedlines.wavoto.com"; classtype:attempted-recon; sid:200020871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"signgalicia.signgalicia.repl.co"; classtype:attempted-recon; sid:200020872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"signinaccntsrvcssprtos.comoejiwutriesite.com"; classtype:attempted-recon; sid:200020873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"signup.media-spire.com"; classtype:attempted-recon; sid:200020874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sigulemada.web.app"; classtype:attempted-recon; sid:200020875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sihjbglolp.duckdns.org"; classtype:attempted-recon; sid:200020876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"silahkan-pulihkan-akun-anda02.weeblysite.com"; classtype:attempted-recon; sid:200020877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"silent-snowflake-0170.signeddocs.workers.dev"; classtype:attempted-recon; sid:200020878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siliconescuritiba.com.br"; classtype:attempted-recon; sid:200020879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simgeprek.blitarkota.go.id"; classtype:attempted-recon; sid:200020880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simiandme.com"; classtype:attempted-recon; sid:200020881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simmonrealestate.com"; classtype:attempted-recon; sid:200020882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simpkk.karanganyarkab.go.id"; classtype:attempted-recon; sid:200020883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simplissimot.com"; classtype:attempted-recon; sid:200020884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simplybeyoutiful.org"; classtype:attempted-recon; sid:200020885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"simranarts.com"; classtype:attempted-recon; sid:200020886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sincherelink.mymom.info"; classtype:attempted-recon; sid:200020887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"singes.es"; classtype:attempted-recon; sid:200020888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sinkeffect.info"; classtype:attempted-recon; sid:200020889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sinren.com.tw"; classtype:attempted-recon; sid:200020890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siporados15585.blogspot.com"; classtype:attempted-recon; sid:200020891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sisale.2022outletsdiscount.ru"; classtype:attempted-recon; sid:200020892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sistema-ebrou.userebrou.repl.co"; classtype:attempted-recon; sid:200020893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sistemaverde.cl"; classtype:attempted-recon; sid:200020894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sistemel.com"; classtype:attempted-recon; sid:200020895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitbwyswdx.duckdns.org"; classtype:attempted-recon; sid:200020896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site-4403463-3995-6112.mystrikingly.com"; classtype:attempted-recon; sid:200020897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9423623.92.webydo.com"; classtype:attempted-recon; sid:200020898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9423773.92.webydo.com"; classtype:attempted-recon; sid:200020899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9434107.92.webydo.com"; classtype:attempted-recon; sid:200020900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9548676.92.webydo.com"; classtype:attempted-recon; sid:200020901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9551459.92.webydo.com"; classtype:attempted-recon; sid:200020902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9552191.92.webydo.com"; classtype:attempted-recon; sid:200020903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9606042.92.webydo.com"; classtype:attempted-recon; sid:200020904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9607677.92.webydo.com"; classtype:attempted-recon; sid:200020905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"site9608556.92.webydo.com"; classtype:attempted-recon; sid:200020906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siteatendimento.shop"; classtype:attempted-recon; sid:200020907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder156673.dynadot.com"; classtype:attempted-recon; sid:200020908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder157806.dynadot.com"; classtype:attempted-recon; sid:200020909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder159641.dynadot.com"; classtype:attempted-recon; sid:200020910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder161703.dynadot.com"; classtype:attempted-recon; sid:200020911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder162459.dynadot.com"; classtype:attempted-recon; sid:200020912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder162846.dynadot.com"; classtype:attempted-recon; sid:200020913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder163125.dynadot.com"; classtype:attempted-recon; sid:200020914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder163841.dynadot.com"; classtype:attempted-recon; sid:200020915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder165325.dynadot.com"; classtype:attempted-recon; sid:200020916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder165385.dynadot.com"; classtype:attempted-recon; sid:200020917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder165745.dynadot.com"; classtype:attempted-recon; sid:200020918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder167178.dynadot.com"; classtype:attempted-recon; sid:200020919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder170515.dynadot.com"; classtype:attempted-recon; sid:200020920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder170603.dynadot.com"; classtype:attempted-recon; sid:200020921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder170875.dynadot.com"; classtype:attempted-recon; sid:200020922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171050.dynadot.com"; classtype:attempted-recon; sid:200020923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171156.dynadot.com"; classtype:attempted-recon; sid:200020924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171220.dynadot.com"; classtype:attempted-recon; sid:200020925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171269.dynadot.com"; classtype:attempted-recon; sid:200020926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171476.dynadot.com"; classtype:attempted-recon; sid:200020927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171681.dynadot.com"; classtype:attempted-recon; sid:200020928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171774.dynadot.com"; classtype:attempted-recon; sid:200020929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171775.dynadot.com"; classtype:attempted-recon; sid:200020930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder171864.dynadot.com"; classtype:attempted-recon; sid:200020931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172150.dynadot.com"; classtype:attempted-recon; sid:200020932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172159.dynadot.com"; classtype:attempted-recon; sid:200020933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172173.dynadot.com"; classtype:attempted-recon; sid:200020934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172188.dynadot.com"; classtype:attempted-recon; sid:200020935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172240.dynadot.com"; classtype:attempted-recon; sid:200020936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172579.dynadot.com"; classtype:attempted-recon; sid:200020937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172593.dynadot.com"; classtype:attempted-recon; sid:200020938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172763.dynadot.com"; classtype:attempted-recon; sid:200020939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172771.dynadot.com"; classtype:attempted-recon; sid:200020940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172784.dynadot.com"; classtype:attempted-recon; sid:200020941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172838.dynadot.com"; classtype:attempted-recon; sid:200020942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder172939.dynadot.com"; classtype:attempted-recon; sid:200020943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173021.dynadot.com"; classtype:attempted-recon; sid:200020944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173065.dynadot.com"; classtype:attempted-recon; sid:200020945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173103.dynadot.com"; classtype:attempted-recon; sid:200020946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173124.dynadot.com"; classtype:attempted-recon; sid:200020947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173127.dynadot.com"; classtype:attempted-recon; sid:200020948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173265.dynadot.com"; classtype:attempted-recon; sid:200020949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173326.dynadot.com"; classtype:attempted-recon; sid:200020950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder173340.dynadot.com"; classtype:attempted-recon; sid:200020951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder174076.dynadot.com"; classtype:attempted-recon; sid:200020952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder174713.dynadot.com"; classtype:attempted-recon; sid:200020953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder174827.dynadot.com"; classtype:attempted-recon; sid:200020954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitebuilder175112.dynadot.com"; classtype:attempted-recon; sid:200020955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitemap.pancakesvqp.com"; classtype:attempted-recon; sid:200020956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sitioseguroweb.sitioseguroweb.repl.co"; classtype:attempted-recon; sid:200020957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sivetgjcsk.duckdns.org"; classtype:attempted-recon; sid:200020958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sivxepmipw.duckdns.org"; classtype:attempted-recon; sid:200020959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"siwjkuxpso.duckdns.org"; classtype:attempted-recon; sid:200020960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sixvhdrmss.duckdns.org"; classtype:attempted-recon; sid:200020961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjgaxtjxsu.duckdns.org"; classtype:attempted-recon; sid:200020962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjgpqscwfg.duckdns.org"; classtype:attempted-recon; sid:200020963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjhhskbxxe.duckdns.org"; classtype:attempted-recon; sid:200020964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjieddwwyg.duckdns.org"; classtype:attempted-recon; sid:200020965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjioauxmzo.duckdns.org"; classtype:attempted-recon; sid:200020966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjiuteptlw.duckdns.org"; classtype:attempted-recon; sid:200020967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjrtp-proxy.marketopreview.com"; classtype:attempted-recon; sid:200020968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skbfkzzjgt.duckdns.org"; classtype:attempted-recon; sid:200020969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skbndfcnuk.duckdns.org"; classtype:attempted-recon; sid:200020970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skdjzfaxar.duckdns.org"; classtype:attempted-recon; sid:200020971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skelyehztc.duckdns.org"; classtype:attempted-recon; sid:200020972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skinbid.biz.pl"; classtype:attempted-recon; sid:200020973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skinbid.org.es"; classtype:attempted-recon; sid:200020974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skipthaganes.com"; classtype:attempted-recon; sid:200020975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skiqthegames.com"; classtype:attempted-recon; sid:200020976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sklepkody.pl"; classtype:attempted-recon; sid:200020977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skmhrptqbx.duckdns.org"; classtype:attempted-recon; sid:200020978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skovogakrr.duckdns.org"; classtype:attempted-recon; sid:200020979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skqimqthwe.duckdns.org"; classtype:attempted-recon; sid:200020980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skroc.net"; classtype:attempted-recon; sid:200020981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skxzabgtix.duckdns.org"; classtype:attempted-recon; sid:200020982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sky-authenticate.firebaseapp.com"; classtype:attempted-recon; sid:200020983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sky-authenticate.web.app"; classtype:attempted-recon; sid:200020984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skyblueenterprises.co"; classtype:attempted-recon; sid:200020985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skyfixers.com"; classtype:attempted-recon; sid:200020986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skymavis-ticket.ink"; classtype:attempted-recon; sid:200020987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skymavisreports.com"; classtype:attempted-recon; sid:200020988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sl18839399.liveblog365.com"; classtype:attempted-recon; sid:200020989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slcdnenedm.duckdns.org"; classtype:attempted-recon; sid:200020990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slcgkbehle.duckdns.org"; classtype:attempted-recon; sid:200020991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slcksorftq.duckdns.org"; classtype:attempted-recon; sid:200020992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sleepmaskz.com"; classtype:attempted-recon; sid:200020993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slhiraibjf.duckdns.org"; classtype:attempted-recon; sid:200020994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slhtzgcbfc.duckdns.org"; classtype:attempted-recon; sid:200020995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slhvjgseim.duckdns.org"; classtype:attempted-recon; sid:200020996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slicktech8.com"; classtype:attempted-recon; sid:200020997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sljeamzank.duckdns.org"; classtype:attempted-recon; sid:200020998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sljzzjppkh.duckdns.org"; classtype:attempted-recon; sid:200020999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slkebtscuo.duckdns.org"; classtype:attempted-recon; sid:200021000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slmkufeckf.jon-jensen.workers.dev"; classtype:attempted-recon; sid:200021001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slngqicczs.duckdns.org"; classtype:attempted-recon; sid:200021002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slosansqsf.duckdns.org"; classtype:attempted-recon; sid:200021003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slowlinebag.jp"; classtype:attempted-recon; sid:200021004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slsnvyufcv.duckdns.org"; classtype:attempted-recon; sid:200021005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slutbweeuo.duckdns.org"; classtype:attempted-recon; sid:200021006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slutkissgirls.com"; classtype:attempted-recon; sid:200021007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"slwhhpaehd.duckdns.org"; classtype:attempted-recon; sid:200021008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sm777.csb.app"; classtype:attempted-recon; sid:200021009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smal.lu"; classtype:attempted-recon; sid:200021010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"small-disk-48bc.f57ny24z.workers.dev"; classtype:attempted-recon; sid:200021011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"small-dust-6c63.pontufbksd.workers.dev"; classtype:attempted-recon; sid:200021012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"small-rice-d2df.wadestones.workers.dev"; classtype:attempted-recon; sid:200021013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smart-aqua.es"; classtype:attempted-recon; sid:200021014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartbitesizedkeyboard.preapsfkapsop.repl.co"; classtype:attempted-recon; sid:200021015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartbperweb.q-exclusive.com"; classtype:attempted-recon; sid:200021016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartchaindefi.com"; classtype:attempted-recon; sid:200021017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartfix-dapps.com"; classtype:attempted-recon; sid:200021018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartgridsweek.com"; classtype:attempted-recon; sid:200021019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartmom.com.bd"; classtype:attempted-recon; sid:200021020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartstep.io"; classtype:attempted-recon; sid:200021021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smbc-caesasoerd.smbc-cacard.qivv8z.icu"; classtype:attempted-recon; sid:200021022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smbc-cardouhg.com"; classtype:attempted-recon; sid:200021023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smbc-uetujbg.com"; classtype:attempted-recon; sid:200021024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smbc-urbkdfhg.com"; classtype:attempted-recon; sid:200021025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smbccard-jp.com"; classtype:attempted-recon; sid:200021026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smbrkx554k.vip"; classtype:attempted-recon; sid:200021027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smcd.amassssmed.culgfn.top"; classtype:attempted-recon; sid:200021028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smcovhq.top"; classtype:attempted-recon; sid:200021029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smepp.uninp.edu.rs"; classtype:attempted-recon; sid:200021030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smgnwemoxo.duckdns.org"; classtype:attempted-recon; sid:200021031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smgolamalif.github.io"; classtype:attempted-recon; sid:200021032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smhgshhzvr.duckdns.org"; classtype:attempted-recon; sid:200021033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smi.onlygfpics.com"; classtype:attempted-recon; sid:200021034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smkkesehatanjember.sch.id"; classtype:attempted-recon; sid:200021035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sml1s.hyperphp.com"; classtype:attempted-recon; sid:200021036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smlzvhycjf.duckdns.org"; classtype:attempted-recon; sid:200021037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smquvoytwa.duckdns.org"; classtype:attempted-recon; sid:200021038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smsenligne.myfreesites.net"; classtype:attempted-recon; sid:200021039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smsmms.flazio.com"; classtype:attempted-recon; sid:200021040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smsorangephonemail.myfreesites.net"; classtype:attempted-recon; sid:200021041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smsorangesmsmessage.myfreesites.net"; classtype:attempted-recon; sid:200021042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smsverificationmms.myfreesites.net"; classtype:attempted-recon; sid:200021043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smvrzvqrnw.duckdns.org"; classtype:attempted-recon; sid:200021044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smyafhaahf.duckdns.org"; classtype:attempted-recon; sid:200021045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smzeadaryu.duckdns.org"; classtype:attempted-recon; sid:200021046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sn-066660.ultimatefreehost.in"; classtype:attempted-recon; sid:200021047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sn-28273739.ihostfull.com"; classtype:attempted-recon; sid:200021048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sn0010192920.byethost5.com"; classtype:attempted-recon; sid:200021049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sn01002900.byethost5.com"; classtype:attempted-recon; sid:200021050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sn28393030.liveblog365.com"; classtype:attempted-recon; sid:200021051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sn91892939.byethost15.com"; classtype:attempted-recon; sid:200021052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snbcvertess.firebaseapp.com"; classtype:attempted-recon; sid:200021053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snbcvertess.web.app"; classtype:attempted-recon; sid:200021054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sndkleqeyq.duckdns.org"; classtype:attempted-recon; sid:200021055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sndyfkrjct.duckdns.org"; classtype:attempted-recon; sid:200021056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sngnwgeuwc.duckdns.org"; classtype:attempted-recon; sid:200021057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snijpfkvll.duckdns.org"; classtype:attempted-recon; sid:200021058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sniyxyjtrt.duckdns.org"; classtype:attempted-recon; sid:200021059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snkwzfyuby.duckdns.org"; classtype:attempted-recon; sid:200021060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snn919200390.liveblog365.com"; classtype:attempted-recon; sid:200021061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snourbrkek.duckdns.org"; classtype:attempted-recon; sid:200021062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snowy-recipbaf.f57ny24z.workers.dev"; classtype:attempted-recon; sid:200021063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snowy-sun-5b1e.tobyshan.workers.dev"; classtype:attempted-recon; sid:200021064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snowy-viol.topijerami.workers.dev"; classtype:attempted-recon; sid:200021065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snrjynflyn.duckdns.org"; classtype:attempted-recon; sid:200021066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snt-manometr.ru"; classtype:attempted-recon; sid:200021067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snudbxzhvk.duckdns.org"; classtype:attempted-recon; sid:200021068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snusbase.com"; classtype:attempted-recon; sid:200021069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"snwbathzxr.duckdns.org"; classtype:attempted-recon; sid:200021070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"so932809.webcindario.com"; classtype:attempted-recon; sid:200021071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soanse92.pages.dev"; classtype:attempted-recon; sid:200021072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soazkvanyj.duckdns.org"; classtype:attempted-recon; sid:200021073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sobresercorpo.com.br"; classtype:attempted-recon; sid:200021074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"socialinfluencer.co.place"; classtype:attempted-recon; sid:200021075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"socialresponsemarketing.com"; classtype:attempted-recon; sid:200021076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"societe-generale-login.firebaseapp.com"; classtype:attempted-recon; sid:200021077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"societe-generale-login.web.app"; classtype:attempted-recon; sid:200021078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"socnyustbt.duckdns.org"; classtype:attempted-recon; sid:200021079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sofe-firma.firebaseapp.com"; classtype:attempted-recon; sid:200021080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sofiacostashoes.pt"; classtype:attempted-recon; sid:200021081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soft-dus9ef.2prl88i2.workers.dev"; classtype:attempted-recon; sid:200021082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soft-waterfall-85d3.henhigay285.workers.dev"; classtype:attempted-recon; sid:200021083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"softbonbxx.duckdns.org"; classtype:attempted-recon; sid:200021084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sol-refund.com"; classtype:attempted-recon; sid:200021085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solanaforfree.top"; classtype:attempted-recon; sid:200021086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solanahackerhouse.com"; classtype:attempted-recon; sid:200021087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solanatimes.io"; classtype:attempted-recon; sid:200021088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solanaverse.info"; classtype:attempted-recon; sid:200021089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solawi-edlendorf.de"; classtype:attempted-recon; sid:200021090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soliascan.work"; classtype:attempted-recon; sid:200021091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solicitaloaquimomasperu.b-cdn.net"; classtype:attempted-recon; sid:200021092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solicitudprestamoalinstante-lbkperu.com"; classtype:attempted-recon; sid:200021093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solitar.tempetahu.workers.dev"; classtype:attempted-recon; sid:200021094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solitary-butterfly-f885.execuisine672.workers.dev"; classtype:attempted-recon; sid:200021095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solitary-shape-8829.on.fleek.co"; classtype:attempted-recon; sid:200021096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solitary-woods.a30u7ihn.workers.dev"; classtype:attempted-recon; sid:200021097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solucao-para-todos.com"; classtype:attempted-recon; sid:200021098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solucaodigital-online.blogspot.com"; classtype:attempted-recon; sid:200021099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solucionesach.com"; classtype:attempted-recon; sid:200021100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solucionesnelineapyitau.onlinepyita4u.repl.co"; classtype:attempted-recon; sid:200021101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solucoes-para-nos.com"; classtype:attempted-recon; sid:200021102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solucoesr3.sslblindado.com"; classtype:attempted-recon; sid:200021103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"somdrmptze.duckdns.org"; classtype:attempted-recon; sid:200021104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"somosagostoahora.anvmudaseplantas.com.br"; classtype:attempted-recon; sid:200021105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sonygvzxql.duckdns.org"; classtype:attempted-recon; sid:200021106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soobppkbov.duckdns.org"; classtype:attempted-recon; sid:200021107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soodgndleh.duckdns.org"; classtype:attempted-recon; sid:200021108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sopac.org.py"; classtype:attempted-recon; sid:200021109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sopbant44546.webcindario.com"; classtype:attempted-recon; sid:200021110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sopo4873298.webcindario.com"; classtype:attempted-recon; sid:200021111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soportebanco.webcindario.com"; classtype:attempted-recon; sid:200021112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soportedefirmadigital.webnode.cr"; classtype:attempted-recon; sid:200021113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soportenlineadaviviendaco.asistencidavi.repl.co"; classtype:attempted-recon; sid:200021114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sorjkxyjfh.duckdns.org"; classtype:attempted-recon; sid:200021115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sosfresh3sdf.webcindario.com"; classtype:attempted-recon; sid:200021116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sottqxeriw.duckdns.org"; classtype:attempted-recon; sid:200021117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"souaxwaoh.myfreesites.net"; classtype:attempted-recon; sid:200021118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soulbound.app"; classtype:attempted-recon; sid:200021119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soumya252000.github.io"; classtype:attempted-recon; sid:200021120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"southamerica-east1-clean-algebra-356021.cloudfunctions.net"; classtype:attempted-recon; sid:200021121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"southamerica-east1-hardy-magpie-334101.cloudfunctions.net"; classtype:attempted-recon; sid:200021122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"southamerica-east1-noted-minutia-330211.cloudfunctions.net"; classtype:attempted-recon; sid:200021123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"southamerica-east1-semiotic-karma-356909.cloudfunctions.net"; classtype:attempted-recon; sid:200021124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"southbaywedding.com"; classtype:attempted-recon; sid:200021125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sovdbabcud.duckdns.org"; classtype:attempted-recon; sid:200021126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soybacalar.com"; classtype:attempted-recon; sid:200021127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sp-ids.de"; classtype:attempted-recon; sid:200021128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sp379189.sitebeat.crazydomains.com"; classtype:attempted-recon; sid:200021129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sp477389.sitebeat.site"; classtype:attempted-recon; sid:200021130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sp869496.sitebeat.crazydomains.com"; classtype:attempted-recon; sid:200021131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spacegame.tech"; classtype:attempted-recon; sid:200021132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spar-kundenportal-aktivierung.com"; classtype:attempted-recon; sid:200021133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparebnkupdate-rackel193800.codeanyapp.com"; classtype:attempted-recon; sid:200021134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkase-einloggen.xyz"; classtype:attempted-recon; sid:200021135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkase-hauptmenu.xyz"; classtype:attempted-recon; sid:200021136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse-finanzportal.de"; classtype:attempted-recon; sid:200021137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse-holstein.cloud"; classtype:attempted-recon; sid:200021138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse-personendaten.de"; classtype:attempted-recon; sid:200021139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse-proton.de"; classtype:attempted-recon; sid:200021140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.allgemeine-geschaeftsbedinungen.info"; classtype:attempted-recon; sid:200021141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.de-checking-3007.xyz"; classtype:attempted-recon; sid:200021142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.de-checking-3021.xyz"; classtype:attempted-recon; sid:200021143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.de-checking-5008.xyz"; classtype:attempted-recon; sid:200021144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.de-checking-8003.xyz"; classtype:attempted-recon; sid:200021145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.de-server8.club"; classtype:attempted-recon; sid:200021146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.de.edu-yy.com"; classtype:attempted-recon; sid:200021147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkasse.de.finanzportal.to"; classtype:attempted-recon; sid:200021148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkling-bar-cbbd.onedriveonline1617.workers.dev"; classtype:attempted-recon; sid:200021149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkling-glitter-159f.scrtygdjahg.workers.dev"; classtype:attempted-recon; sid:200021150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparkling-rice-5e44.rockymtmgt969.workers.dev"; classtype:attempted-recon; sid:200021151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparklogistics.com.ua"; classtype:attempted-recon; sid:200021152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sparxinteriors.co.zw"; classtype:attempted-recon; sid:200021153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spcdaklak.com"; classtype:attempted-recon; sid:200021154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spd-login-site.mymom.info"; classtype:attempted-recon; sid:200021155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spdpkcxlmf.duckdns.org"; classtype:attempted-recon; sid:200021156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spectrumstorageaccess.yahoosites.com"; classtype:attempted-recon; sid:200021157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spedizionecard.com"; classtype:attempted-recon; sid:200021158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spedizionepay.com"; classtype:attempted-recon; sid:200021159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spemail5.online"; classtype:attempted-recon; sid:200021160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spentamultimedia.com"; classtype:attempted-recon; sid:200021161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spenupcjoi.duckdns.org"; classtype:attempted-recon; sid:200021162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spherefiinance.com"; classtype:attempted-recon; sid:200021163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spicyonlinebankigarg.accoungalica.repl.co"; classtype:attempted-recon; sid:200021164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spincat.lucky-mint.live"; classtype:attempted-recon; sid:200021165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spinroyalem11.com"; classtype:attempted-recon; sid:200021166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spirecg.corsetul-boston.ro"; classtype:attempted-recon; sid:200021167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spiritswap-gow.blogspot.com"; classtype:attempted-recon; sid:200021168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-aktivierung.de"; classtype:attempted-recon; sid:200021169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-chip-umstellung.com"; classtype:attempted-recon; sid:200021170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-finanzgruppe.de.dkb-de-bamking-sessionid-truelogin-save.ru"; classtype:attempted-recon; sid:200021171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-info.net"; classtype:attempted-recon; sid:200021172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-push.de"; classtype:attempted-recon; sid:200021173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-push.info"; classtype:attempted-recon; sid:200021174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-ssk-ksk-lsk-de.info"; classtype:attempted-recon; sid:200021175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk-uebersicht.info"; classtype:attempted-recon; sid:200021176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk.24stunden-supportde.de"; classtype:attempted-recon; sid:200021177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk.customersde-support24.de"; classtype:attempted-recon; sid:200021178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk.deguidesrv-customers.de"; classtype:attempted-recon; sid:200021179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk.guidesrv-infode.de"; classtype:attempted-recon; sid:200021180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk.srverguidede-lnfoger.de"; classtype:attempted-recon; sid:200021181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk.srvguide-servicede.de"; classtype:attempted-recon; sid:200021182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spk.support24-customers.de"; classtype:attempted-recon; sid:200021183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spkde-srv01.de"; classtype:attempted-recon; sid:200021184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spkfod.coms.cso.gov.tt"; classtype:attempted-recon; sid:200021185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"splposta15.temp.swtest.ru"; classtype:attempted-recon; sid:200021186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sponqcqaym.duckdns.org"; classtype:attempted-recon; sid:200021187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sport-pay.net"; classtype:attempted-recon; sid:200021188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sport.protected-secur.workers.dev"; classtype:attempted-recon; sid:200021189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sportsbrooks.top"; classtype:attempted-recon; sid:200021190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sportyelites.com"; classtype:attempted-recon; sid:200021191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sppkakfohn.duckdns.org"; classtype:attempted-recon; sid:200021192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sprechls.blogspot.com"; classtype:attempted-recon; sid:200021193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sprggqmyxm.duckdns.org"; classtype:attempted-recon; sid:200021194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sprpxpyfqc.duckdns.org"; classtype:attempted-recon; sid:200021195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sprtrcvry.cnfrmacn.scrthlp.workers.dev"; classtype:attempted-recon; sid:200021196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sptqpydvye.duckdns.org"; classtype:attempted-recon; sid:200021197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spuhlijtwe.duckdns.org"; classtype:attempted-recon; sid:200021198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spuuqmrbsi.duckdns.org"; classtype:attempted-recon; sid:200021199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spzemgggxf.duckdns.org"; classtype:attempted-recon; sid:200021200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sqitraining.com"; classtype:attempted-recon; sid:200021201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sqkufy.com"; classtype:attempted-recon; sid:200021202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sqmagtgtfy.duckdns.org"; classtype:attempted-recon; sid:200021203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sqmqhexwoy.duckdns.org"; classtype:attempted-recon; sid:200021204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sqplmhgfnc.duckdns.org"; classtype:attempted-recon; sid:200021205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sqqtxtnhye.duckdns.org"; classtype:attempted-recon; sid:200021206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"square-breeze49.8re42b1g.workers.dev"; classtype:attempted-recon; sid:200021207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sqvpsrqrea.duckdns.org"; classtype:attempted-recon; sid:200021208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srchrank.com"; classtype:attempted-recon; sid:200021209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sremalzpgq.duckdns.org"; classtype:attempted-recon; sid:200021210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srfkvnjsmc.duckdns.org"; classtype:attempted-recon; sid:200021211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sribfrjrwd.duckdns.org"; classtype:attempted-recon; sid:200021212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srisupfgzz.duckdns.org"; classtype:attempted-recon; sid:200021213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srjpnnsxhe.duckdns.org"; classtype:attempted-recon; sid:200021214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srntgybbvn.duckdns.org"; classtype:attempted-recon; sid:200021215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srqjzaeqfs.duckdns.org"; classtype:attempted-recon; sid:200021216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srskrvmiie.duckdns.org"; classtype:attempted-recon; sid:200021217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sruoloqzcf.duckdns.org"; classtype:attempted-recon; sid:200021218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srv179982.hoster-test.ru"; classtype:attempted-recon; sid:200021219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srvde-lnfoservice.de"; classtype:attempted-recon; sid:200021220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srvguide-servicede.de"; classtype:attempted-recon; sid:200021221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srwyqsesoe.duckdns.org"; classtype:attempted-recon; sid:200021222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssdf.pphhh.cn"; classtype:attempted-recon; sid:200021223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sseguridadebrou.webcindario.com"; classtype:attempted-recon; sid:200021224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssenclave.org"; classtype:attempted-recon; sid:200021225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssfskwkclq.duckdns.org"; classtype:attempted-recon; sid:200021226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssgdrh.6o1u0v.cn"; classtype:attempted-recon; sid:200021227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sslxzzrrxd.duckdns.org"; classtype:attempted-recon; sid:200021228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssmlsznyfp.duckdns.org"; classtype:attempted-recon; sid:200021229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssnugiizjq.duckdns.org"; classtype:attempted-recon; sid:200021230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sso-garena.com"; classtype:attempted-recon; sid:200021231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssowebsrr435546.srvrwwalker.workers.dev"; classtype:attempted-recon; sid:200021232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssqmvoicxr.duckdns.org"; classtype:attempted-recon; sid:200021233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssrhtckwmm.duckdns.org"; classtype:attempted-recon; sid:200021234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sssssssquarettt.beauty"; classtype:attempted-recon; sid:200021235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sssssssquarettt.hair"; classtype:attempted-recon; sid:200021236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sstakegamble.com"; classtype:attempted-recon; sid:200021237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssunrgwpiu.duckdns.org"; classtype:attempted-recon; sid:200021238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssvavnuzru.duckdns.org"; classtype:attempted-recon; sid:200021239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssytsusdsn.duckdns.org"; classtype:attempted-recon; sid:200021240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sszsjmplcf.duckdns.org"; classtype:attempted-recon; sid:200021241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stage-upgrade.nycgo.com"; classtype:attempted-recon; sid:200021242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staging-app.1inch.io.s3-website-us-west-1.amazonaws.com"; classtype:attempted-recon; sid:200021243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staging.aisecureme.com"; classtype:attempted-recon; sid:200021244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staging.egfwd.com"; classtype:attempted-recon; sid:200021245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staging.eliteautomotive.com.au"; classtype:attempted-recon; sid:200021246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staging.halaladvisor.com.au"; classtype:attempted-recon; sid:200021247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stakegqmble.com"; classtype:attempted-recon; sid:200021248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staman.synology.me"; classtype:attempted-recon; sid:200021249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stamde72.pages.dev"; classtype:attempted-recon; sid:200021250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"standardamericanbullybreeder.com"; classtype:attempted-recon; sid:200021251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staratlas.os.com.tr"; classtype:attempted-recon; sid:200021252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staratlas.se"; classtype:attempted-recon; sid:200021253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"starlingbank.sdksoftdev.com"; classtype:attempted-recon; sid:200021254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"starttsboxfile.myfreesites.net"; classtype:attempted-recon; sid:200021255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stat-logistics.com"; classtype:attempted-recon; sid:200021256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"static-promote.weebly.com"; classtype:attempted-recon; sid:200021257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"statisticssuccessheroes.com"; classtype:attempted-recon; sid:200021258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"status.ttec.smartteam.chat"; classtype:attempted-recon; sid:200021259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"statushiper-222.com"; classtype:attempted-recon; sid:200021260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stbqnhbstn.duckdns.org"; classtype:attempted-recon; sid:200021261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stclarechurch.net"; classtype:attempted-recon; sid:200021262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stconkzfsz.duckdns.org"; classtype:attempted-recon; sid:200021263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommunityzixn.top"; classtype:attempted-recon; sid:200021264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommunutiy.ru"; classtype:attempted-recon; sid:200021265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomnunnlty.com"; classtype:attempted-recon; sid:200021266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomnunuity.ru"; classtype:attempted-recon; sid:200021267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomunlty.ru"; classtype:attempted-recon; sid:200021268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomunntiy.com"; classtype:attempted-recon; sid:200021269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomuunuty.ru"; classtype:attempted-recon; sid:200021270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steanconmunily.ru"; classtype:attempted-recon; sid:200021271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stearncommunuty.com"; classtype:attempted-recon; sid:200021272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stedfstt.com"; classtype:attempted-recon; sid:200021273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steep-water-ae2b.weslaox.workers.dev"; classtype:attempted-recon; sid:200021274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steep.bengkakbibirkuuu.workers.dev"; classtype:attempted-recon; sid:200021275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steep.kacangrecinonfirem.workers.dev"; classtype:attempted-recon; sid:200021276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step2-9f5d0.firebaseapp.com"; classtype:attempted-recon; sid:200021277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step2-9f5d0.web.app"; classtype:attempted-recon; sid:200021278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step3-efc8c.firebaseapp.com"; classtype:attempted-recon; sid:200021279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step3-efc8c.web.app"; classtype:attempted-recon; sid:200021280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step4-30f38.firebaseapp.com"; classtype:attempted-recon; sid:200021281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step4-30f38.web.app"; classtype:attempted-recon; sid:200021282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step5-62e6a.firebaseapp.com"; classtype:attempted-recon; sid:200021283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"step5-62e6a.web.app"; classtype:attempted-recon; sid:200021284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepapp-minting.com"; classtype:attempted-recon; sid:200021285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stephaniesmythe.com"; classtype:attempted-recon; sid:200021286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepndrop.cc"; classtype:attempted-recon; sid:200021287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp10-98e14.firebaseapp.com"; classtype:attempted-recon; sid:200021288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp10-98e14.web.app"; classtype:attempted-recon; sid:200021289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp11-a7e2a.firebaseapp.com"; classtype:attempted-recon; sid:200021290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp11-a7e2a.web.app"; classtype:attempted-recon; sid:200021291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp16-52ee1.firebaseapp.com"; classtype:attempted-recon; sid:200021292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp16-52ee1.web.app"; classtype:attempted-recon; sid:200021293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp17-d761f.firebaseapp.com"; classtype:attempted-recon; sid:200021294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp17-d761f.web.app"; classtype:attempted-recon; sid:200021295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp19-ced6c.firebaseapp.com"; classtype:attempted-recon; sid:200021296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp19-ced6c.web.app"; classtype:attempted-recon; sid:200021297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp7-98a8e.firebaseapp.com"; classtype:attempted-recon; sid:200021298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp7-98a8e.web.app"; classtype:attempted-recon; sid:200021299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp8-c4298.firebaseapp.com"; classtype:attempted-recon; sid:200021300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp8-c4298.web.app"; classtype:attempted-recon; sid:200021301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp9-54a62.firebaseapp.com"; classtype:attempted-recon; sid:200021302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepp9-54a62.web.app"; classtype:attempted-recon; sid:200021303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steris.cloud"; classtype:attempted-recon; sid:200021304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stevemaddencanadashoes.com"; classtype:attempted-recon; sid:200021305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stevemaddennetherlands.com"; classtype:attempted-recon; sid:200021306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stevemaddenshoe.net"; classtype:attempted-recon; sid:200021307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stevencrews.com"; classtype:attempted-recon; sid:200021308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"still-cherry-4888.hescohqq.workers.dev"; classtype:attempted-recon; sid:200021309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"still-dust-dc1f.dumpcloud542.workers.dev"; classtype:attempted-recon; sid:200021310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stllmrmpme.duckdns.org"; classtype:attempted-recon; sid:200021311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stnvafrqbt.duckdns.org"; classtype:attempted-recon; sid:200021312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stockwiser.cloud"; classtype:attempted-recon; sid:200021313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stolizaparketa.ru"; classtype:attempted-recon; sid:200021314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stollgroup.coms.cso.gov.tt"; classtype:attempted-recon; sid:200021315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stomkinscommercial.com.aus.cso.gov.tt"; classtype:attempted-recon; sid:200021316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stonedealrs.ml"; classtype:attempted-recon; sid:200021317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-eche.firebaseapp.com"; classtype:attempted-recon; sid:200021318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-eche.web.app"; classtype:attempted-recon; sid:200021319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-get.firebaseapp.com"; classtype:attempted-recon; sid:200021320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-get.web.app"; classtype:attempted-recon; sid:200021321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-iq.firebaseapp.com"; classtype:attempted-recon; sid:200021322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-iq.web.app"; classtype:attempted-recon; sid:200021323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-ko.firebaseapp.com"; classtype:attempted-recon; sid:200021324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-ko.web.app"; classtype:attempted-recon; sid:200021325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-mx.firebaseapp.com"; classtype:attempted-recon; sid:200021326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-mx.web.app"; classtype:attempted-recon; sid:200021327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-ow.firebaseapp.com"; classtype:attempted-recon; sid:200021328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-ow.web.app"; classtype:attempted-recon; sid:200021329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-rp.firebaseapp.com"; classtype:attempted-recon; sid:200021330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-rp.web.app"; classtype:attempted-recon; sid:200021331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-trc.firebaseapp.com"; classtype:attempted-recon; sid:200021332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage-trc.web.app"; classtype:attempted-recon; sid:200021333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storage.yandexcloud.net"; classtype:attempted-recon; sid:200021334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storageapi-new.fleek.co"; classtype:attempted-recon; sid:200021335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storageapi-stg.fleek.co"; classtype:attempted-recon; sid:200021336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"storenike365.top"; classtype:attempted-recon; sid:200021337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stornompsiena.me"; classtype:attempted-recon; sid:200021338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"striicswgj.duckdns.org"; classtype:attempted-recon; sid:200021339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"strikeitalia.com"; classtype:attempted-recon; sid:200021340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stroiperspektiva.ru"; classtype:attempted-recon; sid:200021341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"strugglestokids.com"; classtype:attempted-recon; sid:200021342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stsrdrdpwe.duckdns.org"; classtype:attempted-recon; sid:200021343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sttakegamble.com"; classtype:attempted-recon; sid:200021344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stty.xyz"; classtype:attempted-recon; sid:200021345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"studentfinance-auth.firebaseapp.com"; classtype:attempted-recon; sid:200021346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"studentfinance-auth.web.app"; classtype:attempted-recon; sid:200021347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"studentfinance-help.firebaseapp.com"; classtype:attempted-recon; sid:200021348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"studentfinance-help.web.app"; classtype:attempted-recon; sid:200021349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"studio-lol.com"; classtype:attempted-recon; sid:200021350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stuye3890.byethost6.com"; classtype:attempted-recon; sid:200021351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stylifehomedecors.com"; classtype:attempted-recon; sid:200021352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stzmlxyaey.duckdns.org"; classtype:attempted-recon; sid:200021353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stzzyiuzoe.duckdns.org"; classtype:attempted-recon; sid:200021354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"su-cuenta-sera-bloqueada.homebanking09.repl.co"; classtype:attempted-recon; sid:200021355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"su.vc"; classtype:attempted-recon; sid:200021356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suafatonlojadigital.com"; classtype:attempted-recon; sid:200021357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suas-solucoes.com"; classtype:attempted-recon; sid:200021358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suawkibfnc.duckdns.org"; classtype:attempted-recon; sid:200021359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sub-evnt04.duckdns.org"; classtype:attempted-recon; sid:200021360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"submit.refund.bgl8w.us"; classtype:attempted-recon; sid:200021361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"submit.tax.refund.ddq4y.us"; classtype:attempted-recon; sid:200021362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"submit.tax.refund.lpivp.us"; classtype:attempted-recon; sid:200021363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"submit.tax.refund.r1mi3.us"; classtype:attempted-recon; sid:200021364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"submit.txrefund.cey7b.us"; classtype:attempted-recon; sid:200021365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"submit.txrefund.jtcw8.us"; classtype:attempted-recon; sid:200021366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"subsworker.bid"; classtype:attempted-recon; sid:200021367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"subulussalamkota.desa.id"; classtype:attempted-recon; sid:200021368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"successful-thirsty-medusaceratops.glitch.me"; classtype:attempted-recon; sid:200021369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"successitround.firebaseapp.com"; classtype:attempted-recon; sid:200021370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suchiappswap.tk"; classtype:attempted-recon; sid:200021371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suctcazsxx.duckdns.org"; classtype:attempted-recon; sid:200021372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sucursal29854888.hostfree.pw"; classtype:attempted-recon; sid:200021373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suelunn.com"; classtype:attempted-recon; sid:200021374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sufibookstore.com"; classtype:attempted-recon; sid:200021375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sufzwxkttb.duckdns.org"; classtype:attempted-recon; sid:200021376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sugnupsxui.duckdns.org"; classtype:attempted-recon; sid:200021377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suhbftmvlz.duckdns.org"; classtype:attempted-recon; sid:200021378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suica.a17oky.bofjhyr.shop"; classtype:attempted-recon; sid:200021379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suica.cj5ux1.bynftdr.shop"; classtype:attempted-recon; sid:200021380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suiviticket.co"; classtype:attempted-recon; sid:200021381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suizlyymft.duckdns.org"; classtype:attempted-recon; sid:200021382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sujarmitenroa.co.vu"; classtype:attempted-recon; sid:200021383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sukjsgwvih.duckdns.org"; classtype:attempted-recon; sid:200021384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sultan-raza.github.io"; classtype:attempted-recon; sid:200021385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sumary.repport-fb.accts-protocol.workers.dev"; classtype:attempted-recon; sid:200021386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sumicorp.com"; classtype:attempted-recon; sid:200021387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sumitomomitsui.com"; classtype:attempted-recon; sid:200021388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sumkdsklpm.duckdns.org"; classtype:attempted-recon; sid:200021389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"summary-fb.report-accts-notification.workers.dev"; classtype:attempted-recon; sid:200021390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"summary-protocol.report-accts-notification.workers.dev"; classtype:attempted-recon; sid:200021391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sumycippbt.duckdns.org"; classtype:attempted-recon; sid:200021392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sunnygods.shop"; classtype:attempted-recon; sid:200021393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sunnylandingpages.com"; classtype:attempted-recon; sid:200021394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suozmzopzc.duckdns.org"; classtype:attempted-recon; sid:200021395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supe.seharusnyakita.workers.dev"; classtype:attempted-recon; sid:200021396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"super-block-1b89.tmp6n9c0.workers.dev"; classtype:attempted-recon; sid:200021397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"super-magalu.net"; classtype:attempted-recon; sid:200021398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supernuts.co.in"; classtype:attempted-recon; sid:200021399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"superspeedtrain.com"; classtype:attempted-recon; sid:200021400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"superstep.org"; classtype:attempted-recon; sid:200021401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suplicgalicar.supploc.repl.co"; classtype:attempted-recon; sid:200021402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suportemaga01.com"; classtype:attempted-recon; sid:200021403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supp0rt-ovh.web.app"; classtype:attempted-recon; sid:200021404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suppliers.bitshepherd.org"; classtype:attempted-recon; sid:200021405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-dapps.info"; classtype:attempted-recon; sid:200021406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-helpcenter567106982.firebaseapp.com"; classtype:attempted-recon; sid:200021407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-helpcenter567106982.web.app"; classtype:attempted-recon; sid:200021408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-helpcenter716262119.firebaseapp.com"; classtype:attempted-recon; sid:200021409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-helpcenter716262119.web.app"; classtype:attempted-recon; sid:200021410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-ihrkonto.info"; classtype:attempted-recon; sid:200021411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-kontopruefung.de"; classtype:attempted-recon; sid:200021412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-wallets.com"; classtype:attempted-recon; sid:200021413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support.globepropertymanagementservice.com"; classtype:attempted-recon; sid:200021414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support.pancakesvqp.com"; classtype:attempted-recon; sid:200021415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support09092022.co.vu"; classtype:attempted-recon; sid:200021416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support24-customers.de"; classtype:attempted-recon; sid:200021417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supporto.poste.it.chiulan.com"; classtype:attempted-recon; sid:200021418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supportusermail4.duckdns.org"; classtype:attempted-recon; sid:200021419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suptfaxna40.pages.dev"; classtype:attempted-recon; sid:200021420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supwuqhyis.duckdns.org"; classtype:attempted-recon; sid:200021421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sur3cr.csb.app"; classtype:attempted-recon; sid:200021422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"surveyol.com"; classtype:attempted-recon; sid:200021423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sushidocs.app"; classtype:attempted-recon; sid:200021424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sushiswapsas.ga"; classtype:attempted-recon; sid:200021425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sushiswfsdfgdfbc.weebly.com"; classtype:attempted-recon; sid:200021426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sushitokenusd.com.mx"; classtype:attempted-recon; sid:200021427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sushiusd.xyz"; classtype:attempted-recon; sid:200021428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sushiusdapp.com"; classtype:attempted-recon; sid:200021429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suswapappwebb.tk"; classtype:attempted-recon; sid:200021430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sutherlanglobal.com"; classtype:attempted-recon; sid:200021431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suvvcutqwh.duckdns.org"; classtype:attempted-recon; sid:200021432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"suyi.live"; classtype:attempted-recon; sid:200021433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svbfn.0igpzxa.cn"; classtype:attempted-recon; sid:200021434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svcjttiqme.duckdns.org"; classtype:attempted-recon; sid:200021435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svdbj.xrvdh3p.cn"; classtype:attempted-recon; sid:200021436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svdg.szrubef.cn"; classtype:attempted-recon; sid:200021437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svdh.duxupkd.cn"; classtype:attempted-recon; sid:200021438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svdhg.bhgzpub.cn"; classtype:attempted-recon; sid:200021439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svdkvmrgla.duckdns.org"; classtype:attempted-recon; sid:200021440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svg.fzsjbbm.cn"; classtype:attempted-recon; sid:200021441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svjjphlxoj.duckdns.org"; classtype:attempted-recon; sid:200021442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svqvpxwhkj.duckdns.org"; classtype:attempted-recon; sid:200021443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svrdnykoje.duckdns.org"; classtype:attempted-recon; sid:200021444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svsg.mjazbgn.cn"; classtype:attempted-recon; sid:200021445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swaggerhub-noprod.mibanco.com.pe"; classtype:attempted-recon; sid:200021446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swancommunications.com"; classtype:attempted-recon; sid:200021447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swanholm.net"; classtype:attempted-recon; sid:200021448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swanzltkkz.duckdns.org"; classtype:attempted-recon; sid:200021449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swap-appsushi.tk"; classtype:attempted-recon; sid:200021450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swap-bsc.tokentool.club"; classtype:attempted-recon; sid:200021451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swappauto.staging.lcsolutions.it"; classtype:attempted-recon; sid:200021452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swapuni.org"; classtype:attempted-recon; sid:200021453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swbjzuhtju.duckdns.org"; classtype:attempted-recon; sid:200021454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swckvwbqus.duckdns.org"; classtype:attempted-recon; sid:200021455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sweet-efax7656554545-aebf.82929222-happygringo.workers.dev"; classtype:attempted-recon; sid:200021456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sweet-math-855f.jpatelvemvo9033.workers.dev"; classtype:attempted-recon; sid:200021457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sweet-sound-ba1a.sharepointonline-live2248.workers.dev"; classtype:attempted-recon; sid:200021458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sweyjxdgso.duckdns.org"; classtype:attempted-recon; sid:200021459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swgntryqzj.duckdns.org"; classtype:attempted-recon; sid:200021460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swhtgnkoqp.duckdns.org"; classtype:attempted-recon; sid:200021461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swiftszapprotocol.ru"; classtype:attempted-recon; sid:200021462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swipeindustry.com"; classtype:attempted-recon; sid:200021463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swisspost-support-account-payment-access-manage.uksouth.cloudapp.azure.com"; classtype:attempted-recon; sid:200021464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"switstart.blogspot.com"; classtype:attempted-recon; sid:200021465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"switzapps.blogspot.com"; classtype:attempted-recon; sid:200021466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swkdviuobh.duckdns.org"; classtype:attempted-recon; sid:200021467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swniemvsax.duckdns.org"; classtype:attempted-recon; sid:200021468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swqqkzszar.duckdns.org"; classtype:attempted-recon; sid:200021469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swupsnfqxf.duckdns.org"; classtype:attempted-recon; sid:200021470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swxaytbshx.duckdns.org"; classtype:attempted-recon; sid:200021471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swxtsdhxoh.duckdns.org"; classtype:attempted-recon; sid:200021472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxgxh.dqlcpom.cn"; classtype:attempted-recon; sid:200021473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxhuunsyjh.duckdns.org"; classtype:attempted-recon; sid:200021474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxkbewkdlm.duckdns.org"; classtype:attempted-recon; sid:200021475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxpsmtyuot.duckdns.org"; classtype:attempted-recon; sid:200021476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxpuejctyz.duckdns.org"; classtype:attempted-recon; sid:200021477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxrg.oc9ee16.cn"; classtype:attempted-recon; sid:200021478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxrrydmeup.duckdns.org"; classtype:attempted-recon; sid:200021479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxuiftdplt.duckdns.org"; classtype:attempted-recon; sid:200021480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxvz.ouqgfud.cn"; classtype:attempted-recon; sid:200021481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sxvzzzsxjg.duckdns.org"; classtype:attempted-recon; sid:200021482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syatwea.com"; classtype:attempted-recon; sid:200021483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sybahqvmcs.duckdns.org"; classtype:attempted-recon; sid:200021484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sydenhampharma.com"; classtype:attempted-recon; sid:200021485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syebhjwufj.duckdns.org"; classtype:attempted-recon; sid:200021486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syebomnxva.duckdns.org"; classtype:attempted-recon; sid:200021487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syeulzfuwu.duckdns.org"; classtype:attempted-recon; sid:200021488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syfxdqqjmw.duckdns.org"; classtype:attempted-recon; sid:200021489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sygeforsikring.firebaseapp.com"; classtype:attempted-recon; sid:200021490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sygeforsikring.web.app"; classtype:attempted-recon; sid:200021491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"symabeautyoriginal.com"; classtype:attempted-recon; sid:200021492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"synaxisreadymix.com"; classtype:attempted-recon; sid:200021493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syncbotzfixer.com"; classtype:attempted-recon; sid:200021494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syncfixdapp.com"; classtype:attempted-recon; sid:200021495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syncwldapp.web.app"; classtype:attempted-recon; sid:200021496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"synews.com"; classtype:attempted-recon; sid:200021497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"synslabs.web.app"; classtype:attempted-recon; sid:200021498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syqvuirowl.duckdns.org"; classtype:attempted-recon; sid:200021499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"systems-bjoska.firebaseapp.com"; classtype:attempted-recon; sid:200021500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"systems-bjoska.web.app"; classtype:attempted-recon; sid:200021501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"syxqcuxsyy.duckdns.org"; classtype:attempted-recon; sid:200021502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szbxn.rj01260.cn"; classtype:attempted-recon; sid:200021503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szg2ro.webwave.dev"; classtype:attempted-recon; sid:200021504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szgx.atmdngb.cn"; classtype:attempted-recon; sid:200021505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szhuuqllfv.duckdns.org"; classtype:attempted-recon; sid:200021506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szhwripoqg.duckdns.org"; classtype:attempted-recon; sid:200021507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szireum.duckdns.org"; classtype:attempted-recon; sid:200021508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szkurungvr.duckdns.org"; classtype:attempted-recon; sid:200021509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szpdymbgdw.duckdns.org"; classtype:attempted-recon; sid:200021510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szpwvaoyhw.duckdns.org"; classtype:attempted-recon; sid:200021511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"szxhc.fwpvfgq.cn"; classtype:attempted-recon; sid:200021512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t10note.firebaseapp.com"; classtype:attempted-recon; sid:200021513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t10note.web.app"; classtype:attempted-recon; sid:200021514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t11note.firebaseapp.com"; classtype:attempted-recon; sid:200021515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t11note.web.app"; classtype:attempted-recon; sid:200021516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t12note.firebaseapp.com"; classtype:attempted-recon; sid:200021517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t12note.web.app"; classtype:attempted-recon; sid:200021518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t1note.firebaseapp.com"; classtype:attempted-recon; sid:200021519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t1note.web.app"; classtype:attempted-recon; sid:200021520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t2note.firebaseapp.com"; classtype:attempted-recon; sid:200021521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t2note.web.app"; classtype:attempted-recon; sid:200021522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t2r1hiper.com"; classtype:attempted-recon; sid:200021523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t2xmzm.webwave.dev"; classtype:attempted-recon; sid:200021524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t3note.firebaseapp.com"; classtype:attempted-recon; sid:200021525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t3note.web.app"; classtype:attempted-recon; sid:200021526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t5note.firebaseapp.com"; classtype:attempted-recon; sid:200021527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t5note.web.app"; classtype:attempted-recon; sid:200021528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t6note.firebaseapp.com"; classtype:attempted-recon; sid:200021529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t6note.web.app"; classtype:attempted-recon; sid:200021530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t7note.firebaseapp.com"; classtype:attempted-recon; sid:200021531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t7note.web.app"; classtype:attempted-recon; sid:200021532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t8note.firebaseapp.com"; classtype:attempted-recon; sid:200021533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t8note.web.app"; classtype:attempted-recon; sid:200021534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t9note.firebaseapp.com"; classtype:attempted-recon; sid:200021535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"t9note.web.app"; classtype:attempted-recon; sid:200021536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tadnjrkcvh.duckdns.org"; classtype:attempted-recon; sid:200021537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tagomhdglr.duckdns.org"; classtype:attempted-recon; sid:200021538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taher-mohamed-ahmed-saad.github.io"; classtype:attempted-recon; sid:200021539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tahfsqplma.duckdns.org"; classtype:attempted-recon; sid:200021540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tajolqpbiy.duckdns.org"; classtype:attempted-recon; sid:200021541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"takudrop.ml"; classtype:attempted-recon; sid:200021542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talktalkea.weebly.com"; classtype:attempted-recon; sid:200021543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tambunanajaa.martulangsore.workers.dev"; classtype:attempted-recon; sid:200021544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tarakcdqqa.duckdns.org"; classtype:attempted-recon; sid:200021545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tarhposh.shanliweb.ir"; classtype:attempted-recon; sid:200021546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tarpwuuleq.duckdns.org"; classtype:attempted-recon; sid:200021547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taskmbox493.softr.app"; classtype:attempted-recon; sid:200021548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tavuwmhidu.duckdns.org"; classtype:attempted-recon; sid:200021549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tax-financial-irs.com"; classtype:attempted-recon; sid:200021550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taxinfo.blob.core.windows.net"; classtype:attempted-recon; sid:200021551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taylorjoyjohnson.com"; classtype:attempted-recon; sid:200021552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tazicbrwgc.duckdns.org"; classtype:attempted-recon; sid:200021553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tazihycmzn.duckdns.org"; classtype:attempted-recon; sid:200021554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tb915hdh89.mfs.gg"; classtype:attempted-recon; sid:200021555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbaiulxfdf.duckdns.org"; classtype:attempted-recon; sid:200021556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbformoafp.duckdns.org"; classtype:attempted-recon; sid:200021557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbgbodvlrr.duckdns.org"; classtype:attempted-recon; sid:200021558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbjxementu.duckdns.org"; classtype:attempted-recon; sid:200021559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbqlupzloe.duckdns.org"; classtype:attempted-recon; sid:200021560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbrbhmhoux.duckdns.org"; classtype:attempted-recon; sid:200021561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbutlwafmy.duckdns.org"; classtype:attempted-recon; sid:200021562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tbv265743bv7.42web.io"; classtype:attempted-recon; sid:200021563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tby.eb-sites.com"; classtype:attempted-recon; sid:200021564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tc.archeducomonitsha.org.ng"; classtype:attempted-recon; sid:200021565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcaconnect.ac-page.com"; classtype:attempted-recon; sid:200021566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcalwsgaem.duckdns.org"; classtype:attempted-recon; sid:200021567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tceukhonhl.duckdns.org"; classtype:attempted-recon; sid:200021568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcfcypdray.duckdns.org"; classtype:attempted-recon; sid:200021569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcfwbwdvhg.duckdns.org"; classtype:attempted-recon; sid:200021570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcnlpramju.duckdns.org"; classtype:attempted-recon; sid:200021571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcoe.in"; classtype:attempted-recon; sid:200021572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tconoyjnoo.duckdns.org"; classtype:attempted-recon; sid:200021573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcvoifxawv.duckdns.org"; classtype:attempted-recon; sid:200021574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcxwbyltqu.duckdns.org"; classtype:attempted-recon; sid:200021575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdcdoimese.duckdns.org"; classtype:attempted-recon; sid:200021576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdjsqzhznp.duckdns.org"; classtype:attempted-recon; sid:200021577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdlwxmihpe.duckdns.org"; classtype:attempted-recon; sid:200021578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdqhyxlmnu.duckdns.org"; classtype:attempted-recon; sid:200021579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdrqcdbygv.duckdns.org"; classtype:attempted-recon; sid:200021580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdsecurities.firebaseapp.com"; classtype:attempted-recon; sid:200021581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdsecurities.web.app"; classtype:attempted-recon; sid:200021582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdtkzlreib.duckdns.org"; classtype:attempted-recon; sid:200021583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdyvoxzpwr.duckdns.org"; classtype:attempted-recon; sid:200021584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdzjqbayhp.duckdns.org"; classtype:attempted-recon; sid:200021585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tdzsfikvda.duckdns.org"; classtype:attempted-recon; sid:200021586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teamemc2.com"; classtype:attempted-recon; sid:200021587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teamgoogle125590.psee.ly"; classtype:attempted-recon; sid:200021588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teamsmicrosoft.noreply00001110msn000101000.workers.dev"; classtype:attempted-recon; sid:200021589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tebapit.com"; classtype:attempted-recon; sid:200021590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"technalix.com"; classtype:attempted-recon; sid:200021591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"techniair.ma"; classtype:attempted-recon; sid:200021592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"technologicalhome-heminenthypothesis-1.homerunstard.repl.co"; classtype:attempted-recon; sid:200021593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"techority.com"; classtype:attempted-recon; sid:200021594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tecmachine.com.br"; classtype:attempted-recon; sid:200021595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tecnominproductos.com"; classtype:attempted-recon; sid:200021596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tecqferlpv.duckdns.org"; classtype:attempted-recon; sid:200021597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tedpcdhugh.duckdns.org"; classtype:attempted-recon; sid:200021598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teekitstorage.blob.core.windows.net"; classtype:attempted-recon; sid:200021599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teenmg.com"; classtype:attempted-recon; sid:200021600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tehacarrasa.topijerami.workers.dev"; classtype:attempted-recon; sid:200021601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tehhhaonao.duckdns.org"; classtype:attempted-recon; sid:200021602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tehntfeidb.duckdns.org"; classtype:attempted-recon; sid:200021603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teknob.my.id"; classtype:attempted-recon; sid:200021604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tele-0002.pages.dev"; classtype:attempted-recon; sid:200021605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telhanorte-90.blogspot.com"; classtype:attempted-recon; sid:200021606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tellmeliu.github.io"; classtype:attempted-recon; sid:200021607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-823a7434e49e.intercom-clicks.com"; classtype:attempted-recon; sid:200021608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"templat65sldh.myfreesites.net"; classtype:attempted-recon; sid:200021609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tendenciasmty.com"; classtype:attempted-recon; sid:200021610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"terjalapakkz.topijerami.workers.dev"; classtype:attempted-recon; sid:200021611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"terpelsicumple.com"; classtype:attempted-recon; sid:200021612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"test.gogodimsum.com"; classtype:attempted-recon; sid:200021613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"test.lonase.sn"; classtype:attempted-recon; sid:200021614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"test.staypoland.com"; classtype:attempted-recon; sid:200021615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"test.webclient4.de"; classtype:attempted-recon; sid:200021616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"testingmir.github.io"; classtype:attempted-recon; sid:200021617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"testnet-v2-pancakeswapclone.pages.dev"; classtype:attempted-recon; sid:200021618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teuelaytrj.duckdns.org"; classtype:attempted-recon; sid:200021619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tewgkxgwwl.duckdns.org"; classtype:attempted-recon; sid:200021620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"texasfreedomrun.com"; classtype:attempted-recon; sid:200021621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teyhoiiagc.duckdns.org"; classtype:attempted-recon; sid:200021622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tfjse.qnesd.com"; classtype:attempted-recon; sid:200021623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tfordilpbg.duckdns.org"; classtype:attempted-recon; sid:200021624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tftygstlsu.duckdns.org"; classtype:attempted-recon; sid:200021625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tfvymmohjh.duckdns.org"; classtype:attempted-recon; sid:200021626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tg.pe"; classtype:attempted-recon; sid:200021627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tg0c4r4p3an6fj1nhu6oa6fb95d57kruqle7v2fdefe779r02n8f840.siasky.net"; classtype:attempted-recon; sid:200021628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgcmex.com"; classtype:attempted-recon; sid:200021629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgght.com"; classtype:attempted-recon; sid:200021630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tggworld.com"; classtype:attempted-recon; sid:200021631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgjpjccycv.duckdns.org"; classtype:attempted-recon; sid:200021632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgkkbpucwh.duckdns.org"; classtype:attempted-recon; sid:200021633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgkppixpfy.duckdns.org"; classtype:attempted-recon; sid:200021634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tglktkkkfl.duckdns.org"; classtype:attempted-recon; sid:200021635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tglnbytkyb.duckdns.org"; classtype:attempted-recon; sid:200021636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgmctchzlp.duckdns.org"; classtype:attempted-recon; sid:200021637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgniixxqkx.duckdns.org"; classtype:attempted-recon; sid:200021638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgnjbqdqym.duckdns.org"; classtype:attempted-recon; sid:200021639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgocapital.com"; classtype:attempted-recon; sid:200021640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgqakwjcmi.duckdns.org"; classtype:attempted-recon; sid:200021641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgqdmvrrgo.duckdns.org"; classtype:attempted-recon; sid:200021642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgqkpnnjvs.duckdns.org"; classtype:attempted-recon; sid:200021643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgrmastermind.com"; classtype:attempted-recon; sid:200021644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgrzqirgec.duckdns.org"; classtype:attempted-recon; sid:200021645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgscpijerr.duckdns.org"; classtype:attempted-recon; sid:200021646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgsrihgeup.duckdns.org"; classtype:attempted-recon; sid:200021647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tguwaipscl.duckdns.org"; classtype:attempted-recon; sid:200021648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgvelzneqc.duckdns.org"; classtype:attempted-recon; sid:200021649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tgwlpwfshz.duckdns.org"; classtype:attempted-recon; sid:200021650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thdpbhgibo.duckdns.org"; classtype:attempted-recon; sid:200021651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"the-arenaa.blogspot.com"; classtype:attempted-recon; sid:200021652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"the-gormans.com"; classtype:attempted-recon; sid:200021653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thecreationentertainments.com"; classtype:attempted-recon; sid:200021654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thecrytpchain.com"; classtype:attempted-recon; sid:200021655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thedefiantsnft.com"; classtype:attempted-recon; sid:200021656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thedindalin.mom"; classtype:attempted-recon; sid:200021657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thedreamstudio.co.in"; classtype:attempted-recon; sid:200021658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thefunkacademy.co.uk"; classtype:attempted-recon; sid:200021659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theglowconference.com"; classtype:attempted-recon; sid:200021660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thegoda.wl-minting.com"; classtype:attempted-recon; sid:200021661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thehealthfortunes.com"; classtype:attempted-recon; sid:200021662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theheckerts.com"; classtype:attempted-recon; sid:200021663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theironinnparlour.co.uk"; classtype:attempted-recon; sid:200021664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"themarketprof.com"; classtype:attempted-recon; sid:200021665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thensow.online"; classtype:attempted-recon; sid:200021666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theopenseanft.com"; classtype:attempted-recon; sid:200021667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theoriginal360.com"; classtype:attempted-recon; sid:200021668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thepromiseofbitcoinafrica.com"; classtype:attempted-recon; sid:200021669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theracoeurneige.mom"; classtype:attempted-recon; sid:200021670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"therizzos.net"; classtype:attempted-recon; sid:200021671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theroyalbharti.com"; classtype:attempted-recon; sid:200021672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thesmartnetworld.net"; classtype:attempted-recon; sid:200021673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thespace.finance"; classtype:attempted-recon; sid:200021674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thespecialcare.exprotutor.com"; classtype:attempted-recon; sid:200021675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thetanarena-moba.ml"; classtype:attempted-recon; sid:200021676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"theurbanfarmstall.co.za"; classtype:attempted-recon; sid:200021677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thewardrobemanager.com"; classtype:attempted-recon; sid:200021678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thgnxpkopu.duckdns.org"; classtype:attempted-recon; sid:200021679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thinhanphatco.com"; classtype:attempted-recon; sid:200021680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thjhlqfomd.duckdns.org"; classtype:attempted-recon; sid:200021681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thlcnxhsfm.duckdns.org"; classtype:attempted-recon; sid:200021682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thongtacconghanoi.net"; classtype:attempted-recon; sid:200021683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thor-boats.cz"; classtype:attempted-recon; sid:200021684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thqudrjatk.duckdns.org"; classtype:attempted-recon; sid:200021685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"three-retail-live.devicetradein.co.uk"; classtype:attempted-recon; sid:200021686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thrht.uviybg9.cn"; classtype:attempted-recon; sid:200021687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"throbbing-lake3b1.yzqquix4.workers.dev"; classtype:attempted-recon; sid:200021688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"throbbing-wildflower-4625.roundcubeupdateq.workers.dev"; classtype:attempted-recon; sid:200021689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thruf.com"; classtype:attempted-recon; sid:200021690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thvfnsiofv.duckdns.org"; classtype:attempted-recon; sid:200021691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thyvnmmqpe.duckdns.org"; classtype:attempted-recon; sid:200021692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiberio435.adfsdgaf43524.repl.co"; classtype:attempted-recon; sid:200021693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tibuauvnsm.duckdns.org"; classtype:attempted-recon; sid:200021694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiburontest.icertified.net"; classtype:attempted-recon; sid:200021695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ticdbjkmox.duckdns.org"; classtype:attempted-recon; sid:200021696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiddlywinksthetford.co.uk"; classtype:attempted-recon; sid:200021697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiendasquality.com.mx"; classtype:attempted-recon; sid:200021698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tifdkbhxux.duckdns.org"; classtype:attempted-recon; sid:200021699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tight-cell-853d.whybed6896573.workers.dev"; classtype:attempted-recon; sid:200021700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tight-salad-f8b7.sdk-ppd.workers.dev"; classtype:attempted-recon; sid:200021701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tigmjhjiza.duckdns.org"; classtype:attempted-recon; sid:200021702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tijnyxxcqx.duckdns.org"; classtype:attempted-recon; sid:200021703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tikfiwbxjt.duckdns.org"; classtype:attempted-recon; sid:200021704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tilidplfns.duckdns.org"; classtype:attempted-recon; sid:200021705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"timfluoarh.duckdns.org"; classtype:attempted-recon; sid:200021706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tinaseviourjewellery.com"; classtype:attempted-recon; sid:200021707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tintsoftravel.com"; classtype:attempted-recon; sid:200021708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiny-grass.sevzzw9r.workers.dev"; classtype:attempted-recon; sid:200021709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tipografieonline.ro"; classtype:attempted-recon; sid:200021710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiuanxba.firebaseapp.com"; classtype:attempted-recon; sid:200021711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiwdnztwji.duckdns.org"; classtype:attempted-recon; sid:200021712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiyarasz.cloudaccess.host"; classtype:attempted-recon; sid:200021713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjaxdrcxuo.duckdns.org"; classtype:attempted-recon; sid:200021714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjbaagxdiq.duckdns.org"; classtype:attempted-recon; sid:200021715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjdumscnhd.duckdns.org"; classtype:attempted-recon; sid:200021716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjduuwynrb.duckdns.org"; classtype:attempted-recon; sid:200021717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjdweyrzme.duckdns.org"; classtype:attempted-recon; sid:200021718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjfsvfdwgp.duckdns.org"; classtype:attempted-recon; sid:200021719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjkeynuqpv.duckdns.org"; classtype:attempted-recon; sid:200021720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjkxjcnepy.duckdns.org"; classtype:attempted-recon; sid:200021721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjlmqdqlug.duckdns.org"; classtype:attempted-recon; sid:200021722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjmbuqkuse.duckdns.org"; classtype:attempted-recon; sid:200021723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjplqkagyg.duckdns.org"; classtype:attempted-recon; sid:200021724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjqgxkabck.duckdns.org"; classtype:attempted-recon; sid:200021725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjttfabvvt.duckdns.org"; classtype:attempted-recon; sid:200021726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjwzydionc.duckdns.org"; classtype:attempted-recon; sid:200021727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjyvmqaqxe.duckdns.org"; classtype:attempted-recon; sid:200021728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tjzfnmdrdr.duckdns.org"; classtype:attempted-recon; sid:200021729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tk43hkdcna.club"; classtype:attempted-recon; sid:200021730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkbumcjzio.duckdns.org"; classtype:attempted-recon; sid:200021731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkecwrodal.duckdns.org"; classtype:attempted-recon; sid:200021732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkfbclicyc.duckdns.org"; classtype:attempted-recon; sid:200021733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkfyzizwcd.duckdns.org"; classtype:attempted-recon; sid:200021734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkglujnkqe.duckdns.org"; classtype:attempted-recon; sid:200021735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkhxtutbqf.duckdns.org"; classtype:attempted-recon; sid:200021736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkisjykkwe.duckdns.org"; classtype:attempted-recon; sid:200021737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkjb2019.com"; classtype:attempted-recon; sid:200021738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tknpequjsn.duckdns.org"; classtype:attempted-recon; sid:200021739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkoarntjot.duckdns.org"; classtype:attempted-recon; sid:200021740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkozgyuvmo.duckdns.org"; classtype:attempted-recon; sid:200021741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tktoclzjib.duckdns.org"; classtype:attempted-recon; sid:200021742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkwevgcfbc.duckdns.org"; classtype:attempted-recon; sid:200021743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkyvlrlzsk.duckdns.org"; classtype:attempted-recon; sid:200021744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tl-podecontar.blogspot.com"; classtype:attempted-recon; sid:200021745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlatx.com"; classtype:attempted-recon; sid:200021746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlcfsbelkz.duckdns.org"; classtype:attempted-recon; sid:200021747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlecfujgze.duckdns.org"; classtype:attempted-recon; sid:200021748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlhgpydlzp.duckdns.org"; classtype:attempted-recon; sid:200021749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlilcswfxj.duckdns.org"; classtype:attempted-recon; sid:200021750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlmgovztii.duckdns.org"; classtype:attempted-recon; sid:200021751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlmmwqxmnt.duckdns.org"; classtype:attempted-recon; sid:200021752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tloyuscqhu.duckdns.org"; classtype:attempted-recon; sid:200021753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlpkccfees.duckdns.org"; classtype:attempted-recon; sid:200021754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlrxbgxhym.duckdns.org"; classtype:attempted-recon; sid:200021755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tluroqmxhs.duckdns.org"; classtype:attempted-recon; sid:200021756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlzhdlvvbe.duckdns.org"; classtype:attempted-recon; sid:200021757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmbocscfpr.duckdns.org"; classtype:attempted-recon; sid:200021758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmfnmbohff.duckdns.org"; classtype:attempted-recon; sid:200021759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmgebzpesc.duckdns.org"; classtype:attempted-recon; sid:200021760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmglcfvmqb.duckdns.org"; classtype:attempted-recon; sid:200021761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmlasfviqs.duckdns.org"; classtype:attempted-recon; sid:200021762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmmklgcmvs.duckdns.org"; classtype:attempted-recon; sid:200021763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmmsvztcnh.duckdns.org"; classtype:attempted-recon; sid:200021764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmmvslrszs.duckdns.org"; classtype:attempted-recon; sid:200021765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmmxnewiim.duckdns.org"; classtype:attempted-recon; sid:200021766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmvsjyuurj.duckdns.org"; classtype:attempted-recon; sid:200021767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tmxdonrrni.duckdns.org"; classtype:attempted-recon; sid:200021768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tncapgyjyo.duckdns.org"; classtype:attempted-recon; sid:200021769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tneocvedgf.duckdns.org"; classtype:attempted-recon; sid:200021770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnieweyryl.duckdns.org"; classtype:attempted-recon; sid:200021771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnijurl.com"; classtype:attempted-recon; sid:200021772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnnnmixcke.duckdns.org"; classtype:attempted-recon; sid:200021773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnpklgtgbt.duckdns.org"; classtype:attempted-recon; sid:200021774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnqmpawgdv.duckdns.org"; classtype:attempted-recon; sid:200021775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnucmmehic.duckdns.org"; classtype:attempted-recon; sid:200021776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnwopexvpt.duckdns.org"; classtype:attempted-recon; sid:200021777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnxvlykkuj.duckdns.org"; classtype:attempted-recon; sid:200021778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"to-ken.biz"; classtype:attempted-recon; sid:200021779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toddler-town.com"; classtype:attempted-recon; sid:200021780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"todgiycksf.duckdns.org"; classtype:attempted-recon; sid:200021781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"togglebutton.pp5e.in"; classtype:attempted-recon; sid:200021782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toiefdzwbs.duckdns.org"; classtype:attempted-recon; sid:200021783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tomhglcicb.duckdns.org"; classtype:attempted-recon; sid:200021784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toodtfqgcc.duckdns.org"; classtype:attempted-recon; sid:200021785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"topbonusleon.com"; classtype:attempted-recon; sid:200021786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"topbosz.com"; classtype:attempted-recon; sid:200021787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"topgradespices.in"; classtype:attempted-recon; sid:200021788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"topielyhwu.duckdns.org"; classtype:attempted-recon; sid:200021789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"topleathershop.com"; classtype:attempted-recon; sid:200021790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"topskills.ru"; classtype:attempted-recon; sid:200021791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"topstocksolutions.com"; classtype:attempted-recon; sid:200021792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toramfree.cf"; classtype:attempted-recon; sid:200021793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"torccolborrachas.blogspot.com"; classtype:attempted-recon; sid:200021794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toshibafix.com"; classtype:attempted-recon; sid:200021795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tosyojgerp.duckdns.org"; classtype:attempted-recon; sid:200021796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"totalfitnessjuarez.com"; classtype:attempted-recon; sid:200021797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"touch-media.ro"; classtype:attempted-recon; sid:200021798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tournamentpubgfree.com"; classtype:attempted-recon; sid:200021799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toursbangla.com"; classtype:attempted-recon; sid:200021800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"touzgcyiqf.duckdns.org"; classtype:attempted-recon; sid:200021801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpddtgnjfr.duckdns.org"; classtype:attempted-recon; sid:200021802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpdmcjvgtl.duckdns.org"; classtype:attempted-recon; sid:200021803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpezkymvyd.duckdns.org"; classtype:attempted-recon; sid:200021804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tphxsazwev.duckdns.org"; classtype:attempted-recon; sid:200021805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpnipgiubm.duckdns.org"; classtype:attempted-recon; sid:200021806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpnmggmmjg.duckdns.org"; classtype:attempted-recon; sid:200021807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tppnnmxqnx.duckdns.org"; classtype:attempted-recon; sid:200021808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tppqtshxez.duckdns.org"; classtype:attempted-recon; sid:200021809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpqlasnnjg.duckdns.org"; classtype:attempted-recon; sid:200021810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tqdzwyzcur.duckdns.org"; classtype:attempted-recon; sid:200021811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tqlocktyia.duckdns.org"; classtype:attempted-recon; sid:200021812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tqnwosjejw.duckdns.org"; classtype:attempted-recon; sid:200021813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tqtwysayqq.duckdns.org"; classtype:attempted-recon; sid:200021814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tquokgkcoq.duckdns.org"; classtype:attempted-recon; sid:200021815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tqvcwycgir.duckdns.org"; classtype:attempted-recon; sid:200021816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tqybxmkeie.duckdns.org"; classtype:attempted-recon; sid:200021817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tr.cloudmagic.com"; classtype:attempted-recon; sid:200021818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trabalhoapartirdecasa.com"; classtype:attempted-recon; sid:200021819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-10083.firebaseapp.com"; classtype:attempted-recon; sid:200021820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-10083.web.app"; classtype:attempted-recon; sid:200021821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-20934.firebaseapp.com"; classtype:attempted-recon; sid:200021822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-20934.web.app"; classtype:attempted-recon; sid:200021823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id2907.firebaseapp.com"; classtype:attempted-recon; sid:200021824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id2907.web.app"; classtype:attempted-recon; sid:200021825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id4190.firebaseapp.com"; classtype:attempted-recon; sid:200021826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id4190.web.app"; classtype:attempted-recon; sid:200021827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id7297.firebaseapp.com"; classtype:attempted-recon; sid:200021828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id7297.web.app"; classtype:attempted-recon; sid:200021829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id8982.firebaseapp.com"; classtype:attempted-recon; sid:200021830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-id8982.web.app"; classtype:attempted-recon; sid:200021831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-redeliver.firebaseapp.com"; classtype:attempted-recon; sid:200021832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"track-redeliver.web.app"; classtype:attempted-recon; sid:200021833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trackerc.osend.in"; classtype:attempted-recon; sid:200021834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trackgroups.unaux.com"; classtype:attempted-recon; sid:200021835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tracking-correos.firebaseapp.com"; classtype:attempted-recon; sid:200021836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tracking-correos.web.app"; classtype:attempted-recon; sid:200021837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tracking-up.servequake.com"; classtype:attempted-recon; sid:200021838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tracking.de.cercle.design"; classtype:attempted-recon; sid:200021839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tracking.flowii.com"; classtype:attempted-recon; sid:200021840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trackingwebapps.com"; classtype:attempted-recon; sid:200021841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trackuse.ga"; classtype:attempted-recon; sid:200021842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trade-iq-option-2021.blogspot.com"; classtype:attempted-recon; sid:200021843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trade.dydx.exchange"; classtype:attempted-recon; sid:200021844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tradeproofupdate.dyndns.info"; classtype:attempted-recon; sid:200021845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trader.uniocean.org"; classtype:attempted-recon; sid:200021846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tradex-premium.com"; classtype:attempted-recon; sid:200021847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tradingbbex.com"; classtype:attempted-recon; sid:200021848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tradingplatformofficialsushiswa.tk"; classtype:attempted-recon; sid:200021849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tragicleafycodewarrior39393.homebank2.repl.co"; classtype:attempted-recon; sid:200021850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trailtire-auth-0ffice365-company.firebaseapp.com"; classtype:attempted-recon; sid:200021851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trailtire-auth-0ffice365-company.web.app"; classtype:attempted-recon; sid:200021852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trak-post-ch.clan.rip"; classtype:attempted-recon; sid:200021853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tramacol0002.hostfree.pw"; classtype:attempted-recon; sid:200021854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tramacol0006.hostfree.pw"; classtype:attempted-recon; sid:200021855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trams.mot.go.th"; classtype:attempted-recon; sid:200021856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transaccionalcreditospagos.liveblog365.com"; classtype:attempted-recon; sid:200021857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transaction-request-deny.com"; classtype:attempted-recon; sid:200021858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transcend.ae"; classtype:attempted-recon; sid:200021859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transfer-wisea.app.link"; classtype:attempted-recon; sid:200021860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transformaoesfinanceira.blogspot.com"; classtype:attempted-recon; sid:200021861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transitioncap.com"; classtype:attempted-recon; sid:200021862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transnetsporterminal.net"; classtype:attempted-recon; sid:200021863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transportal.hostfree.pw"; classtype:attempted-recon; sid:200021864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"transterp.com.br"; classtype:attempted-recon; sid:200021865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trasfigurables.firebaseapp.com"; classtype:attempted-recon; sid:200021866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trasfigurables.web.app"; classtype:attempted-recon; sid:200021867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"travelvisit-mexico.com"; classtype:attempted-recon; sid:200021868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"travlamp.com"; classtype:attempted-recon; sid:200021869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trbzegvnep.duckdns.org"; classtype:attempted-recon; sid:200021870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"treex.in"; classtype:attempted-recon; sid:200021871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trgracecompany.com"; classtype:attempted-recon; sid:200021872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trhgkj.com"; classtype:attempted-recon; sid:200021873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tribelio.page"; classtype:attempted-recon; sid:200021874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tribratanewsbondowoso.com"; classtype:attempted-recon; sid:200021875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tribufin.co.zw"; classtype:attempted-recon; sid:200021876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tribunbalikpapan.com"; classtype:attempted-recon; sid:200021877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trivians.pancakeswin.click"; classtype:attempted-recon; sid:200021878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trj52h.hyperphp.com"; classtype:attempted-recon; sid:200021879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trkselrpvc.duckdns.org"; classtype:attempted-recon; sid:200021880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trly.us"; classtype:attempted-recon; sid:200021881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tronwallet.com.cn"; classtype:attempted-recon; sid:200021882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trptpqtdcr.duckdns.org"; classtype:attempted-recon; sid:200021883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trubtpesmb.duckdns.org"; classtype:attempted-recon; sid:200021884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"truegrip.com"; classtype:attempted-recon; sid:200021885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trueid.stream"; classtype:attempted-recon; sid:200021886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trulynolen.co.mz"; classtype:attempted-recon; sid:200021887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"truspad-axieinfinity.com"; classtype:attempted-recon; sid:200021888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"truspad-bondly.com"; classtype:attempted-recon; sid:200021889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trustpad-app.com"; classtype:attempted-recon; sid:200021890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trustpadclaim.com"; classtype:attempted-recon; sid:200021891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trustwallettop.easy.co"; classtype:attempted-recon; sid:200021892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trutst.cn"; classtype:attempted-recon; sid:200021893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trwebkiewj.duckdns.org"; classtype:attempted-recon; sid:200021894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trya673434.260mb.net"; classtype:attempted-recon; sid:200021895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trymaxsurgical.com"; classtype:attempted-recon; sid:200021896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tscardjapan.work.gd"; classtype:attempted-recon; sid:200021897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tsdzgqneqg.duckdns.org"; classtype:attempted-recon; sid:200021898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tskaftzdej.duckdns.org"; classtype:attempted-recon; sid:200021899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tstapegjna.duckdns.org"; classtype:attempted-recon; sid:200021900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tswizlxwbk.duckdns.org"; classtype:attempted-recon; sid:200021901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttatithorritati.podcastheritage.fr"; classtype:attempted-recon; sid:200021902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttcswap.finance"; classtype:attempted-recon; sid:200021903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttczdvioll.duckdns.org"; classtype:attempted-recon; sid:200021904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttdgjszfjx.duckdns.org"; classtype:attempted-recon; sid:200021905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttiihhtgfg.duckdns.org"; classtype:attempted-recon; sid:200021906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttitkzgvpj.duckdns.org"; classtype:attempted-recon; sid:200021907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttlfcwzrzj.duckdns.org"; classtype:attempted-recon; sid:200021908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttqcsgitmr.duckdns.org"; classtype:attempted-recon; sid:200021909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttuuxqtupq.duckdns.org"; classtype:attempted-recon; sid:200021910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tubkcubqpp.duckdns.org"; classtype:attempted-recon; sid:200021911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tubytfcbvt.duckdns.org"; classtype:attempted-recon; sid:200021912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tudvcgcogx.duckdns.org"; classtype:attempted-recon; sid:200021913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tugcecolakbeauty.com"; classtype:attempted-recon; sid:200021914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tugowoqjsj.duckdns.org"; classtype:attempted-recon; sid:200021915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuinformaciontoken.galisopor.repl.co"; classtype:attempted-recon; sid:200021916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tukofertas.com.br"; classtype:attempted-recon; sid:200021917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuneahyt1.ml"; classtype:attempted-recon; sid:200021918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchabvx6.ml"; classtype:attempted-recon; sid:200021919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchaccn9.ml"; classtype:attempted-recon; sid:200021920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchaii13.tk"; classtype:attempted-recon; sid:200021921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchaiiyt7.ml"; classtype:attempted-recon; sid:200021922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchaiqw8.ml"; classtype:attempted-recon; sid:200021923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchajhg5.ml"; classtype:attempted-recon; sid:200021924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchajhg9.ml"; classtype:attempted-recon; sid:200021925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchajj3.ml"; classtype:attempted-recon; sid:200021926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchajqq7.ml"; classtype:attempted-recon; sid:200021927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchajtt10.ml"; classtype:attempted-recon; sid:200021928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchajzz6.ml"; classtype:attempted-recon; sid:200021929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchakk4.ml"; classtype:attempted-recon; sid:200021930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchakkm4.ml"; classtype:attempted-recon; sid:200021931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchali15.tk"; classtype:attempted-recon; sid:200021932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchalk14.tk"; classtype:attempted-recon; sid:200021933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchall8.ml"; classtype:attempted-recon; sid:200021934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchalop3.ml"; classtype:attempted-recon; sid:200021935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchanh1.ml"; classtype:attempted-recon; sid:200021936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchapp2.ml"; classtype:attempted-recon; sid:200021937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchaqq5.ml"; classtype:attempted-recon; sid:200021938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchauy2.ml"; classtype:attempted-recon; sid:200021939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchawk12.tk"; classtype:attempted-recon; sid:200021940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchaww11.tk"; classtype:attempted-recon; sid:200021941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tunecaptchayjn10.ml"; classtype:attempted-recon; sid:200021942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tupkvcquuw.duckdns.org"; classtype:attempted-recon; sid:200021943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuqya1616taa.unaux.com"; classtype:attempted-recon; sid:200021944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"turstwallet.live"; classtype:attempted-recon; sid:200021945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"turzyapfoy.duckdns.org"; classtype:attempted-recon; sid:200021946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuscantravel.com"; classtype:attempted-recon; sid:200021947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tusrzmmibb.duckdns.org"; classtype:attempted-recon; sid:200021948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tutor.iqsademo.com"; classtype:attempted-recon; sid:200021949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuxhpcpqxg.duckdns.org"; classtype:attempted-recon; sid:200021950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuy778kio09.liveblog365.com"; classtype:attempted-recon; sid:200021951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuy7a6w71.liveblog365.com"; classtype:attempted-recon; sid:200021952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuyainiciarcarlo.hostfree.pw"; classtype:attempted-recon; sid:200021953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuyaritagua.hostfree.pw"; classtype:attempted-recon; sid:200021954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuyarvadsghdfdg.great-site.net"; classtype:attempted-recon; sid:200021955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuyatargetone.ihostfull.com"; classtype:attempted-recon; sid:200021956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvgkaezyeu.duckdns.org"; classtype:attempted-recon; sid:200021957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvhlosnpfe.duckdns.org"; classtype:attempted-recon; sid:200021958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvhyezauts.duckdns.org"; classtype:attempted-recon; sid:200021959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvmlznxouh.duckdns.org"; classtype:attempted-recon; sid:200021960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvohcukdjq.duckdns.org"; classtype:attempted-recon; sid:200021961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvpfbbsnbj.duckdns.org"; classtype:attempted-recon; sid:200021962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvqhatqwei.duckdns.org"; classtype:attempted-recon; sid:200021963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvwdtbefgh.duckdns.org"; classtype:attempted-recon; sid:200021964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvwjhupkaj.duckdns.org"; classtype:attempted-recon; sid:200021965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvwpublvqv.duckdns.org"; classtype:attempted-recon; sid:200021966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tvycfizpsj.duckdns.org"; classtype:attempted-recon; sid:200021967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twibhokiandgraiyakischools.com"; classtype:attempted-recon; sid:200021968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twiiuuuhiw.duckdns.org"; classtype:attempted-recon; sid:200021969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twilig.semangatpuasaaa.workers.dev"; classtype:attempted-recon; sid:200021970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twilight-heart-6678.on.fleek.co"; classtype:attempted-recon; sid:200021971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twilight.recomfiermsite.workers.dev"; classtype:attempted-recon; sid:200021972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twins-asks-dinner-jd.trycloudflare.com"; classtype:attempted-recon; sid:200021973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twitter-customer.com"; classtype:attempted-recon; sid:200021974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twitter-helpcustom.com"; classtype:attempted-recon; sid:200021975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twittercustom-help.com"; classtype:attempted-recon; sid:200021976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twittercustoms-help.com"; classtype:attempted-recon; sid:200021977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twittercustoms.com"; classtype:attempted-recon; sid:200021978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twittermanagerhelp.com"; classtype:attempted-recon; sid:200021979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twitterreporterhelp.com"; classtype:attempted-recon; sid:200021980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twoeinrekldaskaan5699.2ix.ch"; classtype:attempted-recon; sid:200021981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twuujooshe.duckdns.org"; classtype:attempted-recon; sid:200021982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twvagmzxxr.duckdns.org"; classtype:attempted-recon; sid:200021983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twwskdcolf.duckdns.org"; classtype:attempted-recon; sid:200021984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twwypfgdus.duckdns.org"; classtype:attempted-recon; sid:200021985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twxudmdrms.duckdns.org"; classtype:attempted-recon; sid:200021986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"twztorcyqm.duckdns.org"; classtype:attempted-recon; sid:200021987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txclmxzdrw.duckdns.org"; classtype:attempted-recon; sid:200021988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txctbsfedi.duckdns.org"; classtype:attempted-recon; sid:200021989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txctxrlhhz.duckdns.org"; classtype:attempted-recon; sid:200021990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txewbfwcoi.duckdns.org"; classtype:attempted-recon; sid:200021991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txgnbclkxp.duckdns.org"; classtype:attempted-recon; sid:200021992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txvcaxhndb.duckdns.org"; classtype:attempted-recon; sid:200021993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txxgytgzsw.duckdns.org"; classtype:attempted-recon; sid:200021994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"txzrkfsvgh.duckdns.org"; classtype:attempted-recon; sid:200021995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyaco402.hostfree.pw"; classtype:attempted-recon; sid:200021996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyaprtlahsbj.hostfree.pw"; classtype:attempted-recon; sid:200021997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tycmhrbwvl.duckdns.org"; classtype:attempted-recon; sid:200021998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyevnrhmye.duckdns.org"; classtype:attempted-recon; sid:200021999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyfgsdtagz.duckdns.org"; classtype:attempted-recon; sid:200022000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyhptxjltl.duckdns.org"; classtype:attempted-recon; sid:200022001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyjlfevjhk.duckdns.org"; classtype:attempted-recon; sid:200022002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyrolevent.com"; classtype:attempted-recon; sid:200022003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyrvntbtni.duckdns.org"; classtype:attempted-recon; sid:200022004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyseycxajn.duckdns.org"; classtype:attempted-recon; sid:200022005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tysnzzloym.duckdns.org"; classtype:attempted-recon; sid:200022006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tytagxpvhn.duckdns.org"; classtype:attempted-recon; sid:200022007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyuxidplgn.duckdns.org"; classtype:attempted-recon; sid:200022008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyvrkdumoa.duckdns.org"; classtype:attempted-recon; sid:200022009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyxsseccny.duckdns.org"; classtype:attempted-recon; sid:200022010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzfbqhykao.duckdns.org"; classtype:attempted-recon; sid:200022011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzhhgvrapq.duckdns.org"; classtype:attempted-recon; sid:200022012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzhzcdpbzd.duckdns.org"; classtype:attempted-recon; sid:200022013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzmufd.com"; classtype:attempted-recon; sid:200022014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzoieonviu.duckdns.org"; classtype:attempted-recon; sid:200022015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzsihhjfow.duckdns.org"; classtype:attempted-recon; sid:200022016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzstgsgxkz.duckdns.org"; classtype:attempted-recon; sid:200022017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzuakldhwf.duckdns.org"; classtype:attempted-recon; sid:200022018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzuwihfxeu.duckdns.org"; classtype:attempted-recon; sid:200022019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzvludjrmz.duckdns.org"; classtype:attempted-recon; sid:200022020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzwelnyvya.duckdns.org"; classtype:attempted-recon; sid:200022021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzyvrbkjbp.duckdns.org"; classtype:attempted-recon; sid:200022022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u14511627.ct.sendgrid.net"; classtype:attempted-recon; sid:200022023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u1742042.cp.regruhosting.ru"; classtype:attempted-recon; sid:200022024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u18741649.ct.sendgrid.net"; classtype:attempted-recon; sid:200022025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u28745652.ct.sendgrid.net"; classtype:attempted-recon; sid:200022026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u38222p90598.web0133.zxcs-klant.nl"; classtype:attempted-recon; sid:200022027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u3vii.codesandbox.io"; classtype:attempted-recon; sid:200022028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u4mwtv8bwaaxgr.000webhostapp.com"; classtype:attempted-recon; sid:200022029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uacceui-one.xyz"; classtype:attempted-recon; sid:200022030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uaegmbexxf.duckdns.org"; classtype:attempted-recon; sid:200022031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uaisrleezv.duckdns.org"; classtype:attempted-recon; sid:200022032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uat-new.wcv.com"; classtype:attempted-recon; sid:200022033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uazrzqxqjb.duckdns.org"; classtype:attempted-recon; sid:200022034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubangr-scure-grnet.firebaseapp.com"; classtype:attempted-recon; sid:200022035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubangr-scure-grnet.web.app"; classtype:attempted-recon; sid:200022036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubcdyocfqq.duckdns.org"; classtype:attempted-recon; sid:200022037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubdanezotu.duckdns.org"; classtype:attempted-recon; sid:200022038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubeonvifys.duckdns.org"; classtype:attempted-recon; sid:200022039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubniokpyzx.duckdns.org"; classtype:attempted-recon; sid:200022040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubrfmitqec.duckdns.org"; classtype:attempted-recon; sid:200022041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubrfnsamfu.duckdns.org"; classtype:attempted-recon; sid:200022042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ubydtupeqs.duckdns.org"; classtype:attempted-recon; sid:200022043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ucbonline.com"; classtype:attempted-recon; sid:200022044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uccoussakg.duckdns.org"; classtype:attempted-recon; sid:200022045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ucgriadugz.duckdns.org"; classtype:attempted-recon; sid:200022046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uckmavcaio.duckdns.org"; classtype:attempted-recon; sid:200022047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ucltougkdh.duckdns.org"; classtype:attempted-recon; sid:200022048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ucofez.cf"; classtype:attempted-recon; sid:200022049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uconn-edu-online.weebly.com"; classtype:attempted-recon; sid:200022050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ucruhmnrqn.duckdns.org"; classtype:attempted-recon; sid:200022051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ucrzhuquin.duckdns.org"; classtype:attempted-recon; sid:200022052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ucyuhzzcpp.duckdns.org"; classtype:attempted-recon; sid:200022053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uczpnmhaqs.duckdns.org"; classtype:attempted-recon; sid:200022054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udanbhnnjm.duckdns.org"; classtype:attempted-recon; sid:200022055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udbetaling-sygeforsikring.web.app"; classtype:attempted-recon; sid:200022056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udiggmbpmd.duckdns.org"; classtype:attempted-recon; sid:200022057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udjntjdcfq.duckdns.org"; classtype:attempted-recon; sid:200022058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udlvtszjes.duckdns.org"; classtype:attempted-recon; sid:200022059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udmappbaev.duckdns.org"; classtype:attempted-recon; sid:200022060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udnmjhpzng.duckdns.org"; classtype:attempted-recon; sid:200022061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udobxcltxj.duckdns.org"; classtype:attempted-recon; sid:200022062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udvcxhjris.duckdns.org"; classtype:attempted-recon; sid:200022063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uebhydqqss.duckdns.org"; classtype:attempted-recon; sid:200022064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uecknwdfxw.duckdns.org"; classtype:attempted-recon; sid:200022065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uecrtvaqei.duckdns.org"; classtype:attempted-recon; sid:200022066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ueeanoarna.duckdns.org"; classtype:attempted-recon; sid:200022067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uehlbojbkp.duckdns.org"; classtype:attempted-recon; sid:200022068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uejpazepgv.duckdns.org"; classtype:attempted-recon; sid:200022069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uetzuwzniu.duckdns.org"; classtype:attempted-recon; sid:200022070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ueuoirldqq.duckdns.org"; classtype:attempted-recon; sid:200022071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufae-bet191.com"; classtype:attempted-recon; sid:200022072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufaiawrycn.duckdns.org"; classtype:attempted-recon; sid:200022073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufazz.shop"; classtype:attempted-recon; sid:200022074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufdhpsijll.duckdns.org"; classtype:attempted-recon; sid:200022075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufeqrqqpoo.duckdns.org"; classtype:attempted-recon; sid:200022076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uffbqadkxe.duckdns.org"; classtype:attempted-recon; sid:200022077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufnkooqrdd.duckdns.org"; classtype:attempted-recon; sid:200022078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufnttsfjtm.duckdns.org"; classtype:attempted-recon; sid:200022079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uftkxkkaza.duckdns.org"; classtype:attempted-recon; sid:200022080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uftoken.org"; classtype:attempted-recon; sid:200022081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufuynbnxxe.duckdns.org"; classtype:attempted-recon; sid:200022082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ufvasnnjpb.duckdns.org"; classtype:attempted-recon; sid:200022083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugcgobicdy.duckdns.org"; classtype:attempted-recon; sid:200022084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ughnxdvnhn.duckdns.org"; classtype:attempted-recon; sid:200022085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugjwbayfpv.duckdns.org"; classtype:attempted-recon; sid:200022086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugkbqvetny.firebaseapp.com"; classtype:attempted-recon; sid:200022087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugkbqvetny.web.app"; classtype:attempted-recon; sid:200022088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugqkvwoeel.duckdns.org"; classtype:attempted-recon; sid:200022089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugxknsuaij.duckdns.org"; classtype:attempted-recon; sid:200022090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugxoytseet.duckdns.org"; classtype:attempted-recon; sid:200022091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ugyftdraq.hostfree.pw"; classtype:attempted-recon; sid:200022092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhadlqzqhz.duckdns.org"; classtype:attempted-recon; sid:200022093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhbtkuhqhj.duckdns.org"; classtype:attempted-recon; sid:200022094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhinwltqwn.duckdns.org"; classtype:attempted-recon; sid:200022095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhjtnqegvt.duckdns.org"; classtype:attempted-recon; sid:200022096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhkbwsvsgv.duckdns.org"; classtype:attempted-recon; sid:200022097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhoiwywiyn.duckdns.org"; classtype:attempted-recon; sid:200022098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhtaudnruz.firebaseapp.com"; classtype:attempted-recon; sid:200022099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uhtaudnruz.web.app"; classtype:attempted-recon; sid:200022100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uiazhknoip.duckdns.org"; classtype:attempted-recon; sid:200022101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uibyppfzwf.duckdns.org"; classtype:attempted-recon; sid:200022102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uidengojlj.duckdns.org"; classtype:attempted-recon; sid:200022103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uierjygeiz.duckdns.org"; classtype:attempted-recon; sid:200022104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uikposquhg.duckdns.org"; classtype:attempted-recon; sid:200022105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uikzrfkdbz.duckdns.org"; classtype:attempted-recon; sid:200022106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uiqpjokijh.duckdns.org"; classtype:attempted-recon; sid:200022107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uiqpo-xqaaa-aaaad-qdvda-cai.raw.ic0.app"; classtype:attempted-recon; sid:200022108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uirmmyzseo.duckdns.org"; classtype:attempted-recon; sid:200022109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uisbricarw.hyperphp.com"; classtype:attempted-recon; sid:200022110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uitbfxripp.duckdns.org"; classtype:attempted-recon; sid:200022111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uitpdohbap.duckdns.org"; classtype:attempted-recon; sid:200022112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uiuhvnifas.duckdns.org"; classtype:attempted-recon; sid:200022113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uiwcrzeuly.duckdns.org"; classtype:attempted-recon; sid:200022114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uiycqernbx.duckdns.org"; classtype:attempted-recon; sid:200022115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uiysyfuyjp.duckdns.org"; classtype:attempted-recon; sid:200022116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujhltbibvc.duckdns.org"; classtype:attempted-recon; sid:200022117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujkwlgvezv.duckdns.org"; classtype:attempted-recon; sid:200022118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujlwzxqcfb.duckdns.org"; classtype:attempted-recon; sid:200022119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujsfojferp.duckdns.org"; classtype:attempted-recon; sid:200022120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujuziuxzxg.duckdns.org"; classtype:attempted-recon; sid:200022121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujvalbhsmk.duckdns.org"; classtype:attempted-recon; sid:200022122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujwdywnoza.duckdns.org"; classtype:attempted-recon; sid:200022123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujzpamnnrb.duckdns.org"; classtype:attempted-recon; sid:200022124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uk-evri-reschedule.firebaseapp.com"; classtype:attempted-recon; sid:200022125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uk-evri-reschedule.web.app"; classtype:attempted-recon; sid:200022126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uk-package-evri.firebaseapp.com"; classtype:attempted-recon; sid:200022127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uk-package-evri.web.app"; classtype:attempted-recon; sid:200022128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukaobdlbak.duckdns.org"; classtype:attempted-recon; sid:200022129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukbcjfgqzb.duckdns.org"; classtype:attempted-recon; sid:200022130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukd6s.hyperphp.com"; classtype:attempted-recon; sid:200022131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukehkmbgch.duckdns.org"; classtype:attempted-recon; sid:200022132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukenzysiqq.duckdns.org"; classtype:attempted-recon; sid:200022133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukhbzuzbuz.duckdns.org"; classtype:attempted-recon; sid:200022134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukixyyjamz.duckdns.org"; classtype:attempted-recon; sid:200022135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukqpdqqvqe.duckdns.org"; classtype:attempted-recon; sid:200022136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukqxnslezg.duckdns.org"; classtype:attempted-recon; sid:200022137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukraineconsulatelib.azurewebsites.net"; classtype:attempted-recon; sid:200022138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukrt1s.hyperphp.com"; classtype:attempted-recon; sid:200022139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukwnhmcfxj.duckdns.org"; classtype:attempted-recon; sid:200022140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ukzgextebf.duckdns.org"; classtype:attempted-recon; sid:200022141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulbmsskmfp.duckdns.org"; classtype:attempted-recon; sid:200022142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulgroup.ca"; classtype:attempted-recon; sid:200022143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulhhaqqcvk.duckdns.org"; classtype:attempted-recon; sid:200022144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulicmgsvcc.duckdns.org"; classtype:attempted-recon; sid:200022145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulillzomih.duckdns.org"; classtype:attempted-recon; sid:200022146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uljtfbpxfp.duckdns.org"; classtype:attempted-recon; sid:200022147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulnoingray.duckdns.org"; classtype:attempted-recon; sid:200022148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulouarodpl.duckdns.org"; classtype:attempted-recon; sid:200022149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ultimatepitifulsnake.bloqueo2.repl.co"; classtype:attempted-recon; sid:200022150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ululafjfih.duckdns.org"; classtype:attempted-recon; sid:200022151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulxclmwgzq.duckdns.org"; classtype:attempted-recon; sid:200022152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ulykoagley.duckdns.org"; classtype:attempted-recon; sid:200022153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"umbptwefrb.duckdns.org"; classtype:attempted-recon; sid:200022154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"umcicdfoht.duckdns.org"; classtype:attempted-recon; sid:200022155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ume.la"; classtype:attempted-recon; sid:200022156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"umeqcbxpny.duckdns.org"; classtype:attempted-recon; sid:200022157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"umklzgexdq.duckdns.org"; classtype:attempted-recon; sid:200022158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ums7r.us"; classtype:attempted-recon; sid:200022159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"umu.link"; classtype:attempted-recon; sid:200022160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"umvrnedasw.duckdns.org"; classtype:attempted-recon; sid:200022161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"umvufpysnj.duckdns.org"; classtype:attempted-recon; sid:200022162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"un1cef.org"; classtype:attempted-recon; sid:200022163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"un1p4r54653.duckdns.org"; classtype:attempted-recon; sid:200022164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unam.myfreesites.net"; classtype:attempted-recon; sid:200022165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"undergroundbats.com"; classtype:attempted-recon; sid:200022166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uneedparts.ca"; classtype:attempted-recon; sid:200022167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unexciting-geograph.000webhostapp.com"; classtype:attempted-recon; sid:200022168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unhwetetns.duckdns.org"; classtype:attempted-recon; sid:200022169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniassessoria.com.br"; classtype:attempted-recon; sid:200022170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unibper.eu"; classtype:attempted-recon; sid:200022171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unicreditaustria.ucs.info"; classtype:attempted-recon; sid:200022172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unioncredidesarrollo.com"; classtype:attempted-recon; sid:200022173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unionheightsresidental.com"; classtype:attempted-recon; sid:200022174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unionn.webcindario.com"; classtype:attempted-recon; sid:200022175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniqueproductshop.superglobalmall.com"; classtype:attempted-recon; sid:200022176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unisons.store"; classtype:attempted-recon; sid:200022177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unisonsouthayr.org.uk"; classtype:attempted-recon; sid:200022178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap-event.org"; classtype:attempted-recon; sid:200022179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap-exchanges.com"; classtype:attempted-recon; sid:200022180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap-org-finance.ml"; classtype:attempted-recon; sid:200022181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap.openwallet.dev"; classtype:attempted-recon; sid:200022182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap.pages.dev"; classtype:attempted-recon; sid:200022183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap.samvitello.com"; classtype:attempted-recon; sid:200022184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap.token.im"; classtype:attempted-recon; sid:200022185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap.umidao.org"; classtype:attempted-recon; sid:200022186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswap.v2.testnet.pulsechain.com"; classtype:attempted-recon; sid:200022187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswapfinancing.info"; classtype:attempted-recon; sid:200022188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswaphome.com"; classtype:attempted-recon; sid:200022189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uniswappro.org"; classtype:attempted-recon; sid:200022190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unitedpservice-update.com"; classtype:attempted-recon; sid:200022191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unitedsolutions.pk"; classtype:attempted-recon; sid:200022192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"univmixte.boxmode.io"; classtype:attempted-recon; sid:200022193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unjardinideal.com"; classtype:attempted-recon; sid:200022194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unjknlphfo.duckdns.org"; classtype:attempted-recon; sid:200022195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unkaygppax.duckdns.org"; classtype:attempted-recon; sid:200022196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unlocked5rgrkyvha.xyz"; classtype:attempted-recon; sid:200022197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unluxorenu.duckdns.org"; classtype:attempted-recon; sid:200022198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unmttosbti.duckdns.org"; classtype:attempted-recon; sid:200022199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unojapano.com"; classtype:attempted-recon; sid:200022200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unrifled-harpoon.000webhostapp.com"; classtype:attempted-recon; sid:200022201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unryzroktj.duckdns.org"; classtype:attempted-recon; sid:200022202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unsub.listhandlr.com"; classtype:attempted-recon; sid:200022203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unwkxjgliz.duckdns.org"; classtype:attempted-recon; sid:200022204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unyku.id"; classtype:attempted-recon; sid:200022205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unzghycquh.duckdns.org"; classtype:attempted-recon; sid:200022206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unzixmcdbt.duckdns.org"; classtype:attempted-recon; sid:200022207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unznjrpoya.duckdns.org"; classtype:attempted-recon; sid:200022208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uoaoblutic.duckdns.org"; classtype:attempted-recon; sid:200022209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uobdhcjnot.duckdns.org"; classtype:attempted-recon; sid:200022210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uodremaujj.duckdns.org"; classtype:attempted-recon; sid:200022211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uormrykgrm.duckdns.org"; classtype:attempted-recon; sid:200022212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uoshntjjwx.duckdns.org"; classtype:attempted-recon; sid:200022213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uovnwyutaz.duckdns.org"; classtype:attempted-recon; sid:200022214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uoyrmlrywj.duckdns.org"; classtype:attempted-recon; sid:200022215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uozybriphe.duckdns.org"; classtype:attempted-recon; sid:200022216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"up5283773-298.firebaseapp.com"; classtype:attempted-recon; sid:200022217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"up5283773-298.web.app"; classtype:attempted-recon; sid:200022218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upbearin.xyz"; classtype:attempted-recon; sid:200022219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upceshop.cn"; classtype:attempted-recon; sid:200022220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upcpnzixtk.duckdns.org"; classtype:attempted-recon; sid:200022221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updat3s.atts3rvices.workers.dev"; classtype:attempted-recon; sid:200022222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"update-doc.list-project-shared.workers.dev"; classtype:attempted-recon; sid:200022223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"update.attservice.workers.dev"; classtype:attempted-recon; sid:200022224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"update.ilwg.ge"; classtype:attempted-recon; sid:200022225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"update.zlmbra.com"; classtype:attempted-recon; sid:200022226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updateaccout.chipilin.mx"; classtype:attempted-recon; sid:200022227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updateaddres-delivery.com"; classtype:attempted-recon; sid:200022228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updateaddress-ups.com"; classtype:attempted-recon; sid:200022229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updateatt19.wixsite.com"; classtype:attempted-recon; sid:200022230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatecenter01378.myportfolio.com"; classtype:attempted-recon; sid:200022231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatecenter013780ba.myportfolio.com"; classtype:attempted-recon; sid:200022232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updateeee.godaddysites.com"; classtype:attempted-recon; sid:200022233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updateservices.mymom.info"; classtype:attempted-recon; sid:200022234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatess.cfzijxcsp.workers.dev"; classtype:attempted-recon; sid:200022235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatevoda-billing.com"; classtype:attempted-recon; sid:200022236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatewindow12.chipilin.mx"; classtype:attempted-recon; sid:200022237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updhlfsnjy.duckdns.org"; classtype:attempted-recon; sid:200022238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updolpbomy.duckdns.org"; classtype:attempted-recon; sid:200022239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upfhemmqxr.duckdns.org"; classtype:attempted-recon; sid:200022240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upgrademaillimite.weebly.com"; classtype:attempted-recon; sid:200022241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upjdvplxhc.duckdns.org"; classtype:attempted-recon; sid:200022242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uplchnikgp.duckdns.org"; classtype:attempted-recon; sid:200022243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uploads.codesandbox.io"; classtype:attempted-recon; sid:200022244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upmdoyojlk.duckdns.org"; classtype:attempted-recon; sid:200022245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upnschgyur.duckdns.org"; classtype:attempted-recon; sid:200022246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uprqtzddlt.duckdns.org"; classtype:attempted-recon; sid:200022247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ups-orderupdate.com"; classtype:attempted-recon; sid:200022248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ups-serviceupdate.com"; classtype:attempted-recon; sid:200022249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upservday.com"; classtype:attempted-recon; sid:200022250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upsserviceverification.com"; classtype:attempted-recon; sid:200022251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uptiurncmn.duckdns.org"; classtype:attempted-recon; sid:200022252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upvdxqlnss.duckdns.org"; classtype:attempted-recon; sid:200022253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upwowdnjru.duckdns.org"; classtype:attempted-recon; sid:200022254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"upxvzestqd.duckdns.org"; classtype:attempted-recon; sid:200022255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqauvmazwo.duckdns.org"; classtype:attempted-recon; sid:200022256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqeactesei.duckdns.org"; classtype:attempted-recon; sid:200022257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqeigqmeyx.duckdns.org"; classtype:attempted-recon; sid:200022258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqgvwvqkir.duckdns.org"; classtype:attempted-recon; sid:200022259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqgxddntjw.duckdns.org"; classtype:attempted-recon; sid:200022260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqmrnxvjci.duckdns.org"; classtype:attempted-recon; sid:200022261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqngcdszkv.duckdns.org"; classtype:attempted-recon; sid:200022262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqpdaypshy.duckdns.org"; classtype:attempted-recon; sid:200022263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqrhesditz.duckdns.org"; classtype:attempted-recon; sid:200022264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqsgduicri.duckdns.org"; classtype:attempted-recon; sid:200022265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqudhjhwkb.duckdns.org"; classtype:attempted-recon; sid:200022266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqwtiipgte.duckdns.org"; classtype:attempted-recon; sid:200022267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqypyvwmif.duckdns.org"; classtype:attempted-recon; sid:200022268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urdboceuly.duckdns.org"; classtype:attempted-recon; sid:200022269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uri.im"; classtype:attempted-recon; sid:200022270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uriaueo.top"; classtype:attempted-recon; sid:200022271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urjbzojmmy.duckdns.org"; classtype:attempted-recon; sid:200022272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"url.fti.or.th"; classtype:attempted-recon; sid:200022273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"url.xcode.no"; classtype:attempted-recon; sid:200022274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urli.ws"; classtype:attempted-recon; sid:200022275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urnic.com"; classtype:attempted-recon; sid:200022276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urpziolfxj.duckdns.org"; classtype:attempted-recon; sid:200022277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urs6rj.hyperphp.com"; classtype:attempted-recon; sid:200022278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urtigocolmbumbajiehfuerhfqe.liveblog365.com"; classtype:attempted-recon; sid:200022279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urvgcikjwg.duckdns.org"; classtype:attempted-recon; sid:200022280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urwogpohny.duckdns.org"; classtype:attempted-recon; sid:200022281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urzetvstbp.duckdns.org"; classtype:attempted-recon; sid:200022282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-brooksrun.top"; classtype:attempted-recon; sid:200022283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-east1-decoded-battery-359205.cloudfunctions.net"; classtype:attempted-recon; sid:200022284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-east1-diesel-practice-355319.cloudfunctions.net"; classtype:attempted-recon; sid:200022285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-east1-fine-blueprint-359703.cloudfunctions.net"; classtype:attempted-recon; sid:200022286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-east4-clean-algebra-356021.cloudfunctions.net"; classtype:attempted-recon; sid:200022287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-newmontcorp.com"; classtype:attempted-recon; sid:200022288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-pack-forward-usps-reshipping.com"; classtype:attempted-recon; sid:200022289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-pservice-parcel.com"; classtype:attempted-recon; sid:200022290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"us-west4-mercurial-idiom-334123.cloudfunctions.net"; classtype:attempted-recon; sid:200022291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usdc-trx.com"; classtype:attempted-recon; sid:200022292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usdelivery-tracking.com"; classtype:attempted-recon; sid:200022293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usdfninmxq.duckdns.org"; classtype:attempted-recon; sid:200022294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usdt-finance.cc"; classtype:attempted-recon; sid:200022295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usdt-pos.org"; classtype:attempted-recon; sid:200022296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"used-jaccs--jp-login1.workers.dev"; classtype:attempted-recon; sid:200022297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usegrmlcmg.duckdns.org"; classtype:attempted-recon; sid:200022298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"user-mtb01.hufeer.ir"; classtype:attempted-recon; sid:200022299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"user-olivierclemot.flazio.com"; classtype:attempted-recon; sid:200022300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"user-pudgypen.xyz"; classtype:attempted-recon; sid:200022301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"user.cdn8372978423.com"; classtype:attempted-recon; sid:200022302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"userboitevocalweb.flazio.com"; classtype:attempted-recon; sid:200022303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"userhelpdesk6.duckdns.org"; classtype:attempted-recon; sid:200022304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"userinformationstoreupdatesmail.pages.dev"; classtype:attempted-recon; sid:200022305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"users.tpg.com.au"; classtype:attempted-recon; sid:200022306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ushcaqhnly.duckdns.org"; classtype:attempted-recon; sid:200022307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usmogzlckq.duckdns.org"; classtype:attempted-recon; sid:200022308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps-modify.psyda.shop"; classtype:attempted-recon; sid:200022309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.fail.delivery.ptpnxiv.com"; classtype:attempted-recon; sid:200022310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspscity.com"; classtype:attempted-recon; sid:200022311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsrequesting.com"; classtype:attempted-recon; sid:200022312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspstrackingintercom-ba5f54.ingress-erytho.ewp.live"; classtype:attempted-recon; sid:200022313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspyapione.duckdns.org"; classtype:attempted-recon; sid:200022314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ussppss.blogspot.com"; classtype:attempted-recon; sid:200022315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ustsoxtasg.duckdns.org"; classtype:attempted-recon; sid:200022316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ustsxyjzrr.duckdns.org"; classtype:attempted-recon; sid:200022317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usuwanieadblue.pl"; classtype:attempted-recon; sid:200022318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usvfeywmse.duckdns.org"; classtype:attempted-recon; sid:200022319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usvnxsjtib.duckdns.org"; classtype:attempted-recon; sid:200022320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utctspvggr.duckdns.org"; classtype:attempted-recon; sid:200022321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utdrptksrv.duckdns.org"; classtype:attempted-recon; sid:200022322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utfgfkkwvv.duckdns.org"; classtype:attempted-recon; sid:200022323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uthjzkziyo.duckdns.org"; classtype:attempted-recon; sid:200022324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utkkkjymyy.duckdns.org"; classtype:attempted-recon; sid:200022325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utoabdjvcn.duckdns.org"; classtype:attempted-recon; sid:200022326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utoymnxebq.duckdns.org"; classtype:attempted-recon; sid:200022327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utqwobhacx.duckdns.org"; classtype:attempted-recon; sid:200022328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utrsrrvicw.duckdns.org"; classtype:attempted-recon; sid:200022329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utyablxoyu.duckdns.org"; classtype:attempted-recon; sid:200022330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utzllzwzbm.duckdns.org"; classtype:attempted-recon; sid:200022331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uucawbybqh.duckdns.org"; classtype:attempted-recon; sid:200022332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uucorbhyqh.duckdns.org"; classtype:attempted-recon; sid:200022333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uugamwvohg.duckdns.org"; classtype:attempted-recon; sid:200022334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uunqmzmwxe.duckdns.org"; classtype:attempted-recon; sid:200022335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uuprgegoop.duckdns.org"; classtype:attempted-recon; sid:200022336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uurmywffpy.duckdns.org"; classtype:attempted-recon; sid:200022337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uuvuejktzc.duckdns.org"; classtype:attempted-recon; sid:200022338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uuwfexgrhp.duckdns.org"; classtype:attempted-recon; sid:200022339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uuwhwokmiy.duckdns.org"; classtype:attempted-recon; sid:200022340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uv09s6357.riggearf.com"; classtype:attempted-recon; sid:200022341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvafrozmxr.duckdns.org"; classtype:attempted-recon; sid:200022342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvbpudlygx.duckdns.org"; classtype:attempted-recon; sid:200022343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uverdnes.cz"; classtype:attempted-recon; sid:200022344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvhwourlbc.duckdns.org"; classtype:attempted-recon; sid:200022345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvhxilwzgk.duckdns.org"; classtype:attempted-recon; sid:200022346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvicmbvuho.duckdns.org"; classtype:attempted-recon; sid:200022347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvjjwwwwjb.duckdns.org"; classtype:attempted-recon; sid:200022348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvodvtyenz.duckdns.org"; classtype:attempted-recon; sid:200022349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvqxradzmm.duckdns.org"; classtype:attempted-recon; sid:200022350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvrtpprdxd.duckdns.org"; classtype:attempted-recon; sid:200022351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvvwgrtaom.duckdns.org"; classtype:attempted-recon; sid:200022352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uvvxovihkr.duckdns.org"; classtype:attempted-recon; sid:200022353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwcrcugpsz.duckdns.org"; classtype:attempted-recon; sid:200022354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwfihrcvtg.duckdns.org"; classtype:attempted-recon; sid:200022355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwhshykitk.duckdns.org"; classtype:attempted-recon; sid:200022356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwiavshhrq.duckdns.org"; classtype:attempted-recon; sid:200022357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwiimdmwvs.duckdns.org"; classtype:attempted-recon; sid:200022358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwkbvaduha.duckdns.org"; classtype:attempted-recon; sid:200022359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwmcfbwyix.duckdns.org"; classtype:attempted-recon; sid:200022360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwpxfmezys.duckdns.org"; classtype:attempted-recon; sid:200022361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwrqzjnqzw.duckdns.org"; classtype:attempted-recon; sid:200022362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwsltmkcct.duckdns.org"; classtype:attempted-recon; sid:200022363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwuvlexsvz.duckdns.org"; classtype:attempted-recon; sid:200022364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwvbprbywd.duckdns.org"; classtype:attempted-recon; sid:200022365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwxtemuoap.duckdns.org"; classtype:attempted-recon; sid:200022366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxggvqlwgb.duckdns.org"; classtype:attempted-recon; sid:200022367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxjgupgpjl.duckdns.org"; classtype:attempted-recon; sid:200022368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxplyla1.ml"; classtype:attempted-recon; sid:200022369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxplyla3.ml"; classtype:attempted-recon; sid:200022370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxplyla4.tk"; classtype:attempted-recon; sid:200022371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxpqerqpoz.duckdns.org"; classtype:attempted-recon; sid:200022372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxs8ti.csb.app"; classtype:attempted-recon; sid:200022373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxtykuxfvc.duckdns.org"; classtype:attempted-recon; sid:200022374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxuoeyewpu.duckdns.org"; classtype:attempted-recon; sid:200022375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uxzordzxlt.duckdns.org"; classtype:attempted-recon; sid:200022376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uyataandrrellosvb.liveblog365.com"; classtype:attempted-recon; sid:200022377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uyataoveolandsdfadf.liveblog365.com"; classtype:attempted-recon; sid:200022378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uycqbrbykl.duckdns.org"; classtype:attempted-recon; sid:200022379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uygdeuiedgiuedu-5nsgrscxl6364789.codeanyapp.com"; classtype:attempted-recon; sid:200022380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uygjzxbqwz.duckdns.org"; classtype:attempted-recon; sid:200022381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uygxomgohy.duckdns.org"; classtype:attempted-recon; sid:200022382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uykclaafie.duckdns.org"; classtype:attempted-recon; sid:200022383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uykkiixgao.duckdns.org"; classtype:attempted-recon; sid:200022384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uytaportameniuheufasdf.liveblog365.com"; classtype:attempted-recon; sid:200022385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uytfgyiiif.duckdns.org"; classtype:attempted-recon; sid:200022386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uyukaevgxa.duckdns.org"; classtype:attempted-recon; sid:200022387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uyupamvbiy.duckdns.org"; classtype:attempted-recon; sid:200022388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uyuropgymds.ihostfull.com"; classtype:attempted-recon; sid:200022389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uywuqvysup.duckdns.org"; classtype:attempted-recon; sid:200022390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzbbv-dyaaa-aaaad-qds5a-cai.ic0.app"; classtype:attempted-recon; sid:200022391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzcwkdvrnv.duckdns.org"; classtype:attempted-recon; sid:200022392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzdoyzk2.cf"; classtype:attempted-recon; sid:200022393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzdoyzk6.ga"; classtype:attempted-recon; sid:200022394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzdoyzk7.ga"; classtype:attempted-recon; sid:200022395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzfnoyujes.duckdns.org"; classtype:attempted-recon; sid:200022396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzglxprpyh.duckdns.org"; classtype:attempted-recon; sid:200022397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzinjfijwg.duckdns.org"; classtype:attempted-recon; sid:200022398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzlvhrpauf.duckdns.org"; classtype:attempted-recon; sid:200022399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzlzdyqfgc.duckdns.org"; classtype:attempted-recon; sid:200022400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzrzfmggnh.duckdns.org"; classtype:attempted-recon; sid:200022401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzsgfysypl.duckdns.org"; classtype:attempted-recon; sid:200022402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzshsgojke.duckdns.org"; classtype:attempted-recon; sid:200022403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzsnugowel.duckdns.org"; classtype:attempted-recon; sid:200022404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzveaheaju.duckdns.org"; classtype:attempted-recon; sid:200022405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzwtftywme.duckdns.org"; classtype:attempted-recon; sid:200022406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uzymsunbys.duckdns.org"; classtype:attempted-recon; sid:200022407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"v1and1-ionos-info-2hyeo.ondigitalocean.app"; classtype:attempted-recon; sid:200022408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"v1claims.publicvm.com"; classtype:attempted-recon; sid:200022409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"v1nted-shopping.902116.xyz"; classtype:attempted-recon; sid:200022410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"v2syntropyupgrade.best"; classtype:attempted-recon; sid:200022411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"v5office365-owa6878.microsoftdynamics.workers.dev"; classtype:attempted-recon; sid:200022412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"v7qji0.webwave.dev"; classtype:attempted-recon; sid:200022413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vadlohenxc.duckdns.org"; classtype:attempted-recon; sid:200022414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vafcycdbhe.duckdns.org"; classtype:attempted-recon; sid:200022415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vaiwfrgkcm.duckdns.org"; classtype:attempted-recon; sid:200022416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vajaewfqip.duckdns.org"; classtype:attempted-recon; sid:200022417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vakszvzrde.duckdns.org"; classtype:attempted-recon; sid:200022418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"val1d4ci0n.qwerftghyjhuklq.repl.co"; classtype:attempted-recon; sid:200022419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valarqss.hyperphp.com"; classtype:attempted-recon; sid:200022420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valdtbemha.duckdns.org"; classtype:attempted-recon; sid:200022421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valenciaoptometry.com"; classtype:attempted-recon; sid:200022422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valiahorat.hostfree.pw"; classtype:attempted-recon; sid:200022423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"validacionpichincha.odoo.com"; classtype:attempted-recon; sid:200022424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"validatedserver.com"; classtype:attempted-recon; sid:200022425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"validatemywalletservice.com"; classtype:attempted-recon; sid:200022426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"validatetok.com"; classtype:attempted-recon; sid:200022427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valkonp.top"; classtype:attempted-recon; sid:200022428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vallabee.com"; classtype:attempted-recon; sid:200022429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valleymech-auth-0ffice365-folder.firebaseapp.com"; classtype:attempted-recon; sid:200022430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valleymech-auth-0ffice365-folder.web.app"; classtype:attempted-recon; sid:200022431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vallianiaerodetail.com"; classtype:attempted-recon; sid:200022432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"valueded.com"; classtype:attempted-recon; sid:200022433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vamerican.infomav.com.br"; classtype:attempted-recon; sid:200022434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vamosashemejasds.hernanasw.repl.co"; classtype:attempted-recon; sid:200022435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"van-bussel.com"; classtype:attempted-recon; sid:200022436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vanillagift.org"; classtype:attempted-recon; sid:200022437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vaqnuegumz.duckdns.org"; classtype:attempted-recon; sid:200022438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vaqtvggygb.duckdns.org"; classtype:attempted-recon; sid:200022439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vaxfg5.webwave.dev"; classtype:attempted-recon; sid:200022440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbbzocgzkr.duckdns.org"; classtype:attempted-recon; sid:200022441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbdfve-t5rge0tn-gnhe-tng-w0jf-0jr409jf-re.obs.ap-southeast-3.myhuaweicloud.com"; classtype:attempted-recon; sid:200022442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbfbgcpqvz.duckdns.org"; classtype:attempted-recon; sid:200022443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbhiawuylk.duckdns.org"; classtype:attempted-recon; sid:200022444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbjdnkfcyj.duckdns.org"; classtype:attempted-recon; sid:200022445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbkvbxgdui.duckdns.org"; classtype:attempted-recon; sid:200022446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbmuelneki.duckdns.org"; classtype:attempted-recon; sid:200022447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbnyxlvunu.duckdns.org"; classtype:attempted-recon; sid:200022448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbtf.bhxmyyy.cn"; classtype:attempted-recon; sid:200022449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbusinesssolution.com"; classtype:attempted-recon; sid:200022450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbzchzjspc.duckdns.org"; classtype:attempted-recon; sid:200022451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vc-107510.weeblysite.com"; classtype:attempted-recon; sid:200022452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vc.zbewwab.cn"; classtype:attempted-recon; sid:200022453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcbolkajtt.duckdns.org"; classtype:attempted-recon; sid:200022454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcd.507krke.cn"; classtype:attempted-recon; sid:200022455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcd.phxygqx.cn"; classtype:attempted-recon; sid:200022456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcdjfluxvi.duckdns.org"; classtype:attempted-recon; sid:200022457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcgnfqwyim.duckdns.org"; classtype:attempted-recon; sid:200022458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcguobjbsh.duckdns.org"; classtype:attempted-recon; sid:200022459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vckvobotjc.duckdns.org"; classtype:attempted-recon; sid:200022460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcnktkhjcq.duckdns.org"; classtype:attempted-recon; sid:200022461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcreateprints.com"; classtype:attempted-recon; sid:200022462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcrnornyqn.duckdns.org"; classtype:attempted-recon; sid:200022463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcstwurmut.duckdns.org"; classtype:attempted-recon; sid:200022464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcueris.istuaxuy.repl.co"; classtype:attempted-recon; sid:200022465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vcxd.fwl0yx4.cn"; classtype:attempted-recon; sid:200022466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.6odgnro.cn"; classtype:attempted-recon; sid:200022467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.bfehi88.cn"; classtype:attempted-recon; sid:200022468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.bhklxcq.cn"; classtype:attempted-recon; sid:200022469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.bkbptiw.cn"; classtype:attempted-recon; sid:200022470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.etujgza.cn"; classtype:attempted-recon; sid:200022471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.fsahxmu.cn"; classtype:attempted-recon; sid:200022472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.gkrexxa.cn"; classtype:attempted-recon; sid:200022473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.gscaugb.cn"; classtype:attempted-recon; sid:200022474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.h0ypo3y.cn"; classtype:attempted-recon; sid:200022475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.hd0iqeh.cn"; classtype:attempted-recon; sid:200022476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.jf6r4fn.cn"; classtype:attempted-recon; sid:200022477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.jriy97z.cn"; classtype:attempted-recon; sid:200022478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.jvywdmx.cn"; classtype:attempted-recon; sid:200022479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.layafm.cn"; classtype:attempted-recon; sid:200022480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.ovhweus.cn"; classtype:attempted-recon; sid:200022481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.qtxkm1q.cn"; classtype:attempted-recon; sid:200022482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.skhdruu.cn"; classtype:attempted-recon; sid:200022483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.u02g67f.cn"; classtype:attempted-recon; sid:200022484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.uqobvsh.cn"; classtype:attempted-recon; sid:200022485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.vnipqpz.cn"; classtype:attempted-recon; sid:200022486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.wnp8uuz.cn"; classtype:attempted-recon; sid:200022487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.ysxq4ee.cn"; classtype:attempted-recon; sid:200022488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vd.zjyzvxm.cn"; classtype:attempted-recon; sid:200022489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdbd.huoyanmao.cn"; classtype:attempted-recon; sid:200022490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdbnj.2kk2950.cn"; classtype:attempted-recon; sid:200022491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdcxdyprcr.duckdns.org"; classtype:attempted-recon; sid:200022492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vddf.85917.cn"; classtype:attempted-recon; sid:200022493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdf.lrqzrwb.cn"; classtype:attempted-recon; sid:200022494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdf.ysaxccr.cn"; classtype:attempted-recon; sid:200022495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdfbd.aqszyy.cn"; classtype:attempted-recon; sid:200022496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdfbf.75237.cn"; classtype:attempted-recon; sid:200022497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdfbn.dsxrmyy.cn"; classtype:attempted-recon; sid:200022498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdff.ansrmyy.cn"; classtype:attempted-recon; sid:200022499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdffh.hsxzyy.cn"; classtype:attempted-recon; sid:200022500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdfn.37659.cn"; classtype:attempted-recon; sid:200022501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdfnxoleup.duckdns.org"; classtype:attempted-recon; sid:200022502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdg.71285.cn"; classtype:attempted-recon; sid:200022503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdg.prt8ejx.cn"; classtype:attempted-recon; sid:200022504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdgsd.75187.cn"; classtype:attempted-recon; sid:200022505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdh.75112.cn"; classtype:attempted-recon; sid:200022506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdhb.tech-stell.cn"; classtype:attempted-recon; sid:200022507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdhhzytjsv.duckdns.org"; classtype:attempted-recon; sid:200022508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdigykdlfd.duckdns.org"; classtype:attempted-recon; sid:200022509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdiskrwiru.duckdns.org"; classtype:attempted-recon; sid:200022510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdjhhxffly.duckdns.org"; classtype:attempted-recon; sid:200022511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdkzaydzxx.duckdns.org"; classtype:attempted-recon; sid:200022512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdn.pff43k5k.cn"; classtype:attempted-recon; sid:200022513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdpmuwfwok.duckdns.org"; classtype:attempted-recon; sid:200022514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdqcwhkmua.duckdns.org"; classtype:attempted-recon; sid:200022515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdqrgownlw.duckdns.org"; classtype:attempted-recon; sid:200022516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vds.by13j5s.cn"; classtype:attempted-recon; sid:200022517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vds.dabluai.cn"; classtype:attempted-recon; sid:200022518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vds.uf0fbj6.cn"; classtype:attempted-recon; sid:200022519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vds.wofy4vv.cn"; classtype:attempted-recon; sid:200022520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vds.xmnclve.cn"; classtype:attempted-recon; sid:200022521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vds.zltpkbl.cn"; classtype:attempted-recon; sid:200022522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdtwjmxqua.duckdns.org"; classtype:attempted-recon; sid:200022523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdvf.kydbkxt.cn"; classtype:attempted-recon; sid:200022524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdwtylqcjf.duckdns.org"; classtype:attempted-recon; sid:200022525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdx.13lnz2o.cn"; classtype:attempted-recon; sid:200022526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdx.cfkdvph.cn"; classtype:attempted-recon; sid:200022527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdx.hsxaej4.cn"; classtype:attempted-recon; sid:200022528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdxz.h0tcd6v.cn"; classtype:attempted-recon; sid:200022529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vdz.mgaehgo.cn"; classtype:attempted-recon; sid:200022530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veadodtnwa.duckdns.org"; classtype:attempted-recon; sid:200022531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veeraja.com"; classtype:attempted-recon; sid:200022532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vegr.xmszyy.cn"; classtype:attempted-recon; sid:200022533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vehicletax.service.gov.uk.0vy3lpjix.persyar.ir"; classtype:attempted-recon; sid:200022534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vehiculingbleu.info"; classtype:attempted-recon; sid:200022535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vehkpuaizh.duckdns.org"; classtype:attempted-recon; sid:200022536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiceeesacvciracrsior.avisievseaaciccovsinaoeosnmer.cdpthi.top"; classtype:attempted-recon; sid:200022537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiceeesacvciracrsior.avisievseaaciccovsinaoeosnmer.nqsaby.top"; classtype:attempted-recon; sid:200022538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiceeesacvciracrsior.avisievseaaciccovsinaoeosnmer.vnbbks.top"; classtype:attempted-recon; sid:200022539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiceeesacveirccrasoria.viiessvaaciococvinsaoeosnmer.exqkjx.top"; classtype:attempted-recon; sid:200022540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiceeesacveirccrasoria.viiessvaaciococvinsaoeosnmer.shanchuta27.shop"; classtype:attempted-recon; sid:200022541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicesevaccairscri.orvaisvieascaccivsoioaoeosnmer.2sae6k.icu"; classtype:attempted-recon; sid:200022542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicesevaccairscri.orvaisvieascaccivsoioaoeosnmer.vnbbks.top"; classtype:attempted-recon; sid:200022543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicesevaccairscri.orvaisvieaseaccivsoioaoeosnmer.b32mgr.icu"; classtype:attempted-recon; sid:200022544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicesevaccairscri.orvaisvieaseaccivsoioaoeosnmer.citcfi.top"; classtype:attempted-recon; sid:200022545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicesevaccciracrsior.avisievsaaacircovsiniaoeosnmer.9v9w2y.icu"; classtype:attempted-recon; sid:200022546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicesevaccciracrsior.avisievsaaacircovsiniaoeosnmer.yphurc.top"; classtype:attempted-recon; sid:200022547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicevecacasiricr.voriasvaiecsvasciiooaoeosnmer.puoo9.icu"; classtype:attempted-recon; sid:200022548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicevecacasiricr.voriasvaiecsvasciiooaoeosnmer.vcgsip.top"; classtype:attempted-recon; sid:200022549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicevecacasiricr.voriasvaiecsvasciiooaoeosnmer.xaexmo.top"; classtype:attempted-recon; sid:200022550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiceveeacseirvcrcaorsai.vieissavcioeoacincvraoeosnmer.nkjfmc.top"; classtype:attempted-recon; sid:200022551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiceveeacseirvcrcaorsai.vieissavcioeoacincvraoeosnmer.ytnxwi.top"; classtype:attempted-recon; sid:200022552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicevesaccvirccrasoria.viiessvaaciraoecinivraoeosnmer.650pt.icu"; classtype:attempted-recon; sid:200022553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicevesaccvirccrasoria.viiessvaaciraoecinivraoeosnmer.bs7dc.icu"; classtype:attempted-recon; sid:200022554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veicevesaccvirccrasoria.viiessvaaciraoecinivraoeosnmer.com-deals.shop"; classtype:attempted-recon; sid:200022555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veificaonlinebperrweb.com"; classtype:attempted-recon; sid:200022556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200022557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.457e0p.icu"; classtype:attempted-recon; sid:200022558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.4i3si1.icu"; classtype:attempted-recon; sid:200022559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.5577778.xyz"; classtype:attempted-recon; sid:200022560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.5sime.icu"; classtype:attempted-recon; sid:200022561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.5uzz0h.icu"; classtype:attempted-recon; sid:200022562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.6788665.xyz"; classtype:attempted-recon; sid:200022563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.6876578.xyz"; classtype:attempted-recon; sid:200022564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.6mmfl.icu"; classtype:attempted-recon; sid:200022565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.7hml9e.icu"; classtype:attempted-recon; sid:200022566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.7lnki4.icu"; classtype:attempted-recon; sid:200022567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.7ngywp.icu"; classtype:attempted-recon; sid:200022568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.8fgrh.icu"; classtype:attempted-recon; sid:200022569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.9v9w2y.icu"; classtype:attempted-recon; sid:200022570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.abluwk.top"; classtype:attempted-recon; sid:200022571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.adlxbh.top"; classtype:attempted-recon; sid:200022572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.afohvv.top"; classtype:attempted-recon; sid:200022573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.awsgn.top"; classtype:attempted-recon; sid:200022574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.b4eqf.icu"; classtype:attempted-recon; sid:200022575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.citcfi.top"; classtype:attempted-recon; sid:200022576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.cjezmf.top"; classtype:attempted-recon; sid:200022577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.com-deals.shop"; classtype:attempted-recon; sid:200022578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.contius.shop"; classtype:attempted-recon; sid:200022579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.coxrdc.top"; classtype:attempted-recon; sid:200022580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.cqvlsi.top"; classtype:attempted-recon; sid:200022581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.cstztf.top"; classtype:attempted-recon; sid:200022582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.demtjo.top"; classtype:attempted-recon; sid:200022583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.dfdnsx.top"; classtype:attempted-recon; sid:200022584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.djulad.top"; classtype:attempted-recon; sid:200022585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.dkmimw.top"; classtype:attempted-recon; sid:200022586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.dnmsu6.icu"; classtype:attempted-recon; sid:200022587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.doenfd.top"; classtype:attempted-recon; sid:200022588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.eaelbi.top"; classtype:attempted-recon; sid:200022589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ehgmml.top"; classtype:attempted-recon; sid:200022590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ejvocy.top"; classtype:attempted-recon; sid:200022591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.elhicw.top"; classtype:attempted-recon; sid:200022592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.epwnsr.top"; classtype:attempted-recon; sid:200022593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.eucvbc.top"; classtype:attempted-recon; sid:200022594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.exqkjx.top"; classtype:attempted-recon; sid:200022595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.fahxqk.shop"; classtype:attempted-recon; sid:200022596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.fhqemq.top"; classtype:attempted-recon; sid:200022597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.flscly.top"; classtype:attempted-recon; sid:200022598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.fprrlq.top"; classtype:attempted-recon; sid:200022599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.fukjzs.top"; classtype:attempted-recon; sid:200022600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.fvkhnr.top"; classtype:attempted-recon; sid:200022601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.fzfweo.top"; classtype:attempted-recon; sid:200022602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.gamxhl.shop"; classtype:attempted-recon; sid:200022603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.gdmdxy.top"; classtype:attempted-recon; sid:200022604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.gjglse.shop"; classtype:attempted-recon; sid:200022605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.glhdpz.top"; classtype:attempted-recon; sid:200022606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.gntozh.top"; classtype:attempted-recon; sid:200022607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.hyhznq.top"; classtype:attempted-recon; sid:200022608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.iaklie.top"; classtype:attempted-recon; sid:200022609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ihfo5.icu"; classtype:attempted-recon; sid:200022610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ilfbdb.top"; classtype:attempted-recon; sid:200022611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.invpbv.top"; classtype:attempted-recon; sid:200022612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ioxsho.shop"; classtype:attempted-recon; sid:200022613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.iytxjk.top"; classtype:attempted-recon; sid:200022614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.jivdhm.top"; classtype:attempted-recon; sid:200022615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.jryuds.top"; classtype:attempted-recon; sid:200022616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.jubsfg.top"; classtype:attempted-recon; sid:200022617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.kbqnmz.top"; classtype:attempted-recon; sid:200022618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.kfpxyn.top"; classtype:attempted-recon; sid:200022619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.klgmfj.top"; classtype:attempted-recon; sid:200022620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.kpgvbn.top"; classtype:attempted-recon; sid:200022621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200022622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.kutlzl.top"; classtype:attempted-recon; sid:200022623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.kwoneq.top"; classtype:attempted-recon; sid:200022624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.l4p2g1.icu"; classtype:attempted-recon; sid:200022625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ladyul.top"; classtype:attempted-recon; sid:200022626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.lfvlpt.top"; classtype:attempted-recon; sid:200022627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.lgwjlm.shop"; classtype:attempted-recon; sid:200022628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.llsoxx.top"; classtype:attempted-recon; sid:200022629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.mbirgc.top"; classtype:attempted-recon; sid:200022630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200022631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.notwe.icu"; classtype:attempted-recon; sid:200022632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.nphgoc.top"; classtype:attempted-recon; sid:200022633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.npibd.top"; classtype:attempted-recon; sid:200022634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.nqsaby.top"; classtype:attempted-recon; sid:200022635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.nr5kfh.icu"; classtype:attempted-recon; sid:200022636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.nrmzy6.icu"; classtype:attempted-recon; sid:200022637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ofldnb.shop"; classtype:attempted-recon; sid:200022638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ogzbtb.top"; classtype:attempted-recon; sid:200022639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.ohzctx.top"; classtype:attempted-recon; sid:200022640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.puoo9.icu"; classtype:attempted-recon; sid:200022641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.pxbkkk.top"; classtype:attempted-recon; sid:200022642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.pxnctk.top"; classtype:attempted-recon; sid:200022643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.pxzjwk.top"; classtype:attempted-recon; sid:200022644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.pysitg.top"; classtype:attempted-recon; sid:200022645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.qexccc.top"; classtype:attempted-recon; sid:200022646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.qfvbqx.shop"; classtype:attempted-recon; sid:200022647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.qlmenm.top"; classtype:attempted-recon; sid:200022648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.qoefmk.top"; classtype:attempted-recon; sid:200022649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.qvcxln.shop"; classtype:attempted-recon; sid:200022650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.qwuchl.top"; classtype:attempted-recon; sid:200022651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.rgdpsh.top"; classtype:attempted-recon; sid:200022652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.rhwdsq.top"; classtype:attempted-recon; sid:200022653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.rjbvwt.top"; classtype:attempted-recon; sid:200022654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.rn5mu.icu"; classtype:attempted-recon; sid:200022655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.royjjy.shop"; classtype:attempted-recon; sid:200022656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.tilzhy.top"; classtype:attempted-recon; sid:200022657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.u25r5u.icu"; classtype:attempted-recon; sid:200022658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.uhia8h.icu"; classtype:attempted-recon; sid:200022659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.upjhye.top"; classtype:attempted-recon; sid:200022660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.usivdv.top"; classtype:attempted-recon; sid:200022661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.vcacks.top"; classtype:attempted-recon; sid:200022662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.vcgsip.top"; classtype:attempted-recon; sid:200022663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.vfqske.shop"; classtype:attempted-recon; sid:200022664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.vkpock.shop"; classtype:attempted-recon; sid:200022665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.vnbbks.top"; classtype:attempted-recon; sid:200022666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.voadax.top"; classtype:attempted-recon; sid:200022667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.vrbvro.top"; classtype:attempted-recon; sid:200022668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.wcpjfd.top"; classtype:attempted-recon; sid:200022669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.wl85i.icu"; classtype:attempted-recon; sid:200022670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.wolvps.shop"; classtype:attempted-recon; sid:200022671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.wwffoj.shop"; classtype:attempted-recon; sid:200022672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.xaexmo.top"; classtype:attempted-recon; sid:200022673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.xgjt.pro"; classtype:attempted-recon; sid:200022674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.xgtofb.top"; classtype:attempted-recon; sid:200022675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.xqpwkk.top"; classtype:attempted-recon; sid:200022676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.zmlyhs.top"; classtype:attempted-recon; sid:200022677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.zrbfzw.top"; classtype:attempted-recon; sid:200022678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.zxj6002.xyz"; classtype:attempted-recon; sid:200022679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.1112458.xyz"; classtype:attempted-recon; sid:200022680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.2sae6k.icu"; classtype:attempted-recon; sid:200022681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.3dbbmp.icu"; classtype:attempted-recon; sid:200022682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.3p1yb.icu"; classtype:attempted-recon; sid:200022683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200022684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.457e0p.icu"; classtype:attempted-recon; sid:200022685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.4i3si1.icu"; classtype:attempted-recon; sid:200022686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.5577778.xyz"; classtype:attempted-recon; sid:200022687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.5uzz0h.icu"; classtype:attempted-recon; sid:200022688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.650pt.icu"; classtype:attempted-recon; sid:200022689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.6788665.xyz"; classtype:attempted-recon; sid:200022690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.6876578.xyz"; classtype:attempted-recon; sid:200022691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.6mmfl.icu"; classtype:attempted-recon; sid:200022692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.7hml9e.icu"; classtype:attempted-recon; sid:200022693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.7lnki4.icu"; classtype:attempted-recon; sid:200022694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.7ngywp.icu"; classtype:attempted-recon; sid:200022695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.8fgrh.icu"; classtype:attempted-recon; sid:200022696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.9v9w2y.icu"; classtype:attempted-recon; sid:200022697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.abluwk.top"; classtype:attempted-recon; sid:200022698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.adlxbh.top"; classtype:attempted-recon; sid:200022699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.afohvv.top"; classtype:attempted-recon; sid:200022700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.b32mgr.icu"; classtype:attempted-recon; sid:200022701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.b4eqf.icu"; classtype:attempted-recon; sid:200022702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.b6x80w.icu"; classtype:attempted-recon; sid:200022703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.bbl7ef.icu"; classtype:attempted-recon; sid:200022704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.bfsngf.top"; classtype:attempted-recon; sid:200022705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.bs7dc.icu"; classtype:attempted-recon; sid:200022706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.bsnpag.top"; classtype:attempted-recon; sid:200022707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.bvdadv.top"; classtype:attempted-recon; sid:200022708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.cdpthi.top"; classtype:attempted-recon; sid:200022709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.dkmimw.top"; classtype:attempted-recon; sid:200022710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.dnmsu6.icu"; classtype:attempted-recon; sid:200022711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.eaelbi.top"; classtype:attempted-recon; sid:200022712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ehgmml.top"; classtype:attempted-recon; sid:200022713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ejvocy.top"; classtype:attempted-recon; sid:200022714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.elhicw.top"; classtype:attempted-recon; sid:200022715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.epwnsr.top"; classtype:attempted-recon; sid:200022716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.eucvbc.top"; classtype:attempted-recon; sid:200022717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.exqkjx.top"; classtype:attempted-recon; sid:200022718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.fahxqk.shop"; classtype:attempted-recon; sid:200022719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.fhqemq.top"; classtype:attempted-recon; sid:200022720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.fprrlq.top"; classtype:attempted-recon; sid:200022721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.gtqklv.top"; classtype:attempted-recon; sid:200022722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.gxdhfa.top"; classtype:attempted-recon; sid:200022723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.gyzt809.xyz"; classtype:attempted-recon; sid:200022724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.gzmvuo.top"; classtype:attempted-recon; sid:200022725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.hhxulg.top"; classtype:attempted-recon; sid:200022726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.hixcny.top"; classtype:attempted-recon; sid:200022727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.hpbzkc.top"; classtype:attempted-recon; sid:200022728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.hweypy.top"; classtype:attempted-recon; sid:200022729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.hycxop.top"; classtype:attempted-recon; sid:200022730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.hyhznq.top"; classtype:attempted-recon; sid:200022731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.iaklie.top"; classtype:attempted-recon; sid:200022732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ihfo5.icu"; classtype:attempted-recon; sid:200022733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ilfbdb.top"; classtype:attempted-recon; sid:200022734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.invpbv.top"; classtype:attempted-recon; sid:200022735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ioxsho.shop"; classtype:attempted-recon; sid:200022736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.iytxjk.top"; classtype:attempted-recon; sid:200022737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.jivdhm.top"; classtype:attempted-recon; sid:200022738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.jryuds.top"; classtype:attempted-recon; sid:200022739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.jubsfg.top"; classtype:attempted-recon; sid:200022740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.lgwjlm.shop"; classtype:attempted-recon; sid:200022741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.llsoxx.top"; classtype:attempted-recon; sid:200022742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200022743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.mvqlzn.top"; classtype:attempted-recon; sid:200022744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.mwdrbx.top"; classtype:attempted-recon; sid:200022745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.mxeanv.top"; classtype:attempted-recon; sid:200022746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.n21so.icu"; classtype:attempted-recon; sid:200022747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.n6eonm.icu"; classtype:attempted-recon; sid:200022748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.neidee.top"; classtype:attempted-recon; sid:200022749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.nfpdgp.top"; classtype:attempted-recon; sid:200022750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.nhewlh.top"; classtype:attempted-recon; sid:200022751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.nkjfmc.top"; classtype:attempted-recon; sid:200022752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.nlujo.top"; classtype:attempted-recon; sid:200022753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.oiknia.top"; classtype:attempted-recon; sid:200022754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.patcfp.top"; classtype:attempted-recon; sid:200022755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pbykwg.top"; classtype:attempted-recon; sid:200022756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pdndft.top"; classtype:attempted-recon; sid:200022757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ph29h.icu"; classtype:attempted-recon; sid:200022758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pjt9os.icu"; classtype:attempted-recon; sid:200022759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pqdxev.top"; classtype:attempted-recon; sid:200022760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.ptrwmp.top"; classtype:attempted-recon; sid:200022761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pugxbo.top"; classtype:attempted-recon; sid:200022762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.puoo9.icu"; classtype:attempted-recon; sid:200022763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pxbkkk.top"; classtype:attempted-recon; sid:200022764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pxnctk.top"; classtype:attempted-recon; sid:200022765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pxzjwk.top"; classtype:attempted-recon; sid:200022766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.pysitg.top"; classtype:attempted-recon; sid:200022767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.qexccc.top"; classtype:attempted-recon; sid:200022768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.qwuchl.top"; classtype:attempted-recon; sid:200022769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.rhwdsq.top"; classtype:attempted-recon; sid:200022770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.rn5mu.icu"; classtype:attempted-recon; sid:200022771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.runjin007.icu"; classtype:attempted-recon; sid:200022772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.rvpepb.top"; classtype:attempted-recon; sid:200022773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.rzuxzq.shop"; classtype:attempted-recon; sid:200022774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.saveyr.top"; classtype:attempted-recon; sid:200022775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.sftqjs.top"; classtype:attempted-recon; sid:200022776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.shanchuta27.shop"; classtype:attempted-recon; sid:200022777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.tbntv.icu"; classtype:attempted-recon; sid:200022778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.tfodbq.top"; classtype:attempted-recon; sid:200022779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.tgmqlg.top"; classtype:attempted-recon; sid:200022780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.tikoig.top"; classtype:attempted-recon; sid:200022781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.tilzhy.top"; classtype:attempted-recon; sid:200022782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.u25r5u.icu"; classtype:attempted-recon; sid:200022783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.uhia8h.icu"; classtype:attempted-recon; sid:200022784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.upjhye.top"; classtype:attempted-recon; sid:200022785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.usivdv.top"; classtype:attempted-recon; sid:200022786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.vcacks.top"; classtype:attempted-recon; sid:200022787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.vcgsip.top"; classtype:attempted-recon; sid:200022788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.vfqske.shop"; classtype:attempted-recon; sid:200022789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.vkpock.shop"; classtype:attempted-recon; sid:200022790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.vnbbks.top"; classtype:attempted-recon; sid:200022791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.voadax.top"; classtype:attempted-recon; sid:200022792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.vrbvro.top"; classtype:attempted-recon; sid:200022793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.wcpjfd.top"; classtype:attempted-recon; sid:200022794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.wl85i.icu"; classtype:attempted-recon; sid:200022795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.wolvps.shop"; classtype:attempted-recon; sid:200022796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.wwffoj.shop"; classtype:attempted-recon; sid:200022797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.xaexmo.top"; classtype:attempted-recon; sid:200022798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.xgjt.pro"; classtype:attempted-recon; sid:200022799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.xgtofb.top"; classtype:attempted-recon; sid:200022800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.xqpwkk.top"; classtype:attempted-recon; sid:200022801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.yifpgd.top"; classtype:attempted-recon; sid:200022802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.zmlyhs.top"; classtype:attempted-recon; sid:200022803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.zrbfzw.top"; classtype:attempted-recon; sid:200022804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.zxj6002.xyz"; classtype:attempted-recon; sid:200022805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.3dbbmp.icu"; classtype:attempted-recon; sid:200022806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.3p1yb.icu"; classtype:attempted-recon; sid:200022807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200022808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.457e0p.icu"; classtype:attempted-recon; sid:200022809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.4i3si1.icu"; classtype:attempted-recon; sid:200022810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.5577778.xyz"; classtype:attempted-recon; sid:200022811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.650pt.icu"; classtype:attempted-recon; sid:200022812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.6788665.xyz"; classtype:attempted-recon; sid:200022813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.6876578.xyz"; classtype:attempted-recon; sid:200022814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.6mmfl.icu"; classtype:attempted-recon; sid:200022815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.7hml9e.icu"; classtype:attempted-recon; sid:200022816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.7lnki4.icu"; classtype:attempted-recon; sid:200022817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.7ngywp.icu"; classtype:attempted-recon; sid:200022818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.8fgrh.icu"; classtype:attempted-recon; sid:200022819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.9v9w2y.icu"; classtype:attempted-recon; sid:200022820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.abluwk.top"; classtype:attempted-recon; sid:200022821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.afohvv.top"; classtype:attempted-recon; sid:200022822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.b32mgr.icu"; classtype:attempted-recon; sid:200022823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.b4eqf.icu"; classtype:attempted-recon; sid:200022824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.bbl7ef.icu"; classtype:attempted-recon; sid:200022825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.bvdadv.top"; classtype:attempted-recon; sid:200022826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.cdpthi.top"; classtype:attempted-recon; sid:200022827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.chashanchu21.shop"; classtype:attempted-recon; sid:200022828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.chashanchu48.shop"; classtype:attempted-recon; sid:200022829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.chkmuq.shop"; classtype:attempted-recon; sid:200022830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.citcfi.top"; classtype:attempted-recon; sid:200022831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.cjezmf.top"; classtype:attempted-recon; sid:200022832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.com-deals.shop"; classtype:attempted-recon; sid:200022833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.contius.shop"; classtype:attempted-recon; sid:200022834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.coxrdc.top"; classtype:attempted-recon; sid:200022835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.cqvlsi.top"; classtype:attempted-recon; sid:200022836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.cstztf.top"; classtype:attempted-recon; sid:200022837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.demtjo.top"; classtype:attempted-recon; sid:200022838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.dfdnsx.top"; classtype:attempted-recon; sid:200022839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.dgqqxx.top"; classtype:attempted-recon; sid:200022840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.djulad.top"; classtype:attempted-recon; sid:200022841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.dnmsu6.icu"; classtype:attempted-recon; sid:200022842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.eaelbi.top"; classtype:attempted-recon; sid:200022843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ejvocy.top"; classtype:attempted-recon; sid:200022844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.epwnsr.top"; classtype:attempted-recon; sid:200022845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.exqkjx.top"; classtype:attempted-recon; sid:200022846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.fhqemq.top"; classtype:attempted-recon; sid:200022847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.flscly.top"; classtype:attempted-recon; sid:200022848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.fprrlq.top"; classtype:attempted-recon; sid:200022849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.fukjzs.top"; classtype:attempted-recon; sid:200022850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.fvkhnr.top"; classtype:attempted-recon; sid:200022851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.fzfweo.top"; classtype:attempted-recon; sid:200022852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gamxhl.shop"; classtype:attempted-recon; sid:200022853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gdmdxy.top"; classtype:attempted-recon; sid:200022854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gjglse.shop"; classtype:attempted-recon; sid:200022855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.glhdpz.top"; classtype:attempted-recon; sid:200022856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gntozh.top"; classtype:attempted-recon; sid:200022857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gtqklv.top"; classtype:attempted-recon; sid:200022858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gyzt809.xyz"; classtype:attempted-recon; sid:200022859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gzmvuo.top"; classtype:attempted-recon; sid:200022860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.hhxulg.top"; classtype:attempted-recon; sid:200022861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.hixcny.top"; classtype:attempted-recon; sid:200022862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.hpbzkc.top"; classtype:attempted-recon; sid:200022863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.hweypy.top"; classtype:attempted-recon; sid:200022864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.iaklie.top"; classtype:attempted-recon; sid:200022865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ihfo5.icu"; classtype:attempted-recon; sid:200022866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ilfbdb.top"; classtype:attempted-recon; sid:200022867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.iytxjk.top"; classtype:attempted-recon; sid:200022868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.jivdhm.top"; classtype:attempted-recon; sid:200022869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.jubsfg.top"; classtype:attempted-recon; sid:200022870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.kbqnmz.top"; classtype:attempted-recon; sid:200022871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.kfpxyn.top"; classtype:attempted-recon; sid:200022872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.klgmfj.top"; classtype:attempted-recon; sid:200022873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.kpgvbn.top"; classtype:attempted-recon; sid:200022874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.kutlzl.top"; classtype:attempted-recon; sid:200022875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.kwoneq.top"; classtype:attempted-recon; sid:200022876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.l4p2g1.icu"; classtype:attempted-recon; sid:200022877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ladyul.top"; classtype:attempted-recon; sid:200022878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.lfvlpt.top"; classtype:attempted-recon; sid:200022879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.lgwjlm.shop"; classtype:attempted-recon; sid:200022880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200022881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.mvqlzn.top"; classtype:attempted-recon; sid:200022882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.mwdrbx.top"; classtype:attempted-recon; sid:200022883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.mxeanv.top"; classtype:attempted-recon; sid:200022884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.n21so.icu"; classtype:attempted-recon; sid:200022885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.n6eonm.icu"; classtype:attempted-recon; sid:200022886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.neidee.top"; classtype:attempted-recon; sid:200022887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.nhewlh.top"; classtype:attempted-recon; sid:200022888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.nkjfmc.top"; classtype:attempted-recon; sid:200022889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.nlujo.top"; classtype:attempted-recon; sid:200022890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.notwe.icu"; classtype:attempted-recon; sid:200022891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.nphgoc.top"; classtype:attempted-recon; sid:200022892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.nrmzy6.icu"; classtype:attempted-recon; sid:200022893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ogzbtb.top"; classtype:attempted-recon; sid:200022894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ohzctx.top"; classtype:attempted-recon; sid:200022895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.oiknia.top"; classtype:attempted-recon; sid:200022896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.oipful.top"; classtype:attempted-recon; sid:200022897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.pdndft.top"; classtype:attempted-recon; sid:200022898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ph29h.icu"; classtype:attempted-recon; sid:200022899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.ptrwmp.top"; classtype:attempted-recon; sid:200022900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.pugxbo.top"; classtype:attempted-recon; sid:200022901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.puoo9.icu"; classtype:attempted-recon; sid:200022902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.pxbkkk.top"; classtype:attempted-recon; sid:200022903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.pxzjwk.top"; classtype:attempted-recon; sid:200022904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.qfvbqx.shop"; classtype:attempted-recon; sid:200022905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.qwuchl.top"; classtype:attempted-recon; sid:200022906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.rgdpsh.top"; classtype:attempted-recon; sid:200022907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.royjjy.shop"; classtype:attempted-recon; sid:200022908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.sftqjs.top"; classtype:attempted-recon; sid:200022909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.shanchuta27.shop"; classtype:attempted-recon; sid:200022910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.tikoig.top"; classtype:attempted-recon; sid:200022911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.uhia8h.icu"; classtype:attempted-recon; sid:200022912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.upjhye.top"; classtype:attempted-recon; sid:200022913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.usivdv.top"; classtype:attempted-recon; sid:200022914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.vcgsip.top"; classtype:attempted-recon; sid:200022915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.vkpock.shop"; classtype:attempted-recon; sid:200022916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.voadax.top"; classtype:attempted-recon; sid:200022917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.vrbvro.top"; classtype:attempted-recon; sid:200022918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.wcpjfd.top"; classtype:attempted-recon; sid:200022919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.wwffoj.shop"; classtype:attempted-recon; sid:200022920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.xaexmo.top"; classtype:attempted-recon; sid:200022921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.xgtofb.top"; classtype:attempted-recon; sid:200022922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.xqpwkk.top"; classtype:attempted-recon; sid:200022923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.xvlbws.top"; classtype:attempted-recon; sid:200022924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.xzlnlm.top"; classtype:attempted-recon; sid:200022925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.yifpgd.top"; classtype:attempted-recon; sid:200022926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.yyzded.top"; classtype:attempted-recon; sid:200022927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.zmlyhs.top"; classtype:attempted-recon; sid:200022928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.zrbfzw.top"; classtype:attempted-recon; sid:200022929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.3dbbmp.icu"; classtype:attempted-recon; sid:200022930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.3p1yb.icu"; classtype:attempted-recon; sid:200022931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.457e0p.icu"; classtype:attempted-recon; sid:200022932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.4i3si1.icu"; classtype:attempted-recon; sid:200022933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.5sime.icu"; classtype:attempted-recon; sid:200022934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.5uzz0h.icu"; classtype:attempted-recon; sid:200022935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.650pt.icu"; classtype:attempted-recon; sid:200022936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.6788665.xyz"; classtype:attempted-recon; sid:200022937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.6876578.xyz"; classtype:attempted-recon; sid:200022938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.7hml9e.icu"; classtype:attempted-recon; sid:200022939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.7lnki4.icu"; classtype:attempted-recon; sid:200022940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.7ngywp.icu"; classtype:attempted-recon; sid:200022941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.8fgrh.icu"; classtype:attempted-recon; sid:200022942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.abluwk.top"; classtype:attempted-recon; sid:200022943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.adlxbh.top"; classtype:attempted-recon; sid:200022944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.awsgn.top"; classtype:attempted-recon; sid:200022945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.bs7dc.icu"; classtype:attempted-recon; sid:200022946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.bsnpag.top"; classtype:attempted-recon; sid:200022947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.bvdadv.top"; classtype:attempted-recon; sid:200022948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.chashanchu21.shop"; classtype:attempted-recon; sid:200022949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.chashanchu48.shop"; classtype:attempted-recon; sid:200022950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.citcfi.top"; classtype:attempted-recon; sid:200022951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.com-deals.shop"; classtype:attempted-recon; sid:200022952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.contius.shop"; classtype:attempted-recon; sid:200022953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.coxrdc.top"; classtype:attempted-recon; sid:200022954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.demtjo.top"; classtype:attempted-recon; sid:200022955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.dfdnsx.top"; classtype:attempted-recon; sid:200022956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.djulad.top"; classtype:attempted-recon; sid:200022957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.dkmimw.top"; classtype:attempted-recon; sid:200022958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.doenfd.top"; classtype:attempted-recon; sid:200022959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.eaelbi.top"; classtype:attempted-recon; sid:200022960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ejvocy.top"; classtype:attempted-recon; sid:200022961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.epwnsr.top"; classtype:attempted-recon; sid:200022962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.eucvbc.top"; classtype:attempted-recon; sid:200022963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.fprrlq.top"; classtype:attempted-recon; sid:200022964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.fukjzs.top"; classtype:attempted-recon; sid:200022965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.fzfweo.top"; classtype:attempted-recon; sid:200022966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gdmdxy.top"; classtype:attempted-recon; sid:200022967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gjglse.shop"; classtype:attempted-recon; sid:200022968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.glhdpz.top"; classtype:attempted-recon; sid:200022969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gs3do.icu"; classtype:attempted-recon; sid:200022970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gtqklv.top"; classtype:attempted-recon; sid:200022971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gxdhfa.top"; classtype:attempted-recon; sid:200022972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gzmvuo.top"; classtype:attempted-recon; sid:200022973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.hhxulg.top"; classtype:attempted-recon; sid:200022974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.hixcny.top"; classtype:attempted-recon; sid:200022975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.hpbzkc.top"; classtype:attempted-recon; sid:200022976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.hycxop.top"; classtype:attempted-recon; sid:200022977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.hyhznq.top"; classtype:attempted-recon; sid:200022978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ihfo5.icu"; classtype:attempted-recon; sid:200022979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ilfbdb.top"; classtype:attempted-recon; sid:200022980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ioxsho.shop"; classtype:attempted-recon; sid:200022981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.jivdhm.top"; classtype:attempted-recon; sid:200022982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.jryuds.top"; classtype:attempted-recon; sid:200022983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.jubsfg.top"; classtype:attempted-recon; sid:200022984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.kfpxyn.top"; classtype:attempted-recon; sid:200022985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.klgmfj.top"; classtype:attempted-recon; sid:200022986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.kpgvbn.top"; classtype:attempted-recon; sid:200022987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200022988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.kutlzl.top"; classtype:attempted-recon; sid:200022989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.kwoneq.top"; classtype:attempted-recon; sid:200022990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.lfvlpt.top"; classtype:attempted-recon; sid:200022991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.mbirgc.top"; classtype:attempted-recon; sid:200022992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.mvqlzn.top"; classtype:attempted-recon; sid:200022993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.mwdrbx.top"; classtype:attempted-recon; sid:200022994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.mxeanv.top"; classtype:attempted-recon; sid:200022995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.nfpdgp.top"; classtype:attempted-recon; sid:200022996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.nhewlh.top"; classtype:attempted-recon; sid:200022997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.nlujo.top"; classtype:attempted-recon; sid:200022998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.notwe.icu"; classtype:attempted-recon; sid:200022999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.npibd.top"; classtype:attempted-recon; sid:200023000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.nqsaby.top"; classtype:attempted-recon; sid:200023001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.nr5kfh.icu"; classtype:attempted-recon; sid:200023002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.nrmzy6.icu"; classtype:attempted-recon; sid:200023003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ohzctx.top"; classtype:attempted-recon; sid:200023004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.oiknia.top"; classtype:attempted-recon; sid:200023005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.patcfp.top"; classtype:attempted-recon; sid:200023006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ph29h.icu"; classtype:attempted-recon; sid:200023007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.pqdxev.top"; classtype:attempted-recon; sid:200023008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.puoo9.icu"; classtype:attempted-recon; sid:200023009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.pxnctk.top"; classtype:attempted-recon; sid:200023010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.pxzjwk.top"; classtype:attempted-recon; sid:200023011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.qexccc.top"; classtype:attempted-recon; sid:200023012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.qfvbqx.shop"; classtype:attempted-recon; sid:200023013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.qlmenm.top"; classtype:attempted-recon; sid:200023014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.qoefmk.top"; classtype:attempted-recon; sid:200023015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.qskgtg.top"; classtype:attempted-recon; sid:200023016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.qvcxln.shop"; classtype:attempted-recon; sid:200023017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.rgdpsh.top"; classtype:attempted-recon; sid:200023018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.rjbvwt.top"; classtype:attempted-recon; sid:200023019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.rn5mu.icu"; classtype:attempted-recon; sid:200023020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.royjjy.shop"; classtype:attempted-recon; sid:200023021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.runjin007.icu"; classtype:attempted-recon; sid:200023022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.rvpepb.top"; classtype:attempted-recon; sid:200023023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.saveyr.top"; classtype:attempted-recon; sid:200023024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.shanchuta27.shop"; classtype:attempted-recon; sid:200023025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.tgmqlg.top"; classtype:attempted-recon; sid:200023026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.tikoig.top"; classtype:attempted-recon; sid:200023027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.tilzhy.top"; classtype:attempted-recon; sid:200023028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.u25r5u.icu"; classtype:attempted-recon; sid:200023029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.uhia8h.icu"; classtype:attempted-recon; sid:200023030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.usivdv.top"; classtype:attempted-recon; sid:200023031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.vcacks.top"; classtype:attempted-recon; sid:200023032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.vcgsip.top"; classtype:attempted-recon; sid:200023033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.vfqske.shop"; classtype:attempted-recon; sid:200023034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.vkpock.shop"; classtype:attempted-recon; sid:200023035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.vnbbks.top"; classtype:attempted-recon; sid:200023036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.voadax.top"; classtype:attempted-recon; sid:200023037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.vrbvro.top"; classtype:attempted-recon; sid:200023038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.wcpjfd.top"; classtype:attempted-recon; sid:200023039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.wl85i.icu"; classtype:attempted-recon; sid:200023040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.wwffoj.shop"; classtype:attempted-recon; sid:200023041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xaexmo.top"; classtype:attempted-recon; sid:200023042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xgjt.pro"; classtype:attempted-recon; sid:200023043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xgtofb.top"; classtype:attempted-recon; sid:200023044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xqpwkk.top"; classtype:attempted-recon; sid:200023045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xvlbws.top"; classtype:attempted-recon; sid:200023046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xwitwq.top"; classtype:attempted-recon; sid:200023047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.xzlnlm.top"; classtype:attempted-recon; sid:200023048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.yhuvzv.top"; classtype:attempted-recon; sid:200023049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.yifpgd.top"; classtype:attempted-recon; sid:200023050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.yphurc.top"; classtype:attempted-recon; sid:200023051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ytnxwi.top"; classtype:attempted-recon; sid:200023052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.ytwbnq.top"; classtype:attempted-recon; sid:200023053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.yyzded.top"; classtype:attempted-recon; sid:200023054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.zmlyhs.top"; classtype:attempted-recon; sid:200023055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.zrbfzw.top"; classtype:attempted-recon; sid:200023056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.zxj6002.xyz"; classtype:attempted-recon; sid:200023057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.1112458.xyz"; classtype:attempted-recon; sid:200023058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.3dbbmp.icu"; classtype:attempted-recon; sid:200023059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.457e0p.icu"; classtype:attempted-recon; sid:200023060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.4i3si1.icu"; classtype:attempted-recon; sid:200023061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.5577778.xyz"; classtype:attempted-recon; sid:200023062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.650pt.icu"; classtype:attempted-recon; sid:200023063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.6mmfl.icu"; classtype:attempted-recon; sid:200023064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.7hml9e.icu"; classtype:attempted-recon; sid:200023065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.7lnki4.icu"; classtype:attempted-recon; sid:200023066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.9v9w2y.icu"; classtype:attempted-recon; sid:200023067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.abluwk.top"; classtype:attempted-recon; sid:200023068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.adlxbh.top"; classtype:attempted-recon; sid:200023069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.afohvv.top"; classtype:attempted-recon; sid:200023070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.awsgn.top"; classtype:attempted-recon; sid:200023071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.b32mgr.icu"; classtype:attempted-recon; sid:200023072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.b4eqf.icu"; classtype:attempted-recon; sid:200023073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.b6x80w.icu"; classtype:attempted-recon; sid:200023074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.bbl7ef.icu"; classtype:attempted-recon; sid:200023075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.bfsngf.top"; classtype:attempted-recon; sid:200023076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.bs7dc.icu"; classtype:attempted-recon; sid:200023077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.bsnpag.top"; classtype:attempted-recon; sid:200023078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.bvdadv.top"; classtype:attempted-recon; sid:200023079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.cdpthi.top"; classtype:attempted-recon; sid:200023080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.chashanchu48.shop"; classtype:attempted-recon; sid:200023081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.citcfi.top"; classtype:attempted-recon; sid:200023082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.com-deals.shop"; classtype:attempted-recon; sid:200023083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.contius.shop"; classtype:attempted-recon; sid:200023084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.coxrdc.top"; classtype:attempted-recon; sid:200023085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.cqvlsi.top"; classtype:attempted-recon; sid:200023086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.cstztf.top"; classtype:attempted-recon; sid:200023087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.demtjo.top"; classtype:attempted-recon; sid:200023088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.dfdnsx.top"; classtype:attempted-recon; sid:200023089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.dgqqxx.top"; classtype:attempted-recon; sid:200023090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.djulad.top"; classtype:attempted-recon; sid:200023091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.dkmimw.top"; classtype:attempted-recon; sid:200023092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.dnmsu6.icu"; classtype:attempted-recon; sid:200023093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.doenfd.top"; classtype:attempted-recon; sid:200023094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.eaelbi.top"; classtype:attempted-recon; sid:200023095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ehgmml.top"; classtype:attempted-recon; sid:200023096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.elhicw.top"; classtype:attempted-recon; sid:200023097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.epwnsr.top"; classtype:attempted-recon; sid:200023098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.fahxqk.shop"; classtype:attempted-recon; sid:200023099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.flscly.top"; classtype:attempted-recon; sid:200023100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.fukjzs.top"; classtype:attempted-recon; sid:200023101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.fvkhnr.top"; classtype:attempted-recon; sid:200023102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.fzfweo.top"; classtype:attempted-recon; sid:200023103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gamxhl.shop"; classtype:attempted-recon; sid:200023104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gdmdxy.top"; classtype:attempted-recon; sid:200023105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gjglse.shop"; classtype:attempted-recon; sid:200023106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.glhdpz.top"; classtype:attempted-recon; sid:200023107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gntozh.top"; classtype:attempted-recon; sid:200023108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gtqklv.top"; classtype:attempted-recon; sid:200023109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gxdhfa.top"; classtype:attempted-recon; sid:200023110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gzmvuo.top"; classtype:attempted-recon; sid:200023111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.hixcny.top"; classtype:attempted-recon; sid:200023112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.hpbzkc.top"; classtype:attempted-recon; sid:200023113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.hweypy.top"; classtype:attempted-recon; sid:200023114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.hyhznq.top"; classtype:attempted-recon; sid:200023115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.iaklie.top"; classtype:attempted-recon; sid:200023116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ihfo5.icu"; classtype:attempted-recon; sid:200023117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.invpbv.top"; classtype:attempted-recon; sid:200023118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ioxsho.shop"; classtype:attempted-recon; sid:200023119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.jivdhm.top"; classtype:attempted-recon; sid:200023120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.jubsfg.top"; classtype:attempted-recon; sid:200023121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.kbqnmz.top"; classtype:attempted-recon; sid:200023122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.kfpxyn.top"; classtype:attempted-recon; sid:200023123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.klgmfj.top"; classtype:attempted-recon; sid:200023124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.kpgvbn.top"; classtype:attempted-recon; sid:200023125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200023126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.kutlzl.top"; classtype:attempted-recon; sid:200023127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.kwoneq.top"; classtype:attempted-recon; sid:200023128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.l4p2g1.icu"; classtype:attempted-recon; sid:200023129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.lgwjlm.shop"; classtype:attempted-recon; sid:200023130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.llsoxx.top"; classtype:attempted-recon; sid:200023131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.mbirgc.top"; classtype:attempted-recon; sid:200023132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200023133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.mvqlzn.top"; classtype:attempted-recon; sid:200023134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.mwdrbx.top"; classtype:attempted-recon; sid:200023135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.mxeanv.top"; classtype:attempted-recon; sid:200023136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.n21so.icu"; classtype:attempted-recon; sid:200023137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nfpdgp.top"; classtype:attempted-recon; sid:200023138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nhewlh.top"; classtype:attempted-recon; sid:200023139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nlujo.top"; classtype:attempted-recon; sid:200023140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.notwe.icu"; classtype:attempted-recon; sid:200023141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nphgoc.top"; classtype:attempted-recon; sid:200023142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nr5kfh.icu"; classtype:attempted-recon; sid:200023143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.nrmzy6.icu"; classtype:attempted-recon; sid:200023144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ofldnb.shop"; classtype:attempted-recon; sid:200023145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.oiknia.top"; classtype:attempted-recon; sid:200023146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.oipful.top"; classtype:attempted-recon; sid:200023147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.patcfp.top"; classtype:attempted-recon; sid:200023148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pbykwg.top"; classtype:attempted-recon; sid:200023149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pdndft.top"; classtype:attempted-recon; sid:200023150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ph29h.icu"; classtype:attempted-recon; sid:200023151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pjt9os.icu"; classtype:attempted-recon; sid:200023152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ptrwmp.top"; classtype:attempted-recon; sid:200023153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pugxbo.top"; classtype:attempted-recon; sid:200023154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.puoo9.icu"; classtype:attempted-recon; sid:200023155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pxbkkk.top"; classtype:attempted-recon; sid:200023156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pxnctk.top"; classtype:attempted-recon; sid:200023157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pxzjwk.top"; classtype:attempted-recon; sid:200023158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.pysitg.top"; classtype:attempted-recon; sid:200023159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.qexccc.top"; classtype:attempted-recon; sid:200023160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.qfvbqx.shop"; classtype:attempted-recon; sid:200023161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.qoefmk.top"; classtype:attempted-recon; sid:200023162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.qskgtg.top"; classtype:attempted-recon; sid:200023163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.qvcxln.shop"; classtype:attempted-recon; sid:200023164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.qwuchl.top"; classtype:attempted-recon; sid:200023165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.rhwdsq.top"; classtype:attempted-recon; sid:200023166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.rjbvwt.top"; classtype:attempted-recon; sid:200023167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.rn5mu.icu"; classtype:attempted-recon; sid:200023168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.runjin007.icu"; classtype:attempted-recon; sid:200023169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.rzuxzq.shop"; classtype:attempted-recon; sid:200023170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.saveyr.top"; classtype:attempted-recon; sid:200023171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.sftqjs.top"; classtype:attempted-recon; sid:200023172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.shanchuta27.shop"; classtype:attempted-recon; sid:200023173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.tfodbq.top"; classtype:attempted-recon; sid:200023174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.tgmqlg.top"; classtype:attempted-recon; sid:200023175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.tikoig.top"; classtype:attempted-recon; sid:200023176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.u25r5u.icu"; classtype:attempted-recon; sid:200023177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.upjhye.top"; classtype:attempted-recon; sid:200023178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.usivdv.top"; classtype:attempted-recon; sid:200023179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.vcacks.top"; classtype:attempted-recon; sid:200023180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.vcgsip.top"; classtype:attempted-recon; sid:200023181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.vfqske.shop"; classtype:attempted-recon; sid:200023182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.vkpock.shop"; classtype:attempted-recon; sid:200023183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.vnbbks.top"; classtype:attempted-recon; sid:200023184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.voadax.top"; classtype:attempted-recon; sid:200023185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.vrbvro.top"; classtype:attempted-recon; sid:200023186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.wwffoj.shop"; classtype:attempted-recon; sid:200023187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.xaexmo.top"; classtype:attempted-recon; sid:200023188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.xqpwkk.top"; classtype:attempted-recon; sid:200023189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.xvlbws.top"; classtype:attempted-recon; sid:200023190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.xwitwq.top"; classtype:attempted-recon; sid:200023191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.xzlnlm.top"; classtype:attempted-recon; sid:200023192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.yhuvzv.top"; classtype:attempted-recon; sid:200023193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.yifpgd.top"; classtype:attempted-recon; sid:200023194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.yphurc.top"; classtype:attempted-recon; sid:200023195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ytnxwi.top"; classtype:attempted-recon; sid:200023196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.ytwbnq.top"; classtype:attempted-recon; sid:200023197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.zmlyhs.top"; classtype:attempted-recon; sid:200023198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.zrbfzw.top"; classtype:attempted-recon; sid:200023199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.zxj6002.xyz"; classtype:attempted-recon; sid:200023200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.2sae6k.icu"; classtype:attempted-recon; sid:200023201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.3dbbmp.icu"; classtype:attempted-recon; sid:200023202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200023203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.4i3si1.icu"; classtype:attempted-recon; sid:200023204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.5577778.xyz"; classtype:attempted-recon; sid:200023205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.5sime.icu"; classtype:attempted-recon; sid:200023206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.5uzz0h.icu"; classtype:attempted-recon; sid:200023207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.650pt.icu"; classtype:attempted-recon; sid:200023208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.6788665.xyz"; classtype:attempted-recon; sid:200023209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.6876578.xyz"; classtype:attempted-recon; sid:200023210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.6mmfl.icu"; classtype:attempted-recon; sid:200023211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.7ngywp.icu"; classtype:attempted-recon; sid:200023212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.8fgrh.icu"; classtype:attempted-recon; sid:200023213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.adlxbh.top"; classtype:attempted-recon; sid:200023214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.afohvv.top"; classtype:attempted-recon; sid:200023215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.awsgn.top"; classtype:attempted-recon; sid:200023216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.b32mgr.icu"; classtype:attempted-recon; sid:200023217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.b4eqf.icu"; classtype:attempted-recon; sid:200023218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.b6x80w.icu"; classtype:attempted-recon; sid:200023219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.bbl7ef.icu"; classtype:attempted-recon; sid:200023220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.bfsngf.top"; classtype:attempted-recon; sid:200023221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.bs7dc.icu"; classtype:attempted-recon; sid:200023222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.bsnpag.top"; classtype:attempted-recon; sid:200023223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.bvdadv.top"; classtype:attempted-recon; sid:200023224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.cdpthi.top"; classtype:attempted-recon; sid:200023225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.chashanchu21.shop"; classtype:attempted-recon; sid:200023226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.chashanchu48.shop"; classtype:attempted-recon; sid:200023227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.chkmuq.shop"; classtype:attempted-recon; sid:200023228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.citcfi.top"; classtype:attempted-recon; sid:200023229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.cjezmf.top"; classtype:attempted-recon; sid:200023230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.com-deals.shop"; classtype:attempted-recon; sid:200023231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.coxrdc.top"; classtype:attempted-recon; sid:200023232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.cstztf.top"; classtype:attempted-recon; sid:200023233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.demtjo.top"; classtype:attempted-recon; sid:200023234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.dgqqxx.top"; classtype:attempted-recon; sid:200023235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.djulad.top"; classtype:attempted-recon; sid:200023236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.dkmimw.top"; classtype:attempted-recon; sid:200023237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.dnmsu6.icu"; classtype:attempted-recon; sid:200023238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.doenfd.top"; classtype:attempted-recon; sid:200023239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.eaelbi.top"; classtype:attempted-recon; sid:200023240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ehgmml.top"; classtype:attempted-recon; sid:200023241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.elhicw.top"; classtype:attempted-recon; sid:200023242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.epwnsr.top"; classtype:attempted-recon; sid:200023243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.exqkjx.top"; classtype:attempted-recon; sid:200023244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.fahxqk.shop"; classtype:attempted-recon; sid:200023245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.fhqemq.top"; classtype:attempted-recon; sid:200023246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.fprrlq.top"; classtype:attempted-recon; sid:200023247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.fukjzs.top"; classtype:attempted-recon; sid:200023248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.fvkhnr.top"; classtype:attempted-recon; sid:200023249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.fzfweo.top"; classtype:attempted-recon; sid:200023250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.gamxhl.shop"; classtype:attempted-recon; sid:200023251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.gjglse.shop"; classtype:attempted-recon; sid:200023252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.glhdpz.top"; classtype:attempted-recon; sid:200023253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.gntozh.top"; classtype:attempted-recon; sid:200023254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.gtqklv.top"; classtype:attempted-recon; sid:200023255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.gxdhfa.top"; classtype:attempted-recon; sid:200023256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.gyzt809.xyz"; classtype:attempted-recon; sid:200023257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.gzmvuo.top"; classtype:attempted-recon; sid:200023258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.hhxulg.top"; classtype:attempted-recon; sid:200023259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.hixcny.top"; classtype:attempted-recon; sid:200023260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.hpbzkc.top"; classtype:attempted-recon; sid:200023261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.hweypy.top"; classtype:attempted-recon; sid:200023262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.iaklie.top"; classtype:attempted-recon; sid:200023263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ihfo5.icu"; classtype:attempted-recon; sid:200023264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ilfbdb.top"; classtype:attempted-recon; sid:200023265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ioxsho.shop"; classtype:attempted-recon; sid:200023266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.jivdhm.top"; classtype:attempted-recon; sid:200023267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.jryuds.top"; classtype:attempted-recon; sid:200023268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.klgmfj.top"; classtype:attempted-recon; sid:200023269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.kpgvbn.top"; classtype:attempted-recon; sid:200023270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.kutlzl.top"; classtype:attempted-recon; sid:200023271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.kwoneq.top"; classtype:attempted-recon; sid:200023272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.l4p2g1.icu"; classtype:attempted-recon; sid:200023273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ladyul.top"; classtype:attempted-recon; sid:200023274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.lgwjlm.shop"; classtype:attempted-recon; sid:200023275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.llsoxx.top"; classtype:attempted-recon; sid:200023276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.mbirgc.top"; classtype:attempted-recon; sid:200023277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200023278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.n21so.icu"; classtype:attempted-recon; sid:200023279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.n6eonm.icu"; classtype:attempted-recon; sid:200023280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.neidee.top"; classtype:attempted-recon; sid:200023281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.nfpdgp.top"; classtype:attempted-recon; sid:200023282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.nhewlh.top"; classtype:attempted-recon; sid:200023283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.nkjfmc.top"; classtype:attempted-recon; sid:200023284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.nlujo.top"; classtype:attempted-recon; sid:200023285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.notwe.icu"; classtype:attempted-recon; sid:200023286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.nphgoc.top"; classtype:attempted-recon; sid:200023287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.npibd.top"; classtype:attempted-recon; sid:200023288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.nqsaby.top"; classtype:attempted-recon; sid:200023289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.nrmzy6.icu"; classtype:attempted-recon; sid:200023290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ofldnb.shop"; classtype:attempted-recon; sid:200023291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ohzctx.top"; classtype:attempted-recon; sid:200023292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.oiknia.top"; classtype:attempted-recon; sid:200023293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.oipful.top"; classtype:attempted-recon; sid:200023294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.pbykwg.top"; classtype:attempted-recon; sid:200023295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.pdndft.top"; classtype:attempted-recon; sid:200023296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ph29h.icu"; classtype:attempted-recon; sid:200023297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.pjt9os.icu"; classtype:attempted-recon; sid:200023298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.pugxbo.top"; classtype:attempted-recon; sid:200023299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.puoo9.icu"; classtype:attempted-recon; sid:200023300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.pxbkkk.top"; classtype:attempted-recon; sid:200023301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.pxnctk.top"; classtype:attempted-recon; sid:200023302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.pysitg.top"; classtype:attempted-recon; sid:200023303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.qexccc.top"; classtype:attempted-recon; sid:200023304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.qfvbqx.shop"; classtype:attempted-recon; sid:200023305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.qlmenm.top"; classtype:attempted-recon; sid:200023306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.qoefmk.top"; classtype:attempted-recon; sid:200023307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.qvcxln.shop"; classtype:attempted-recon; sid:200023308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.qwuchl.top"; classtype:attempted-recon; sid:200023309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.rhwdsq.top"; classtype:attempted-recon; sid:200023310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.rn5mu.icu"; classtype:attempted-recon; sid:200023311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.royjjy.shop"; classtype:attempted-recon; sid:200023312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.runjin007.icu"; classtype:attempted-recon; sid:200023313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.rvpepb.top"; classtype:attempted-recon; sid:200023314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.sftqjs.top"; classtype:attempted-recon; sid:200023315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.tbntv.icu"; classtype:attempted-recon; sid:200023316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.tfodbq.top"; classtype:attempted-recon; sid:200023317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.tgmqlg.top"; classtype:attempted-recon; sid:200023318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.tikoig.top"; classtype:attempted-recon; sid:200023319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.tilzhy.top"; classtype:attempted-recon; sid:200023320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.u25r5u.icu"; classtype:attempted-recon; sid:200023321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.uhia8h.icu"; classtype:attempted-recon; sid:200023322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.upjhye.top"; classtype:attempted-recon; sid:200023323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.usivdv.top"; classtype:attempted-recon; sid:200023324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.vcacks.top"; classtype:attempted-recon; sid:200023325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.vcgsip.top"; classtype:attempted-recon; sid:200023326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.vfqske.shop"; classtype:attempted-recon; sid:200023327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.vkpock.shop"; classtype:attempted-recon; sid:200023328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.vnbbks.top"; classtype:attempted-recon; sid:200023329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.voadax.top"; classtype:attempted-recon; sid:200023330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.vrbvro.top"; classtype:attempted-recon; sid:200023331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.wcpjfd.top"; classtype:attempted-recon; sid:200023332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.wl85i.icu"; classtype:attempted-recon; sid:200023333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.wolvps.shop"; classtype:attempted-recon; sid:200023334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.wwffoj.shop"; classtype:attempted-recon; sid:200023335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.xaexmo.top"; classtype:attempted-recon; sid:200023336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.xgjt.pro"; classtype:attempted-recon; sid:200023337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.xqpwkk.top"; classtype:attempted-recon; sid:200023338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.xvlbws.top"; classtype:attempted-recon; sid:200023339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.xwitwq.top"; classtype:attempted-recon; sid:200023340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.xzlnlm.top"; classtype:attempted-recon; sid:200023341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.yhuvzv.top"; classtype:attempted-recon; sid:200023342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.yifpgd.top"; classtype:attempted-recon; sid:200023343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.yphurc.top"; classtype:attempted-recon; sid:200023344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ytnxwi.top"; classtype:attempted-recon; sid:200023345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.ytwbnq.top"; classtype:attempted-recon; sid:200023346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.yyzded.top"; classtype:attempted-recon; sid:200023347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.zmlyhs.top"; classtype:attempted-recon; sid:200023348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.zrbfzw.top"; classtype:attempted-recon; sid:200023349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.zxj6002.xyz"; classtype:attempted-recon; sid:200023350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.1112458.xyz"; classtype:attempted-recon; sid:200023351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.2sae6k.icu"; classtype:attempted-recon; sid:200023352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.3dbbmp.icu"; classtype:attempted-recon; sid:200023353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.3p1yb.icu"; classtype:attempted-recon; sid:200023354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200023355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.457e0p.icu"; classtype:attempted-recon; sid:200023356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.4i3si1.icu"; classtype:attempted-recon; sid:200023357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.5577778.xyz"; classtype:attempted-recon; sid:200023358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.5uzz0h.icu"; classtype:attempted-recon; sid:200023359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.6788665.xyz"; classtype:attempted-recon; sid:200023360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.6mmfl.icu"; classtype:attempted-recon; sid:200023361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.7hml9e.icu"; classtype:attempted-recon; sid:200023362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.7lnki4.icu"; classtype:attempted-recon; sid:200023363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.7ngywp.icu"; classtype:attempted-recon; sid:200023364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.8fgrh.icu"; classtype:attempted-recon; sid:200023365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.9v9w2y.icu"; classtype:attempted-recon; sid:200023366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.abluwk.top"; classtype:attempted-recon; sid:200023367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.adlxbh.top"; classtype:attempted-recon; sid:200023368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.b4eqf.icu"; classtype:attempted-recon; sid:200023369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.b6x80w.icu"; classtype:attempted-recon; sid:200023370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.bfsngf.top"; classtype:attempted-recon; sid:200023371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.bs7dc.icu"; classtype:attempted-recon; sid:200023372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.bsnpag.top"; classtype:attempted-recon; sid:200023373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.bvdadv.top"; classtype:attempted-recon; sid:200023374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.cdpthi.top"; classtype:attempted-recon; sid:200023375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.chashanchu21.shop"; classtype:attempted-recon; sid:200023376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.chashanchu48.shop"; classtype:attempted-recon; sid:200023377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.chkmuq.shop"; classtype:attempted-recon; sid:200023378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.cjezmf.top"; classtype:attempted-recon; sid:200023379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.com-deals.shop"; classtype:attempted-recon; sid:200023380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.contius.shop"; classtype:attempted-recon; sid:200023381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.coxrdc.top"; classtype:attempted-recon; sid:200023382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.cqvlsi.top"; classtype:attempted-recon; sid:200023383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.cstztf.top"; classtype:attempted-recon; sid:200023384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.demtjo.top"; classtype:attempted-recon; sid:200023385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.dgqqxx.top"; classtype:attempted-recon; sid:200023386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.dkmimw.top"; classtype:attempted-recon; sid:200023387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.dnmsu6.icu"; classtype:attempted-recon; sid:200023388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.eaelbi.top"; classtype:attempted-recon; sid:200023389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ehgmml.top"; classtype:attempted-recon; sid:200023390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ejvocy.top"; classtype:attempted-recon; sid:200023391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.epwnsr.top"; classtype:attempted-recon; sid:200023392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.eucvbc.top"; classtype:attempted-recon; sid:200023393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.exqkjx.top"; classtype:attempted-recon; sid:200023394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.fhqemq.top"; classtype:attempted-recon; sid:200023395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.flscly.top"; classtype:attempted-recon; sid:200023396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.fprrlq.top"; classtype:attempted-recon; sid:200023397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.fvkhnr.top"; classtype:attempted-recon; sid:200023398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.fzfweo.top"; classtype:attempted-recon; sid:200023399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gamxhl.shop"; classtype:attempted-recon; sid:200023400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gdmdxy.top"; classtype:attempted-recon; sid:200023401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gjglse.shop"; classtype:attempted-recon; sid:200023402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.glhdpz.top"; classtype:attempted-recon; sid:200023403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gntozh.top"; classtype:attempted-recon; sid:200023404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gs3do.icu"; classtype:attempted-recon; sid:200023405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gtqklv.top"; classtype:attempted-recon; sid:200023406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gxdhfa.top"; classtype:attempted-recon; sid:200023407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gyzt809.xyz"; classtype:attempted-recon; sid:200023408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gzmvuo.top"; classtype:attempted-recon; sid:200023409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.hhxulg.top"; classtype:attempted-recon; sid:200023410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.hixcny.top"; classtype:attempted-recon; sid:200023411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.hpbzkc.top"; classtype:attempted-recon; sid:200023412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.hweypy.top"; classtype:attempted-recon; sid:200023413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.hycxop.top"; classtype:attempted-recon; sid:200023414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.hyhznq.top"; classtype:attempted-recon; sid:200023415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.iaklie.top"; classtype:attempted-recon; sid:200023416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ihfo5.icu"; classtype:attempted-recon; sid:200023417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ilfbdb.top"; classtype:attempted-recon; sid:200023418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.invpbv.top"; classtype:attempted-recon; sid:200023419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ioxsho.shop"; classtype:attempted-recon; sid:200023420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.iytxjk.top"; classtype:attempted-recon; sid:200023421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.jivdhm.top"; classtype:attempted-recon; sid:200023422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.jryuds.top"; classtype:attempted-recon; sid:200023423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.jubsfg.top"; classtype:attempted-recon; sid:200023424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.kfpxyn.top"; classtype:attempted-recon; sid:200023425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.klgmfj.top"; classtype:attempted-recon; sid:200023426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.kwoneq.top"; classtype:attempted-recon; sid:200023427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.l4p2g1.icu"; classtype:attempted-recon; sid:200023428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ladyul.top"; classtype:attempted-recon; sid:200023429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.lgwjlm.shop"; classtype:attempted-recon; sid:200023430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.llsoxx.top"; classtype:attempted-recon; sid:200023431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.mbirgc.top"; classtype:attempted-recon; sid:200023432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200023433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.mvqlzn.top"; classtype:attempted-recon; sid:200023434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.mwdrbx.top"; classtype:attempted-recon; sid:200023435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.mxeanv.top"; classtype:attempted-recon; sid:200023436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.n21so.icu"; classtype:attempted-recon; sid:200023437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.n6eonm.icu"; classtype:attempted-recon; sid:200023438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.neidee.top"; classtype:attempted-recon; sid:200023439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.nfpdgp.top"; classtype:attempted-recon; sid:200023440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.nhewlh.top"; classtype:attempted-recon; sid:200023441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.nkjfmc.top"; classtype:attempted-recon; sid:200023442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.nlujo.top"; classtype:attempted-recon; sid:200023443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.notwe.icu"; classtype:attempted-recon; sid:200023444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.nphgoc.top"; classtype:attempted-recon; sid:200023445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.nqsaby.top"; classtype:attempted-recon; sid:200023446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.nrmzy6.icu"; classtype:attempted-recon; sid:200023447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ofldnb.shop"; classtype:attempted-recon; sid:200023448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ohzctx.top"; classtype:attempted-recon; sid:200023449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.oiknia.top"; classtype:attempted-recon; sid:200023450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.oipful.top"; classtype:attempted-recon; sid:200023451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.patcfp.top"; classtype:attempted-recon; sid:200023452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pbykwg.top"; classtype:attempted-recon; sid:200023453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ph29h.icu"; classtype:attempted-recon; sid:200023454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pjt9os.icu"; classtype:attempted-recon; sid:200023455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pqdxev.top"; classtype:attempted-recon; sid:200023456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pugxbo.top"; classtype:attempted-recon; sid:200023457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.puoo9.icu"; classtype:attempted-recon; sid:200023458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pxbkkk.top"; classtype:attempted-recon; sid:200023459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pxnctk.top"; classtype:attempted-recon; sid:200023460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pxzjwk.top"; classtype:attempted-recon; sid:200023461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.pysitg.top"; classtype:attempted-recon; sid:200023462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.qexccc.top"; classtype:attempted-recon; sid:200023463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.qlmenm.top"; classtype:attempted-recon; sid:200023464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.qoefmk.top"; classtype:attempted-recon; sid:200023465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.qvcxln.shop"; classtype:attempted-recon; sid:200023466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.qwuchl.top"; classtype:attempted-recon; sid:200023467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.rgdpsh.top"; classtype:attempted-recon; sid:200023468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.rjbvwt.top"; classtype:attempted-recon; sid:200023469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.rn5mu.icu"; classtype:attempted-recon; sid:200023470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.royjjy.shop"; classtype:attempted-recon; sid:200023471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.runjin007.icu"; classtype:attempted-recon; sid:200023472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.rvpepb.top"; classtype:attempted-recon; sid:200023473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.rzuxzq.shop"; classtype:attempted-recon; sid:200023474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.sftqjs.top"; classtype:attempted-recon; sid:200023475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.shanchuta27.shop"; classtype:attempted-recon; sid:200023476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.tfodbq.top"; classtype:attempted-recon; sid:200023477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.tgmqlg.top"; classtype:attempted-recon; sid:200023478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.tikoig.top"; classtype:attempted-recon; sid:200023479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.tilzhy.top"; classtype:attempted-recon; sid:200023480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.u25r5u.icu"; classtype:attempted-recon; sid:200023481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.uhia8h.icu"; classtype:attempted-recon; sid:200023482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.upjhye.top"; classtype:attempted-recon; sid:200023483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.usivdv.top"; classtype:attempted-recon; sid:200023484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.vcacks.top"; classtype:attempted-recon; sid:200023485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.vcgsip.top"; classtype:attempted-recon; sid:200023486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.vfqske.shop"; classtype:attempted-recon; sid:200023487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.vkpock.shop"; classtype:attempted-recon; sid:200023488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.vnbbks.top"; classtype:attempted-recon; sid:200023489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.voadax.top"; classtype:attempted-recon; sid:200023490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.vrbvro.top"; classtype:attempted-recon; sid:200023491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.wcpjfd.top"; classtype:attempted-recon; sid:200023492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.wl85i.icu"; classtype:attempted-recon; sid:200023493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.wolvps.shop"; classtype:attempted-recon; sid:200023494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.xaexmo.top"; classtype:attempted-recon; sid:200023495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.xgjt.pro"; classtype:attempted-recon; sid:200023496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.xgtofb.top"; classtype:attempted-recon; sid:200023497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.xqpwkk.top"; classtype:attempted-recon; sid:200023498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.xvlbws.top"; classtype:attempted-recon; sid:200023499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.xwitwq.top"; classtype:attempted-recon; sid:200023500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.xzlnlm.top"; classtype:attempted-recon; sid:200023501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.yhuvzv.top"; classtype:attempted-recon; sid:200023502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.yifpgd.top"; classtype:attempted-recon; sid:200023503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.yphurc.top"; classtype:attempted-recon; sid:200023504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ytnxwi.top"; classtype:attempted-recon; sid:200023505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.ytwbnq.top"; classtype:attempted-recon; sid:200023506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.yyzded.top"; classtype:attempted-recon; sid:200023507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.zmlyhs.top"; classtype:attempted-recon; sid:200023508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.zrbfzw.top"; classtype:attempted-recon; sid:200023509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.zxj6002.xyz"; classtype:attempted-recon; sid:200023510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.1112458.xyz"; classtype:attempted-recon; sid:200023511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.2sae6k.icu"; classtype:attempted-recon; sid:200023512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.3dbbmp.icu"; classtype:attempted-recon; sid:200023513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.3p1yb.icu"; classtype:attempted-recon; sid:200023514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200023515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.457e0p.icu"; classtype:attempted-recon; sid:200023516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.4i3si1.icu"; classtype:attempted-recon; sid:200023517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.5577778.xyz"; classtype:attempted-recon; sid:200023518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.5sime.icu"; classtype:attempted-recon; sid:200023519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.650pt.icu"; classtype:attempted-recon; sid:200023520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.6788665.xyz"; classtype:attempted-recon; sid:200023521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.6876578.xyz"; classtype:attempted-recon; sid:200023522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.6mmfl.icu"; classtype:attempted-recon; sid:200023523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.7hml9e.icu"; classtype:attempted-recon; sid:200023524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.7lnki4.icu"; classtype:attempted-recon; sid:200023525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.7ngywp.icu"; classtype:attempted-recon; sid:200023526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.8fgrh.icu"; classtype:attempted-recon; sid:200023527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.9v9w2y.icu"; classtype:attempted-recon; sid:200023528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.abluwk.top"; classtype:attempted-recon; sid:200023529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.adlxbh.top"; classtype:attempted-recon; sid:200023530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.afohvv.top"; classtype:attempted-recon; sid:200023531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.awsgn.top"; classtype:attempted-recon; sid:200023532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.b32mgr.icu"; classtype:attempted-recon; sid:200023533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.b4eqf.icu"; classtype:attempted-recon; sid:200023534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.b6x80w.icu"; classtype:attempted-recon; sid:200023535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.bbl7ef.icu"; classtype:attempted-recon; sid:200023536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.bfsngf.top"; classtype:attempted-recon; sid:200023537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.bs7dc.icu"; classtype:attempted-recon; sid:200023538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.bsnpag.top"; classtype:attempted-recon; sid:200023539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.bvdadv.top"; classtype:attempted-recon; sid:200023540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.cdpthi.top"; classtype:attempted-recon; sid:200023541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.chashanchu21.shop"; classtype:attempted-recon; sid:200023542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.chashanchu48.shop"; classtype:attempted-recon; sid:200023543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.chkmuq.shop"; classtype:attempted-recon; sid:200023544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.citcfi.top"; classtype:attempted-recon; sid:200023545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.com-deals.shop"; classtype:attempted-recon; sid:200023546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.contius.shop"; classtype:attempted-recon; sid:200023547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.coxrdc.top"; classtype:attempted-recon; sid:200023548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.cqvlsi.top"; classtype:attempted-recon; sid:200023549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.cstztf.top"; classtype:attempted-recon; sid:200023550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.demtjo.top"; classtype:attempted-recon; sid:200023551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.dfdnsx.top"; classtype:attempted-recon; sid:200023552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.dgqqxx.top"; classtype:attempted-recon; sid:200023553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.djulad.top"; classtype:attempted-recon; sid:200023554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.dkmimw.top"; classtype:attempted-recon; sid:200023555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.dnmsu6.icu"; classtype:attempted-recon; sid:200023556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.doenfd.top"; classtype:attempted-recon; sid:200023557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.eaelbi.top"; classtype:attempted-recon; sid:200023558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ehgmml.top"; classtype:attempted-recon; sid:200023559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ejvocy.top"; classtype:attempted-recon; sid:200023560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.elhicw.top"; classtype:attempted-recon; sid:200023561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.epwnsr.top"; classtype:attempted-recon; sid:200023562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.eucvbc.top"; classtype:attempted-recon; sid:200023563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.exqkjx.top"; classtype:attempted-recon; sid:200023564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fahxqk.shop"; classtype:attempted-recon; sid:200023565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fhqemq.top"; classtype:attempted-recon; sid:200023566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.flscly.top"; classtype:attempted-recon; sid:200023567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fprrlq.top"; classtype:attempted-recon; sid:200023568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fukjzs.top"; classtype:attempted-recon; sid:200023569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fvkhnr.top"; classtype:attempted-recon; sid:200023570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fzfweo.top"; classtype:attempted-recon; sid:200023571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gamxhl.shop"; classtype:attempted-recon; sid:200023572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gdmdxy.top"; classtype:attempted-recon; sid:200023573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gjglse.shop"; classtype:attempted-recon; sid:200023574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.glhdpz.top"; classtype:attempted-recon; sid:200023575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gntozh.top"; classtype:attempted-recon; sid:200023576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gs3do.icu"; classtype:attempted-recon; sid:200023577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gtqklv.top"; classtype:attempted-recon; sid:200023578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gxdhfa.top"; classtype:attempted-recon; sid:200023579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gyzt809.xyz"; classtype:attempted-recon; sid:200023580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gzmvuo.top"; classtype:attempted-recon; sid:200023581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.hhxulg.top"; classtype:attempted-recon; sid:200023582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.hixcny.top"; classtype:attempted-recon; sid:200023583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.hpbzkc.top"; classtype:attempted-recon; sid:200023584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.hweypy.top"; classtype:attempted-recon; sid:200023585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.hycxop.top"; classtype:attempted-recon; sid:200023586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.hyhznq.top"; classtype:attempted-recon; sid:200023587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.iaklie.top"; classtype:attempted-recon; sid:200023588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ihfo5.icu"; classtype:attempted-recon; sid:200023589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ilfbdb.top"; classtype:attempted-recon; sid:200023590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.invpbv.top"; classtype:attempted-recon; sid:200023591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ioxsho.shop"; classtype:attempted-recon; sid:200023592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.jivdhm.top"; classtype:attempted-recon; sid:200023593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.jryuds.top"; classtype:attempted-recon; sid:200023594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.jubsfg.top"; classtype:attempted-recon; sid:200023595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.kfpxyn.top"; classtype:attempted-recon; sid:200023596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.klgmfj.top"; classtype:attempted-recon; sid:200023597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.kpgvbn.top"; classtype:attempted-recon; sid:200023598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200023599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.kutlzl.top"; classtype:attempted-recon; sid:200023600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.kwoneq.top"; classtype:attempted-recon; sid:200023601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.l4p2g1.icu"; classtype:attempted-recon; sid:200023602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.lfvlpt.top"; classtype:attempted-recon; sid:200023603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.lgwjlm.shop"; classtype:attempted-recon; sid:200023604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.llsoxx.top"; classtype:attempted-recon; sid:200023605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.mbirgc.top"; classtype:attempted-recon; sid:200023606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200023607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.mvqlzn.top"; classtype:attempted-recon; sid:200023608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.mwdrbx.top"; classtype:attempted-recon; sid:200023609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.mxeanv.top"; classtype:attempted-recon; sid:200023610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.n21so.icu"; classtype:attempted-recon; sid:200023611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.n6eonm.icu"; classtype:attempted-recon; sid:200023612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.neidee.top"; classtype:attempted-recon; sid:200023613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nfpdgp.top"; classtype:attempted-recon; sid:200023614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nhewlh.top"; classtype:attempted-recon; sid:200023615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nkjfmc.top"; classtype:attempted-recon; sid:200023616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nlujo.top"; classtype:attempted-recon; sid:200023617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.notwe.icu"; classtype:attempted-recon; sid:200023618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nphgoc.top"; classtype:attempted-recon; sid:200023619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.npibd.top"; classtype:attempted-recon; sid:200023620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nqsaby.top"; classtype:attempted-recon; sid:200023621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nr5kfh.icu"; classtype:attempted-recon; sid:200023622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.nrmzy6.icu"; classtype:attempted-recon; sid:200023623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ofldnb.shop"; classtype:attempted-recon; sid:200023624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ogzbtb.top"; classtype:attempted-recon; sid:200023625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ohzctx.top"; classtype:attempted-recon; sid:200023626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.oiknia.top"; classtype:attempted-recon; sid:200023627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.oipful.top"; classtype:attempted-recon; sid:200023628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.patcfp.top"; classtype:attempted-recon; sid:200023629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pbykwg.top"; classtype:attempted-recon; sid:200023630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pdndft.top"; classtype:attempted-recon; sid:200023631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ph29h.icu"; classtype:attempted-recon; sid:200023632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pjt9os.icu"; classtype:attempted-recon; sid:200023633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pqdxev.top"; classtype:attempted-recon; sid:200023634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ptrwmp.top"; classtype:attempted-recon; sid:200023635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pugxbo.top"; classtype:attempted-recon; sid:200023636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.puoo9.icu"; classtype:attempted-recon; sid:200023637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pxbkkk.top"; classtype:attempted-recon; sid:200023638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pxnctk.top"; classtype:attempted-recon; sid:200023639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pxzjwk.top"; classtype:attempted-recon; sid:200023640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.pysitg.top"; classtype:attempted-recon; sid:200023641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.qexccc.top"; classtype:attempted-recon; sid:200023642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.qfvbqx.shop"; classtype:attempted-recon; sid:200023643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.qlmenm.top"; classtype:attempted-recon; sid:200023644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.qoefmk.top"; classtype:attempted-recon; sid:200023645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.qskgtg.top"; classtype:attempted-recon; sid:200023646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.qvcxln.shop"; classtype:attempted-recon; sid:200023647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.qwuchl.top"; classtype:attempted-recon; sid:200023648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.rhwdsq.top"; classtype:attempted-recon; sid:200023649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.rn5mu.icu"; classtype:attempted-recon; sid:200023650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.royjjy.shop"; classtype:attempted-recon; sid:200023651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.runjin007.icu"; classtype:attempted-recon; sid:200023652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.rvpepb.top"; classtype:attempted-recon; sid:200023653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.rzuxzq.shop"; classtype:attempted-recon; sid:200023654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.saveyr.top"; classtype:attempted-recon; sid:200023655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.sftqjs.top"; classtype:attempted-recon; sid:200023656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.shanchuta27.shop"; classtype:attempted-recon; sid:200023657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.tbntv.icu"; classtype:attempted-recon; sid:200023658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.tfodbq.top"; classtype:attempted-recon; sid:200023659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.tgmqlg.top"; classtype:attempted-recon; sid:200023660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.tikoig.top"; classtype:attempted-recon; sid:200023661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.tilzhy.top"; classtype:attempted-recon; sid:200023662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.u25r5u.icu"; classtype:attempted-recon; sid:200023663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.uhia8h.icu"; classtype:attempted-recon; sid:200023664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.upjhye.top"; classtype:attempted-recon; sid:200023665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.usivdv.top"; classtype:attempted-recon; sid:200023666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.vcacks.top"; classtype:attempted-recon; sid:200023667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.vcgsip.top"; classtype:attempted-recon; sid:200023668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.vfqske.shop"; classtype:attempted-recon; sid:200023669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.vkpock.shop"; classtype:attempted-recon; sid:200023670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.vnbbks.top"; classtype:attempted-recon; sid:200023671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.voadax.top"; classtype:attempted-recon; sid:200023672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.vrbvro.top"; classtype:attempted-recon; sid:200023673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.wcpjfd.top"; classtype:attempted-recon; sid:200023674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.wl85i.icu"; classtype:attempted-recon; sid:200023675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.wolvps.shop"; classtype:attempted-recon; sid:200023676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.wwffoj.shop"; classtype:attempted-recon; sid:200023677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xaexmo.top"; classtype:attempted-recon; sid:200023678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xgjt.pro"; classtype:attempted-recon; sid:200023679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xgtofb.top"; classtype:attempted-recon; sid:200023680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xqpwkk.top"; classtype:attempted-recon; sid:200023681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xvlbws.top"; classtype:attempted-recon; sid:200023682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xwitwq.top"; classtype:attempted-recon; sid:200023683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.xzlnlm.top"; classtype:attempted-recon; sid:200023684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.yhuvzv.top"; classtype:attempted-recon; sid:200023685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.yifpgd.top"; classtype:attempted-recon; sid:200023686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.yphurc.top"; classtype:attempted-recon; sid:200023687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ytnxwi.top"; classtype:attempted-recon; sid:200023688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.ytwbnq.top"; classtype:attempted-recon; sid:200023689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.yyzded.top"; classtype:attempted-recon; sid:200023690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.zmlyhs.top"; classtype:attempted-recon; sid:200023691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.zrbfzw.top"; classtype:attempted-recon; sid:200023692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.zxj6002.xyz"; classtype:attempted-recon; sid:200023693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.1112458.xyz"; classtype:attempted-recon; sid:200023694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.2sae6k.icu"; classtype:attempted-recon; sid:200023695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.3dbbmp.icu"; classtype:attempted-recon; sid:200023696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.3p1yb.icu"; classtype:attempted-recon; sid:200023697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.457e0p.icu"; classtype:attempted-recon; sid:200023698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.4i3si1.icu"; classtype:attempted-recon; sid:200023699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.5577778.xyz"; classtype:attempted-recon; sid:200023700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.5uzz0h.icu"; classtype:attempted-recon; sid:200023701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.650pt.icu"; classtype:attempted-recon; sid:200023702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.6788665.xyz"; classtype:attempted-recon; sid:200023703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.6876578.xyz"; classtype:attempted-recon; sid:200023704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.6mmfl.icu"; classtype:attempted-recon; sid:200023705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.7hml9e.icu"; classtype:attempted-recon; sid:200023706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.7lnki4.icu"; classtype:attempted-recon; sid:200023707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.7ngywp.icu"; classtype:attempted-recon; sid:200023708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.8fgrh.icu"; classtype:attempted-recon; sid:200023709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.9v9w2y.icu"; classtype:attempted-recon; sid:200023710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.abluwk.top"; classtype:attempted-recon; sid:200023711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.adlxbh.top"; classtype:attempted-recon; sid:200023712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.afohvv.top"; classtype:attempted-recon; sid:200023713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.awsgn.top"; classtype:attempted-recon; sid:200023714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.b32mgr.icu"; classtype:attempted-recon; sid:200023715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.b4eqf.icu"; classtype:attempted-recon; sid:200023716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.b6x80w.icu"; classtype:attempted-recon; sid:200023717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.bbl7ef.icu"; classtype:attempted-recon; sid:200023718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.bfsngf.top"; classtype:attempted-recon; sid:200023719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.bs7dc.icu"; classtype:attempted-recon; sid:200023720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.bsnpag.top"; classtype:attempted-recon; sid:200023721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.bvdadv.top"; classtype:attempted-recon; sid:200023722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.cdpthi.top"; classtype:attempted-recon; sid:200023723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.chashanchu21.shop"; classtype:attempted-recon; sid:200023724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.chashanchu48.shop"; classtype:attempted-recon; sid:200023725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.chkmuq.shop"; classtype:attempted-recon; sid:200023726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.citcfi.top"; classtype:attempted-recon; sid:200023727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.cjezmf.top"; classtype:attempted-recon; sid:200023728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.com-deals.shop"; classtype:attempted-recon; sid:200023729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.contius.shop"; classtype:attempted-recon; sid:200023730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.coxrdc.top"; classtype:attempted-recon; sid:200023731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.cqvlsi.top"; classtype:attempted-recon; sid:200023732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.cstztf.top"; classtype:attempted-recon; sid:200023733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.demtjo.top"; classtype:attempted-recon; sid:200023734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.dfdnsx.top"; classtype:attempted-recon; sid:200023735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.dgqqxx.top"; classtype:attempted-recon; sid:200023736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.dkmimw.top"; classtype:attempted-recon; sid:200023737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.dnmsu6.icu"; classtype:attempted-recon; sid:200023738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.doenfd.top"; classtype:attempted-recon; sid:200023739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.eaelbi.top"; classtype:attempted-recon; sid:200023740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ejvocy.top"; classtype:attempted-recon; sid:200023741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.elhicw.top"; classtype:attempted-recon; sid:200023742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.epwnsr.top"; classtype:attempted-recon; sid:200023743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.eucvbc.top"; classtype:attempted-recon; sid:200023744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.exqkjx.top"; classtype:attempted-recon; sid:200023745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.fhqemq.top"; classtype:attempted-recon; sid:200023746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.flscly.top"; classtype:attempted-recon; sid:200023747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.fprrlq.top"; classtype:attempted-recon; sid:200023748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.fvkhnr.top"; classtype:attempted-recon; sid:200023749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.fzfweo.top"; classtype:attempted-recon; sid:200023750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gamxhl.shop"; classtype:attempted-recon; sid:200023751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gdmdxy.top"; classtype:attempted-recon; sid:200023752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gjglse.shop"; classtype:attempted-recon; sid:200023753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.glhdpz.top"; classtype:attempted-recon; sid:200023754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gntozh.top"; classtype:attempted-recon; sid:200023755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gs3do.icu"; classtype:attempted-recon; sid:200023756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gtqklv.top"; classtype:attempted-recon; sid:200023757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gxdhfa.top"; classtype:attempted-recon; sid:200023758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gyzt809.xyz"; classtype:attempted-recon; sid:200023759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gzmvuo.top"; classtype:attempted-recon; sid:200023760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.hhxulg.top"; classtype:attempted-recon; sid:200023761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.hixcny.top"; classtype:attempted-recon; sid:200023762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.hpbzkc.top"; classtype:attempted-recon; sid:200023763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.hweypy.top"; classtype:attempted-recon; sid:200023764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.hycxop.top"; classtype:attempted-recon; sid:200023765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.iaklie.top"; classtype:attempted-recon; sid:200023766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ihfo5.icu"; classtype:attempted-recon; sid:200023767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ilfbdb.top"; classtype:attempted-recon; sid:200023768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.invpbv.top"; classtype:attempted-recon; sid:200023769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ioxsho.shop"; classtype:attempted-recon; sid:200023770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.iytxjk.top"; classtype:attempted-recon; sid:200023771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.jivdhm.top"; classtype:attempted-recon; sid:200023772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.jryuds.top"; classtype:attempted-recon; sid:200023773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.jubsfg.top"; classtype:attempted-recon; sid:200023774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.kfpxyn.top"; classtype:attempted-recon; sid:200023775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.klgmfj.top"; classtype:attempted-recon; sid:200023776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.kpgvbn.top"; classtype:attempted-recon; sid:200023777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200023778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.kutlzl.top"; classtype:attempted-recon; sid:200023779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.kwoneq.top"; classtype:attempted-recon; sid:200023780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.l4p2g1.icu"; classtype:attempted-recon; sid:200023781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ladyul.top"; classtype:attempted-recon; sid:200023782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.lfvlpt.top"; classtype:attempted-recon; sid:200023783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.lgwjlm.shop"; classtype:attempted-recon; sid:200023784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.llsoxx.top"; classtype:attempted-recon; sid:200023785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.mbirgc.top"; classtype:attempted-recon; sid:200023786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200023787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.mvqlzn.top"; classtype:attempted-recon; sid:200023788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.mwdrbx.top"; classtype:attempted-recon; sid:200023789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.mxeanv.top"; classtype:attempted-recon; sid:200023790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.n21so.icu"; classtype:attempted-recon; sid:200023791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.n6eonm.icu"; classtype:attempted-recon; sid:200023792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.neidee.top"; classtype:attempted-recon; sid:200023793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.nfpdgp.top"; classtype:attempted-recon; sid:200023794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.nhewlh.top"; classtype:attempted-recon; sid:200023795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.nkjfmc.top"; classtype:attempted-recon; sid:200023796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.nlujo.top"; classtype:attempted-recon; sid:200023797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.notwe.icu"; classtype:attempted-recon; sid:200023798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.nphgoc.top"; classtype:attempted-recon; sid:200023799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.npibd.top"; classtype:attempted-recon; sid:200023800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.nqsaby.top"; classtype:attempted-recon; sid:200023801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.nrmzy6.icu"; classtype:attempted-recon; sid:200023802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ofldnb.shop"; classtype:attempted-recon; sid:200023803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ogzbtb.top"; classtype:attempted-recon; sid:200023804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ohzctx.top"; classtype:attempted-recon; sid:200023805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.oiknia.top"; classtype:attempted-recon; sid:200023806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.oipful.top"; classtype:attempted-recon; sid:200023807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pbykwg.top"; classtype:attempted-recon; sid:200023808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ph29h.icu"; classtype:attempted-recon; sid:200023809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pjt9os.icu"; classtype:attempted-recon; sid:200023810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pqdxev.top"; classtype:attempted-recon; sid:200023811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pugxbo.top"; classtype:attempted-recon; sid:200023812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.puoo9.icu"; classtype:attempted-recon; sid:200023813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pxbkkk.top"; classtype:attempted-recon; sid:200023814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pxnctk.top"; classtype:attempted-recon; sid:200023815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pxzjwk.top"; classtype:attempted-recon; sid:200023816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.pysitg.top"; classtype:attempted-recon; sid:200023817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.qexccc.top"; classtype:attempted-recon; sid:200023818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.qfvbqx.shop"; classtype:attempted-recon; sid:200023819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.qlmenm.top"; classtype:attempted-recon; sid:200023820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.qoefmk.top"; classtype:attempted-recon; sid:200023821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.qvcxln.shop"; classtype:attempted-recon; sid:200023822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.qwuchl.top"; classtype:attempted-recon; sid:200023823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.rgdpsh.top"; classtype:attempted-recon; sid:200023824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.rhwdsq.top"; classtype:attempted-recon; sid:200023825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.rjbvwt.top"; classtype:attempted-recon; sid:200023826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.rn5mu.icu"; classtype:attempted-recon; sid:200023827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.royjjy.shop"; classtype:attempted-recon; sid:200023828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.runjin007.icu"; classtype:attempted-recon; sid:200023829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.rvpepb.top"; classtype:attempted-recon; sid:200023830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.rzuxzq.shop"; classtype:attempted-recon; sid:200023831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.saveyr.top"; classtype:attempted-recon; sid:200023832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.sftqjs.top"; classtype:attempted-recon; sid:200023833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.shanchuta27.shop"; classtype:attempted-recon; sid:200023834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.tbntv.icu"; classtype:attempted-recon; sid:200023835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.tfodbq.top"; classtype:attempted-recon; sid:200023836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.tgmqlg.top"; classtype:attempted-recon; sid:200023837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.tikoig.top"; classtype:attempted-recon; sid:200023838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.tilzhy.top"; classtype:attempted-recon; sid:200023839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.u25r5u.icu"; classtype:attempted-recon; sid:200023840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.upjhye.top"; classtype:attempted-recon; sid:200023841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.usivdv.top"; classtype:attempted-recon; sid:200023842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.vcacks.top"; classtype:attempted-recon; sid:200023843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.vcgsip.top"; classtype:attempted-recon; sid:200023844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.vfqske.shop"; classtype:attempted-recon; sid:200023845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.vkpock.shop"; classtype:attempted-recon; sid:200023846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.vnbbks.top"; classtype:attempted-recon; sid:200023847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.voadax.top"; classtype:attempted-recon; sid:200023848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.vrbvro.top"; classtype:attempted-recon; sid:200023849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.wcpjfd.top"; classtype:attempted-recon; sid:200023850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.wl85i.icu"; classtype:attempted-recon; sid:200023851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.wolvps.shop"; classtype:attempted-recon; sid:200023852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.wwffoj.shop"; classtype:attempted-recon; sid:200023853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.xaexmo.top"; classtype:attempted-recon; sid:200023854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.xgjt.pro"; classtype:attempted-recon; sid:200023855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.xgtofb.top"; classtype:attempted-recon; sid:200023856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.xqpwkk.top"; classtype:attempted-recon; sid:200023857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.xvlbws.top"; classtype:attempted-recon; sid:200023858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.xwitwq.top"; classtype:attempted-recon; sid:200023859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.xzlnlm.top"; classtype:attempted-recon; sid:200023860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.yhuvzv.top"; classtype:attempted-recon; sid:200023861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.yifpgd.top"; classtype:attempted-recon; sid:200023862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.yphurc.top"; classtype:attempted-recon; sid:200023863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ytnxwi.top"; classtype:attempted-recon; sid:200023864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.ytwbnq.top"; classtype:attempted-recon; sid:200023865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.yyzded.top"; classtype:attempted-recon; sid:200023866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.zmlyhs.top"; classtype:attempted-recon; sid:200023867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.zrbfzw.top"; classtype:attempted-recon; sid:200023868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.zxj6002.xyz"; classtype:attempted-recon; sid:200023869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.1112458.xyz"; classtype:attempted-recon; sid:200023870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.2sae6k.icu"; classtype:attempted-recon; sid:200023871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.3dbbmp.icu"; classtype:attempted-recon; sid:200023872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.3p1yb.icu"; classtype:attempted-recon; sid:200023873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200023874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.457e0p.icu"; classtype:attempted-recon; sid:200023875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.4i3si1.icu"; classtype:attempted-recon; sid:200023876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.5577778.xyz"; classtype:attempted-recon; sid:200023877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.5sime.icu"; classtype:attempted-recon; sid:200023878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.5uzz0h.icu"; classtype:attempted-recon; sid:200023879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.650pt.icu"; classtype:attempted-recon; sid:200023880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.6788665.xyz"; classtype:attempted-recon; sid:200023881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.6876578.xyz"; classtype:attempted-recon; sid:200023882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.6mmfl.icu"; classtype:attempted-recon; sid:200023883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.7hml9e.icu"; classtype:attempted-recon; sid:200023884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.7lnki4.icu"; classtype:attempted-recon; sid:200023885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.7ngywp.icu"; classtype:attempted-recon; sid:200023886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.8fgrh.icu"; classtype:attempted-recon; sid:200023887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.9v9w2y.icu"; classtype:attempted-recon; sid:200023888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.abluwk.top"; classtype:attempted-recon; sid:200023889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.adlxbh.top"; classtype:attempted-recon; sid:200023890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.afohvv.top"; classtype:attempted-recon; sid:200023891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.awsgn.top"; classtype:attempted-recon; sid:200023892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.b32mgr.icu"; classtype:attempted-recon; sid:200023893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.b4eqf.icu"; classtype:attempted-recon; sid:200023894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.b6x80w.icu"; classtype:attempted-recon; sid:200023895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.bbl7ef.icu"; classtype:attempted-recon; sid:200023896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.bfsngf.top"; classtype:attempted-recon; sid:200023897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.bs7dc.icu"; classtype:attempted-recon; sid:200023898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.bsnpag.top"; classtype:attempted-recon; sid:200023899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.bvdadv.top"; classtype:attempted-recon; sid:200023900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.cdpthi.top"; classtype:attempted-recon; sid:200023901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.chashanchu21.shop"; classtype:attempted-recon; sid:200023902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.chashanchu48.shop"; classtype:attempted-recon; sid:200023903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.chkmuq.shop"; classtype:attempted-recon; sid:200023904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.citcfi.top"; classtype:attempted-recon; sid:200023905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.cjezmf.top"; classtype:attempted-recon; sid:200023906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.com-deals.shop"; classtype:attempted-recon; sid:200023907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.contius.shop"; classtype:attempted-recon; sid:200023908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.coxrdc.top"; classtype:attempted-recon; sid:200023909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.cqvlsi.top"; classtype:attempted-recon; sid:200023910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.cstztf.top"; classtype:attempted-recon; sid:200023911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.demtjo.top"; classtype:attempted-recon; sid:200023912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.dfdnsx.top"; classtype:attempted-recon; sid:200023913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.dgqqxx.top"; classtype:attempted-recon; sid:200023914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.djulad.top"; classtype:attempted-recon; sid:200023915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.dkmimw.top"; classtype:attempted-recon; sid:200023916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.dnmsu6.icu"; classtype:attempted-recon; sid:200023917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.doenfd.top"; classtype:attempted-recon; sid:200023918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.eaelbi.top"; classtype:attempted-recon; sid:200023919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ehgmml.top"; classtype:attempted-recon; sid:200023920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ejvocy.top"; classtype:attempted-recon; sid:200023921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.elhicw.top"; classtype:attempted-recon; sid:200023922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.epwnsr.top"; classtype:attempted-recon; sid:200023923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.eucvbc.top"; classtype:attempted-recon; sid:200023924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.exqkjx.top"; classtype:attempted-recon; sid:200023925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.fhqemq.top"; classtype:attempted-recon; sid:200023926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.flscly.top"; classtype:attempted-recon; sid:200023927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.fprrlq.top"; classtype:attempted-recon; sid:200023928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.fukjzs.top"; classtype:attempted-recon; sid:200023929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.fvkhnr.top"; classtype:attempted-recon; sid:200023930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.fzfweo.top"; classtype:attempted-recon; sid:200023931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gamxhl.shop"; classtype:attempted-recon; sid:200023932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gdmdxy.top"; classtype:attempted-recon; sid:200023933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gjglse.shop"; classtype:attempted-recon; sid:200023934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.glhdpz.top"; classtype:attempted-recon; sid:200023935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gntozh.top"; classtype:attempted-recon; sid:200023936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gs3do.icu"; classtype:attempted-recon; sid:200023937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gtqklv.top"; classtype:attempted-recon; sid:200023938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gxdhfa.top"; classtype:attempted-recon; sid:200023939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gyzt809.xyz"; classtype:attempted-recon; sid:200023940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gzmvuo.top"; classtype:attempted-recon; sid:200023941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.hhxulg.top"; classtype:attempted-recon; sid:200023942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.hixcny.top"; classtype:attempted-recon; sid:200023943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.hpbzkc.top"; classtype:attempted-recon; sid:200023944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.hweypy.top"; classtype:attempted-recon; sid:200023945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.hycxop.top"; classtype:attempted-recon; sid:200023946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.hyhznq.top"; classtype:attempted-recon; sid:200023947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.iaklie.top"; classtype:attempted-recon; sid:200023948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ihfo5.icu"; classtype:attempted-recon; sid:200023949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ilfbdb.top"; classtype:attempted-recon; sid:200023950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.invpbv.top"; classtype:attempted-recon; sid:200023951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ioxsho.shop"; classtype:attempted-recon; sid:200023952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.iytxjk.top"; classtype:attempted-recon; sid:200023953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.jivdhm.top"; classtype:attempted-recon; sid:200023954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.jryuds.top"; classtype:attempted-recon; sid:200023955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.jubsfg.top"; classtype:attempted-recon; sid:200023956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.kbqnmz.top"; classtype:attempted-recon; sid:200023957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.kfpxyn.top"; classtype:attempted-recon; sid:200023958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.klgmfj.top"; classtype:attempted-recon; sid:200023959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.kpgvbn.top"; classtype:attempted-recon; sid:200023960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200023961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.kutlzl.top"; classtype:attempted-recon; sid:200023962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.kwoneq.top"; classtype:attempted-recon; sid:200023963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.l4p2g1.icu"; classtype:attempted-recon; sid:200023964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ladyul.top"; classtype:attempted-recon; sid:200023965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.lfvlpt.top"; classtype:attempted-recon; sid:200023966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.lgwjlm.shop"; classtype:attempted-recon; sid:200023967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.llsoxx.top"; classtype:attempted-recon; sid:200023968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.mbirgc.top"; classtype:attempted-recon; sid:200023969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200023970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.mvqlzn.top"; classtype:attempted-recon; sid:200023971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.mwdrbx.top"; classtype:attempted-recon; sid:200023972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.mxeanv.top"; classtype:attempted-recon; sid:200023973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.n21so.icu"; classtype:attempted-recon; sid:200023974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.n6eonm.icu"; classtype:attempted-recon; sid:200023975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.neidee.top"; classtype:attempted-recon; sid:200023976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.nhewlh.top"; classtype:attempted-recon; sid:200023977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.nkjfmc.top"; classtype:attempted-recon; sid:200023978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.nlujo.top"; classtype:attempted-recon; sid:200023979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.notwe.icu"; classtype:attempted-recon; sid:200023980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.nphgoc.top"; classtype:attempted-recon; sid:200023981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.npibd.top"; classtype:attempted-recon; sid:200023982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.nqsaby.top"; classtype:attempted-recon; sid:200023983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.nrmzy6.icu"; classtype:attempted-recon; sid:200023984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ofldnb.shop"; classtype:attempted-recon; sid:200023985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ogzbtb.top"; classtype:attempted-recon; sid:200023986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ohzctx.top"; classtype:attempted-recon; sid:200023987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.oiknia.top"; classtype:attempted-recon; sid:200023988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.oipful.top"; classtype:attempted-recon; sid:200023989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.patcfp.top"; classtype:attempted-recon; sid:200023990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pbykwg.top"; classtype:attempted-recon; sid:200023991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pdndft.top"; classtype:attempted-recon; sid:200023992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ph29h.icu"; classtype:attempted-recon; sid:200023993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pjt9os.icu"; classtype:attempted-recon; sid:200023994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pqdxev.top"; classtype:attempted-recon; sid:200023995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ptrwmp.top"; classtype:attempted-recon; sid:200023996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pugxbo.top"; classtype:attempted-recon; sid:200023997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.puoo9.icu"; classtype:attempted-recon; sid:200023998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pxbkkk.top"; classtype:attempted-recon; sid:200023999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pxnctk.top"; classtype:attempted-recon; sid:200024000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pxzjwk.top"; classtype:attempted-recon; sid:200024001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.pysitg.top"; classtype:attempted-recon; sid:200024002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.qexccc.top"; classtype:attempted-recon; sid:200024003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.qfvbqx.shop"; classtype:attempted-recon; sid:200024004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.qlmenm.top"; classtype:attempted-recon; sid:200024005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.qoefmk.top"; classtype:attempted-recon; sid:200024006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.qvcxln.shop"; classtype:attempted-recon; sid:200024007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.qwuchl.top"; classtype:attempted-recon; sid:200024008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.rgdpsh.top"; classtype:attempted-recon; sid:200024009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.rhwdsq.top"; classtype:attempted-recon; sid:200024010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.rn5mu.icu"; classtype:attempted-recon; sid:200024011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.royjjy.shop"; classtype:attempted-recon; sid:200024012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.runjin007.icu"; classtype:attempted-recon; sid:200024013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.rvpepb.top"; classtype:attempted-recon; sid:200024014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.rzuxzq.shop"; classtype:attempted-recon; sid:200024015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.saveyr.top"; classtype:attempted-recon; sid:200024016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.sftqjs.top"; classtype:attempted-recon; sid:200024017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.shanchuta27.shop"; classtype:attempted-recon; sid:200024018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.tbntv.icu"; classtype:attempted-recon; sid:200024019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.tfodbq.top"; classtype:attempted-recon; sid:200024020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.tgmqlg.top"; classtype:attempted-recon; sid:200024021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.tikoig.top"; classtype:attempted-recon; sid:200024022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.u25r5u.icu"; classtype:attempted-recon; sid:200024023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.uhia8h.icu"; classtype:attempted-recon; sid:200024024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.upjhye.top"; classtype:attempted-recon; sid:200024025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.usivdv.top"; classtype:attempted-recon; sid:200024026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.vcacks.top"; classtype:attempted-recon; sid:200024027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.vfqske.shop"; classtype:attempted-recon; sid:200024028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.vkpock.shop"; classtype:attempted-recon; sid:200024029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.vnbbks.top"; classtype:attempted-recon; sid:200024030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.voadax.top"; classtype:attempted-recon; sid:200024031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.vrbvro.top"; classtype:attempted-recon; sid:200024032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.wcpjfd.top"; classtype:attempted-recon; sid:200024033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.wl85i.icu"; classtype:attempted-recon; sid:200024034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.xaexmo.top"; classtype:attempted-recon; sid:200024035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.xgjt.pro"; classtype:attempted-recon; sid:200024036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.xgtofb.top"; classtype:attempted-recon; sid:200024037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.xqpwkk.top"; classtype:attempted-recon; sid:200024038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.xvlbws.top"; classtype:attempted-recon; sid:200024039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.xwitwq.top"; classtype:attempted-recon; sid:200024040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.xzlnlm.top"; classtype:attempted-recon; sid:200024041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.yhuvzv.top"; classtype:attempted-recon; sid:200024042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.yifpgd.top"; classtype:attempted-recon; sid:200024043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.yphurc.top"; classtype:attempted-recon; sid:200024044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ytnxwi.top"; classtype:attempted-recon; sid:200024045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.ytwbnq.top"; classtype:attempted-recon; sid:200024046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.yyzded.top"; classtype:attempted-recon; sid:200024047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.zmlyhs.top"; classtype:attempted-recon; sid:200024048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.zrbfzw.top"; classtype:attempted-recon; sid:200024049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.zxj6002.xyz"; classtype:attempted-recon; sid:200024050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.1112458.xyz"; classtype:attempted-recon; sid:200024051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.2sae6k.icu"; classtype:attempted-recon; sid:200024052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.3dbbmp.icu"; classtype:attempted-recon; sid:200024053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.3p1yb.icu"; classtype:attempted-recon; sid:200024054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200024055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.457e0p.icu"; classtype:attempted-recon; sid:200024056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.4i3si1.icu"; classtype:attempted-recon; sid:200024057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.5577778.xyz"; classtype:attempted-recon; sid:200024058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.5sime.icu"; classtype:attempted-recon; sid:200024059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.5uzz0h.icu"; classtype:attempted-recon; sid:200024060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.650pt.icu"; classtype:attempted-recon; sid:200024061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.6788665.xyz"; classtype:attempted-recon; sid:200024062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.6876578.xyz"; classtype:attempted-recon; sid:200024063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.6mmfl.icu"; classtype:attempted-recon; sid:200024064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.7hml9e.icu"; classtype:attempted-recon; sid:200024065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.7lnki4.icu"; classtype:attempted-recon; sid:200024066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.7ngywp.icu"; classtype:attempted-recon; sid:200024067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.8fgrh.icu"; classtype:attempted-recon; sid:200024068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.9v9w2y.icu"; classtype:attempted-recon; sid:200024069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.abluwk.top"; classtype:attempted-recon; sid:200024070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.adlxbh.top"; classtype:attempted-recon; sid:200024071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.afohvv.top"; classtype:attempted-recon; sid:200024072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.b32mgr.icu"; classtype:attempted-recon; sid:200024073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.b4eqf.icu"; classtype:attempted-recon; sid:200024074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.b6x80w.icu"; classtype:attempted-recon; sid:200024075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.bbl7ef.icu"; classtype:attempted-recon; sid:200024076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.bfsngf.top"; classtype:attempted-recon; sid:200024077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.bs7dc.icu"; classtype:attempted-recon; sid:200024078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.bvdadv.top"; classtype:attempted-recon; sid:200024079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.cdpthi.top"; classtype:attempted-recon; sid:200024080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.chashanchu21.shop"; classtype:attempted-recon; sid:200024081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.chashanchu48.shop"; classtype:attempted-recon; sid:200024082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.chkmuq.shop"; classtype:attempted-recon; sid:200024083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.citcfi.top"; classtype:attempted-recon; sid:200024084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.cjezmf.top"; classtype:attempted-recon; sid:200024085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.com-deals.shop"; classtype:attempted-recon; sid:200024086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.contius.shop"; classtype:attempted-recon; sid:200024087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.coxrdc.top"; classtype:attempted-recon; sid:200024088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.cstztf.top"; classtype:attempted-recon; sid:200024089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.demtjo.top"; classtype:attempted-recon; sid:200024090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.dfdnsx.top"; classtype:attempted-recon; sid:200024091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.dgqqxx.top"; classtype:attempted-recon; sid:200024092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.djulad.top"; classtype:attempted-recon; sid:200024093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.dkmimw.top"; classtype:attempted-recon; sid:200024094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.doenfd.top"; classtype:attempted-recon; sid:200024095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.eaelbi.top"; classtype:attempted-recon; sid:200024096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ehgmml.top"; classtype:attempted-recon; sid:200024097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ejvocy.top"; classtype:attempted-recon; sid:200024098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.elhicw.top"; classtype:attempted-recon; sid:200024099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.epwnsr.top"; classtype:attempted-recon; sid:200024100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.eucvbc.top"; classtype:attempted-recon; sid:200024101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.exqkjx.top"; classtype:attempted-recon; sid:200024102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fahxqk.shop"; classtype:attempted-recon; sid:200024103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fhqemq.top"; classtype:attempted-recon; sid:200024104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.flscly.top"; classtype:attempted-recon; sid:200024105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fprrlq.top"; classtype:attempted-recon; sid:200024106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fukjzs.top"; classtype:attempted-recon; sid:200024107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fvkhnr.top"; classtype:attempted-recon; sid:200024108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fzfweo.top"; classtype:attempted-recon; sid:200024109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gamxhl.shop"; classtype:attempted-recon; sid:200024110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gdmdxy.top"; classtype:attempted-recon; sid:200024111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gjglse.shop"; classtype:attempted-recon; sid:200024112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.glhdpz.top"; classtype:attempted-recon; sid:200024113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gntozh.top"; classtype:attempted-recon; sid:200024114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gs3do.icu"; classtype:attempted-recon; sid:200024115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gtqklv.top"; classtype:attempted-recon; sid:200024116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gxdhfa.top"; classtype:attempted-recon; sid:200024117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gyzt809.xyz"; classtype:attempted-recon; sid:200024118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gzmvuo.top"; classtype:attempted-recon; sid:200024119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.hhxulg.top"; classtype:attempted-recon; sid:200024120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.hixcny.top"; classtype:attempted-recon; sid:200024121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.hpbzkc.top"; classtype:attempted-recon; sid:200024122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.hweypy.top"; classtype:attempted-recon; sid:200024123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.hycxop.top"; classtype:attempted-recon; sid:200024124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.hyhznq.top"; classtype:attempted-recon; sid:200024125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.iaklie.top"; classtype:attempted-recon; sid:200024126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ihfo5.icu"; classtype:attempted-recon; sid:200024127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ilfbdb.top"; classtype:attempted-recon; sid:200024128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ioxsho.shop"; classtype:attempted-recon; sid:200024129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.iytxjk.top"; classtype:attempted-recon; sid:200024130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.jivdhm.top"; classtype:attempted-recon; sid:200024131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.jryuds.top"; classtype:attempted-recon; sid:200024132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.jubsfg.top"; classtype:attempted-recon; sid:200024133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.kfpxyn.top"; classtype:attempted-recon; sid:200024134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.kpgvbn.top"; classtype:attempted-recon; sid:200024135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.kuaiweichongwu14.shop"; classtype:attempted-recon; sid:200024136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.kutlzl.top"; classtype:attempted-recon; sid:200024137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.kwoneq.top"; classtype:attempted-recon; sid:200024138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.l4p2g1.icu"; classtype:attempted-recon; sid:200024139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ladyul.top"; classtype:attempted-recon; sid:200024140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.lfvlpt.top"; classtype:attempted-recon; sid:200024141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.lgwjlm.shop"; classtype:attempted-recon; sid:200024142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.llsoxx.top"; classtype:attempted-recon; sid:200024143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.mbirgc.top"; classtype:attempted-recon; sid:200024144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200024145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.mvqlzn.top"; classtype:attempted-recon; sid:200024146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.mwdrbx.top"; classtype:attempted-recon; sid:200024147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.mxeanv.top"; classtype:attempted-recon; sid:200024148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.n21so.icu"; classtype:attempted-recon; sid:200024149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.n6eonm.icu"; classtype:attempted-recon; sid:200024150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.neidee.top"; classtype:attempted-recon; sid:200024151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nfpdgp.top"; classtype:attempted-recon; sid:200024152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nhewlh.top"; classtype:attempted-recon; sid:200024153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nkjfmc.top"; classtype:attempted-recon; sid:200024154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nlujo.top"; classtype:attempted-recon; sid:200024155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.notwe.icu"; classtype:attempted-recon; sid:200024156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nphgoc.top"; classtype:attempted-recon; sid:200024157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.npibd.top"; classtype:attempted-recon; sid:200024158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nqsaby.top"; classtype:attempted-recon; sid:200024159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nr5kfh.icu"; classtype:attempted-recon; sid:200024160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.nrmzy6.icu"; classtype:attempted-recon; sid:200024161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ofldnb.shop"; classtype:attempted-recon; sid:200024162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ogzbtb.top"; classtype:attempted-recon; sid:200024163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ohzctx.top"; classtype:attempted-recon; sid:200024164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.oiknia.top"; classtype:attempted-recon; sid:200024165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.oipful.top"; classtype:attempted-recon; sid:200024166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pbykwg.top"; classtype:attempted-recon; sid:200024167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ph29h.icu"; classtype:attempted-recon; sid:200024168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pjt9os.icu"; classtype:attempted-recon; sid:200024169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pqdxev.top"; classtype:attempted-recon; sid:200024170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ptrwmp.top"; classtype:attempted-recon; sid:200024171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pugxbo.top"; classtype:attempted-recon; sid:200024172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.puoo9.icu"; classtype:attempted-recon; sid:200024173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pxbkkk.top"; classtype:attempted-recon; sid:200024174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pxnctk.top"; classtype:attempted-recon; sid:200024175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pxzjwk.top"; classtype:attempted-recon; sid:200024176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.pysitg.top"; classtype:attempted-recon; sid:200024177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.qexccc.top"; classtype:attempted-recon; sid:200024178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.qfvbqx.shop"; classtype:attempted-recon; sid:200024179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.qlmenm.top"; classtype:attempted-recon; sid:200024180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.qoefmk.top"; classtype:attempted-recon; sid:200024181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.qskgtg.top"; classtype:attempted-recon; sid:200024182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.qvcxln.shop"; classtype:attempted-recon; sid:200024183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.qwuchl.top"; classtype:attempted-recon; sid:200024184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.rgdpsh.top"; classtype:attempted-recon; sid:200024185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.rhwdsq.top"; classtype:attempted-recon; sid:200024186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.rjbvwt.top"; classtype:attempted-recon; sid:200024187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.rn5mu.icu"; classtype:attempted-recon; sid:200024188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.royjjy.shop"; classtype:attempted-recon; sid:200024189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.runjin007.icu"; classtype:attempted-recon; sid:200024190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.rvpepb.top"; classtype:attempted-recon; sid:200024191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.rzuxzq.shop"; classtype:attempted-recon; sid:200024192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.saveyr.top"; classtype:attempted-recon; sid:200024193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.sftqjs.top"; classtype:attempted-recon; sid:200024194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.shanchuta27.shop"; classtype:attempted-recon; sid:200024195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.tbntv.icu"; classtype:attempted-recon; sid:200024196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.tfodbq.top"; classtype:attempted-recon; sid:200024197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.tgmqlg.top"; classtype:attempted-recon; sid:200024198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.tikoig.top"; classtype:attempted-recon; sid:200024199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.tilzhy.top"; classtype:attempted-recon; sid:200024200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.u25r5u.icu"; classtype:attempted-recon; sid:200024201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.uhia8h.icu"; classtype:attempted-recon; sid:200024202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.upjhye.top"; classtype:attempted-recon; sid:200024203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.usivdv.top"; classtype:attempted-recon; sid:200024204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.vcacks.top"; classtype:attempted-recon; sid:200024205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.vcgsip.top"; classtype:attempted-recon; sid:200024206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.vfqske.shop"; classtype:attempted-recon; sid:200024207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.vkpock.shop"; classtype:attempted-recon; sid:200024208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.vnbbks.top"; classtype:attempted-recon; sid:200024209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.voadax.top"; classtype:attempted-recon; sid:200024210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.vrbvro.top"; classtype:attempted-recon; sid:200024211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.wcpjfd.top"; classtype:attempted-recon; sid:200024212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.wl85i.icu"; classtype:attempted-recon; sid:200024213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.wolvps.shop"; classtype:attempted-recon; sid:200024214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xaexmo.top"; classtype:attempted-recon; sid:200024215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xgjt.pro"; classtype:attempted-recon; sid:200024216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xgtofb.top"; classtype:attempted-recon; sid:200024217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xqpwkk.top"; classtype:attempted-recon; sid:200024218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xvlbws.top"; classtype:attempted-recon; sid:200024219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xwitwq.top"; classtype:attempted-recon; sid:200024220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.xzlnlm.top"; classtype:attempted-recon; sid:200024221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.yhuvzv.top"; classtype:attempted-recon; sid:200024222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.yifpgd.top"; classtype:attempted-recon; sid:200024223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.yphurc.top"; classtype:attempted-recon; sid:200024224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.ytwbnq.top"; classtype:attempted-recon; sid:200024225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.yyzded.top"; classtype:attempted-recon; sid:200024226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.zmlyhs.top"; classtype:attempted-recon; sid:200024227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.zrbfzw.top"; classtype:attempted-recon; sid:200024228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.zxj6002.xyz"; classtype:attempted-recon; sid:200024229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.1112458.xyz"; classtype:attempted-recon; sid:200024230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.2sae6k.icu"; classtype:attempted-recon; sid:200024231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.3dbbmp.icu"; classtype:attempted-recon; sid:200024232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.3p1yb.icu"; classtype:attempted-recon; sid:200024233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.4-4-j-nbbn-ct.xyz"; classtype:attempted-recon; sid:200024234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.457e0p.icu"; classtype:attempted-recon; sid:200024235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.4i3si1.icu"; classtype:attempted-recon; sid:200024236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.5577778.xyz"; classtype:attempted-recon; sid:200024237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.5uzz0h.icu"; classtype:attempted-recon; sid:200024238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.6788665.xyz"; classtype:attempted-recon; sid:200024239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.6876578.xyz"; classtype:attempted-recon; sid:200024240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.6mmfl.icu"; classtype:attempted-recon; sid:200024241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.7hml9e.icu"; classtype:attempted-recon; sid:200024242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.7lnki4.icu"; classtype:attempted-recon; sid:200024243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.7ngywp.icu"; classtype:attempted-recon; sid:200024244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.8fgrh.icu"; classtype:attempted-recon; sid:200024245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.9v9w2y.icu"; classtype:attempted-recon; sid:200024246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.abluwk.top"; classtype:attempted-recon; sid:200024247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.adlxbh.top"; classtype:attempted-recon; sid:200024248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.afohvv.top"; classtype:attempted-recon; sid:200024249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.awsgn.top"; classtype:attempted-recon; sid:200024250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.b4eqf.icu"; classtype:attempted-recon; sid:200024251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.b6x80w.icu"; classtype:attempted-recon; sid:200024252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.bbl7ef.icu"; classtype:attempted-recon; sid:200024253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.bfsngf.top"; classtype:attempted-recon; sid:200024254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.bs7dc.icu"; classtype:attempted-recon; sid:200024255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.bsnpag.top"; classtype:attempted-recon; sid:200024256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.bvdadv.top"; classtype:attempted-recon; sid:200024257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.cdpthi.top"; classtype:attempted-recon; sid:200024258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.chashanchu21.shop"; classtype:attempted-recon; sid:200024259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.chashanchu48.shop"; classtype:attempted-recon; sid:200024260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.chkmuq.shop"; classtype:attempted-recon; sid:200024261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.citcfi.top"; classtype:attempted-recon; sid:200024262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.cjezmf.top"; classtype:attempted-recon; sid:200024263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.com-deals.shop"; classtype:attempted-recon; sid:200024264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.contius.shop"; classtype:attempted-recon; sid:200024265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.coxrdc.top"; classtype:attempted-recon; sid:200024266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.cqvlsi.top"; classtype:attempted-recon; sid:200024267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.cstztf.top"; classtype:attempted-recon; sid:200024268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.demtjo.top"; classtype:attempted-recon; sid:200024269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.dfdnsx.top"; classtype:attempted-recon; sid:200024270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.dgqqxx.top"; classtype:attempted-recon; sid:200024271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.djulad.top"; classtype:attempted-recon; sid:200024272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.dkmimw.top"; classtype:attempted-recon; sid:200024273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.dnmsu6.icu"; classtype:attempted-recon; sid:200024274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.doenfd.top"; classtype:attempted-recon; sid:200024275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.eaelbi.top"; classtype:attempted-recon; sid:200024276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ehgmml.top"; classtype:attempted-recon; sid:200024277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ejvocy.top"; classtype:attempted-recon; sid:200024278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.elhicw.top"; classtype:attempted-recon; sid:200024279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.epwnsr.top"; classtype:attempted-recon; sid:200024280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.eucvbc.top"; classtype:attempted-recon; sid:200024281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.exqkjx.top"; classtype:attempted-recon; sid:200024282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fahxqk.shop"; classtype:attempted-recon; sid:200024283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fhqemq.top"; classtype:attempted-recon; sid:200024284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.flscly.top"; classtype:attempted-recon; sid:200024285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fprrlq.top"; classtype:attempted-recon; sid:200024286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fukjzs.top"; classtype:attempted-recon; sid:200024287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fvkhnr.top"; classtype:attempted-recon; sid:200024288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fzfweo.top"; classtype:attempted-recon; sid:200024289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gamxhl.shop"; classtype:attempted-recon; sid:200024290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gdmdxy.top"; classtype:attempted-recon; sid:200024291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gjglse.shop"; classtype:attempted-recon; sid:200024292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.glhdpz.top"; classtype:attempted-recon; sid:200024293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gntozh.top"; classtype:attempted-recon; sid:200024294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gs3do.icu"; classtype:attempted-recon; sid:200024295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gtqklv.top"; classtype:attempted-recon; sid:200024296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gxdhfa.top"; classtype:attempted-recon; sid:200024297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gyzt809.xyz"; classtype:attempted-recon; sid:200024298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gzmvuo.top"; classtype:attempted-recon; sid:200024299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.hhxulg.top"; classtype:attempted-recon; sid:200024300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.hixcny.top"; classtype:attempted-recon; sid:200024301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.hpbzkc.top"; classtype:attempted-recon; sid:200024302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.hweypy.top"; classtype:attempted-recon; sid:200024303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.hycxop.top"; classtype:attempted-recon; sid:200024304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.hyhznq.top"; classtype:attempted-recon; sid:200024305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.iaklie.top"; classtype:attempted-recon; sid:200024306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ihfo5.icu"; classtype:attempted-recon; sid:200024307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ilfbdb.top"; classtype:attempted-recon; sid:200024308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.invpbv.top"; classtype:attempted-recon; sid:200024309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ioxsho.shop"; classtype:attempted-recon; sid:200024310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.jivdhm.top"; classtype:attempted-recon; sid:200024311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.jryuds.top"; classtype:attempted-recon; sid:200024312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.jubsfg.top"; classtype:attempted-recon; sid:200024313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.kutlzl.top"; classtype:attempted-recon; sid:200024314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.kwoneq.top"; classtype:attempted-recon; sid:200024315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.l4p2g1.icu"; classtype:attempted-recon; sid:200024316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.lfvlpt.top"; classtype:attempted-recon; sid:200024317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.lgwjlm.shop"; classtype:attempted-recon; sid:200024318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.llsoxx.top"; classtype:attempted-recon; sid:200024319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.mbirgc.top"; classtype:attempted-recon; sid:200024320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.mingrunfuzhuang05.xyz"; classtype:attempted-recon; sid:200024321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.mvqlzn.top"; classtype:attempted-recon; sid:200024322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.mwdrbx.top"; classtype:attempted-recon; sid:200024323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.mxeanv.top"; classtype:attempted-recon; sid:200024324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.n21so.icu"; classtype:attempted-recon; sid:200024325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.n6eonm.icu"; classtype:attempted-recon; sid:200024326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.neidee.top"; classtype:attempted-recon; sid:200024327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.nfpdgp.top"; classtype:attempted-recon; sid:200024328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.nhewlh.top"; classtype:attempted-recon; sid:200024329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.nkjfmc.top"; classtype:attempted-recon; sid:200024330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.nlujo.top"; classtype:attempted-recon; sid:200024331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.notwe.icu"; classtype:attempted-recon; sid:200024332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.nphgoc.top"; classtype:attempted-recon; sid:200024333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.npibd.top"; classtype:attempted-recon; sid:200024334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.nqsaby.top"; classtype:attempted-recon; sid:200024335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.nrmzy6.icu"; classtype:attempted-recon; sid:200024336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ofldnb.shop"; classtype:attempted-recon; sid:200024337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ohzctx.top"; classtype:attempted-recon; sid:200024338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.oiknia.top"; classtype:attempted-recon; sid:200024339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.oipful.top"; classtype:attempted-recon; sid:200024340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.patcfp.top"; classtype:attempted-recon; sid:200024341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pbykwg.top"; classtype:attempted-recon; sid:200024342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pdndft.top"; classtype:attempted-recon; sid:200024343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ph29h.icu"; classtype:attempted-recon; sid:200024344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pjt9os.icu"; classtype:attempted-recon; sid:200024345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pqdxev.top"; classtype:attempted-recon; sid:200024346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ptrwmp.top"; classtype:attempted-recon; sid:200024347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pugxbo.top"; classtype:attempted-recon; sid:200024348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.puoo9.icu"; classtype:attempted-recon; sid:200024349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pxbkkk.top"; classtype:attempted-recon; sid:200024350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pxnctk.top"; classtype:attempted-recon; sid:200024351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pxzjwk.top"; classtype:attempted-recon; sid:200024352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.pysitg.top"; classtype:attempted-recon; sid:200024353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.qexccc.top"; classtype:attempted-recon; sid:200024354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.qlmenm.top"; classtype:attempted-recon; sid:200024355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.qoefmk.top"; classtype:attempted-recon; sid:200024356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.qvcxln.shop"; classtype:attempted-recon; sid:200024357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.qwuchl.top"; classtype:attempted-recon; sid:200024358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.rgdpsh.top"; classtype:attempted-recon; sid:200024359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.rhwdsq.top"; classtype:attempted-recon; sid:200024360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.rn5mu.icu"; classtype:attempted-recon; sid:200024361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.royjjy.shop"; classtype:attempted-recon; sid:200024362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.runjin007.icu"; classtype:attempted-recon; sid:200024363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.rvpepb.top"; classtype:attempted-recon; sid:200024364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.rzuxzq.shop"; classtype:attempted-recon; sid:200024365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.saveyr.top"; classtype:attempted-recon; sid:200024366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.sftqjs.top"; classtype:attempted-recon; sid:200024367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.shanchuta27.shop"; classtype:attempted-recon; sid:200024368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.tbntv.icu"; classtype:attempted-recon; sid:200024369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.tfodbq.top"; classtype:attempted-recon; sid:200024370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.tgmqlg.top"; classtype:attempted-recon; sid:200024371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.tikoig.top"; classtype:attempted-recon; sid:200024372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.tilzhy.top"; classtype:attempted-recon; sid:200024373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.u25r5u.icu"; classtype:attempted-recon; sid:200024374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.uhia8h.icu"; classtype:attempted-recon; sid:200024375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.upjhye.top"; classtype:attempted-recon; sid:200024376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.usivdv.top"; classtype:attempted-recon; sid:200024377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.vcacks.top"; classtype:attempted-recon; sid:200024378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.vcgsip.top"; classtype:attempted-recon; sid:200024379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.vfqske.shop"; classtype:attempted-recon; sid:200024380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.vkpock.shop"; classtype:attempted-recon; sid:200024381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.vnbbks.top"; classtype:attempted-recon; sid:200024382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.voadax.top"; classtype:attempted-recon; sid:200024383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.vrbvro.top"; classtype:attempted-recon; sid:200024384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.wcpjfd.top"; classtype:attempted-recon; sid:200024385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.wl85i.icu"; classtype:attempted-recon; sid:200024386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.wolvps.shop"; classtype:attempted-recon; sid:200024387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.wwffoj.shop"; classtype:attempted-recon; sid:200024388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.xaexmo.top"; classtype:attempted-recon; sid:200024389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.xgjt.pro"; classtype:attempted-recon; sid:200024390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.xgtofb.top"; classtype:attempted-recon; sid:200024391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.xqpwkk.top"; classtype:attempted-recon; sid:200024392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.xvlbws.top"; classtype:attempted-recon; sid:200024393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.xwitwq.top"; classtype:attempted-recon; sid:200024394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.xzlnlm.top"; classtype:attempted-recon; sid:200024395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.yhuvzv.top"; classtype:attempted-recon; sid:200024396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.yifpgd.top"; classtype:attempted-recon; sid:200024397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.yphurc.top"; classtype:attempted-recon; sid:200024398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ytnxwi.top"; classtype:attempted-recon; sid:200024399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.ytwbnq.top"; classtype:attempted-recon; sid:200024400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.yyzded.top"; classtype:attempted-recon; sid:200024401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.zmlyhs.top"; classtype:attempted-recon; sid:200024402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.zrbfzw.top"; classtype:attempted-recon; sid:200024403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.zxj6002.xyz"; classtype:attempted-recon; sid:200024404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vektrofoods.com"; classtype:attempted-recon; sid:200024405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"venjsetjdv.duckdns.org"; classtype:attempted-recon; sid:200024406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ventas.lnterbarnk.pe.caringcritters.org"; classtype:attempted-recon; sid:200024407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veohqefywz.duckdns.org"; classtype:attempted-recon; sid:200024408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veoveo.com.vn"; classtype:attempted-recon; sid:200024409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veqpnsurcv.duckdns.org"; classtype:attempted-recon; sid:200024410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ver-2ji.pages.dev"; classtype:attempted-recon; sid:200024411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veranope.wwwaz1-ss44.a2hosted.com"; classtype:attempted-recon; sid:200024412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veraodeoportunidades.com"; classtype:attempted-recon; sid:200024413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veredicto63.hostfree.pw"; classtype:attempted-recon; sid:200024414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verfikasi-akun.weebly.com"; classtype:attempted-recon; sid:200024415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifcban.verifcban.repl.co"; classtype:attempted-recon; sid:200024416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifgalicia.procesogalicia.repl.co"; classtype:attempted-recon; sid:200024417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifi.avisogalicia.repl.co"; classtype:attempted-recon; sid:200024418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifiableimmaculatedatamining.7qad75.repl.co"; classtype:attempted-recon; sid:200024419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verificaportaleaccesso.com"; classtype:attempted-recon; sid:200024420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verificati0nz.weebly.com"; classtype:attempted-recon; sid:200024421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verification-roundcube.firebaseapp.com"; classtype:attempted-recon; sid:200024422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verification-roundcube.web.app"; classtype:attempted-recon; sid:200024423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verification.fb-page.workers.dev"; classtype:attempted-recon; sid:200024424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verification2022-2023domtom.firebaseapp.com"; classtype:attempted-recon; sid:200024425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verification2022-2023domtom.web.app"; classtype:attempted-recon; sid:200024426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verificationmessage.blob.core.windows.net"; classtype:attempted-recon; sid:200024427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verificationmetamask.rf.gd"; classtype:attempted-recon; sid:200024428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verificawebdispositivo.com"; classtype:attempted-recon; sid:200024429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifiedakunfb22.wixsite.com"; classtype:attempted-recon; sid:200024430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifiedownlpro.web.app"; classtype:attempted-recon; sid:200024431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifikasi-akun-anda0011.weeblysite.com"; classtype:attempted-recon; sid:200024432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifikasi-akun-facebook0022.weeblysite.com"; classtype:attempted-recon; sid:200024433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifikasi-pengamanan-akun.weebly.com"; classtype:attempted-recon; sid:200024434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifikasiaccountanda307.weebly.com"; classtype:attempted-recon; sid:200024435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifikasiakun10.weebly.com"; classtype:attempted-recon; sid:200024436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifkasifacebook.wixsite.com"; classtype:attempted-recon; sid:200024437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verify-ee-billing.com"; classtype:attempted-recon; sid:200024438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verify-email-e8a07.firebaseapp.com"; classtype:attempted-recon; sid:200024439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verify-email-e8a07.web.app"; classtype:attempted-recon; sid:200024440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verify.zlmbra.com"; classtype:attempted-recon; sid:200024441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifydevice-uk.firebaseapp.com"; classtype:attempted-recon; sid:200024442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifydevice-uk.web.app"; classtype:attempted-recon; sid:200024443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifyid873528299393-09.ga"; classtype:attempted-recon; sid:200024444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifyid99847736628293000044.42web.io"; classtype:attempted-recon; sid:200024445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifyinfos.freetcp.com"; classtype:attempted-recon; sid:200024446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verifymtb-247.firebaseapp.com"; classtype:attempted-recon; sid:200024447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veriifyac.webcindario.com"; classtype:attempted-recon; sid:200024448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"versehqvsm.duckdns.org"; classtype:attempted-recon; sid:200024449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verskmyxcm.duckdns.org"; classtype:attempted-recon; sid:200024450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vertivv.com"; classtype:attempted-recon; sid:200024451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verver9fvgj-ewrjfgv-9jwre-fvhnjw-e0hf-wefef.obs.ap-southeast-2.myhuaweicloud.com"; classtype:attempted-recon; sid:200024452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vetrilsoftware.com"; classtype:attempted-recon; sid:200024453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veuiunfnon.duckdns.org"; classtype:attempted-recon; sid:200024454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vewamqrnjf.duckdns.org"; classtype:attempted-recon; sid:200024455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vewg9e30-5rg-0hwrghvnw-0hf-0whjfr4e4f.obs.ap-southeast-3.myhuaweicloud.com"; classtype:attempted-recon; sid:200024456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vewrbvger9t5g-hwrehgbn-0wherfg-0hwef-0hwqefef.obs.af-south-1.myhuaweicloud.com"; classtype:attempted-recon; sid:200024457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vewrgv-e9rjg-wklef-cwkre90-gojfe-0w9jtrg-wergf.obs.la-south-2.myhuaweicloud.com"; classtype:attempted-recon; sid:200024458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vezxckazor.duckdns.org"; classtype:attempted-recon; sid:200024459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfax-gstdr.firebaseapp.com"; classtype:attempted-recon; sid:200024460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfax-gstdr.web.app"; classtype:attempted-recon; sid:200024461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfbf.75121.cn"; classtype:attempted-recon; sid:200024462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfbfn.lgxrmyy.cn"; classtype:attempted-recon; sid:200024463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfdb.lsszyy.cn"; classtype:attempted-recon; sid:200024464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfdbd.79976.cn"; classtype:attempted-recon; sid:200024465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfdbf.19436c.cn"; classtype:attempted-recon; sid:200024466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfdbf.jyxkypk.cn"; classtype:attempted-recon; sid:200024467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfdf.76837.cn"; classtype:attempted-recon; sid:200024468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfdfwogtjd.duckdns.org"; classtype:attempted-recon; sid:200024469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfdht.75623.cn"; classtype:attempted-recon; sid:200024470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vffaenjqea.duckdns.org"; classtype:attempted-recon; sid:200024471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfg.uwazju.cn"; classtype:attempted-recon; sid:200024472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfgdh.gbdszyy.cn"; classtype:attempted-recon; sid:200024473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfjrntpmnc.duckdns.org"; classtype:attempted-recon; sid:200024474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfnlqbldyi.duckdns.org"; classtype:attempted-recon; sid:200024475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vftzbocodi.duckdns.org"; classtype:attempted-recon; sid:200024476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfufngicyt.duckdns.org"; classtype:attempted-recon; sid:200024477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfupwpcdgz.duckdns.org"; classtype:attempted-recon; sid:200024478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfvujgilvj.duckdns.org"; classtype:attempted-recon; sid:200024479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vfwoaphsob.duckdns.org"; classtype:attempted-recon; sid:200024480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vghsuzgztz.duckdns.org"; classtype:attempted-recon; sid:200024481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vghylpddia.duckdns.org"; classtype:attempted-recon; sid:200024482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgicintvpb.duckdns.org"; classtype:attempted-recon; sid:200024483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgix.i-india.in"; classtype:attempted-recon; sid:200024484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgjjjtoreb.duckdns.org"; classtype:attempted-recon; sid:200024485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgmyiekbau.duckdns.org"; classtype:attempted-recon; sid:200024486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgn.gwq7.cn"; classtype:attempted-recon; sid:200024487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgpizglpfg.duckdns.org"; classtype:attempted-recon; sid:200024488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgqqdidrxd.duckdns.org"; classtype:attempted-recon; sid:200024489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgsyldqqct.duckdns.org"; classtype:attempted-recon; sid:200024490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgvgqzqwot.duckdns.org"; classtype:attempted-recon; sid:200024491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgvirfrkre.duckdns.org"; classtype:attempted-recon; sid:200024492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgwzjzbmts.duckdns.org"; classtype:attempted-recon; sid:200024493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vgxjsxwgkn.duckdns.org"; classtype:attempted-recon; sid:200024494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhbaghvtiq.duckdns.org"; classtype:attempted-recon; sid:200024495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhbkvvkazp.duckdns.org"; classtype:attempted-recon; sid:200024496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhcxtoyruf.duckdns.org"; classtype:attempted-recon; sid:200024497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhee.o6cc.cfgliders.com."; classtype:attempted-recon; sid:200024498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhehmtnjef.duckdns.org"; classtype:attempted-recon; sid:200024499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhfmynytgt.duckdns.org"; classtype:attempted-recon; sid:200024500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhghuglylx.duckdns.org"; classtype:attempted-recon; sid:200024501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhgwe90-r4g-w3hr-ghw-re9hgf-wqh9b-eghfeef.obs.ap-southeast-2.myhuaweicloud.com"; classtype:attempted-recon; sid:200024502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhgxjcqvtq.duckdns.org"; classtype:attempted-recon; sid:200024503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhhmzzlyyy.duckdns.org"; classtype:attempted-recon; sid:200024504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhn.myjctc.cn"; classtype:attempted-recon; sid:200024505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhn.uj69bz.cn"; classtype:attempted-recon; sid:200024506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhoprgkuym.duckdns.org"; classtype:attempted-recon; sid:200024507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhrelmzikr.duckdns.org"; classtype:attempted-recon; sid:200024508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhrlkjnkrn.duckdns.org"; classtype:attempted-recon; sid:200024509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhthuttgwv.duckdns.org"; classtype:attempted-recon; sid:200024510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhuhlylkym.duckdns.org"; classtype:attempted-recon; sid:200024511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhxolxjrcs.duckdns.org"; classtype:attempted-recon; sid:200024512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vhzeyconej.duckdns.org"; classtype:attempted-recon; sid:200024513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaaaeveccsvrcaosai.veissacrvoeanicrcvsioir.nhejxw.top"; classtype:attempted-recon; sid:200024514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaaaevsccvcrasoia.viessvacraoecnivrsiori.0633348.xyz"; classtype:attempted-recon; sid:200024515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaaaevsccvcrasoia.viessvacraoecnivrsiori.nfxuax.top"; classtype:attempted-recon; sid:200024516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaaievecsevrcaosai.veissvcoeoacncvrsiori.jpjxxr.top"; classtype:attempted-recon; sid:200024517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaaievscvecrasoia.viessvacoeocvnsirori.mengdie.icu"; classtype:attempted-recon; sid:200024518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavecsvcasi.visarveaiccvsior.eukwqr.cyou"; classtype:attempted-recon; sid:200024519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavecsvcasi.visarveaiccvsior.uvmqsl.cyou"; classtype:attempted-recon; sid:200024520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaaveescvcarsio.avisevseacccovsniorri.mengdie.icu"; classtype:attempted-recon; sid:200024521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavesvccasri.ovaisveaseccvsoionrri.bwlepb.top"; classtype:attempted-recon; sid:200024522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavesvccasri.ovaisveaseccvsoionrri.sjmogv.top"; classtype:attempted-recon; sid:200024523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavesvccasri.ovaisveaseccvsoionrri.tghtny.top"; classtype:attempted-recon; sid:200024524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavesvccasri.ovaisveaseccvsoionrri.uiimkj.top"; classtype:attempted-recon; sid:200024525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavscvcasi.visvaraecivsior.geojvn.cyou"; classtype:attempted-recon; sid:200024526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavscvcasi.visvaraecivsior.hufctr.za.com"; classtype:attempted-recon; sid:200024527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaavscvcasi.visvaraecivsior.zenbnw.za.com"; classtype:attempted-recon; sid:200024528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viabrasilaventura.com.br"; classtype:attempted-recon; sid:200024529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaaeeeicecrei.viavaecrrasvccoieai.6123878.xyz"; classtype:attempted-recon; sid:200024530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaaeeeicecrei.viavaecrrasvccoieai.d24mu.icu"; classtype:attempted-recon; sid:200024531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaaeeeicecrei.viavaecrrasvccoieai.o4elaa.icu"; classtype:attempted-recon; sid:200024532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaaeeeicecrei.viavaecrrasvccoieai.rfrnzi.top"; classtype:attempted-recon; sid:200024533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeiceceei.viaccraersvacrocierai.1p2igt.icu"; classtype:attempted-recon; sid:200024534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeiceceei.viaccraersvacrocierai.ayqtuj.top"; classtype:attempted-recon; sid:200024535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeiceceei.viaccraersvacrocierai.inepxf.top"; classtype:attempted-recon; sid:200024536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeicsceei.viaceraersvacrocierai.1p2igt.icu"; classtype:attempted-recon; sid:200024537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeicsceei.viaceraersvacrocierai.d24mu.icu"; classtype:attempted-recon; sid:200024538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeicsceei.viaceraersvacrocierai.fiwzrb.top"; classtype:attempted-recon; sid:200024539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeicscrei.viavaeerrasvccsieai.1p2igt.icu"; classtype:attempted-recon; sid:200024540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeicscrei.viavaeerrasvccsieai.d24mu.icu"; classtype:attempted-recon; sid:200024541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeicscrei.viavaeerrasvccsieai.fiwzrb.top"; classtype:attempted-recon; sid:200024542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacaseeeicscrei.viavaeerrasvccsieai.gjqyzk.top"; classtype:attempted-recon; sid:200024543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacveaeaevcecrei.viavcrrsvcroieai.1p2igt.icu"; classtype:attempted-recon; sid:200024544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacveaeaevcecrei.viavcrrsvcroieai.afevzf.top"; classtype:attempted-recon; sid:200024545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacveaeaevcecrei.viavcrrsvcroieai.d24mu.icu"; classtype:attempted-recon; sid:200024546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacveaeaevcecrei.viavcrrsvcroieai.gzj7003.xyz"; classtype:attempted-recon; sid:200024547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacveseaevcscrei.viaverrsvcrsieai.1p2igt.icu"; classtype:attempted-recon; sid:200024548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeaceceei.viaccrrsvcrooierai.1p2igt.icu"; classtype:attempted-recon; sid:200024549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeaceceei.viaccrrsvcrooierai.d24mu.icu"; classtype:attempted-recon; sid:200024550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeaceceei.viaccrrsvcrooierai.gfsuyo.top"; classtype:attempted-recon; sid:200024551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeaceceei.viaccrrsvcrooierai.gvxyug.top"; classtype:attempted-recon; sid:200024552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeacsceei.viacerrsvcrosierai.1p2igt.icu"; classtype:attempted-recon; sid:200024553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeacsceei.viacerrsvcrosierai.6997854.xyz"; classtype:attempted-recon; sid:200024554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeacsceei.viacerrsvcrosierai.d24mu.icu"; classtype:attempted-recon; sid:200024555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viacvoseaeacsceei.viacerrsvcrosierai.rgiclw.top"; classtype:attempted-recon; sid:200024556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaivceesevcasi.viirsvoeaccvsior.usrrba.id"; classtype:attempted-recon; sid:200024557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaivcesvecasi.visirvaoecvsior.oxpurl.id"; classtype:attempted-recon; sid:200024558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaivesevcasi.visvoeaccvsior.k2p5gd4.tokyo"; classtype:attempted-recon; sid:200024559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaivesevcasi.visvoeaccvsior.qlmjit.id"; classtype:attempted-recon; sid:200024560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocenure.visoresiercmsvi.ftpstbj.rest"; classtype:attempted-recon; sid:200024561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocenure.visoresiercmsvi.kzoatrc.rest"; classtype:attempted-recon; sid:200024562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocenure.visoresiercmsvi.lmdmaum.rest"; classtype:attempted-recon; sid:200024563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocenure.visoresiercmsvi.onggczh.rest"; classtype:attempted-recon; sid:200024564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocenure.visoresiercmsvi.zikhocp.rest"; classtype:attempted-recon; sid:200024565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioceorcenure.visoreoecssiercmsvi.bwcpfbn.rest"; classtype:attempted-recon; sid:200024566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioceorcenure.visoreoecssiercmsvi.fcuccth.rest"; classtype:attempted-recon; sid:200024567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioceorcenure.visoreoecssiercmsvi.fikixuj.rest"; classtype:attempted-recon; sid:200024568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioceorcenure.visoreoecssiercmsvi.mrdefgv.rest"; classtype:attempted-recon; sid:200024569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioceorcenure.visoreoecssiercmsvi.ydtfxhz.rest"; classtype:attempted-recon; sid:200024570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocercenure.visoreoecssvxarercmsvi.cnufsqh.rest"; classtype:attempted-recon; sid:200024571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocercenure.visoreoecssvxarercmsvi.dtgskgr.rest"; classtype:attempted-recon; sid:200024572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocercenure.visoreoecssvxarercmsvi.hynvkvn.rest"; classtype:attempted-recon; sid:200024573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocercenure.visoreoecssvxarercmsvi.igsxqxl.rest"; classtype:attempted-recon; sid:200024574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocercenure.visoreoecssvxarercmsvi.pefczzw.rest"; classtype:attempted-recon; sid:200024575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocercenure.visoreoecssvxarercmsvi.qthlkxf.rest"; classtype:attempted-recon; sid:200024576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocure.visorcsiercmsvi.hmamatm.rest"; classtype:attempted-recon; sid:200024577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocure.visorcsiercmsvi.hynvkvn.rest"; classtype:attempted-recon; sid:200024578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiocure.visorcsiercmsvi.mtfamvq.rest"; classtype:attempted-recon; sid:200024579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.dwvwhpm.rest"; classtype:attempted-recon; sid:200024580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.fuivkxa.rest"; classtype:attempted-recon; sid:200024581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.gemisns.rest"; classtype:attempted-recon; sid:200024582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.hynvkvn.rest"; classtype:attempted-recon; sid:200024583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.lmbtnda.rest"; classtype:attempted-recon; sid:200024584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.prcjndo.rest"; classtype:attempted-recon; sid:200024585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.qcgneuj.rest"; classtype:attempted-recon; sid:200024586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.qwacvnw.rest"; classtype:attempted-recon; sid:200024587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.ulztbbb.rest"; classtype:attempted-recon; sid:200024588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.vtwwkwu.rest"; classtype:attempted-recon; sid:200024589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianioorcecure.visorcoecssiercmsvi.yvlpjam.rest"; classtype:attempted-recon; sid:200024590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiorcecure.visorcoecssvxarercmsvi.dtgskgr.rest"; classtype:attempted-recon; sid:200024591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiorcecure.visorcoecssvxarercmsvi.dvbkugk.rest"; classtype:attempted-recon; sid:200024592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiorcecure.visorcoecssvxarercmsvi.lihewoq.rest"; classtype:attempted-recon; sid:200024593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiorcecure.visorcoecssvxarercmsvi.ogztqfa.rest"; classtype:attempted-recon; sid:200024594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianiorcecure.visorcoecssvxarercmsvi.prcjndo.rest"; classtype:attempted-recon; sid:200024595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.dtgskgr.rest"; classtype:attempted-recon; sid:200024596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.eaplgjq.rest"; classtype:attempted-recon; sid:200024597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.ipvrmgx.rest"; classtype:attempted-recon; sid:200024598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.lghbwne.rest"; classtype:attempted-recon; sid:200024599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.needmwo.rest"; classtype:attempted-recon; sid:200024600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.ouqcrce.rest"; classtype:attempted-recon; sid:200024601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.pyamdhg.rest"; classtype:attempted-recon; sid:200024602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vianocenure.visoresiercvxarevi.xzstmlr.rest"; classtype:attempted-recon; sid:200024603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.arowal.id"; classtype:attempted-recon; sid:200024604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.asciqo.id"; classtype:attempted-recon; sid:200024605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.bomgwz.id"; classtype:attempted-recon; sid:200024606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.bypiqw.id"; classtype:attempted-recon; sid:200024607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.cmoqdm.id"; classtype:attempted-recon; sid:200024608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.egrhtq.id"; classtype:attempted-recon; sid:200024609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.eickib.id"; classtype:attempted-recon; sid:200024610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.fjfuni.id"; classtype:attempted-recon; sid:200024611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.fkbwav.id"; classtype:attempted-recon; sid:200024612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.gbaluw.id"; classtype:attempted-recon; sid:200024613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.gpaqia.id"; classtype:attempted-recon; sid:200024614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.gykmlg.id"; classtype:attempted-recon; sid:200024615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.hbzhrq.id"; classtype:attempted-recon; sid:200024616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.hloymq.id"; classtype:attempted-recon; sid:200024617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.hqnjab.id"; classtype:attempted-recon; sid:200024618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.jvahcx.id"; classtype:attempted-recon; sid:200024619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.khlzjd.id"; classtype:attempted-recon; sid:200024620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.lndzay.id"; classtype:attempted-recon; sid:200024621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.lxxdeq.id"; classtype:attempted-recon; sid:200024622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.lyiqnd.id"; classtype:attempted-recon; sid:200024623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.lyxyuf.id"; classtype:attempted-recon; sid:200024624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.mbjhhd.id"; classtype:attempted-recon; sid:200024625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.mifikv.id"; classtype:attempted-recon; sid:200024626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.mqvjkr.id"; classtype:attempted-recon; sid:200024627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.nbzllz.id"; classtype:attempted-recon; sid:200024628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.ntdght.id"; classtype:attempted-recon; sid:200024629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.ovpzzh.id"; classtype:attempted-recon; sid:200024630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.pdzcxc.id"; classtype:attempted-recon; sid:200024631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.podujg.id"; classtype:attempted-recon; sid:200024632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.pvqbdr.id"; classtype:attempted-recon; sid:200024633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.qigfcj.id"; classtype:attempted-recon; sid:200024634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.rdinpk.id"; classtype:attempted-recon; sid:200024635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.rqrpjt.id"; classtype:attempted-recon; sid:200024636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.sfqlok.id"; classtype:attempted-recon; sid:200024637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.ukpvop.id"; classtype:attempted-recon; sid:200024638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.upblku.id"; classtype:attempted-recon; sid:200024639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.wfzola.id"; classtype:attempted-recon; sid:200024640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.wgkngu.id"; classtype:attempted-recon; sid:200024641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.whdeeh.id"; classtype:attempted-recon; sid:200024642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.xkpjpw.id"; classtype:attempted-recon; sid:200024643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.yabztv.id"; classtype:attempted-recon; sid:200024644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.yvzlne.id"; classtype:attempted-recon; sid:200024645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.zcyttz.id"; classtype:attempted-recon; sid:200024646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.ziehxi.id"; classtype:attempted-recon; sid:200024647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.zkxahi.id"; classtype:attempted-recon; sid:200024648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.zuaswx.id"; classtype:attempted-recon; sid:200024649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.arowal.id"; classtype:attempted-recon; sid:200024650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.asciqo.id"; classtype:attempted-recon; sid:200024651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.bomgwz.id"; classtype:attempted-recon; sid:200024652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.bypiqw.id"; classtype:attempted-recon; sid:200024653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.cmoqdm.id"; classtype:attempted-recon; sid:200024654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.eaezlo.id"; classtype:attempted-recon; sid:200024655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.egrhtq.id"; classtype:attempted-recon; sid:200024656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.eickib.id"; classtype:attempted-recon; sid:200024657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.fjfuni.id"; classtype:attempted-recon; sid:200024658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.fkbwav.id"; classtype:attempted-recon; sid:200024659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gbaluw.id"; classtype:attempted-recon; sid:200024660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gkaxhu.id"; classtype:attempted-recon; sid:200024661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gykmlg.id"; classtype:attempted-recon; sid:200024662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gyyiwk.id"; classtype:attempted-recon; sid:200024663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.hbzhrq.id"; classtype:attempted-recon; sid:200024664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.hloymq.id"; classtype:attempted-recon; sid:200024665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.hqnjab.id"; classtype:attempted-recon; sid:200024666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.jvahcx.id"; classtype:attempted-recon; sid:200024667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.khlzjd.id"; classtype:attempted-recon; sid:200024668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ksbgin.id"; classtype:attempted-recon; sid:200024669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.lndzay.id"; classtype:attempted-recon; sid:200024670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.lyiqnd.id"; classtype:attempted-recon; sid:200024671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.mifikv.id"; classtype:attempted-recon; sid:200024672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.mqvjkr.id"; classtype:attempted-recon; sid:200024673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.nbzllz.id"; classtype:attempted-recon; sid:200024674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ntdght.id"; classtype:attempted-recon; sid:200024675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ovpzzh.id"; classtype:attempted-recon; sid:200024676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.pdzcxc.id"; classtype:attempted-recon; sid:200024677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.podujg.id"; classtype:attempted-recon; sid:200024678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.qigfcj.id"; classtype:attempted-recon; sid:200024679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.rdinpk.id"; classtype:attempted-recon; sid:200024680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.rqrpjt.id"; classtype:attempted-recon; sid:200024681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.rzyssw.id"; classtype:attempted-recon; sid:200024682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.sfqlok.id"; classtype:attempted-recon; sid:200024683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ukpvop.id"; classtype:attempted-recon; sid:200024684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.upblku.id"; classtype:attempted-recon; sid:200024685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.uuppfm.id"; classtype:attempted-recon; sid:200024686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.wfzola.id"; classtype:attempted-recon; sid:200024687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.wgkngu.id"; classtype:attempted-recon; sid:200024688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.whdeeh.id"; classtype:attempted-recon; sid:200024689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.xkpjpw.id"; classtype:attempted-recon; sid:200024690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.xutdbc.id"; classtype:attempted-recon; sid:200024691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.yabztv.id"; classtype:attempted-recon; sid:200024692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.yvzlne.id"; classtype:attempted-recon; sid:200024693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ziehxi.id"; classtype:attempted-recon; sid:200024694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.zuaswx.id"; classtype:attempted-recon; sid:200024695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.arowal.id"; classtype:attempted-recon; sid:200024696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.bomgwz.id"; classtype:attempted-recon; sid:200024697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.bypiqw.id"; classtype:attempted-recon; sid:200024698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.cmoqdm.id"; classtype:attempted-recon; sid:200024699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.eickib.id"; classtype:attempted-recon; sid:200024700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.fjfuni.id"; classtype:attempted-recon; sid:200024701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.fkbwav.id"; classtype:attempted-recon; sid:200024702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.gykmlg.id"; classtype:attempted-recon; sid:200024703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.hbzhrq.id"; classtype:attempted-recon; sid:200024704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.hilrzx.id"; classtype:attempted-recon; sid:200024705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.hloymq.id"; classtype:attempted-recon; sid:200024706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.hqnjab.id"; classtype:attempted-recon; sid:200024707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.jvahcx.id"; classtype:attempted-recon; sid:200024708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.jzuxde.id"; classtype:attempted-recon; sid:200024709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.khlzjd.id"; classtype:attempted-recon; sid:200024710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.ksbgin.id"; classtype:attempted-recon; sid:200024711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.lndzay.id"; classtype:attempted-recon; sid:200024712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.lyiqnd.id"; classtype:attempted-recon; sid:200024713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.lyxyuf.id"; classtype:attempted-recon; sid:200024714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.mhlvfi.id"; classtype:attempted-recon; sid:200024715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.mqvjkr.id"; classtype:attempted-recon; sid:200024716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.nbzllz.id"; classtype:attempted-recon; sid:200024717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.ntdght.id"; classtype:attempted-recon; sid:200024718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.ovpzzh.id"; classtype:attempted-recon; sid:200024719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.pdzcxc.id"; classtype:attempted-recon; sid:200024720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.podujg.id"; classtype:attempted-recon; sid:200024721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.pvqbdr.id"; classtype:attempted-recon; sid:200024722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.qigfcj.id"; classtype:attempted-recon; sid:200024723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.rdinpk.id"; classtype:attempted-recon; sid:200024724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.rqrpjt.id"; classtype:attempted-recon; sid:200024725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.sfqlok.id"; classtype:attempted-recon; sid:200024726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.ukpvop.id"; classtype:attempted-recon; sid:200024727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.upblku.id"; classtype:attempted-recon; sid:200024728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.wfzola.id"; classtype:attempted-recon; sid:200024729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.wgkngu.id"; classtype:attempted-recon; sid:200024730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.whdeeh.id"; classtype:attempted-recon; sid:200024731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.xkpjpw.id"; classtype:attempted-recon; sid:200024732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.xqjgyc.id"; classtype:attempted-recon; sid:200024733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.yabztv.id"; classtype:attempted-recon; sid:200024734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.yvzlne.id"; classtype:attempted-recon; sid:200024735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.ziehxi.id"; classtype:attempted-recon; sid:200024736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.zmjezy.id"; classtype:attempted-recon; sid:200024737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviioenrem.vsosirvsismsivi.zuaswx.id"; classtype:attempted-recon; sid:200024738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.arowal.id"; classtype:attempted-recon; sid:200024739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.bomgwz.id"; classtype:attempted-recon; sid:200024740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.bypiqw.id"; classtype:attempted-recon; sid:200024741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.cmoqdm.id"; classtype:attempted-recon; sid:200024742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.eickib.id"; classtype:attempted-recon; sid:200024743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.fjfuni.id"; classtype:attempted-recon; sid:200024744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.fkbwav.id"; classtype:attempted-recon; sid:200024745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gpaqia.id"; classtype:attempted-recon; sid:200024746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gykmlg.id"; classtype:attempted-recon; sid:200024747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gyyiwk.id"; classtype:attempted-recon; sid:200024748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hbzhrq.id"; classtype:attempted-recon; sid:200024749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hilrzx.id"; classtype:attempted-recon; sid:200024750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hloymq.id"; classtype:attempted-recon; sid:200024751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hqnjab.id"; classtype:attempted-recon; sid:200024752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.iclxtv.id"; classtype:attempted-recon; sid:200024753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.jvahcx.id"; classtype:attempted-recon; sid:200024754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.jzuxde.id"; classtype:attempted-recon; sid:200024755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.khlzjd.id"; classtype:attempted-recon; sid:200024756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ksbgin.id"; classtype:attempted-recon; sid:200024757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.lndzay.id"; classtype:attempted-recon; sid:200024758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.lyiqnd.id"; classtype:attempted-recon; sid:200024759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.lyxyuf.id"; classtype:attempted-recon; sid:200024760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.mhlvfi.id"; classtype:attempted-recon; sid:200024761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.mqvjkr.id"; classtype:attempted-recon; sid:200024762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.nbzllz.id"; classtype:attempted-recon; sid:200024763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ntdght.id"; classtype:attempted-recon; sid:200024764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ovpzzh.id"; classtype:attempted-recon; sid:200024765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.pdzcxc.id"; classtype:attempted-recon; sid:200024766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.pvqbdr.id"; classtype:attempted-recon; sid:200024767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.qigfcj.id"; classtype:attempted-recon; sid:200024768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.rdinpk.id"; classtype:attempted-recon; sid:200024769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.rqrpjt.id"; classtype:attempted-recon; sid:200024770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.rzyssw.id"; classtype:attempted-recon; sid:200024771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.sfqlok.id"; classtype:attempted-recon; sid:200024772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ukpvop.id"; classtype:attempted-recon; sid:200024773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.upblku.id"; classtype:attempted-recon; sid:200024774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.wfzola.id"; classtype:attempted-recon; sid:200024775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.wgkngu.id"; classtype:attempted-recon; sid:200024776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.whdeeh.id"; classtype:attempted-recon; sid:200024777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.xkpjpw.id"; classtype:attempted-recon; sid:200024778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.yabztv.id"; classtype:attempted-recon; sid:200024779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.yvzlne.id"; classtype:attempted-recon; sid:200024780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.zcyttz.id"; classtype:attempted-recon; sid:200024781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ziehxi.id"; classtype:attempted-recon; sid:200024782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.zuaswx.id"; classtype:attempted-recon; sid:200024783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.arowal.id"; classtype:attempted-recon; sid:200024784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.bomgwz.id"; classtype:attempted-recon; sid:200024785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.bypiqw.id"; classtype:attempted-recon; sid:200024786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ciuwoo.id"; classtype:attempted-recon; sid:200024787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.cmoqdm.id"; classtype:attempted-recon; sid:200024788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.eaezlo.id"; classtype:attempted-recon; sid:200024789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.eickib.id"; classtype:attempted-recon; sid:200024790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.epcyai.id"; classtype:attempted-recon; sid:200024791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.fjfuni.id"; classtype:attempted-recon; sid:200024792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.fkbwav.id"; classtype:attempted-recon; sid:200024793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gbaluw.id"; classtype:attempted-recon; sid:200024794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gkaxhu.id"; classtype:attempted-recon; sid:200024795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gykmlg.id"; classtype:attempted-recon; sid:200024796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gyyiwk.id"; classtype:attempted-recon; sid:200024797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.hbzhrq.id"; classtype:attempted-recon; sid:200024798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.hqnjab.id"; classtype:attempted-recon; sid:200024799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.jlxkma.id"; classtype:attempted-recon; sid:200024800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.jvahcx.id"; classtype:attempted-recon; sid:200024801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.khlzjd.id"; classtype:attempted-recon; sid:200024802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.lndzay.id"; classtype:attempted-recon; sid:200024803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.lxxdeq.id"; classtype:attempted-recon; sid:200024804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.lyiqnd.id"; classtype:attempted-recon; sid:200024805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.mifikv.id"; classtype:attempted-recon; sid:200024806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.mqvjkr.id"; classtype:attempted-recon; sid:200024807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.nbzllz.id"; classtype:attempted-recon; sid:200024808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ntdght.id"; classtype:attempted-recon; sid:200024809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ovpzzh.id"; classtype:attempted-recon; sid:200024810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.pdzcxc.id"; classtype:attempted-recon; sid:200024811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.podujg.id"; classtype:attempted-recon; sid:200024812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.qigfcj.id"; classtype:attempted-recon; sid:200024813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.rdinpk.id"; classtype:attempted-recon; sid:200024814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.rqrpjt.id"; classtype:attempted-recon; sid:200024815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.rzyssw.id"; classtype:attempted-recon; sid:200024816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.sfqlok.id"; classtype:attempted-recon; sid:200024817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ukpvop.id"; classtype:attempted-recon; sid:200024818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.upblku.id"; classtype:attempted-recon; sid:200024819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.wfzola.id"; classtype:attempted-recon; sid:200024820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.wgkngu.id"; classtype:attempted-recon; sid:200024821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.whdeeh.id"; classtype:attempted-recon; sid:200024822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.xkpjpw.id"; classtype:attempted-recon; sid:200024823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.yabztv.id"; classtype:attempted-recon; sid:200024824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.yvzlne.id"; classtype:attempted-recon; sid:200024825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ziehxi.id"; classtype:attempted-recon; sid:200024826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.zuaswx.id"; classtype:attempted-recon; sid:200024827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.arowal.id"; classtype:attempted-recon; sid:200024828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.asciqo.id"; classtype:attempted-recon; sid:200024829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.bomgwz.id"; classtype:attempted-recon; sid:200024830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.bypiqw.id"; classtype:attempted-recon; sid:200024831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.cmoqdm.id"; classtype:attempted-recon; sid:200024832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.eickib.id"; classtype:attempted-recon; sid:200024833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fdtieg.id"; classtype:attempted-recon; sid:200024834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fjfuni.id"; classtype:attempted-recon; sid:200024835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fkbwav.id"; classtype:attempted-recon; sid:200024836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.gpaqia.id"; classtype:attempted-recon; sid:200024837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.gykmlg.id"; classtype:attempted-recon; sid:200024838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.hbzhrq.id"; classtype:attempted-recon; sid:200024839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.hqnjab.id"; classtype:attempted-recon; sid:200024840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.iikuie.id"; classtype:attempted-recon; sid:200024841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.jlxkma.id"; classtype:attempted-recon; sid:200024842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.jvahcx.id"; classtype:attempted-recon; sid:200024843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.khlzjd.id"; classtype:attempted-recon; sid:200024844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ksbgin.id"; classtype:attempted-recon; sid:200024845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lndzay.id"; classtype:attempted-recon; sid:200024846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lxxdeq.id"; classtype:attempted-recon; sid:200024847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lyiqnd.id"; classtype:attempted-recon; sid:200024848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lyxyuf.id"; classtype:attempted-recon; sid:200024849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.mbjhhd.id"; classtype:attempted-recon; sid:200024850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.mqvjkr.id"; classtype:attempted-recon; sid:200024851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.nbzllz.id"; classtype:attempted-recon; sid:200024852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ntdght.id"; classtype:attempted-recon; sid:200024853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ovpzzh.id"; classtype:attempted-recon; sid:200024854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.pdzcxc.id"; classtype:attempted-recon; sid:200024855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.podujg.id"; classtype:attempted-recon; sid:200024856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.pvqbdr.id"; classtype:attempted-recon; sid:200024857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.qigfcj.id"; classtype:attempted-recon; sid:200024858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.rdinpk.id"; classtype:attempted-recon; sid:200024859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.rqrpjt.id"; classtype:attempted-recon; sid:200024860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.sfqlok.id"; classtype:attempted-recon; sid:200024861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ukpvop.id"; classtype:attempted-recon; sid:200024862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.upblku.id"; classtype:attempted-recon; sid:200024863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.uuppfm.id"; classtype:attempted-recon; sid:200024864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.wfzola.id"; classtype:attempted-recon; sid:200024865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.wgkngu.id"; classtype:attempted-recon; sid:200024866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.whdeeh.id"; classtype:attempted-recon; sid:200024867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.xkpjpw.id"; classtype:attempted-recon; sid:200024868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.yabztv.id"; classtype:attempted-recon; sid:200024869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.yvzlne.id"; classtype:attempted-recon; sid:200024870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ziehxi.id"; classtype:attempted-recon; sid:200024871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.zkxahi.id"; classtype:attempted-recon; sid:200024872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.zuaswx.id"; classtype:attempted-recon; sid:200024873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.arowal.id"; classtype:attempted-recon; sid:200024874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.bomgwz.id"; classtype:attempted-recon; sid:200024875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.bypiqw.id"; classtype:attempted-recon; sid:200024876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.cmoqdm.id"; classtype:attempted-recon; sid:200024877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.cufjaj.id"; classtype:attempted-recon; sid:200024878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.eaezlo.id"; classtype:attempted-recon; sid:200024879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.egrhtq.id"; classtype:attempted-recon; sid:200024880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.eickib.id"; classtype:attempted-recon; sid:200024881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.fjfuni.id"; classtype:attempted-recon; sid:200024882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.fkbwav.id"; classtype:attempted-recon; sid:200024883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.gbaluw.id"; classtype:attempted-recon; sid:200024884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.gykmlg.id"; classtype:attempted-recon; sid:200024885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.hbzhrq.id"; classtype:attempted-recon; sid:200024886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.hqnjab.id"; classtype:attempted-recon; sid:200024887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.jvahcx.id"; classtype:attempted-recon; sid:200024888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.khlzjd.id"; classtype:attempted-recon; sid:200024889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ksbgin.id"; classtype:attempted-recon; sid:200024890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.lndzay.id"; classtype:attempted-recon; sid:200024891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.lxxdeq.id"; classtype:attempted-recon; sid:200024892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.lyiqnd.id"; classtype:attempted-recon; sid:200024893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mbjhhd.id"; classtype:attempted-recon; sid:200024894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mhlvfi.id"; classtype:attempted-recon; sid:200024895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mqvjkr.id"; classtype:attempted-recon; sid:200024896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.nbzllz.id"; classtype:attempted-recon; sid:200024897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ntdght.id"; classtype:attempted-recon; sid:200024898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ovpzzh.id"; classtype:attempted-recon; sid:200024899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.pdzcxc.id"; classtype:attempted-recon; sid:200024900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.qigfcj.id"; classtype:attempted-recon; sid:200024901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.rdinpk.id"; classtype:attempted-recon; sid:200024902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.rqrpjt.id"; classtype:attempted-recon; sid:200024903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.sfqlok.id"; classtype:attempted-recon; sid:200024904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ukpvop.id"; classtype:attempted-recon; sid:200024905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.upblku.id"; classtype:attempted-recon; sid:200024906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.wfzola.id"; classtype:attempted-recon; sid:200024907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.wgkngu.id"; classtype:attempted-recon; sid:200024908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.whdeeh.id"; classtype:attempted-recon; sid:200024909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.xkpjpw.id"; classtype:attempted-recon; sid:200024910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.xqjgyc.id"; classtype:attempted-recon; sid:200024911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.yabztv.id"; classtype:attempted-recon; sid:200024912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.yvzlne.id"; classtype:attempted-recon; sid:200024913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zdknwh.id"; classtype:attempted-recon; sid:200024914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ziehxi.id"; classtype:attempted-recon; sid:200024915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zkxahi.id"; classtype:attempted-recon; sid:200024916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zuaswx.id"; classtype:attempted-recon; sid:200024917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.arowal.id"; classtype:attempted-recon; sid:200024918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.bomgwz.id"; classtype:attempted-recon; sid:200024919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.bypiqw.id"; classtype:attempted-recon; sid:200024920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.cmoqdm.id"; classtype:attempted-recon; sid:200024921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.eaezlo.id"; classtype:attempted-recon; sid:200024922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.egrhtq.id"; classtype:attempted-recon; sid:200024923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.eickib.id"; classtype:attempted-recon; sid:200024924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.fjfuni.id"; classtype:attempted-recon; sid:200024925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.fkbwav.id"; classtype:attempted-recon; sid:200024926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gbaluw.id"; classtype:attempted-recon; sid:200024927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gkaxhu.id"; classtype:attempted-recon; sid:200024928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gykmlg.id"; classtype:attempted-recon; sid:200024929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gyyiwk.id"; classtype:attempted-recon; sid:200024930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.hbzhrq.id"; classtype:attempted-recon; sid:200024931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.hqnjab.id"; classtype:attempted-recon; sid:200024932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.jvahcx.id"; classtype:attempted-recon; sid:200024933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.jzuxde.id"; classtype:attempted-recon; sid:200024934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.khlzjd.id"; classtype:attempted-recon; sid:200024935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ksbgin.id"; classtype:attempted-recon; sid:200024936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.lndzay.id"; classtype:attempted-recon; sid:200024937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.lyiqnd.id"; classtype:attempted-recon; sid:200024938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.mifikv.id"; classtype:attempted-recon; sid:200024939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.mqvjkr.id"; classtype:attempted-recon; sid:200024940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.nbzllz.id"; classtype:attempted-recon; sid:200024941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ntdght.id"; classtype:attempted-recon; sid:200024942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ovpzzh.id"; classtype:attempted-recon; sid:200024943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.pdzcxc.id"; classtype:attempted-recon; sid:200024944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.qigfcj.id"; classtype:attempted-recon; sid:200024945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.rdinpk.id"; classtype:attempted-recon; sid:200024946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.rqrpjt.id"; classtype:attempted-recon; sid:200024947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.sfqlok.id"; classtype:attempted-recon; sid:200024948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ukpvop.id"; classtype:attempted-recon; sid:200024949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.upblku.id"; classtype:attempted-recon; sid:200024950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.uuppfm.id"; classtype:attempted-recon; sid:200024951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.wfzola.id"; classtype:attempted-recon; sid:200024952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.wgkngu.id"; classtype:attempted-recon; sid:200024953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.whdeeh.id"; classtype:attempted-recon; sid:200024954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.xkpjpw.id"; classtype:attempted-recon; sid:200024955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.yabztv.id"; classtype:attempted-recon; sid:200024956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.yvzlne.id"; classtype:attempted-recon; sid:200024957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.zdknwh.id"; classtype:attempted-recon; sid:200024958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ziehxi.id"; classtype:attempted-recon; sid:200024959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.zuaswx.id"; classtype:attempted-recon; sid:200024960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.08jtq.icu"; classtype:attempted-recon; sid:200024961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.1p2igt.icu"; classtype:attempted-recon; sid:200024962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.5y4n9b.icu"; classtype:attempted-recon; sid:200024963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.6997854.xyz"; classtype:attempted-recon; sid:200024964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.9rjsbn.icu"; classtype:attempted-recon; sid:200024965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.ayqtuj.top"; classtype:attempted-recon; sid:200024966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.d24mu.icu"; classtype:attempted-recon; sid:200024967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.gzj8007.xyz"; classtype:attempted-recon; sid:200024968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.jmxrek.top"; classtype:attempted-recon; sid:200024969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveaaevecrei.viavcrrvcoiea.lsikdoe.icu"; classtype:attempted-recon; sid:200024970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavecesvcasi.visvireaccvsior.ulyjlf.cyou"; classtype:attempted-recon; sid:200024971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveeaasverrei.vivacrcvcorie.1p2igt.icu"; classtype:attempted-recon; sid:200024972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveeaasverrei.vivacrcvcorie.5y4n9b.icu"; classtype:attempted-recon; sid:200024973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveeaasverrei.vivacrcvcorie.d24mu.icu"; classtype:attempted-recon; sid:200024974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveeaasverrei.vivacrcvcorie.iooazb.top"; classtype:attempted-recon; sid:200024975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveeaasverrei.vivacrcvcorie.xinghuocf.xyz"; classtype:attempted-recon; sid:200024976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveesasvsrrei.vivaercvcsrie.1p2igt.icu"; classtype:attempted-recon; sid:200024977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveesasvsrrei.vivaercvcsrie.d24mu.icu"; classtype:attempted-recon; sid:200024978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveesasvsrrei.vivaercvcsrie.didvts.top"; classtype:attempted-recon; sid:200024979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viaveesasvsrrei.vivaercvcsrie.jsxtzg.top"; classtype:attempted-recon; sid:200024980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavesvcasi.visveaccvsior.qu5z38t.tokyo"; classtype:attempted-recon; sid:200024981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavosaeaeceei.viaccrrvcooiera.d24mu.icu"; classtype:attempted-recon; sid:200024982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavosaeaeceei.viaccrrvcooiera.l762j.icu"; classtype:attempted-recon; sid:200024983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavosaeaeceei.viaccrrvcooiera.mgandi.top"; classtype:attempted-recon; sid:200024984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavosaeasceei.viacerrvcosiera.3pax4.icu"; classtype:attempted-recon; sid:200024985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavosaeasceei.viacerrvcosiera.d24mu.icu"; classtype:attempted-recon; sid:200024986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavosaeasceei.viacerrvcosiera.lkjhg65.xyz"; classtype:attempted-recon; sid:200024987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viavscevcasi.visvairecvsior.lpdlii.bar"; classtype:attempted-recon; sid:200024988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vibpuupqmz.duckdns.org"; classtype:attempted-recon; sid:200024989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vibramwyprzedaz.com"; classtype:attempted-recon; sid:200024990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.acysue.za.com"; classtype:attempted-recon; sid:200024991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.aeaaij.za.com"; classtype:attempted-recon; sid:200024992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.aetzyx.za.com"; classtype:attempted-recon; sid:200024993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.agxyxw.za.com"; classtype:attempted-recon; sid:200024994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.aiczsa.za.com"; classtype:attempted-recon; sid:200024995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.airnja.za.com"; classtype:attempted-recon; sid:200024996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200024997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.alcdkp.za.com"; classtype:attempted-recon; sid:200024998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.atnpja.za.com"; classtype:attempted-recon; sid:200024999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.attlqw.za.com"; classtype:attempted-recon; sid:200025000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.axhyue.za.com"; classtype:attempted-recon; sid:200025001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ayvpej.za.com"; classtype:attempted-recon; sid:200025002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bangme.za.com"; classtype:attempted-recon; sid:200025003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200025004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.befurr.za.com"; classtype:attempted-recon; sid:200025005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bfuapo.za.com"; classtype:attempted-recon; sid:200025006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200025007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bkcywi.za.com"; classtype:attempted-recon; sid:200025008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bvtbny.za.com"; classtype:attempted-recon; sid:200025009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200025010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.byguuc.za.com"; classtype:attempted-recon; sid:200025011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bznaak.za.com"; classtype:attempted-recon; sid:200025012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.caipnu.za.com"; classtype:attempted-recon; sid:200025013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cbxspx.za.com"; classtype:attempted-recon; sid:200025014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ccjole.za.com"; classtype:attempted-recon; sid:200025015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cgrfee.za.com"; classtype:attempted-recon; sid:200025016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cluemm.za.com"; classtype:attempted-recon; sid:200025017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200025018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cpjomt.za.com"; classtype:attempted-recon; sid:200025019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cqikbq.za.com"; classtype:attempted-recon; sid:200025020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cstvyz.za.com"; classtype:attempted-recon; sid:200025021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200025022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200025023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cxvesz.za.com"; classtype:attempted-recon; sid:200025024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.daxqpj.za.com"; classtype:attempted-recon; sid:200025025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dbxmic.za.com"; classtype:attempted-recon; sid:200025026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dbyapt.za.com"; classtype:attempted-recon; sid:200025027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.deocmk.za.com"; classtype:attempted-recon; sid:200025028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200025029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dhitmj.za.com"; classtype:attempted-recon; sid:200025030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dkcyph.za.com"; classtype:attempted-recon; sid:200025031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dknouc.za.com"; classtype:attempted-recon; sid:200025032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200025033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dlhefx.za.com"; classtype:attempted-recon; sid:200025034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200025035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200025036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dohoyv.za.com"; classtype:attempted-recon; sid:200025037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dpfplb.za.com"; classtype:attempted-recon; sid:200025038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.drvpxu.za.com"; classtype:attempted-recon; sid:200025039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200025040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200025041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ebaawf.za.com"; classtype:attempted-recon; sid:200025042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eegabi.za.com"; classtype:attempted-recon; sid:200025043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eiggzc.za.com"; classtype:attempted-recon; sid:200025044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.enksln.za.com"; classtype:attempted-recon; sid:200025045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.epdexz.za.com"; classtype:attempted-recon; sid:200025046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eqfynh.za.com"; classtype:attempted-recon; sid:200025047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.equmej.za.com"; classtype:attempted-recon; sid:200025048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.etibxf.za.com"; classtype:attempted-recon; sid:200025049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.etswbl.za.com"; classtype:attempted-recon; sid:200025050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eugwas.za.com"; classtype:attempted-recon; sid:200025051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200025052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eytnjs.za.com"; classtype:attempted-recon; sid:200025053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fabbxw.za.com"; classtype:attempted-recon; sid:200025054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fauyqv.za.com"; classtype:attempted-recon; sid:200025055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fhylla.za.com"; classtype:attempted-recon; sid:200025056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.figdiz.za.com"; classtype:attempted-recon; sid:200025057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200025058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.frroav.za.com"; classtype:attempted-recon; sid:200025059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fwmztl.za.com"; classtype:attempted-recon; sid:200025060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gclajk.za.com"; classtype:attempted-recon; sid:200025061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200025062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200025063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gplcly.za.com"; classtype:attempted-recon; sid:200025064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.grlmkv.za.com"; classtype:attempted-recon; sid:200025065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gubhky.za.com"; classtype:attempted-recon; sid:200025066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.guzomb.za.com"; classtype:attempted-recon; sid:200025067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200025068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200025069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hjoven.za.com"; classtype:attempted-recon; sid:200025070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hkieuc.za.com"; classtype:attempted-recon; sid:200025071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hklvra.za.com"; classtype:attempted-recon; sid:200025072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hldgqg.za.com"; classtype:attempted-recon; sid:200025073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200025074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hsobxm.za.com"; classtype:attempted-recon; sid:200025075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hsxsye.za.com"; classtype:attempted-recon; sid:200025076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hyhijo.za.com"; classtype:attempted-recon; sid:200025077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200025078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iaowza.za.com"; classtype:attempted-recon; sid:200025079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iazdui.za.com"; classtype:attempted-recon; sid:200025080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ibdznx.za.com"; classtype:attempted-recon; sid:200025081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.icqbyi.za.com"; classtype:attempted-recon; sid:200025082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ihytpv.za.com"; classtype:attempted-recon; sid:200025083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iieddd.za.com"; classtype:attempted-recon; sid:200025084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iivqdq.za.com"; classtype:attempted-recon; sid:200025085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iksnzw.za.com"; classtype:attempted-recon; sid:200025086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200025087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.inilsf.za.com"; classtype:attempted-recon; sid:200025088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ipavwe.za.com"; classtype:attempted-recon; sid:200025089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ipckgf.za.com"; classtype:attempted-recon; sid:200025090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iqhnep.za.com"; classtype:attempted-recon; sid:200025091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.isfnre.za.com"; classtype:attempted-recon; sid:200025092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.itoeyw.za.com"; classtype:attempted-recon; sid:200025093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200025094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jhbjti.za.com"; classtype:attempted-recon; sid:200025095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jimkqm.za.com"; classtype:attempted-recon; sid:200025096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jjtebf.za.com"; classtype:attempted-recon; sid:200025097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200025098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jokoqq.za.com"; classtype:attempted-recon; sid:200025099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200025100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jueaim.za.com"; classtype:attempted-recon; sid:200025101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200025102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kadyvz.za.com"; classtype:attempted-recon; sid:200025103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kamowm.za.com"; classtype:attempted-recon; sid:200025104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kbubhp.za.com"; classtype:attempted-recon; sid:200025105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kbuhif.za.com"; classtype:attempted-recon; sid:200025106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200025107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.keiczj.za.com"; classtype:attempted-recon; sid:200025108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kfwoih.za.com"; classtype:attempted-recon; sid:200025109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.khaylv.za.com"; classtype:attempted-recon; sid:200025110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kklrfz.za.com"; classtype:attempted-recon; sid:200025111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.klngsb.za.com"; classtype:attempted-recon; sid:200025112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200025113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kopnbv.za.com"; classtype:attempted-recon; sid:200025114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200025115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200025116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kuycqq.za.com"; classtype:attempted-recon; sid:200025117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200025118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200025119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200025120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.laguer.za.com"; classtype:attempted-recon; sid:200025121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lavnql.za.com"; classtype:attempted-recon; sid:200025122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200025123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.llfmbd.za.com"; classtype:attempted-recon; sid:200025124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lltgtv.za.com"; classtype:attempted-recon; sid:200025125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lluhni.za.com"; classtype:attempted-recon; sid:200025126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lnhweo.za.com"; classtype:attempted-recon; sid:200025127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lyydbz.za.com"; classtype:attempted-recon; sid:200025128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.macpqa.za.com"; classtype:attempted-recon; sid:200025129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.maivih.za.com"; classtype:attempted-recon; sid:200025130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mcabmo.za.com"; classtype:attempted-recon; sid:200025131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mfnwca.za.com"; classtype:attempted-recon; sid:200025132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200025133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mftcmf.za.com"; classtype:attempted-recon; sid:200025134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200025135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200025136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mnalmf.za.com"; classtype:attempted-recon; sid:200025137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mrezau.za.com"; classtype:attempted-recon; sid:200025138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mrkudt.za.com"; classtype:attempted-recon; sid:200025139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mtedjn.za.com"; classtype:attempted-recon; sid:200025140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200025141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mxphbq.za.com"; classtype:attempted-recon; sid:200025142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ngdpig.za.com"; classtype:attempted-recon; sid:200025143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nijizu.za.com"; classtype:attempted-recon; sid:200025144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.njjguj.za.com"; classtype:attempted-recon; sid:200025145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nkmpia.za.com"; classtype:attempted-recon; sid:200025146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200025147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.noegdn.za.com"; classtype:attempted-recon; sid:200025148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.npxbmj.za.com"; classtype:attempted-recon; sid:200025149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nscrlf.za.com"; classtype:attempted-recon; sid:200025150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nywlkd.za.com"; classtype:attempted-recon; sid:200025151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200025152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oaotso.za.com"; classtype:attempted-recon; sid:200025153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.odgjer.za.com"; classtype:attempted-recon; sid:200025154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.odmvmd.za.com"; classtype:attempted-recon; sid:200025155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oexeuz.za.com"; classtype:attempted-recon; sid:200025156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200025157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ohssdh.za.com"; classtype:attempted-recon; sid:200025158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oijbuk.za.com"; classtype:attempted-recon; sid:200025159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.okzwyp.za.com"; classtype:attempted-recon; sid:200025160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.olgmmh.za.com"; classtype:attempted-recon; sid:200025161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.orrpya.za.com"; classtype:attempted-recon; sid:200025162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.osoqzr.za.com"; classtype:attempted-recon; sid:200025163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oudyit.za.com"; classtype:attempted-recon; sid:200025164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oynnaf.za.com"; classtype:attempted-recon; sid:200025165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.pdkuld.za.com"; classtype:attempted-recon; sid:200025166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rijenl.za.com"; classtype:attempted-recon; sid:200025167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.srlqyc.za.com"; classtype:attempted-recon; sid:200025168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.tfwvbz.za.com"; classtype:attempted-recon; sid:200025169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.utaekx.za.com"; classtype:attempted-recon; sid:200025170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.vjwefx.za.com"; classtype:attempted-recon; sid:200025171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicblock.co.ke"; classtype:attempted-recon; sid:200025172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaaeeaicverei.viavaecrvasaccoiaei.acucbs.top"; classtype:attempted-recon; sid:200025173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaaeeaicverei.viavaecrvasaccoiaei.d24mu.icu"; classtype:attempted-recon; sid:200025174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaaeeaicverei.viavaecrvasaccoiaei.gfsuyo.top"; classtype:attempted-recon; sid:200025175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaaeeaicverei.viavaecrvasaccoiaei.gjqyzk.top"; classtype:attempted-recon; sid:200025176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaaeeaicverei.viavaecrvasaccoiaei.luzpxb.top"; classtype:attempted-recon; sid:200025177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaaeeaicverei.viavaecrvasaccoiaei.xinghuocf.xyz"; classtype:attempted-recon; sid:200025178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaseeaicaeeei.viaccraevsaacrocaieri.1p2igt.icu"; classtype:attempted-recon; sid:200025179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaseeaicaeeei.viaccraevsaacrocaieri.dsmxfd.top"; classtype:attempted-recon; sid:200025180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaseeaicaeeei.viaccraevsaacrocaieri.luzpxb.top"; classtype:attempted-recon; sid:200025181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaseeaicaseei.viaceraevsaacrocaieri.d24mu.icu"; classtype:attempted-recon; sid:200025182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaseeaicaseei.viaceraevsaacrocaieri.qhcxdt.top"; classtype:attempted-recon; sid:200025183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaseeaicaseei.viaceraevsaacrocaieri.ztlhnb.top"; classtype:attempted-recon; sid:200025184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccaseeaicvsrei.viavaeervasaccsiaei.d24mu.icu"; classtype:attempted-recon; sid:200025185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccveaeeaacverei.viavcrvsacroiaei.1p2igt.icu"; classtype:attempted-recon; sid:200025186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccveaeeaacverei.viavcrvsacroiaei.d24mu.icu"; classtype:attempted-recon; sid:200025187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccveaeeaacverei.viavcrvsacroiaei.qcg3j9.icu"; classtype:attempted-recon; sid:200025188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccveaeeaacverei.viavcrvsacroiaei.zxj9008.xyz"; classtype:attempted-recon; sid:200025189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccvoseeaacaeeei.viaccrvsacrooaieri.4-4-j-lvj-"; classtype:attempted-recon; sid:200025190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccvoseeaacaeeei.viaccrvsacrooaieri.d24mu.icu"; classtype:attempted-recon; sid:200025191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccvoseeaacaeeei.viaccrvsacrooaieri.zxj9002.xyz"; classtype:attempted-recon; sid:200025192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viccvoseeaacaseei.viacervsacrosaieri.gvxyug.top"; classtype:attempted-recon; sid:200025193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"victorarath99.github.io"; classtype:attempted-recon; sid:200025194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.acysue.za.com"; classtype:attempted-recon; sid:200025195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.aeaaij.za.com"; classtype:attempted-recon; sid:200025196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.aetzyx.za.com"; classtype:attempted-recon; sid:200025197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.agxyxw.za.com"; classtype:attempted-recon; sid:200025198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.aiczsa.za.com"; classtype:attempted-recon; sid:200025199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.airnja.za.com"; classtype:attempted-recon; sid:200025200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200025201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.alcdkp.za.com"; classtype:attempted-recon; sid:200025202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.atnpja.za.com"; classtype:attempted-recon; sid:200025203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.attlqw.za.com"; classtype:attempted-recon; sid:200025204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.axhyue.za.com"; classtype:attempted-recon; sid:200025205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ayvpej.za.com"; classtype:attempted-recon; sid:200025206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bangme.za.com"; classtype:attempted-recon; sid:200025207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200025208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.befurr.za.com"; classtype:attempted-recon; sid:200025209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bfuapo.za.com"; classtype:attempted-recon; sid:200025210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200025211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bkcywi.za.com"; classtype:attempted-recon; sid:200025212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bvtbny.za.com"; classtype:attempted-recon; sid:200025213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200025214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.byguuc.za.com"; classtype:attempted-recon; sid:200025215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bznaak.za.com"; classtype:attempted-recon; sid:200025216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.caipnu.za.com"; classtype:attempted-recon; sid:200025217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cbxspx.za.com"; classtype:attempted-recon; sid:200025218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ccjole.za.com"; classtype:attempted-recon; sid:200025219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cgrfee.za.com"; classtype:attempted-recon; sid:200025220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cluemm.za.com"; classtype:attempted-recon; sid:200025221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200025222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cpjomt.za.com"; classtype:attempted-recon; sid:200025223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cqikbq.za.com"; classtype:attempted-recon; sid:200025224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cstvyz.za.com"; classtype:attempted-recon; sid:200025225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200025226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200025227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cxvesz.za.com"; classtype:attempted-recon; sid:200025228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.daxqpj.za.com"; classtype:attempted-recon; sid:200025229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dbxmic.za.com"; classtype:attempted-recon; sid:200025230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dbyapt.za.com"; classtype:attempted-recon; sid:200025231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.deocmk.za.com"; classtype:attempted-recon; sid:200025232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200025233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dhitmj.za.com"; classtype:attempted-recon; sid:200025234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dkcyph.za.com"; classtype:attempted-recon; sid:200025235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dknouc.za.com"; classtype:attempted-recon; sid:200025236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200025237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dlhefx.za.com"; classtype:attempted-recon; sid:200025238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200025239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200025240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dohoyv.za.com"; classtype:attempted-recon; sid:200025241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dpfplb.za.com"; classtype:attempted-recon; sid:200025242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.drvpxu.za.com"; classtype:attempted-recon; sid:200025243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200025244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200025245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ebaawf.za.com"; classtype:attempted-recon; sid:200025246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eegabi.za.com"; classtype:attempted-recon; sid:200025247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eiggzc.za.com"; classtype:attempted-recon; sid:200025248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.enksln.za.com"; classtype:attempted-recon; sid:200025249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.epdexz.za.com"; classtype:attempted-recon; sid:200025250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eqfynh.za.com"; classtype:attempted-recon; sid:200025251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.equmej.za.com"; classtype:attempted-recon; sid:200025252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.etibxf.za.com"; classtype:attempted-recon; sid:200025253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.etswbl.za.com"; classtype:attempted-recon; sid:200025254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eugwas.za.com"; classtype:attempted-recon; sid:200025255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200025256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eytnjs.za.com"; classtype:attempted-recon; sid:200025257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fabbxw.za.com"; classtype:attempted-recon; sid:200025258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fauyqv.za.com"; classtype:attempted-recon; sid:200025259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fhylla.za.com"; classtype:attempted-recon; sid:200025260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.figdiz.za.com"; classtype:attempted-recon; sid:200025261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200025262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.frroav.za.com"; classtype:attempted-recon; sid:200025263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fwmztl.za.com"; classtype:attempted-recon; sid:200025264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gclajk.za.com"; classtype:attempted-recon; sid:200025265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200025266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200025267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gplcly.za.com"; classtype:attempted-recon; sid:200025268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.grlmkv.za.com"; classtype:attempted-recon; sid:200025269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gubhky.za.com"; classtype:attempted-recon; sid:200025270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.guzomb.za.com"; classtype:attempted-recon; sid:200025271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200025272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200025273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hjoven.za.com"; classtype:attempted-recon; sid:200025274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hkieuc.za.com"; classtype:attempted-recon; sid:200025275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hklvra.za.com"; classtype:attempted-recon; sid:200025276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hldgqg.za.com"; classtype:attempted-recon; sid:200025277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200025278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hsobxm.za.com"; classtype:attempted-recon; sid:200025279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hsxsye.za.com"; classtype:attempted-recon; sid:200025280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hyhijo.za.com"; classtype:attempted-recon; sid:200025281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200025282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iaowza.za.com"; classtype:attempted-recon; sid:200025283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iazdui.za.com"; classtype:attempted-recon; sid:200025284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ibdznx.za.com"; classtype:attempted-recon; sid:200025285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.icqbyi.za.com"; classtype:attempted-recon; sid:200025286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ihytpv.za.com"; classtype:attempted-recon; sid:200025287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iieddd.za.com"; classtype:attempted-recon; sid:200025288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iivqdq.za.com"; classtype:attempted-recon; sid:200025289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iksnzw.za.com"; classtype:attempted-recon; sid:200025290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200025291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.inilsf.za.com"; classtype:attempted-recon; sid:200025292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ipavwe.za.com"; classtype:attempted-recon; sid:200025293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ipckgf.za.com"; classtype:attempted-recon; sid:200025294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iqhnep.za.com"; classtype:attempted-recon; sid:200025295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.isfnre.za.com"; classtype:attempted-recon; sid:200025296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.itoeyw.za.com"; classtype:attempted-recon; sid:200025297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200025298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jhbjti.za.com"; classtype:attempted-recon; sid:200025299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jimkqm.za.com"; classtype:attempted-recon; sid:200025300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jjtebf.za.com"; classtype:attempted-recon; sid:200025301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200025302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jokoqq.za.com"; classtype:attempted-recon; sid:200025303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200025304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jueaim.za.com"; classtype:attempted-recon; sid:200025305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200025306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kadyvz.za.com"; classtype:attempted-recon; sid:200025307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kamowm.za.com"; classtype:attempted-recon; sid:200025308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kbubhp.za.com"; classtype:attempted-recon; sid:200025309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kbuhif.za.com"; classtype:attempted-recon; sid:200025310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200025311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.keiczj.za.com"; classtype:attempted-recon; sid:200025312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kfwoih.za.com"; classtype:attempted-recon; sid:200025313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.khaylv.za.com"; classtype:attempted-recon; sid:200025314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kklrfz.za.com"; classtype:attempted-recon; sid:200025315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.klngsb.za.com"; classtype:attempted-recon; sid:200025316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200025317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kopnbv.za.com"; classtype:attempted-recon; sid:200025318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200025319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200025320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kuycqq.za.com"; classtype:attempted-recon; sid:200025321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200025322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200025323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200025324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.laguer.za.com"; classtype:attempted-recon; sid:200025325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lavnql.za.com"; classtype:attempted-recon; sid:200025326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200025327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.llfmbd.za.com"; classtype:attempted-recon; sid:200025328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lltgtv.za.com"; classtype:attempted-recon; sid:200025329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lluhni.za.com"; classtype:attempted-recon; sid:200025330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lnhweo.za.com"; classtype:attempted-recon; sid:200025331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lryoni.za.com"; classtype:attempted-recon; sid:200025332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ludrij.za.com"; classtype:attempted-recon; sid:200025333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200025334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lyydbz.za.com"; classtype:attempted-recon; sid:200025335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.macpqa.za.com"; classtype:attempted-recon; sid:200025336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.maivih.za.com"; classtype:attempted-recon; sid:200025337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mcabmo.za.com"; classtype:attempted-recon; sid:200025338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mfnwca.za.com"; classtype:attempted-recon; sid:200025339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200025340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mftcmf.za.com"; classtype:attempted-recon; sid:200025341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200025342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200025343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mnalmf.za.com"; classtype:attempted-recon; sid:200025344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mrezau.za.com"; classtype:attempted-recon; sid:200025345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mrkudt.za.com"; classtype:attempted-recon; sid:200025346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mtedjn.za.com"; classtype:attempted-recon; sid:200025347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200025348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mxphbq.za.com"; classtype:attempted-recon; sid:200025349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ngdpig.za.com"; classtype:attempted-recon; sid:200025350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nijizu.za.com"; classtype:attempted-recon; sid:200025351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.njjguj.za.com"; classtype:attempted-recon; sid:200025352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nkmpia.za.com"; classtype:attempted-recon; sid:200025353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200025354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.noegdn.za.com"; classtype:attempted-recon; sid:200025355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.npxbmj.za.com"; classtype:attempted-recon; sid:200025356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nscrlf.za.com"; classtype:attempted-recon; sid:200025357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nywlkd.za.com"; classtype:attempted-recon; sid:200025358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200025359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oaotso.za.com"; classtype:attempted-recon; sid:200025360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.odgjer.za.com"; classtype:attempted-recon; sid:200025361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.odmvmd.za.com"; classtype:attempted-recon; sid:200025362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oexeuz.za.com"; classtype:attempted-recon; sid:200025363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200025364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ohssdh.za.com"; classtype:attempted-recon; sid:200025365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oijbuk.za.com"; classtype:attempted-recon; sid:200025366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.okzwyp.za.com"; classtype:attempted-recon; sid:200025367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.olgmmh.za.com"; classtype:attempted-recon; sid:200025368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.orrpya.za.com"; classtype:attempted-recon; sid:200025369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.osoqzr.za.com"; classtype:attempted-recon; sid:200025370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oudyit.za.com"; classtype:attempted-recon; sid:200025371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.pdkuld.za.com"; classtype:attempted-recon; sid:200025372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.puzdqh.za.com"; classtype:attempted-recon; sid:200025373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rijenl.za.com"; classtype:attempted-recon; sid:200025374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tfpdde.za.com"; classtype:attempted-recon; sid:200025375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tztcbk.za.com"; classtype:attempted-recon; sid:200025376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccaovvseon.visazcmieeeainsi.olycnz.za.com"; classtype:attempted-recon; sid:200025377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.acysue.za.com"; classtype:attempted-recon; sid:200025378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200025379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200025380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200025381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200025382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.airnja.za.com"; classtype:attempted-recon; sid:200025383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200025384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200025385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.atnpja.za.com"; classtype:attempted-recon; sid:200025386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.attlqw.za.com"; classtype:attempted-recon; sid:200025387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.axhyue.za.com"; classtype:attempted-recon; sid:200025388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200025389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bangme.za.com"; classtype:attempted-recon; sid:200025390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200025391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.befurr.za.com"; classtype:attempted-recon; sid:200025392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200025393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200025394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200025395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200025396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200025397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.byguuc.za.com"; classtype:attempted-recon; sid:200025398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bznaak.za.com"; classtype:attempted-recon; sid:200025399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.caipnu.za.com"; classtype:attempted-recon; sid:200025400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200025401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ccjole.za.com"; classtype:attempted-recon; sid:200025402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200025403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cluemm.za.com"; classtype:attempted-recon; sid:200025404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200025405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200025406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200025407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200025408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200025409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200025410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200025411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200025412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200025413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200025414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.deocmk.za.com"; classtype:attempted-recon; sid:200025415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200025416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200025417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200025418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dknouc.za.com"; classtype:attempted-recon; sid:200025419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200025420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200025421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200025422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200025423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200025424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200025425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200025426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200025427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200025428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200025429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eegabi.za.com"; classtype:attempted-recon; sid:200025430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200025431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.enksln.za.com"; classtype:attempted-recon; sid:200025432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.epdexz.za.com"; classtype:attempted-recon; sid:200025433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200025434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.equmej.za.com"; classtype:attempted-recon; sid:200025435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.etibxf.za.com"; classtype:attempted-recon; sid:200025436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.etswbl.za.com"; classtype:attempted-recon; sid:200025437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eugwas.za.com"; classtype:attempted-recon; sid:200025438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200025439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200025440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200025441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200025442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fhylla.za.com"; classtype:attempted-recon; sid:200025443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.figdiz.za.com"; classtype:attempted-recon; sid:200025444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200025445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.frroav.za.com"; classtype:attempted-recon; sid:200025446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200025447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gclajk.za.com"; classtype:attempted-recon; sid:200025448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200025449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200025450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gplcly.za.com"; classtype:attempted-recon; sid:200025451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200025452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gubhky.za.com"; classtype:attempted-recon; sid:200025453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.guzomb.za.com"; classtype:attempted-recon; sid:200025454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200025455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200025456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hjoven.za.com"; classtype:attempted-recon; sid:200025457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200025458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hklvra.za.com"; classtype:attempted-recon; sid:200025459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200025460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200025461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200025462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200025463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200025464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200025465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iaowza.za.com"; classtype:attempted-recon; sid:200025466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iazdui.za.com"; classtype:attempted-recon; sid:200025467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200025468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200025469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200025470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iieddd.za.com"; classtype:attempted-recon; sid:200025471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200025472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200025473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200025474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.inilsf.za.com"; classtype:attempted-recon; sid:200025475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200025476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200025477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iqhnep.za.com"; classtype:attempted-recon; sid:200025478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.isfnre.za.com"; classtype:attempted-recon; sid:200025479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.itoeyw.za.com"; classtype:attempted-recon; sid:200025480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200025481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200025482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200025483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200025484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200025485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200025486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200025487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jueaim.za.com"; classtype:attempted-recon; sid:200025488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200025489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200025490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kamowm.za.com"; classtype:attempted-recon; sid:200025491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200025492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200025493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200025494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.keiczj.za.com"; classtype:attempted-recon; sid:200025495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200025496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.khaylv.za.com"; classtype:attempted-recon; sid:200025497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200025498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.klngsb.za.com"; classtype:attempted-recon; sid:200025499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200025500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200025501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200025502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200025503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200025504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200025505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200025506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200025507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.laguer.za.com"; classtype:attempted-recon; sid:200025508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lavnql.za.com"; classtype:attempted-recon; sid:200025509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200025510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200025511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200025512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lluhni.za.com"; classtype:attempted-recon; sid:200025513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200025514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lryoni.za.com"; classtype:attempted-recon; sid:200025515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ludrij.za.com"; classtype:attempted-recon; sid:200025516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200025517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200025518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.macpqa.za.com"; classtype:attempted-recon; sid:200025519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.maivih.za.com"; classtype:attempted-recon; sid:200025520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200025521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200025522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200025523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200025524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200025525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200025526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200025527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mrezau.za.com"; classtype:attempted-recon; sid:200025528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200025529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200025530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200025531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200025532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200025533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nijizu.za.com"; classtype:attempted-recon; sid:200025534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.njjguj.za.com"; classtype:attempted-recon; sid:200025535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200025536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200025537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.noegdn.za.com"; classtype:attempted-recon; sid:200025538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200025539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200025540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200025541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200025542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oaotso.za.com"; classtype:attempted-recon; sid:200025543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.odgjer.za.com"; classtype:attempted-recon; sid:200025544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200025545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200025546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200025547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200025548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200025549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200025550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200025551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.orrpya.za.com"; classtype:attempted-recon; sid:200025552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200025553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oudyit.za.com"; classtype:attempted-recon; sid:200025554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oynnaf.za.com"; classtype:attempted-recon; sid:200025555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200025556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rfqqga.za.com"; classtype:attempted-recon; sid:200025557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rhfwsh.za.com"; classtype:attempted-recon; sid:200025558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rijenl.za.com"; classtype:attempted-recon; sid:200025559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.uiiavd.za.com"; classtype:attempted-recon; sid:200025560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.acysue.za.com"; classtype:attempted-recon; sid:200025561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.aeaaij.za.com"; classtype:attempted-recon; sid:200025562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.aetzyx.za.com"; classtype:attempted-recon; sid:200025563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.agxyxw.za.com"; classtype:attempted-recon; sid:200025564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.aiczsa.za.com"; classtype:attempted-recon; sid:200025565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.airnja.za.com"; classtype:attempted-recon; sid:200025566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ajgwlg.za.com"; classtype:attempted-recon; sid:200025567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.alcdkp.za.com"; classtype:attempted-recon; sid:200025568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.atnpja.za.com"; classtype:attempted-recon; sid:200025569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.attlqw.za.com"; classtype:attempted-recon; sid:200025570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.axhyue.za.com"; classtype:attempted-recon; sid:200025571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ayvpej.za.com"; classtype:attempted-recon; sid:200025572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bangme.za.com"; classtype:attempted-recon; sid:200025573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bdhjoe.za.com"; classtype:attempted-recon; sid:200025574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.befurr.za.com"; classtype:attempted-recon; sid:200025575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bfuapo.za.com"; classtype:attempted-recon; sid:200025576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bjrlsn.za.com"; classtype:attempted-recon; sid:200025577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bkcywi.za.com"; classtype:attempted-recon; sid:200025578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bvtbny.za.com"; classtype:attempted-recon; sid:200025579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bxcbkt.za.com"; classtype:attempted-recon; sid:200025580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.byguuc.za.com"; classtype:attempted-recon; sid:200025581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bznaak.za.com"; classtype:attempted-recon; sid:200025582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.caipnu.za.com"; classtype:attempted-recon; sid:200025583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cbxspx.za.com"; classtype:attempted-recon; sid:200025584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ccjole.za.com"; classtype:attempted-recon; sid:200025585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cgrfee.za.com"; classtype:attempted-recon; sid:200025586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cluemm.za.com"; classtype:attempted-recon; sid:200025587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cnjzqo.za.com"; classtype:attempted-recon; sid:200025588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cpjomt.za.com"; classtype:attempted-recon; sid:200025589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cqikbq.za.com"; classtype:attempted-recon; sid:200025590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cstvyz.za.com"; classtype:attempted-recon; sid:200025591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ctfaoz.za.com"; classtype:attempted-recon; sid:200025592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ctsuwx.za.com"; classtype:attempted-recon; sid:200025593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cxvesz.za.com"; classtype:attempted-recon; sid:200025594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.daxqpj.za.com"; classtype:attempted-recon; sid:200025595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dbxmic.za.com"; classtype:attempted-recon; sid:200025596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dbyapt.za.com"; classtype:attempted-recon; sid:200025597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.deocmk.za.com"; classtype:attempted-recon; sid:200025598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dgqqzk.za.com"; classtype:attempted-recon; sid:200025599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dhitmj.za.com"; classtype:attempted-recon; sid:200025600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dkcyph.za.com"; classtype:attempted-recon; sid:200025601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dknouc.za.com"; classtype:attempted-recon; sid:200025602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dkxwtn.za.com"; classtype:attempted-recon; sid:200025603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dlhefx.za.com"; classtype:attempted-recon; sid:200025604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dlzdwm.za.com"; classtype:attempted-recon; sid:200025605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dmgbrn.za.com"; classtype:attempted-recon; sid:200025606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dohoyv.za.com"; classtype:attempted-recon; sid:200025607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dpfplb.za.com"; classtype:attempted-recon; sid:200025608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.drvpxu.za.com"; classtype:attempted-recon; sid:200025609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dtlrgj.za.com"; classtype:attempted-recon; sid:200025610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dzpmfz.za.com"; classtype:attempted-recon; sid:200025611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ebaawf.za.com"; classtype:attempted-recon; sid:200025612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eegabi.za.com"; classtype:attempted-recon; sid:200025613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eiggzc.za.com"; classtype:attempted-recon; sid:200025614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.enksln.za.com"; classtype:attempted-recon; sid:200025615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.epdexz.za.com"; classtype:attempted-recon; sid:200025616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eqfynh.za.com"; classtype:attempted-recon; sid:200025617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.equmej.za.com"; classtype:attempted-recon; sid:200025618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.etibxf.za.com"; classtype:attempted-recon; sid:200025619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.etswbl.za.com"; classtype:attempted-recon; sid:200025620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eugwas.za.com"; classtype:attempted-recon; sid:200025621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ewhrdc.za.com"; classtype:attempted-recon; sid:200025622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eytnjs.za.com"; classtype:attempted-recon; sid:200025623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fabbxw.za.com"; classtype:attempted-recon; sid:200025624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fauyqv.za.com"; classtype:attempted-recon; sid:200025625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fhylla.za.com"; classtype:attempted-recon; sid:200025626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.figdiz.za.com"; classtype:attempted-recon; sid:200025627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fpyzoz.za.com"; classtype:attempted-recon; sid:200025628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.frroav.za.com"; classtype:attempted-recon; sid:200025629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fwmztl.za.com"; classtype:attempted-recon; sid:200025630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gclajk.za.com"; classtype:attempted-recon; sid:200025631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gfrdxv.za.com"; classtype:attempted-recon; sid:200025632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ggxtiz.za.com"; classtype:attempted-recon; sid:200025633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gplcly.za.com"; classtype:attempted-recon; sid:200025634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.grlmkv.za.com"; classtype:attempted-recon; sid:200025635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gubhky.za.com"; classtype:attempted-recon; sid:200025636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.guzomb.za.com"; classtype:attempted-recon; sid:200025637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gvbmgq.za.com"; classtype:attempted-recon; sid:200025638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gwvhgu.za.com"; classtype:attempted-recon; sid:200025639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hjoven.za.com"; classtype:attempted-recon; sid:200025640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hkieuc.za.com"; classtype:attempted-recon; sid:200025641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hklvra.za.com"; classtype:attempted-recon; sid:200025642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hldgqg.za.com"; classtype:attempted-recon; sid:200025643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hpvzmq.za.com"; classtype:attempted-recon; sid:200025644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hsobxm.za.com"; classtype:attempted-recon; sid:200025645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hsxsye.za.com"; classtype:attempted-recon; sid:200025646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hyhijo.za.com"; classtype:attempted-recon; sid:200025647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hzmmyk.za.com"; classtype:attempted-recon; sid:200025648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iaowza.za.com"; classtype:attempted-recon; sid:200025649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iazdui.za.com"; classtype:attempted-recon; sid:200025650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ibdznx.za.com"; classtype:attempted-recon; sid:200025651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.icqbyi.za.com"; classtype:attempted-recon; sid:200025652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ihytpv.za.com"; classtype:attempted-recon; sid:200025653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iieddd.za.com"; classtype:attempted-recon; sid:200025654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iivqdq.za.com"; classtype:attempted-recon; sid:200025655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iksnzw.za.com"; classtype:attempted-recon; sid:200025656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ilnsyb.za.com"; classtype:attempted-recon; sid:200025657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.inilsf.za.com"; classtype:attempted-recon; sid:200025658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ipavwe.za.com"; classtype:attempted-recon; sid:200025659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ipckgf.za.com"; classtype:attempted-recon; sid:200025660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iqhnep.za.com"; classtype:attempted-recon; sid:200025661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.isfnre.za.com"; classtype:attempted-recon; sid:200025662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.itoeyw.za.com"; classtype:attempted-recon; sid:200025663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jbgyvv.za.com"; classtype:attempted-recon; sid:200025664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jhbjti.za.com"; classtype:attempted-recon; sid:200025665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jimkqm.za.com"; classtype:attempted-recon; sid:200025666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jjtebf.za.com"; classtype:attempted-recon; sid:200025667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jnvwvr.za.com"; classtype:attempted-recon; sid:200025668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jokoqq.za.com"; classtype:attempted-recon; sid:200025669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jrbyeg.za.com"; classtype:attempted-recon; sid:200025670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jueaim.za.com"; classtype:attempted-recon; sid:200025671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jvyhkm.za.com"; classtype:attempted-recon; sid:200025672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kadyvz.za.com"; classtype:attempted-recon; sid:200025673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kamowm.za.com"; classtype:attempted-recon; sid:200025674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kbubhp.za.com"; classtype:attempted-recon; sid:200025675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kbuhif.za.com"; classtype:attempted-recon; sid:200025676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kcsxhb.za.com"; classtype:attempted-recon; sid:200025677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.keiczj.za.com"; classtype:attempted-recon; sid:200025678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kfwoih.za.com"; classtype:attempted-recon; sid:200025679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.khaylv.za.com"; classtype:attempted-recon; sid:200025680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kklrfz.za.com"; classtype:attempted-recon; sid:200025681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.klngsb.za.com"; classtype:attempted-recon; sid:200025682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kmuhkc.za.com"; classtype:attempted-recon; sid:200025683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kopnbv.za.com"; classtype:attempted-recon; sid:200025684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kqfoqs.za.com"; classtype:attempted-recon; sid:200025685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ktzhyt.za.com"; classtype:attempted-recon; sid:200025686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kuycqq.za.com"; classtype:attempted-recon; sid:200025687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kvfyvz.za.com"; classtype:attempted-recon; sid:200025688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kvtqsz.za.com"; classtype:attempted-recon; sid:200025689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kyzuqj.za.com"; classtype:attempted-recon; sid:200025690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.laguer.za.com"; classtype:attempted-recon; sid:200025691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lavnql.za.com"; classtype:attempted-recon; sid:200025692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lfeyoa.za.com"; classtype:attempted-recon; sid:200025693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.llfmbd.za.com"; classtype:attempted-recon; sid:200025694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lltgtv.za.com"; classtype:attempted-recon; sid:200025695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lluhni.za.com"; classtype:attempted-recon; sid:200025696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lnhweo.za.com"; classtype:attempted-recon; sid:200025697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lryoni.za.com"; classtype:attempted-recon; sid:200025698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ludrij.za.com"; classtype:attempted-recon; sid:200025699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lwbpzn.za.com"; classtype:attempted-recon; sid:200025700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lyydbz.za.com"; classtype:attempted-recon; sid:200025701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.macpqa.za.com"; classtype:attempted-recon; sid:200025702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.maivih.za.com"; classtype:attempted-recon; sid:200025703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mcabmo.za.com"; classtype:attempted-recon; sid:200025704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mfnwca.za.com"; classtype:attempted-recon; sid:200025705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mfrfhh.za.com"; classtype:attempted-recon; sid:200025706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mftcmf.za.com"; classtype:attempted-recon; sid:200025707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mhvcvt.za.com"; classtype:attempted-recon; sid:200025708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mhxwoz.za.com"; classtype:attempted-recon; sid:200025709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mnalmf.za.com"; classtype:attempted-recon; sid:200025710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mrezau.za.com"; classtype:attempted-recon; sid:200025711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mrkudt.za.com"; classtype:attempted-recon; sid:200025712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mtedjn.za.com"; classtype:attempted-recon; sid:200025713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mxfqsm.za.com"; classtype:attempted-recon; sid:200025714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mxphbq.za.com"; classtype:attempted-recon; sid:200025715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ngdpig.za.com"; classtype:attempted-recon; sid:200025716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nijizu.za.com"; classtype:attempted-recon; sid:200025717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.njjguj.za.com"; classtype:attempted-recon; sid:200025718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nkmpia.za.com"; classtype:attempted-recon; sid:200025719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nmdzpk.za.com"; classtype:attempted-recon; sid:200025720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.noegdn.za.com"; classtype:attempted-recon; sid:200025721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.npxbmj.za.com"; classtype:attempted-recon; sid:200025722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nscrlf.za.com"; classtype:attempted-recon; sid:200025723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nywlkd.za.com"; classtype:attempted-recon; sid:200025724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nzuvrz.za.com"; classtype:attempted-recon; sid:200025725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oaotso.za.com"; classtype:attempted-recon; sid:200025726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.odgjer.za.com"; classtype:attempted-recon; sid:200025727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.odmvmd.za.com"; classtype:attempted-recon; sid:200025728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oexeuz.za.com"; classtype:attempted-recon; sid:200025729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ohmvcj.za.com"; classtype:attempted-recon; sid:200025730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ohssdh.za.com"; classtype:attempted-recon; sid:200025731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oijbuk.za.com"; classtype:attempted-recon; sid:200025732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.okzwyp.za.com"; classtype:attempted-recon; sid:200025733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.olgmmh.za.com"; classtype:attempted-recon; sid:200025734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.orrpya.za.com"; classtype:attempted-recon; sid:200025735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.osoqzr.za.com"; classtype:attempted-recon; sid:200025736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oudyit.za.com"; classtype:attempted-recon; sid:200025737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.pdkuld.za.com"; classtype:attempted-recon; sid:200025738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.qgispn.za.com"; classtype:attempted-recon; sid:200025739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rijenl.za.com"; classtype:attempted-recon; sid:200025740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rpfjaz.za.com"; classtype:attempted-recon; sid:200025741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tfpdde.za.com"; classtype:attempted-recon; sid:200025742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnueszovvseon.visazeeevsioriursi.dfmiex.za.com"; classtype:attempted-recon; sid:200025743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciacnueszovvseon.visazeeevsioriursi.kaixbv.za.com"; classtype:attempted-recon; sid:200025744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.acysue.za.com"; classtype:attempted-recon; sid:200025745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200025746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200025747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200025748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200025749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.airnja.za.com"; classtype:attempted-recon; sid:200025750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200025751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200025752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.atnpja.za.com"; classtype:attempted-recon; sid:200025753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.attlqw.za.com"; classtype:attempted-recon; sid:200025754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.axhyue.za.com"; classtype:attempted-recon; sid:200025755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200025756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bangme.za.com"; classtype:attempted-recon; sid:200025757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200025758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.befurr.za.com"; classtype:attempted-recon; sid:200025759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200025760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200025761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200025762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200025763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200025764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.byguuc.za.com"; classtype:attempted-recon; sid:200025765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bznaak.za.com"; classtype:attempted-recon; sid:200025766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.caipnu.za.com"; classtype:attempted-recon; sid:200025767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200025768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ccjole.za.com"; classtype:attempted-recon; sid:200025769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200025770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cluemm.za.com"; classtype:attempted-recon; sid:200025771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200025772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200025773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200025774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200025775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200025776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200025777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200025778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200025779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200025780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200025781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.deocmk.za.com"; classtype:attempted-recon; sid:200025782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200025783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200025784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200025785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dknouc.za.com"; classtype:attempted-recon; sid:200025786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200025787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200025788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200025789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200025790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200025791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200025792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200025793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200025794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200025795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200025796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eegabi.za.com"; classtype:attempted-recon; sid:200025797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200025798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.enksln.za.com"; classtype:attempted-recon; sid:200025799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.epdexz.za.com"; classtype:attempted-recon; sid:200025800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200025801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.equmej.za.com"; classtype:attempted-recon; sid:200025802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.etibxf.za.com"; classtype:attempted-recon; sid:200025803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.etswbl.za.com"; classtype:attempted-recon; sid:200025804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eugwas.za.com"; classtype:attempted-recon; sid:200025805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200025806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200025807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200025808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200025809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fhylla.za.com"; classtype:attempted-recon; sid:200025810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.figdiz.za.com"; classtype:attempted-recon; sid:200025811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200025812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.frroav.za.com"; classtype:attempted-recon; sid:200025813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200025814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gclajk.za.com"; classtype:attempted-recon; sid:200025815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200025816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200025817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gplcly.za.com"; classtype:attempted-recon; sid:200025818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200025819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gubhky.za.com"; classtype:attempted-recon; sid:200025820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.guzomb.za.com"; classtype:attempted-recon; sid:200025821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200025822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200025823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hjoven.za.com"; classtype:attempted-recon; sid:200025824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200025825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hklvra.za.com"; classtype:attempted-recon; sid:200025826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200025827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200025828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200025829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200025830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200025831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200025832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iaowza.za.com"; classtype:attempted-recon; sid:200025833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iazdui.za.com"; classtype:attempted-recon; sid:200025834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200025835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200025836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200025837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iieddd.za.com"; classtype:attempted-recon; sid:200025838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200025839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200025840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200025841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.inilsf.za.com"; classtype:attempted-recon; sid:200025842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200025843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200025844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iqhnep.za.com"; classtype:attempted-recon; sid:200025845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.isfnre.za.com"; classtype:attempted-recon; sid:200025846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.itoeyw.za.com"; classtype:attempted-recon; sid:200025847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200025848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200025849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200025850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200025851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200025852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200025853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200025854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jueaim.za.com"; classtype:attempted-recon; sid:200025855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200025856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200025857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kamowm.za.com"; classtype:attempted-recon; sid:200025858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200025859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200025860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200025861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.keiczj.za.com"; classtype:attempted-recon; sid:200025862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200025863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.khaylv.za.com"; classtype:attempted-recon; sid:200025864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200025865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.klngsb.za.com"; classtype:attempted-recon; sid:200025866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200025867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200025868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200025869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200025870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200025871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200025872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200025873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200025874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.laguer.za.com"; classtype:attempted-recon; sid:200025875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lavnql.za.com"; classtype:attempted-recon; sid:200025876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200025877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200025878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200025879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lluhni.za.com"; classtype:attempted-recon; sid:200025880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200025881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lryoni.za.com"; classtype:attempted-recon; sid:200025882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ludrij.za.com"; classtype:attempted-recon; sid:200025883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200025884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200025885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.macpqa.za.com"; classtype:attempted-recon; sid:200025886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.maivih.za.com"; classtype:attempted-recon; sid:200025887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200025888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200025889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200025890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200025891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200025892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200025893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200025894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mrezau.za.com"; classtype:attempted-recon; sid:200025895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200025896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200025897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200025898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200025899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200025900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nijizu.za.com"; classtype:attempted-recon; sid:200025901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.njjguj.za.com"; classtype:attempted-recon; sid:200025902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200025903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200025904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.noegdn.za.com"; classtype:attempted-recon; sid:200025905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200025906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200025907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200025908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200025909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oaotso.za.com"; classtype:attempted-recon; sid:200025910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.odgjer.za.com"; classtype:attempted-recon; sid:200025911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200025912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200025913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200025914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200025915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200025916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200025917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200025918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.orrpya.za.com"; classtype:attempted-recon; sid:200025919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200025920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oudyit.za.com"; classtype:attempted-recon; sid:200025921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200025922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.pivwti.za.com"; classtype:attempted-recon; sid:200025923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rijenl.za.com"; classtype:attempted-recon; sid:200025924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rujjog.za.com"; classtype:attempted-recon; sid:200025925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.vwprmh.za.com"; classtype:attempted-recon; sid:200025926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.wstujx.za.com"; classtype:attempted-recon; sid:200025927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ygekte.za.com"; classtype:attempted-recon; sid:200025928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.acysue.za.com"; classtype:attempted-recon; sid:200025929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.aeaaij.za.com"; classtype:attempted-recon; sid:200025930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.aetzyx.za.com"; classtype:attempted-recon; sid:200025931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.agxyxw.za.com"; classtype:attempted-recon; sid:200025932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.aiczsa.za.com"; classtype:attempted-recon; sid:200025933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.airnja.za.com"; classtype:attempted-recon; sid:200025934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200025935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.alcdkp.za.com"; classtype:attempted-recon; sid:200025936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.atnpja.za.com"; classtype:attempted-recon; sid:200025937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.attlqw.za.com"; classtype:attempted-recon; sid:200025938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.axhyue.za.com"; classtype:attempted-recon; sid:200025939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ayvpej.za.com"; classtype:attempted-recon; sid:200025940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bangme.za.com"; classtype:attempted-recon; sid:200025941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200025942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.befurr.za.com"; classtype:attempted-recon; sid:200025943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bfuapo.za.com"; classtype:attempted-recon; sid:200025944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200025945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bkcywi.za.com"; classtype:attempted-recon; sid:200025946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bvtbny.za.com"; classtype:attempted-recon; sid:200025947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200025948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.byguuc.za.com"; classtype:attempted-recon; sid:200025949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bznaak.za.com"; classtype:attempted-recon; sid:200025950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.caipnu.za.com"; classtype:attempted-recon; sid:200025951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cbxspx.za.com"; classtype:attempted-recon; sid:200025952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ccjole.za.com"; classtype:attempted-recon; sid:200025953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cgrfee.za.com"; classtype:attempted-recon; sid:200025954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cluemm.za.com"; classtype:attempted-recon; sid:200025955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200025956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cpjomt.za.com"; classtype:attempted-recon; sid:200025957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cqikbq.za.com"; classtype:attempted-recon; sid:200025958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cstvyz.za.com"; classtype:attempted-recon; sid:200025959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200025960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200025961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cxvesz.za.com"; classtype:attempted-recon; sid:200025962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.daxqpj.za.com"; classtype:attempted-recon; sid:200025963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dbxmic.za.com"; classtype:attempted-recon; sid:200025964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dbyapt.za.com"; classtype:attempted-recon; sid:200025965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.deocmk.za.com"; classtype:attempted-recon; sid:200025966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200025967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dhitmj.za.com"; classtype:attempted-recon; sid:200025968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dkcyph.za.com"; classtype:attempted-recon; sid:200025969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dknouc.za.com"; classtype:attempted-recon; sid:200025970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200025971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dlhefx.za.com"; classtype:attempted-recon; sid:200025972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200025973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200025974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dohoyv.za.com"; classtype:attempted-recon; sid:200025975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dpfplb.za.com"; classtype:attempted-recon; sid:200025976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.drvpxu.za.com"; classtype:attempted-recon; sid:200025977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200025978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200025979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ebaawf.za.com"; classtype:attempted-recon; sid:200025980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eegabi.za.com"; classtype:attempted-recon; sid:200025981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eiggzc.za.com"; classtype:attempted-recon; sid:200025982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.enksln.za.com"; classtype:attempted-recon; sid:200025983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.epdexz.za.com"; classtype:attempted-recon; sid:200025984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eqfynh.za.com"; classtype:attempted-recon; sid:200025985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.equmej.za.com"; classtype:attempted-recon; sid:200025986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.etibxf.za.com"; classtype:attempted-recon; sid:200025987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.etswbl.za.com"; classtype:attempted-recon; sid:200025988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eugwas.za.com"; classtype:attempted-recon; sid:200025989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200025990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eytnjs.za.com"; classtype:attempted-recon; sid:200025991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fabbxw.za.com"; classtype:attempted-recon; sid:200025992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fauyqv.za.com"; classtype:attempted-recon; sid:200025993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fhylla.za.com"; classtype:attempted-recon; sid:200025994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.figdiz.za.com"; classtype:attempted-recon; sid:200025995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200025996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.frroav.za.com"; classtype:attempted-recon; sid:200025997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fwmztl.za.com"; classtype:attempted-recon; sid:200025998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gclajk.za.com"; classtype:attempted-recon; sid:200025999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200026000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200026001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gplcly.za.com"; classtype:attempted-recon; sid:200026002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.grlmkv.za.com"; classtype:attempted-recon; sid:200026003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gubhky.za.com"; classtype:attempted-recon; sid:200026004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.guzomb.za.com"; classtype:attempted-recon; sid:200026005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200026006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200026007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hjoven.za.com"; classtype:attempted-recon; sid:200026008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hkieuc.za.com"; classtype:attempted-recon; sid:200026009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hklvra.za.com"; classtype:attempted-recon; sid:200026010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hldgqg.za.com"; classtype:attempted-recon; sid:200026011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200026012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hsobxm.za.com"; classtype:attempted-recon; sid:200026013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hsxsye.za.com"; classtype:attempted-recon; sid:200026014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hyhijo.za.com"; classtype:attempted-recon; sid:200026015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200026016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iaowza.za.com"; classtype:attempted-recon; sid:200026017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iazdui.za.com"; classtype:attempted-recon; sid:200026018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ibdznx.za.com"; classtype:attempted-recon; sid:200026019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.icqbyi.za.com"; classtype:attempted-recon; sid:200026020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ihytpv.za.com"; classtype:attempted-recon; sid:200026021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iieddd.za.com"; classtype:attempted-recon; sid:200026022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iivqdq.za.com"; classtype:attempted-recon; sid:200026023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iksnzw.za.com"; classtype:attempted-recon; sid:200026024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200026025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.inilsf.za.com"; classtype:attempted-recon; sid:200026026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ipavwe.za.com"; classtype:attempted-recon; sid:200026027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ipckgf.za.com"; classtype:attempted-recon; sid:200026028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iqhnep.za.com"; classtype:attempted-recon; sid:200026029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.isfnre.za.com"; classtype:attempted-recon; sid:200026030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.itoeyw.za.com"; classtype:attempted-recon; sid:200026031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200026032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jhbjti.za.com"; classtype:attempted-recon; sid:200026033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jimkqm.za.com"; classtype:attempted-recon; sid:200026034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jjtebf.za.com"; classtype:attempted-recon; sid:200026035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200026036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jokoqq.za.com"; classtype:attempted-recon; sid:200026037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200026038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jueaim.za.com"; classtype:attempted-recon; sid:200026039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200026040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kadyvz.za.com"; classtype:attempted-recon; sid:200026041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kamowm.za.com"; classtype:attempted-recon; sid:200026042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kbubhp.za.com"; classtype:attempted-recon; sid:200026043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kbuhif.za.com"; classtype:attempted-recon; sid:200026044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200026045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.keiczj.za.com"; classtype:attempted-recon; sid:200026046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kfwoih.za.com"; classtype:attempted-recon; sid:200026047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.khaylv.za.com"; classtype:attempted-recon; sid:200026048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kklrfz.za.com"; classtype:attempted-recon; sid:200026049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.klngsb.za.com"; classtype:attempted-recon; sid:200026050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200026051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kopnbv.za.com"; classtype:attempted-recon; sid:200026052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200026053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200026054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kuycqq.za.com"; classtype:attempted-recon; sid:200026055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200026056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200026057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200026058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.laguer.za.com"; classtype:attempted-recon; sid:200026059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lavnql.za.com"; classtype:attempted-recon; sid:200026060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200026061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.llfmbd.za.com"; classtype:attempted-recon; sid:200026062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lltgtv.za.com"; classtype:attempted-recon; sid:200026063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lluhni.za.com"; classtype:attempted-recon; sid:200026064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lnhweo.za.com"; classtype:attempted-recon; sid:200026065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lryoni.za.com"; classtype:attempted-recon; sid:200026066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ludrij.za.com"; classtype:attempted-recon; sid:200026067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200026068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lyydbz.za.com"; classtype:attempted-recon; sid:200026069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.macpqa.za.com"; classtype:attempted-recon; sid:200026070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.maivih.za.com"; classtype:attempted-recon; sid:200026071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mcabmo.za.com"; classtype:attempted-recon; sid:200026072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mfnwca.za.com"; classtype:attempted-recon; sid:200026073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200026074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mftcmf.za.com"; classtype:attempted-recon; sid:200026075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200026076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200026077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mnalmf.za.com"; classtype:attempted-recon; sid:200026078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mrezau.za.com"; classtype:attempted-recon; sid:200026079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mrkudt.za.com"; classtype:attempted-recon; sid:200026080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mtedjn.za.com"; classtype:attempted-recon; sid:200026081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200026082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mxphbq.za.com"; classtype:attempted-recon; sid:200026083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ngdpig.za.com"; classtype:attempted-recon; sid:200026084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nijizu.za.com"; classtype:attempted-recon; sid:200026085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.njjguj.za.com"; classtype:attempted-recon; sid:200026086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nkmpia.za.com"; classtype:attempted-recon; sid:200026087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200026088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.noegdn.za.com"; classtype:attempted-recon; sid:200026089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.npxbmj.za.com"; classtype:attempted-recon; sid:200026090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nscrlf.za.com"; classtype:attempted-recon; sid:200026091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nywlkd.za.com"; classtype:attempted-recon; sid:200026092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200026093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oaotso.za.com"; classtype:attempted-recon; sid:200026094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.odgjer.za.com"; classtype:attempted-recon; sid:200026095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.odmvmd.za.com"; classtype:attempted-recon; sid:200026096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oexeuz.za.com"; classtype:attempted-recon; sid:200026097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200026098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ohssdh.za.com"; classtype:attempted-recon; sid:200026099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oijbuk.za.com"; classtype:attempted-recon; sid:200026100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.okzwyp.za.com"; classtype:attempted-recon; sid:200026101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.olgmmh.za.com"; classtype:attempted-recon; sid:200026102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.orrpya.za.com"; classtype:attempted-recon; sid:200026103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.osoqzr.za.com"; classtype:attempted-recon; sid:200026104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oudyit.za.com"; classtype:attempted-recon; sid:200026105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.pdkuld.za.com"; classtype:attempted-recon; sid:200026106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rijenl.za.com"; classtype:attempted-recon; sid:200026107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rpfjaz.za.com"; classtype:attempted-recon; sid:200026108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wstujx.za.com"; classtype:attempted-recon; sid:200026109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wvdxil.za.com"; classtype:attempted-recon; sid:200026110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.xbdhbi.za.com"; classtype:attempted-recon; sid:200026111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ybqjcs.za.com"; classtype:attempted-recon; sid:200026112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.acysue.za.com"; classtype:attempted-recon; sid:200026113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.aeaaij.za.com"; classtype:attempted-recon; sid:200026114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.aetzyx.za.com"; classtype:attempted-recon; sid:200026115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.agxyxw.za.com"; classtype:attempted-recon; sid:200026116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.aiczsa.za.com"; classtype:attempted-recon; sid:200026117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.airnja.za.com"; classtype:attempted-recon; sid:200026118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200026119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.alcdkp.za.com"; classtype:attempted-recon; sid:200026120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.atnpja.za.com"; classtype:attempted-recon; sid:200026121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.attlqw.za.com"; classtype:attempted-recon; sid:200026122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.axhyue.za.com"; classtype:attempted-recon; sid:200026123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ayvpej.za.com"; classtype:attempted-recon; sid:200026124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bangme.za.com"; classtype:attempted-recon; sid:200026125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200026126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.befurr.za.com"; classtype:attempted-recon; sid:200026127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bfuapo.za.com"; classtype:attempted-recon; sid:200026128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200026129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bkcywi.za.com"; classtype:attempted-recon; sid:200026130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bvtbny.za.com"; classtype:attempted-recon; sid:200026131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200026132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.byguuc.za.com"; classtype:attempted-recon; sid:200026133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.bznaak.za.com"; classtype:attempted-recon; sid:200026134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.caipnu.za.com"; classtype:attempted-recon; sid:200026135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cbxspx.za.com"; classtype:attempted-recon; sid:200026136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ccjole.za.com"; classtype:attempted-recon; sid:200026137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cgrfee.za.com"; classtype:attempted-recon; sid:200026138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cluemm.za.com"; classtype:attempted-recon; sid:200026139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200026140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cpjomt.za.com"; classtype:attempted-recon; sid:200026141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cqikbq.za.com"; classtype:attempted-recon; sid:200026142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cstvyz.za.com"; classtype:attempted-recon; sid:200026143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200026144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200026145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.cxvesz.za.com"; classtype:attempted-recon; sid:200026146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.daxqpj.za.com"; classtype:attempted-recon; sid:200026147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dbxmic.za.com"; classtype:attempted-recon; sid:200026148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dbyapt.za.com"; classtype:attempted-recon; sid:200026149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.deocmk.za.com"; classtype:attempted-recon; sid:200026150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200026151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dhitmj.za.com"; classtype:attempted-recon; sid:200026152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dkcyph.za.com"; classtype:attempted-recon; sid:200026153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dknouc.za.com"; classtype:attempted-recon; sid:200026154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200026155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dlhefx.za.com"; classtype:attempted-recon; sid:200026156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200026157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200026158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dohoyv.za.com"; classtype:attempted-recon; sid:200026159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dpfplb.za.com"; classtype:attempted-recon; sid:200026160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.drvpxu.za.com"; classtype:attempted-recon; sid:200026161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200026162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200026163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ebaawf.za.com"; classtype:attempted-recon; sid:200026164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.eegabi.za.com"; classtype:attempted-recon; sid:200026165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.eiggzc.za.com"; classtype:attempted-recon; sid:200026166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.enksln.za.com"; classtype:attempted-recon; sid:200026167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.epdexz.za.com"; classtype:attempted-recon; sid:200026168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.eqfynh.za.com"; classtype:attempted-recon; sid:200026169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.equmej.za.com"; classtype:attempted-recon; sid:200026170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.etibxf.za.com"; classtype:attempted-recon; sid:200026171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.etswbl.za.com"; classtype:attempted-recon; sid:200026172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.eugwas.za.com"; classtype:attempted-recon; sid:200026173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200026174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.eytnjs.za.com"; classtype:attempted-recon; sid:200026175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.fabbxw.za.com"; classtype:attempted-recon; sid:200026176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.fauyqv.za.com"; classtype:attempted-recon; sid:200026177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.fhylla.za.com"; classtype:attempted-recon; sid:200026178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.figdiz.za.com"; classtype:attempted-recon; sid:200026179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200026180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.frroav.za.com"; classtype:attempted-recon; sid:200026181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.fwmztl.za.com"; classtype:attempted-recon; sid:200026182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.gclajk.za.com"; classtype:attempted-recon; sid:200026183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200026184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200026185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.gplcly.za.com"; classtype:attempted-recon; sid:200026186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.grlmkv.za.com"; classtype:attempted-recon; sid:200026187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.gubhky.za.com"; classtype:attempted-recon; sid:200026188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.guzomb.za.com"; classtype:attempted-recon; sid:200026189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200026190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200026191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hjoven.za.com"; classtype:attempted-recon; sid:200026192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hkieuc.za.com"; classtype:attempted-recon; sid:200026193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hklvra.za.com"; classtype:attempted-recon; sid:200026194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hldgqg.za.com"; classtype:attempted-recon; sid:200026195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200026196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hsobxm.za.com"; classtype:attempted-recon; sid:200026197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hsxsye.za.com"; classtype:attempted-recon; sid:200026198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hyhijo.za.com"; classtype:attempted-recon; sid:200026199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200026200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.iaowza.za.com"; classtype:attempted-recon; sid:200026201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.iazdui.za.com"; classtype:attempted-recon; sid:200026202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ibdznx.za.com"; classtype:attempted-recon; sid:200026203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.icqbyi.za.com"; classtype:attempted-recon; sid:200026204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ihytpv.za.com"; classtype:attempted-recon; sid:200026205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.iieddd.za.com"; classtype:attempted-recon; sid:200026206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.iivqdq.za.com"; classtype:attempted-recon; sid:200026207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.iksnzw.za.com"; classtype:attempted-recon; sid:200026208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200026209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.inilsf.za.com"; classtype:attempted-recon; sid:200026210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ipavwe.za.com"; classtype:attempted-recon; sid:200026211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ipckgf.za.com"; classtype:attempted-recon; sid:200026212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.iqhnep.za.com"; classtype:attempted-recon; sid:200026213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.isfnre.za.com"; classtype:attempted-recon; sid:200026214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.itoeyw.za.com"; classtype:attempted-recon; sid:200026215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200026216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jhbjti.za.com"; classtype:attempted-recon; sid:200026217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jimkqm.za.com"; classtype:attempted-recon; sid:200026218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jjtebf.za.com"; classtype:attempted-recon; sid:200026219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200026220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jokoqq.za.com"; classtype:attempted-recon; sid:200026221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200026222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jueaim.za.com"; classtype:attempted-recon; sid:200026223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200026224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kadyvz.za.com"; classtype:attempted-recon; sid:200026225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kamowm.za.com"; classtype:attempted-recon; sid:200026226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kbubhp.za.com"; classtype:attempted-recon; sid:200026227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kbuhif.za.com"; classtype:attempted-recon; sid:200026228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200026229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.keiczj.za.com"; classtype:attempted-recon; sid:200026230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kfwoih.za.com"; classtype:attempted-recon; sid:200026231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.khaylv.za.com"; classtype:attempted-recon; sid:200026232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kklrfz.za.com"; classtype:attempted-recon; sid:200026233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.klngsb.za.com"; classtype:attempted-recon; sid:200026234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200026235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kopnbv.za.com"; classtype:attempted-recon; sid:200026236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200026237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200026238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kuycqq.za.com"; classtype:attempted-recon; sid:200026239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200026240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200026241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200026242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.laguer.za.com"; classtype:attempted-recon; sid:200026243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lavnql.za.com"; classtype:attempted-recon; sid:200026244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200026245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.llfmbd.za.com"; classtype:attempted-recon; sid:200026246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lltgtv.za.com"; classtype:attempted-recon; sid:200026247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lluhni.za.com"; classtype:attempted-recon; sid:200026248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lnhweo.za.com"; classtype:attempted-recon; sid:200026249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lryoni.za.com"; classtype:attempted-recon; sid:200026250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ludrij.za.com"; classtype:attempted-recon; sid:200026251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200026252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.lyydbz.za.com"; classtype:attempted-recon; sid:200026253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.macpqa.za.com"; classtype:attempted-recon; sid:200026254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.maivih.za.com"; classtype:attempted-recon; sid:200026255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mcabmo.za.com"; classtype:attempted-recon; sid:200026256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mfnwca.za.com"; classtype:attempted-recon; sid:200026257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200026258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mftcmf.za.com"; classtype:attempted-recon; sid:200026259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200026260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200026261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mnalmf.za.com"; classtype:attempted-recon; sid:200026262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mrezau.za.com"; classtype:attempted-recon; sid:200026263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mrkudt.za.com"; classtype:attempted-recon; sid:200026264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mtedjn.za.com"; classtype:attempted-recon; sid:200026265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200026266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.mxphbq.za.com"; classtype:attempted-recon; sid:200026267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ngdpig.za.com"; classtype:attempted-recon; sid:200026268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.nijizu.za.com"; classtype:attempted-recon; sid:200026269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.njjguj.za.com"; classtype:attempted-recon; sid:200026270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.nkmpia.za.com"; classtype:attempted-recon; sid:200026271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200026272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.noegdn.za.com"; classtype:attempted-recon; sid:200026273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.npxbmj.za.com"; classtype:attempted-recon; sid:200026274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.nscrlf.za.com"; classtype:attempted-recon; sid:200026275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.nywlkd.za.com"; classtype:attempted-recon; sid:200026276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200026277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.oaotso.za.com"; classtype:attempted-recon; sid:200026278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.odgjer.za.com"; classtype:attempted-recon; sid:200026279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.odmvmd.za.com"; classtype:attempted-recon; sid:200026280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.oexeuz.za.com"; classtype:attempted-recon; sid:200026281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200026282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.ohssdh.za.com"; classtype:attempted-recon; sid:200026283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.oijbuk.za.com"; classtype:attempted-recon; sid:200026284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.okzwyp.za.com"; classtype:attempted-recon; sid:200026285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.olgmmh.za.com"; classtype:attempted-recon; sid:200026286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.orrpya.za.com"; classtype:attempted-recon; sid:200026287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.osoqzr.za.com"; classtype:attempted-recon; sid:200026288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.oudyit.za.com"; classtype:attempted-recon; sid:200026289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.pdkuld.za.com"; classtype:attempted-recon; sid:200026290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.qfbzop.za.com"; classtype:attempted-recon; sid:200026291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.qgispn.za.com"; classtype:attempted-recon; sid:200026292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.rijenl.za.com"; classtype:attempted-recon; sid:200026293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.uopoem.za.com"; classtype:attempted-recon; sid:200026294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.uyyfoa.za.com"; classtype:attempted-recon; sid:200026295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavinsacunureszovveon.cessazciursi.xnbziz.za.com"; classtype:attempted-recon; sid:200026296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisaccaeovseon.visaeiureeinsi.phkavb.za.com"; classtype:attempted-recon; sid:200026297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisaccaeovseon.visaeiureeinsi.pigrir.za.com"; classtype:attempted-recon; sid:200026298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisaccaeovvseon.visecmiureainsi.kaixbv.za.com"; classtype:attempted-recon; sid:200026299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisaccaeovvseon.visecmiureainsi.odujie.za.com"; classtype:attempted-recon; sid:200026300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisaccaeovvseon.visecmiureainsi.tbtenr.za.com"; classtype:attempted-recon; sid:200026301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisaccaeovvseon.visecmiureainsi.tzzwdq.za.com"; classtype:attempted-recon; sid:200026302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisacnureszovvseon.esazcesioriursi.odujie.za.com"; classtype:attempted-recon; sid:200026303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.geoqun.za.com"; classtype:attempted-recon; sid:200026304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.jdtkva.za.com"; classtype:attempted-recon; sid:200026305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.oeayuk.za.com"; classtype:attempted-recon; sid:200026306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.psicaz.za.com"; classtype:attempted-recon; sid:200026307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.usoqts.za.com"; classtype:attempted-recon; sid:200026308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.xdjnuh.za.com"; classtype:attempted-recon; sid:200026309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiaccaoseon.visazcmieeenainsi.ijpawu.za.com"; classtype:attempted-recon; sid:200026310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.acysue.za.com"; classtype:attempted-recon; sid:200026311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200026312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200026313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200026314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200026315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.airnja.za.com"; classtype:attempted-recon; sid:200026316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200026317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200026318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.atnpja.za.com"; classtype:attempted-recon; sid:200026319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.attlqw.za.com"; classtype:attempted-recon; sid:200026320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.axhyue.za.com"; classtype:attempted-recon; sid:200026321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200026322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bangme.za.com"; classtype:attempted-recon; sid:200026323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200026324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.befurr.za.com"; classtype:attempted-recon; sid:200026325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200026326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200026327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200026328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200026329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200026330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.byguuc.za.com"; classtype:attempted-recon; sid:200026331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bznaak.za.com"; classtype:attempted-recon; sid:200026332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.caipnu.za.com"; classtype:attempted-recon; sid:200026333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200026334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ccjole.za.com"; classtype:attempted-recon; sid:200026335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200026336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cluemm.za.com"; classtype:attempted-recon; sid:200026337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200026338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200026339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200026340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200026341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200026342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200026343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200026344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200026345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200026346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200026347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.deocmk.za.com"; classtype:attempted-recon; sid:200026348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200026349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200026350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200026351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dknouc.za.com"; classtype:attempted-recon; sid:200026352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200026353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200026354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200026355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200026356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200026357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200026358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200026359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200026360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200026361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200026362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eegabi.za.com"; classtype:attempted-recon; sid:200026363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200026364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.enksln.za.com"; classtype:attempted-recon; sid:200026365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.epdexz.za.com"; classtype:attempted-recon; sid:200026366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200026367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.equmej.za.com"; classtype:attempted-recon; sid:200026368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.etibxf.za.com"; classtype:attempted-recon; sid:200026369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.etswbl.za.com"; classtype:attempted-recon; sid:200026370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eugwas.za.com"; classtype:attempted-recon; sid:200026371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200026372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200026373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200026374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200026375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fhylla.za.com"; classtype:attempted-recon; sid:200026376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.figdiz.za.com"; classtype:attempted-recon; sid:200026377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200026378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.frroav.za.com"; classtype:attempted-recon; sid:200026379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200026380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gclajk.za.com"; classtype:attempted-recon; sid:200026381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200026382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200026383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gplcly.za.com"; classtype:attempted-recon; sid:200026384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200026385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gubhky.za.com"; classtype:attempted-recon; sid:200026386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.guzomb.za.com"; classtype:attempted-recon; sid:200026387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200026388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200026389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hjoven.za.com"; classtype:attempted-recon; sid:200026390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200026391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hklvra.za.com"; classtype:attempted-recon; sid:200026392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200026393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200026394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200026395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200026396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200026397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200026398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iaowza.za.com"; classtype:attempted-recon; sid:200026399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iazdui.za.com"; classtype:attempted-recon; sid:200026400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200026401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200026402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200026403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iieddd.za.com"; classtype:attempted-recon; sid:200026404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200026405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200026406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200026407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.inilsf.za.com"; classtype:attempted-recon; sid:200026408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200026409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200026410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iqhnep.za.com"; classtype:attempted-recon; sid:200026411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.isfnre.za.com"; classtype:attempted-recon; sid:200026412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.itoeyw.za.com"; classtype:attempted-recon; sid:200026413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200026414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200026415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200026416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200026417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200026418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200026419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200026420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jueaim.za.com"; classtype:attempted-recon; sid:200026421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200026422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200026423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kamowm.za.com"; classtype:attempted-recon; sid:200026424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200026425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200026426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200026427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.keiczj.za.com"; classtype:attempted-recon; sid:200026428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200026429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.khaylv.za.com"; classtype:attempted-recon; sid:200026430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200026431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.klngsb.za.com"; classtype:attempted-recon; sid:200026432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200026433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200026434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200026435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200026436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200026437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200026438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200026439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200026440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.laguer.za.com"; classtype:attempted-recon; sid:200026441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lavnql.za.com"; classtype:attempted-recon; sid:200026442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200026443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200026444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200026445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lluhni.za.com"; classtype:attempted-recon; sid:200026446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200026447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lryoni.za.com"; classtype:attempted-recon; sid:200026448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ludrij.za.com"; classtype:attempted-recon; sid:200026449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200026450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200026451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.macpqa.za.com"; classtype:attempted-recon; sid:200026452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.maivih.za.com"; classtype:attempted-recon; sid:200026453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200026454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200026455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200026456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200026457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200026458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200026459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200026460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mrezau.za.com"; classtype:attempted-recon; sid:200026461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200026462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200026463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200026464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200026465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200026466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nijizu.za.com"; classtype:attempted-recon; sid:200026467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.njjguj.za.com"; classtype:attempted-recon; sid:200026468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200026469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200026470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.noegdn.za.com"; classtype:attempted-recon; sid:200026471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200026472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200026473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200026474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200026475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oaotso.za.com"; classtype:attempted-recon; sid:200026476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.odgjer.za.com"; classtype:attempted-recon; sid:200026477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200026478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200026479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200026480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200026481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200026482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200026483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200026484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.orrpya.za.com"; classtype:attempted-recon; sid:200026485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200026486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oudyit.za.com"; classtype:attempted-recon; sid:200026487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200026488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.picwiy.za.com"; classtype:attempted-recon; sid:200026489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rijenl.za.com"; classtype:attempted-recon; sid:200026490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ryqtlk.za.com"; classtype:attempted-recon; sid:200026491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.tipmxj.za.com"; classtype:attempted-recon; sid:200026492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.vwprmh.za.com"; classtype:attempted-recon; sid:200026493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ybqjcs.za.com"; classtype:attempted-recon; sid:200026494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacncaouseon.visazcmiceesenainsi.zzwuas.za.com"; classtype:attempted-recon; sid:200026495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.acysue.za.com"; classtype:attempted-recon; sid:200026496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200026497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200026498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200026499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200026500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.airnja.za.com"; classtype:attempted-recon; sid:200026501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200026502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200026503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200026504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200026505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200026506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200026507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bangme.za.com"; classtype:attempted-recon; sid:200026508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200026509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.befurr.za.com"; classtype:attempted-recon; sid:200026510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200026511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200026512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200026513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200026514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200026515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200026516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200026517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200026518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200026519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200026520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200026521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200026522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200026523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200026524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200026525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200026526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200026527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200026528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200026529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200026530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200026531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200026532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200026533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200026534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200026535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200026536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200026537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200026538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200026539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200026540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200026541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200026542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200026543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200026544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200026545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200026546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200026547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200026548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200026549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.enksln.za.com"; classtype:attempted-recon; sid:200026550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200026551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200026552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.equmej.za.com"; classtype:attempted-recon; sid:200026553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200026554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200026555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200026556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200026557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200026558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200026559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200026560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200026561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200026562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200026563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.frroav.za.com"; classtype:attempted-recon; sid:200026564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200026565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200026566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200026567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200026568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200026569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200026570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200026571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200026572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200026573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200026574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200026575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200026576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200026577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200026578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200026579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200026580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200026581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200026582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200026583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200026584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200026585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200026586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200026587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200026588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200026589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200026590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200026591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200026592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200026593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200026594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200026595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200026596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200026597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200026598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200026599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200026600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200026601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200026602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200026603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200026604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200026605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200026606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200026607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200026608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200026609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200026610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200026611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200026612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200026613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200026614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200026615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200026616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200026617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200026618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200026619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200026620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200026621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200026622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200026623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200026624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200026625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.laguer.za.com"; classtype:attempted-recon; sid:200026626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200026627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200026628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200026629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200026630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200026631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200026632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200026633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200026634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200026635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200026636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200026637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.maivih.za.com"; classtype:attempted-recon; sid:200026638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200026639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200026640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200026641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200026642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200026643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200026644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200026645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200026646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200026647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200026648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200026649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200026650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200026651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200026652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200026653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200026654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200026655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200026656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200026657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200026658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200026659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200026660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200026661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200026662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200026663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200026664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200026665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200026666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200026667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200026668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200026669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200026670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200026671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200026672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ozgdvq.za.com"; classtype:attempted-recon; sid:200026673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200026674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200026675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.umfbax.za.com"; classtype:attempted-recon; sid:200026676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.wvpeyp.za.com"; classtype:attempted-recon; sid:200026677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.xfwrde.za.com"; classtype:attempted-recon; sid:200026678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.akfmmu.za.com"; classtype:attempted-recon; sid:200026679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.bgvjlj.za.com"; classtype:attempted-recon; sid:200026680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.hjrhmw.za.com"; classtype:attempted-recon; sid:200026681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.jgdgat.za.com"; classtype:attempted-recon; sid:200026682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.jwnhul.za.com"; classtype:attempted-recon; sid:200026683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.swhgkf.za.com"; classtype:attempted-recon; sid:200026684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.usrwro.za.com"; classtype:attempted-recon; sid:200026685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.acdtum.za.com"; classtype:attempted-recon; sid:200026686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.lqtahv.za.com"; classtype:attempted-recon; sid:200026687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaaeovvseon.visemeniureainsi.cjimsd.za.com"; classtype:attempted-recon; sid:200026688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.emiduh.za.com"; classtype:attempted-recon; sid:200026689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.oeayuk.za.com"; classtype:attempted-recon; sid:200026690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.pgqcnr.za.com"; classtype:attempted-recon; sid:200026691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.piahby.za.com"; classtype:attempted-recon; sid:200026692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.qsfxkv.za.com"; classtype:attempted-recon; sid:200026693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.qthyus.za.com"; classtype:attempted-recon; sid:200026694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.acysue.za.com"; classtype:attempted-recon; sid:200026695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.aeaaij.za.com"; classtype:attempted-recon; sid:200026696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.aetzyx.za.com"; classtype:attempted-recon; sid:200026697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.agxyxw.za.com"; classtype:attempted-recon; sid:200026698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.aiczsa.za.com"; classtype:attempted-recon; sid:200026699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.airnja.za.com"; classtype:attempted-recon; sid:200026700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200026701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.alcdkp.za.com"; classtype:attempted-recon; sid:200026702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.atnpja.za.com"; classtype:attempted-recon; sid:200026703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.attlqw.za.com"; classtype:attempted-recon; sid:200026704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.axhyue.za.com"; classtype:attempted-recon; sid:200026705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ayvpej.za.com"; classtype:attempted-recon; sid:200026706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bangme.za.com"; classtype:attempted-recon; sid:200026707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200026708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.befurr.za.com"; classtype:attempted-recon; sid:200026709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bfuapo.za.com"; classtype:attempted-recon; sid:200026710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200026711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bkcywi.za.com"; classtype:attempted-recon; sid:200026712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bvtbny.za.com"; classtype:attempted-recon; sid:200026713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200026714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.byguuc.za.com"; classtype:attempted-recon; sid:200026715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bznaak.za.com"; classtype:attempted-recon; sid:200026716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.caipnu.za.com"; classtype:attempted-recon; sid:200026717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cbxspx.za.com"; classtype:attempted-recon; sid:200026718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ccjole.za.com"; classtype:attempted-recon; sid:200026719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cgrfee.za.com"; classtype:attempted-recon; sid:200026720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cluemm.za.com"; classtype:attempted-recon; sid:200026721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200026722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cpjomt.za.com"; classtype:attempted-recon; sid:200026723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cqikbq.za.com"; classtype:attempted-recon; sid:200026724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cstvyz.za.com"; classtype:attempted-recon; sid:200026725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200026726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200026727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cxvesz.za.com"; classtype:attempted-recon; sid:200026728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.daxqpj.za.com"; classtype:attempted-recon; sid:200026729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dbxmic.za.com"; classtype:attempted-recon; sid:200026730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dbyapt.za.com"; classtype:attempted-recon; sid:200026731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.deocmk.za.com"; classtype:attempted-recon; sid:200026732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200026733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dhitmj.za.com"; classtype:attempted-recon; sid:200026734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dkcyph.za.com"; classtype:attempted-recon; sid:200026735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dknouc.za.com"; classtype:attempted-recon; sid:200026736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200026737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dlhefx.za.com"; classtype:attempted-recon; sid:200026738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200026739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200026740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dohoyv.za.com"; classtype:attempted-recon; sid:200026741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dpfplb.za.com"; classtype:attempted-recon; sid:200026742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.drvpxu.za.com"; classtype:attempted-recon; sid:200026743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200026744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200026745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ebaawf.za.com"; classtype:attempted-recon; sid:200026746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eegabi.za.com"; classtype:attempted-recon; sid:200026747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eiggzc.za.com"; classtype:attempted-recon; sid:200026748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.enksln.za.com"; classtype:attempted-recon; sid:200026749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.epdexz.za.com"; classtype:attempted-recon; sid:200026750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eqfynh.za.com"; classtype:attempted-recon; sid:200026751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.equmej.za.com"; classtype:attempted-recon; sid:200026752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.etibxf.za.com"; classtype:attempted-recon; sid:200026753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.etswbl.za.com"; classtype:attempted-recon; sid:200026754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eugwas.za.com"; classtype:attempted-recon; sid:200026755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200026756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eytnjs.za.com"; classtype:attempted-recon; sid:200026757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fabbxw.za.com"; classtype:attempted-recon; sid:200026758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fauyqv.za.com"; classtype:attempted-recon; sid:200026759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fhylla.za.com"; classtype:attempted-recon; sid:200026760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.figdiz.za.com"; classtype:attempted-recon; sid:200026761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200026762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.frroav.za.com"; classtype:attempted-recon; sid:200026763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fwmztl.za.com"; classtype:attempted-recon; sid:200026764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gclajk.za.com"; classtype:attempted-recon; sid:200026765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200026766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200026767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gplcly.za.com"; classtype:attempted-recon; sid:200026768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.grlmkv.za.com"; classtype:attempted-recon; sid:200026769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gubhky.za.com"; classtype:attempted-recon; sid:200026770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.guzomb.za.com"; classtype:attempted-recon; sid:200026771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200026772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200026773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hjoven.za.com"; classtype:attempted-recon; sid:200026774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hkieuc.za.com"; classtype:attempted-recon; sid:200026775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hklvra.za.com"; classtype:attempted-recon; sid:200026776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hldgqg.za.com"; classtype:attempted-recon; sid:200026777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200026778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hsobxm.za.com"; classtype:attempted-recon; sid:200026779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hsxsye.za.com"; classtype:attempted-recon; sid:200026780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hyhijo.za.com"; classtype:attempted-recon; sid:200026781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200026782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iaowza.za.com"; classtype:attempted-recon; sid:200026783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iazdui.za.com"; classtype:attempted-recon; sid:200026784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ibdznx.za.com"; classtype:attempted-recon; sid:200026785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.icqbyi.za.com"; classtype:attempted-recon; sid:200026786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ihytpv.za.com"; classtype:attempted-recon; sid:200026787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iieddd.za.com"; classtype:attempted-recon; sid:200026788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iivqdq.za.com"; classtype:attempted-recon; sid:200026789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iksnzw.za.com"; classtype:attempted-recon; sid:200026790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200026791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.inilsf.za.com"; classtype:attempted-recon; sid:200026792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ipavwe.za.com"; classtype:attempted-recon; sid:200026793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ipckgf.za.com"; classtype:attempted-recon; sid:200026794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iqhnep.za.com"; classtype:attempted-recon; sid:200026795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.isfnre.za.com"; classtype:attempted-recon; sid:200026796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.itoeyw.za.com"; classtype:attempted-recon; sid:200026797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200026798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jhbjti.za.com"; classtype:attempted-recon; sid:200026799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jimkqm.za.com"; classtype:attempted-recon; sid:200026800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jjtebf.za.com"; classtype:attempted-recon; sid:200026801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200026802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jokoqq.za.com"; classtype:attempted-recon; sid:200026803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200026804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jueaim.za.com"; classtype:attempted-recon; sid:200026805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200026806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kadyvz.za.com"; classtype:attempted-recon; sid:200026807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kamowm.za.com"; classtype:attempted-recon; sid:200026808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kbubhp.za.com"; classtype:attempted-recon; sid:200026809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kbuhif.za.com"; classtype:attempted-recon; sid:200026810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200026811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.keiczj.za.com"; classtype:attempted-recon; sid:200026812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kfwoih.za.com"; classtype:attempted-recon; sid:200026813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.khaylv.za.com"; classtype:attempted-recon; sid:200026814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kklrfz.za.com"; classtype:attempted-recon; sid:200026815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.klngsb.za.com"; classtype:attempted-recon; sid:200026816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200026817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kopnbv.za.com"; classtype:attempted-recon; sid:200026818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200026819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200026820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kuycqq.za.com"; classtype:attempted-recon; sid:200026821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200026822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200026823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200026824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.laguer.za.com"; classtype:attempted-recon; sid:200026825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lavnql.za.com"; classtype:attempted-recon; sid:200026826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200026827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.llfmbd.za.com"; classtype:attempted-recon; sid:200026828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lltgtv.za.com"; classtype:attempted-recon; sid:200026829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lluhni.za.com"; classtype:attempted-recon; sid:200026830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lnhweo.za.com"; classtype:attempted-recon; sid:200026831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lryoni.za.com"; classtype:attempted-recon; sid:200026832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ludrij.za.com"; classtype:attempted-recon; sid:200026833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200026834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lyydbz.za.com"; classtype:attempted-recon; sid:200026835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.macpqa.za.com"; classtype:attempted-recon; sid:200026836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.maivih.za.com"; classtype:attempted-recon; sid:200026837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mcabmo.za.com"; classtype:attempted-recon; sid:200026838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mfnwca.za.com"; classtype:attempted-recon; sid:200026839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200026840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mftcmf.za.com"; classtype:attempted-recon; sid:200026841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200026842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200026843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mnalmf.za.com"; classtype:attempted-recon; sid:200026844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mrezau.za.com"; classtype:attempted-recon; sid:200026845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mrkudt.za.com"; classtype:attempted-recon; sid:200026846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mtedjn.za.com"; classtype:attempted-recon; sid:200026847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200026848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mxphbq.za.com"; classtype:attempted-recon; sid:200026849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ngdpig.za.com"; classtype:attempted-recon; sid:200026850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nijizu.za.com"; classtype:attempted-recon; sid:200026851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.njjguj.za.com"; classtype:attempted-recon; sid:200026852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nkmpia.za.com"; classtype:attempted-recon; sid:200026853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200026854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.noegdn.za.com"; classtype:attempted-recon; sid:200026855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.npxbmj.za.com"; classtype:attempted-recon; sid:200026856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nscrlf.za.com"; classtype:attempted-recon; sid:200026857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nywlkd.za.com"; classtype:attempted-recon; sid:200026858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200026859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oaotso.za.com"; classtype:attempted-recon; sid:200026860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.odgjer.za.com"; classtype:attempted-recon; sid:200026861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.odmvmd.za.com"; classtype:attempted-recon; sid:200026862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oexeuz.za.com"; classtype:attempted-recon; sid:200026863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200026864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ohssdh.za.com"; classtype:attempted-recon; sid:200026865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oijbuk.za.com"; classtype:attempted-recon; sid:200026866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.okzwyp.za.com"; classtype:attempted-recon; sid:200026867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.olgmmh.za.com"; classtype:attempted-recon; sid:200026868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.orrpya.za.com"; classtype:attempted-recon; sid:200026869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.osoqzr.za.com"; classtype:attempted-recon; sid:200026870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oudyit.za.com"; classtype:attempted-recon; sid:200026871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.pdkuld.za.com"; classtype:attempted-recon; sid:200026872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.puzdqh.za.com"; classtype:attempted-recon; sid:200026873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.rijenl.za.com"; classtype:attempted-recon; sid:200026874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.xfwrde.za.com"; classtype:attempted-recon; sid:200026875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.xokvig.za.com"; classtype:attempted-recon; sid:200026876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.acysue.za.com"; classtype:attempted-recon; sid:200026877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200026878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200026879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200026880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200026881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.airnja.za.com"; classtype:attempted-recon; sid:200026882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200026883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200026884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.atnpja.za.com"; classtype:attempted-recon; sid:200026885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.attlqw.za.com"; classtype:attempted-recon; sid:200026886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.axhyue.za.com"; classtype:attempted-recon; sid:200026887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200026888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bangme.za.com"; classtype:attempted-recon; sid:200026889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200026890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.befurr.za.com"; classtype:attempted-recon; sid:200026891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200026892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200026893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200026894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200026895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200026896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.byguuc.za.com"; classtype:attempted-recon; sid:200026897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bznaak.za.com"; classtype:attempted-recon; sid:200026898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.caipnu.za.com"; classtype:attempted-recon; sid:200026899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200026900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ccjole.za.com"; classtype:attempted-recon; sid:200026901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200026902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cluemm.za.com"; classtype:attempted-recon; sid:200026903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200026904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200026905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200026906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200026907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200026908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200026909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200026910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200026911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200026912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200026913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.deocmk.za.com"; classtype:attempted-recon; sid:200026914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200026915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200026916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200026917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dknouc.za.com"; classtype:attempted-recon; sid:200026918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200026919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200026920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200026921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200026922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200026923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200026924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200026925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200026926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200026927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200026928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eegabi.za.com"; classtype:attempted-recon; sid:200026929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200026930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.enksln.za.com"; classtype:attempted-recon; sid:200026931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.epdexz.za.com"; classtype:attempted-recon; sid:200026932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200026933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.equmej.za.com"; classtype:attempted-recon; sid:200026934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.etibxf.za.com"; classtype:attempted-recon; sid:200026935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.etswbl.za.com"; classtype:attempted-recon; sid:200026936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eugwas.za.com"; classtype:attempted-recon; sid:200026937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200026938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200026939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200026940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200026941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fhylla.za.com"; classtype:attempted-recon; sid:200026942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.figdiz.za.com"; classtype:attempted-recon; sid:200026943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200026944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.frroav.za.com"; classtype:attempted-recon; sid:200026945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200026946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gclajk.za.com"; classtype:attempted-recon; sid:200026947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200026948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200026949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gplcly.za.com"; classtype:attempted-recon; sid:200026950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200026951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gubhky.za.com"; classtype:attempted-recon; sid:200026952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.guzomb.za.com"; classtype:attempted-recon; sid:200026953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200026954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200026955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hjoven.za.com"; classtype:attempted-recon; sid:200026956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200026957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hklvra.za.com"; classtype:attempted-recon; sid:200026958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200026959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200026960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200026961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200026962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200026963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200026964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iaowza.za.com"; classtype:attempted-recon; sid:200026965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iazdui.za.com"; classtype:attempted-recon; sid:200026966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200026967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200026968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200026969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iieddd.za.com"; classtype:attempted-recon; sid:200026970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200026971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200026972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200026973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.inilsf.za.com"; classtype:attempted-recon; sid:200026974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200026975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200026976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iqhnep.za.com"; classtype:attempted-recon; sid:200026977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.isfnre.za.com"; classtype:attempted-recon; sid:200026978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.itoeyw.za.com"; classtype:attempted-recon; sid:200026979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200026980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200026981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200026982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200026983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200026984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200026985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200026986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jueaim.za.com"; classtype:attempted-recon; sid:200026987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200026988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200026989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kamowm.za.com"; classtype:attempted-recon; sid:200026990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200026991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200026992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200026993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.keiczj.za.com"; classtype:attempted-recon; sid:200026994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200026995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.khaylv.za.com"; classtype:attempted-recon; sid:200026996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200026997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.klngsb.za.com"; classtype:attempted-recon; sid:200026998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200026999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200027000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200027001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200027002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200027003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200027004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200027005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200027006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.laguer.za.com"; classtype:attempted-recon; sid:200027007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lavnql.za.com"; classtype:attempted-recon; sid:200027008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200027009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200027010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200027011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lluhni.za.com"; classtype:attempted-recon; sid:200027012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200027013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lryoni.za.com"; classtype:attempted-recon; sid:200027014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ludrij.za.com"; classtype:attempted-recon; sid:200027015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200027016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200027017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.macpqa.za.com"; classtype:attempted-recon; sid:200027018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.maivih.za.com"; classtype:attempted-recon; sid:200027019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200027020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200027021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200027022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200027023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200027024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200027025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200027026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mrezau.za.com"; classtype:attempted-recon; sid:200027027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200027028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200027029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200027030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200027031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200027032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nijizu.za.com"; classtype:attempted-recon; sid:200027033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.njjguj.za.com"; classtype:attempted-recon; sid:200027034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200027035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200027036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.noegdn.za.com"; classtype:attempted-recon; sid:200027037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200027038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200027039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200027040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200027041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oaotso.za.com"; classtype:attempted-recon; sid:200027042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.odgjer.za.com"; classtype:attempted-recon; sid:200027043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200027044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200027045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200027046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200027047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200027048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200027049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200027050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.orrpya.za.com"; classtype:attempted-recon; sid:200027051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200027052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oudyit.za.com"; classtype:attempted-recon; sid:200027053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200027054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.qwnduy.za.com"; classtype:attempted-recon; sid:200027055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rhovtm.za.com"; classtype:attempted-recon; sid:200027056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rijenl.za.com"; classtype:attempted-recon; sid:200027057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tcrzzp.za.com"; classtype:attempted-recon; sid:200027058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.wzqpee.za.com"; classtype:attempted-recon; sid:200027059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.acysue.za.com"; classtype:attempted-recon; sid:200027060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200027061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200027062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200027063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200027064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.airnja.za.com"; classtype:attempted-recon; sid:200027065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200027066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200027067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200027068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200027069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200027070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200027071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bangme.za.com"; classtype:attempted-recon; sid:200027072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200027073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.befurr.za.com"; classtype:attempted-recon; sid:200027074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200027075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200027076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200027077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200027078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200027079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200027080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200027081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200027082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200027083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200027084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200027085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200027086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200027087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200027088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200027089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200027090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200027091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200027092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200027093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200027094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200027095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200027096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200027097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200027098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200027099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200027100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200027101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200027102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200027103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200027104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200027105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200027106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200027107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200027108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200027109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200027110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200027111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200027112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200027113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.enksln.za.com"; classtype:attempted-recon; sid:200027114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200027115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200027116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.equmej.za.com"; classtype:attempted-recon; sid:200027117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200027118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200027119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200027120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200027121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200027122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200027123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200027124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200027125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200027126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200027127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.frroav.za.com"; classtype:attempted-recon; sid:200027128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200027129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200027130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200027131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200027132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200027133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200027134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200027135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200027136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200027137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200027138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200027139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200027140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200027141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200027142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200027143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200027144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200027145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200027146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200027147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200027148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200027149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200027150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200027151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200027152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200027153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200027154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200027155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200027156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200027157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200027158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200027159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200027160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200027161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200027162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200027163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200027164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200027165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200027166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200027167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200027168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200027169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200027170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200027171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200027172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200027173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200027174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200027175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200027176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200027177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200027178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200027179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200027180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200027181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200027182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200027183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200027184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200027185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200027186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200027187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200027188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200027189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.laguer.za.com"; classtype:attempted-recon; sid:200027190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200027191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200027192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200027193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200027194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200027195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200027196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200027197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200027198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200027199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200027200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200027201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.maivih.za.com"; classtype:attempted-recon; sid:200027202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200027203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200027204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200027205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200027206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200027207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200027208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200027209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200027210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200027211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200027212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200027213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200027214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200027215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200027216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200027217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200027218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200027219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200027220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200027221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200027222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200027223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200027224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200027225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200027226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200027227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200027228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200027229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200027230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200027231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200027232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200027233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200027234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200027235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200027236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rclyhu.za.com"; classtype:attempted-recon; sid:200027237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200027238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.acysue.za.com"; classtype:attempted-recon; sid:200027239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200027240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200027241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200027242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200027243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.airnja.za.com"; classtype:attempted-recon; sid:200027244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200027245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200027246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200027247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200027248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200027249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200027250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bangme.za.com"; classtype:attempted-recon; sid:200027251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200027252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.befurr.za.com"; classtype:attempted-recon; sid:200027253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200027254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200027255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200027256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200027257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200027258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200027259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200027260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200027261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200027262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200027263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200027264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200027265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200027266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200027267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200027268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200027269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200027270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200027271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200027272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200027273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200027274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200027275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200027276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200027277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200027278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200027279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200027280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200027281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200027282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200027283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200027284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200027285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200027286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200027287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200027288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200027289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200027290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200027291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200027292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.enksln.za.com"; classtype:attempted-recon; sid:200027293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200027294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200027295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.equmej.za.com"; classtype:attempted-recon; sid:200027296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200027297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200027298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200027299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200027300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200027301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200027302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200027303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200027304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200027305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200027306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.frroav.za.com"; classtype:attempted-recon; sid:200027307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200027308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200027309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200027310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200027311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200027312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200027313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200027314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200027315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200027316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200027317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200027318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200027319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200027320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200027321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200027322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200027323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200027324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200027325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200027326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200027327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200027328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200027329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200027330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200027331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200027332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200027333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200027334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200027335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200027336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200027337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200027338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200027339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200027340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200027341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200027342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200027343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200027344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200027345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200027346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200027347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200027348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200027349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200027350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200027351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200027352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200027353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200027354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200027355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200027356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200027357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200027358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200027359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200027360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200027361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200027362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200027363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200027364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200027365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200027366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200027367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200027368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.laguer.za.com"; classtype:attempted-recon; sid:200027369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200027370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200027371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200027372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200027373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200027374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200027375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200027376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200027377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200027378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200027379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200027380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.maivih.za.com"; classtype:attempted-recon; sid:200027381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200027382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200027383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200027384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200027385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200027386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200027387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200027388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200027389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200027390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200027391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200027392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200027393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200027394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200027395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200027396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200027397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200027398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200027399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200027400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200027401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200027402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200027403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200027404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200027405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200027406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200027407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200027408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200027409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200027410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200027411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200027412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200027413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200027414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200027415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200027416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rhfwsh.za.com"; classtype:attempted-recon; sid:200027417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200027418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rzkyqg.za.com"; classtype:attempted-recon; sid:200027419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.sztsok.za.com"; classtype:attempted-recon; sid:200027420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tmybve.za.com"; classtype:attempted-recon; sid:200027421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.urcrba.za.com"; classtype:attempted-recon; sid:200027422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.virtxq.za.com"; classtype:attempted-recon; sid:200027423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.xkgblw.za.com"; classtype:attempted-recon; sid:200027424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ymewff.za.com"; classtype:attempted-recon; sid:200027425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaeovvseon.visazcmiureeainsi.lvpxrb.za.com"; classtype:attempted-recon; sid:200027426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.acysue.za.com"; classtype:attempted-recon; sid:200027427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200027428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200027429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200027430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200027431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.airnja.za.com"; classtype:attempted-recon; sid:200027432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200027433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200027434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.atnpja.za.com"; classtype:attempted-recon; sid:200027435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.attlqw.za.com"; classtype:attempted-recon; sid:200027436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.axhyue.za.com"; classtype:attempted-recon; sid:200027437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200027438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bangme.za.com"; classtype:attempted-recon; sid:200027439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200027440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.befurr.za.com"; classtype:attempted-recon; sid:200027441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200027442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200027443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200027444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200027445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200027446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.byguuc.za.com"; classtype:attempted-recon; sid:200027447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bznaak.za.com"; classtype:attempted-recon; sid:200027448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.caipnu.za.com"; classtype:attempted-recon; sid:200027449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200027450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ccjole.za.com"; classtype:attempted-recon; sid:200027451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200027452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cluemm.za.com"; classtype:attempted-recon; sid:200027453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200027454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200027455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200027456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200027457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200027458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200027459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200027460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200027461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200027462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200027463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.deocmk.za.com"; classtype:attempted-recon; sid:200027464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200027465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200027466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200027467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dknouc.za.com"; classtype:attempted-recon; sid:200027468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200027469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200027470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200027471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200027472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200027473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200027474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200027475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200027476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200027477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200027478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eegabi.za.com"; classtype:attempted-recon; sid:200027479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200027480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.enksln.za.com"; classtype:attempted-recon; sid:200027481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.epdexz.za.com"; classtype:attempted-recon; sid:200027482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200027483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.equmej.za.com"; classtype:attempted-recon; sid:200027484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.etibxf.za.com"; classtype:attempted-recon; sid:200027485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.etswbl.za.com"; classtype:attempted-recon; sid:200027486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eugwas.za.com"; classtype:attempted-recon; sid:200027487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200027488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200027489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200027490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200027491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fhylla.za.com"; classtype:attempted-recon; sid:200027492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.figdiz.za.com"; classtype:attempted-recon; sid:200027493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200027494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.frroav.za.com"; classtype:attempted-recon; sid:200027495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200027496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gclajk.za.com"; classtype:attempted-recon; sid:200027497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200027498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200027499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gplcly.za.com"; classtype:attempted-recon; sid:200027500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200027501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gubhky.za.com"; classtype:attempted-recon; sid:200027502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.guzomb.za.com"; classtype:attempted-recon; sid:200027503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200027504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200027505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hjoven.za.com"; classtype:attempted-recon; sid:200027506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200027507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hklvra.za.com"; classtype:attempted-recon; sid:200027508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200027509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200027510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200027511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200027512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200027513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200027514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iaowza.za.com"; classtype:attempted-recon; sid:200027515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iazdui.za.com"; classtype:attempted-recon; sid:200027516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200027517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200027518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200027519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iieddd.za.com"; classtype:attempted-recon; sid:200027520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200027521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200027522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200027523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.inilsf.za.com"; classtype:attempted-recon; sid:200027524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200027525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200027526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200027527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200027528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200027529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200027530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200027531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200027532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200027533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jueaim.za.com"; classtype:attempted-recon; sid:200027534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200027535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200027536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kamowm.za.com"; classtype:attempted-recon; sid:200027537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200027538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200027539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200027540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.keiczj.za.com"; classtype:attempted-recon; sid:200027541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200027542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.khaylv.za.com"; classtype:attempted-recon; sid:200027543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200027544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.klngsb.za.com"; classtype:attempted-recon; sid:200027545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200027546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200027547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200027548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200027549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200027550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200027551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200027552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200027553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.laguer.za.com"; classtype:attempted-recon; sid:200027554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lavnql.za.com"; classtype:attempted-recon; sid:200027555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200027556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200027557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200027558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lluhni.za.com"; classtype:attempted-recon; sid:200027559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200027560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lryoni.za.com"; classtype:attempted-recon; sid:200027561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ludrij.za.com"; classtype:attempted-recon; sid:200027562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200027563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200027564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.macpqa.za.com"; classtype:attempted-recon; sid:200027565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.maivih.za.com"; classtype:attempted-recon; sid:200027566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200027567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200027568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200027569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200027570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200027571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200027572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200027573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mrezau.za.com"; classtype:attempted-recon; sid:200027574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200027575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200027576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200027577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200027578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200027579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nijizu.za.com"; classtype:attempted-recon; sid:200027580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.njjguj.za.com"; classtype:attempted-recon; sid:200027581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200027582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200027583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.noegdn.za.com"; classtype:attempted-recon; sid:200027584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200027585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200027586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200027587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200027588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oaotso.za.com"; classtype:attempted-recon; sid:200027589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.odgjer.za.com"; classtype:attempted-recon; sid:200027590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200027591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200027592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200027593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200027594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200027595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200027596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200027597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.orrpya.za.com"; classtype:attempted-recon; sid:200027598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200027599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oudyit.za.com"; classtype:attempted-recon; sid:200027600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200027601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pemrjn.za.com"; classtype:attempted-recon; sid:200027602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200027603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.airnja.za.com"; classtype:attempted-recon; sid:200027604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200027605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200027606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200027607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200027608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200027609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200027610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bangme.za.com"; classtype:attempted-recon; sid:200027611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200027612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.befurr.za.com"; classtype:attempted-recon; sid:200027613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200027614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200027615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200027616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200027617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200027618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200027619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200027620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200027621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200027622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200027623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200027624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200027625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200027626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200027627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200027628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200027629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200027630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200027631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200027632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200027633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200027634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200027635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200027636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200027637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200027638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200027639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200027640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200027641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200027642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200027643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200027644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200027645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200027646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200027647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200027648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200027649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.enksln.za.com"; classtype:attempted-recon; sid:200027650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200027651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200027652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.equmej.za.com"; classtype:attempted-recon; sid:200027653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200027654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200027655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200027656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200027657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200027658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200027659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200027660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200027661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200027662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200027663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.frroav.za.com"; classtype:attempted-recon; sid:200027664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200027665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200027666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200027667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200027668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200027669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200027670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200027671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200027672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200027673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200027674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200027675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200027676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200027677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200027678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200027679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200027680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200027681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200027682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200027683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200027684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200027685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200027686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200027687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200027688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200027689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200027690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200027691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200027692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200027693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200027694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200027695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200027696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200027697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200027698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200027699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200027700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200027701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200027702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200027703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200027704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200027705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200027706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200027707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200027708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200027709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200027710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200027711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200027712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200027713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200027714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200027715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200027716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200027717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200027718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200027719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200027720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200027721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200027722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200027723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200027724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200027725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.laguer.za.com"; classtype:attempted-recon; sid:200027726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200027727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200027728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200027729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200027730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200027731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200027732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200027733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200027734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200027735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200027736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200027737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.maivih.za.com"; classtype:attempted-recon; sid:200027738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200027739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200027740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200027741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200027742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200027743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200027744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200027745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200027746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200027747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200027748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200027749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200027750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200027751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200027752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200027753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200027754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200027755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200027756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200027757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200027758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200027759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200027760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200027761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200027762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200027763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200027764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200027765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200027766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200027767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200027768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200027769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200027770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200027771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.qwnduy.za.com"; classtype:attempted-recon; sid:200027772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200027773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rsuwkc.za.com"; classtype:attempted-recon; sid:200027774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.uumird.za.com"; classtype:attempted-recon; sid:200027775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.fonuba.za.com"; classtype:attempted-recon; sid:200027776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.gltlxm.za.com"; classtype:attempted-recon; sid:200027777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.psicaz.za.com"; classtype:attempted-recon; sid:200027778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.usrwro.za.com"; classtype:attempted-recon; sid:200027779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.vefkbx.za.com"; classtype:attempted-recon; sid:200027780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.yozdqk.za.com"; classtype:attempted-recon; sid:200027781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.bvjqmk.za.com"; classtype:attempted-recon; sid:200027782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.vowycz.za.com"; classtype:attempted-recon; sid:200027783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.xqjofw.za.com"; classtype:attempted-recon; sid:200027784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.ywsztl.za.com"; classtype:attempted-recon; sid:200027785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.acysue.za.com"; classtype:attempted-recon; sid:200027786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200027787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200027788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200027789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200027790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.airnja.za.com"; classtype:attempted-recon; sid:200027791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200027792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200027793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.atnpja.za.com"; classtype:attempted-recon; sid:200027794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.attlqw.za.com"; classtype:attempted-recon; sid:200027795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.axhyue.za.com"; classtype:attempted-recon; sid:200027796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200027797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bangme.za.com"; classtype:attempted-recon; sid:200027798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200027799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.befurr.za.com"; classtype:attempted-recon; sid:200027800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200027801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200027802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200027803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200027804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200027805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.byguuc.za.com"; classtype:attempted-recon; sid:200027806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bznaak.za.com"; classtype:attempted-recon; sid:200027807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.caipnu.za.com"; classtype:attempted-recon; sid:200027808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200027809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ccjole.za.com"; classtype:attempted-recon; sid:200027810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200027811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cluemm.za.com"; classtype:attempted-recon; sid:200027812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200027813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200027814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200027815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200027816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200027817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200027818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200027819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200027820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200027821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200027822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.deocmk.za.com"; classtype:attempted-recon; sid:200027823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200027824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200027825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200027826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dknouc.za.com"; classtype:attempted-recon; sid:200027827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200027828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200027829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200027830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200027831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200027832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200027833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200027834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200027835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200027836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200027837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eegabi.za.com"; classtype:attempted-recon; sid:200027838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200027839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.enksln.za.com"; classtype:attempted-recon; sid:200027840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.epdexz.za.com"; classtype:attempted-recon; sid:200027841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200027842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.equmej.za.com"; classtype:attempted-recon; sid:200027843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.etibxf.za.com"; classtype:attempted-recon; sid:200027844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.etswbl.za.com"; classtype:attempted-recon; sid:200027845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eugwas.za.com"; classtype:attempted-recon; sid:200027846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200027847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200027848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200027849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200027850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fhylla.za.com"; classtype:attempted-recon; sid:200027851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.figdiz.za.com"; classtype:attempted-recon; sid:200027852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200027853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.frroav.za.com"; classtype:attempted-recon; sid:200027854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200027855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gclajk.za.com"; classtype:attempted-recon; sid:200027856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200027857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200027858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gplcly.za.com"; classtype:attempted-recon; sid:200027859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200027860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gubhky.za.com"; classtype:attempted-recon; sid:200027861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.guzomb.za.com"; classtype:attempted-recon; sid:200027862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200027863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200027864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hjoven.za.com"; classtype:attempted-recon; sid:200027865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200027866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hklvra.za.com"; classtype:attempted-recon; sid:200027867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200027868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200027869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200027870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200027871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200027872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200027873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iaowza.za.com"; classtype:attempted-recon; sid:200027874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iazdui.za.com"; classtype:attempted-recon; sid:200027875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200027876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200027877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200027878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iieddd.za.com"; classtype:attempted-recon; sid:200027879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200027880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200027881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200027882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.inilsf.za.com"; classtype:attempted-recon; sid:200027883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200027884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200027885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iqhnep.za.com"; classtype:attempted-recon; sid:200027886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.isfnre.za.com"; classtype:attempted-recon; sid:200027887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.itoeyw.za.com"; classtype:attempted-recon; sid:200027888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200027889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200027890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200027891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200027892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200027893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200027894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200027895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jueaim.za.com"; classtype:attempted-recon; sid:200027896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200027897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200027898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kamowm.za.com"; classtype:attempted-recon; sid:200027899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200027900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200027901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200027902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.keiczj.za.com"; classtype:attempted-recon; sid:200027903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200027904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.khaylv.za.com"; classtype:attempted-recon; sid:200027905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200027906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.klngsb.za.com"; classtype:attempted-recon; sid:200027907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200027908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200027909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200027910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200027911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200027912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200027913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200027914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200027915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.laguer.za.com"; classtype:attempted-recon; sid:200027916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lavnql.za.com"; classtype:attempted-recon; sid:200027917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200027918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200027919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200027920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lluhni.za.com"; classtype:attempted-recon; sid:200027921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200027922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lryoni.za.com"; classtype:attempted-recon; sid:200027923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ludrij.za.com"; classtype:attempted-recon; sid:200027924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200027925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200027926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.macpqa.za.com"; classtype:attempted-recon; sid:200027927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.maivih.za.com"; classtype:attempted-recon; sid:200027928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200027929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200027930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200027931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200027932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200027933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200027934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200027935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mrezau.za.com"; classtype:attempted-recon; sid:200027936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200027937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200027938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200027939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200027940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200027941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nijizu.za.com"; classtype:attempted-recon; sid:200027942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.njjguj.za.com"; classtype:attempted-recon; sid:200027943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200027944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200027945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.noegdn.za.com"; classtype:attempted-recon; sid:200027946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200027947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200027948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200027949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200027950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oaotso.za.com"; classtype:attempted-recon; sid:200027951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.odgjer.za.com"; classtype:attempted-recon; sid:200027952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200027953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200027954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200027955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200027956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200027957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200027958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200027959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.orrpya.za.com"; classtype:attempted-recon; sid:200027960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200027961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oudyit.za.com"; classtype:attempted-recon; sid:200027962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200027963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.qfdotp.za.com"; classtype:attempted-recon; sid:200027964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rijenl.za.com"; classtype:attempted-recon; sid:200027965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wzqpee.za.com"; classtype:attempted-recon; sid:200027966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.xkgblw.za.com"; classtype:attempted-recon; sid:200027967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.acysue.za.com"; classtype:attempted-recon; sid:200027968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200027969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200027970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200027971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200027972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.airnja.za.com"; classtype:attempted-recon; sid:200027973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200027974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200027975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200027976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200027977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200027978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200027979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bangme.za.com"; classtype:attempted-recon; sid:200027980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200027981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.befurr.za.com"; classtype:attempted-recon; sid:200027982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200027983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200027984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200027985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200027986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200027987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200027988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200027989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200027990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200027991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200027992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200027993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200027994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200027995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200027996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200027997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200027998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200027999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200028000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200028001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200028002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200028003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200028004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200028005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200028006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200028007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200028008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200028009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200028010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200028011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200028012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200028013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200028014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200028015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200028016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200028017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200028018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200028019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200028020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200028021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.enksln.za.com"; classtype:attempted-recon; sid:200028022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200028023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200028024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.equmej.za.com"; classtype:attempted-recon; sid:200028025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200028026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200028027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200028028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200028029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200028030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200028031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200028032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200028033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200028034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200028035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.frroav.za.com"; classtype:attempted-recon; sid:200028036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200028037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200028038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200028039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200028040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200028041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200028042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200028043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200028044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200028045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200028046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200028047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200028048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200028049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200028050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200028051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200028052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200028053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200028054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200028055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200028056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200028057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200028058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200028059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200028060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200028061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200028062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200028063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200028064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200028065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200028066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200028067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200028068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200028069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200028070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200028071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200028072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200028073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200028074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200028075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200028076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200028077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200028078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200028079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200028080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200028081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200028082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200028083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200028084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200028085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200028086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200028087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200028088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200028089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200028090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200028091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200028092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200028093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200028094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200028095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200028096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200028097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.laguer.za.com"; classtype:attempted-recon; sid:200028098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200028099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200028100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200028101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200028102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200028103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200028104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200028105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200028106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200028107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200028108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200028109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.maivih.za.com"; classtype:attempted-recon; sid:200028110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200028111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200028112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200028113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200028114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200028115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200028116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200028117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200028118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200028119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200028120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200028121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200028122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200028123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200028124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200028125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200028126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200028127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200028128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200028129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200028130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200028131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200028132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200028133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200028134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200028135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200028136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200028137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200028138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200028139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200028140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200028141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200028142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200028143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200028144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200028145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qphuso.za.com"; classtype:attempted-recon; sid:200028146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200028147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rmzoht.za.com"; classtype:attempted-recon; sid:200028148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.wposkr.za.com"; classtype:attempted-recon; sid:200028149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.xnbziz.za.com"; classtype:attempted-recon; sid:200028150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnureovvseon.visazceenevsioriursi.cxwohm.za.com"; classtype:attempted-recon; sid:200028151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnureovvseon.visazceenevsioriursi.gggxpw.za.com"; classtype:attempted-recon; sid:200028152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnureovvseon.visazceenevsioriursi.hyxhne.za.com"; classtype:attempted-recon; sid:200028153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnureovvseon.visazceenevsioriursi.piahby.za.com"; classtype:attempted-recon; sid:200028154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaicnureovvseon.visazceenevsioriursi.usoqts.za.com"; classtype:attempted-recon; sid:200028155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.acysue.za.com"; classtype:attempted-recon; sid:200028156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200028157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200028158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200028159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200028160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.airnja.za.com"; classtype:attempted-recon; sid:200028161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200028162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200028163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200028164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200028165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200028166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200028167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bangme.za.com"; classtype:attempted-recon; sid:200028168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200028169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.befurr.za.com"; classtype:attempted-recon; sid:200028170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200028171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200028172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200028173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200028174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200028175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200028176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200028177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200028178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200028179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200028180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200028181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200028182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200028183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200028184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200028185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200028186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200028187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200028188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200028189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200028190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200028191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200028192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200028193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200028194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200028195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200028196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200028197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200028198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200028199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200028200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200028201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200028202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200028203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200028204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200028205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200028206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200028207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200028208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200028209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.enksln.za.com"; classtype:attempted-recon; sid:200028210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200028211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200028212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.equmej.za.com"; classtype:attempted-recon; sid:200028213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200028214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200028215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200028216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200028217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200028218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200028219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200028220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200028221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200028222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200028223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.frroav.za.com"; classtype:attempted-recon; sid:200028224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200028225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200028226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200028227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200028228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200028229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200028230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200028231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200028232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200028233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200028234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200028235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200028236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200028237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200028238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200028239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200028240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200028241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200028242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200028243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200028244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200028245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200028246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200028247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200028248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200028249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200028250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200028251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200028252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200028253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200028254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200028255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200028256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200028257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200028258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200028259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200028260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200028261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200028262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200028263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200028264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200028265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200028266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200028267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200028268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200028269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200028270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200028271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200028272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200028273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200028274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200028275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200028276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200028277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200028278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200028279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200028280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200028281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200028282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200028283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200028284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200028285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.laguer.za.com"; classtype:attempted-recon; sid:200028286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200028287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200028288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200028289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200028290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200028291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200028292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200028293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200028294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200028295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200028296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200028297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.maivih.za.com"; classtype:attempted-recon; sid:200028298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200028299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200028300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200028301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200028302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200028303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200028304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200028305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200028306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200028307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200028308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200028309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200028310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200028311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200028312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200028313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200028314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200028315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200028316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200028317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200028318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200028319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200028320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200028321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200028322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200028323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200028324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200028325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200028326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200028327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200028328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200028329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200028330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200028331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200028332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200028333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rbvyrh.za.com"; classtype:attempted-recon; sid:200028334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rhfwsh.za.com"; classtype:attempted-recon; sid:200028335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200028336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.zckoua.za.com"; classtype:attempted-recon; sid:200028337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.acysue.za.com"; classtype:attempted-recon; sid:200028338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200028339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200028340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200028341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200028342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.airnja.za.com"; classtype:attempted-recon; sid:200028343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200028344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200028345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.atnpja.za.com"; classtype:attempted-recon; sid:200028346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.attlqw.za.com"; classtype:attempted-recon; sid:200028347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.axhyue.za.com"; classtype:attempted-recon; sid:200028348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200028349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bangme.za.com"; classtype:attempted-recon; sid:200028350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200028351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.befurr.za.com"; classtype:attempted-recon; sid:200028352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200028353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200028354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200028355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200028356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200028357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.byguuc.za.com"; classtype:attempted-recon; sid:200028358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bznaak.za.com"; classtype:attempted-recon; sid:200028359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.caipnu.za.com"; classtype:attempted-recon; sid:200028360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200028361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ccjole.za.com"; classtype:attempted-recon; sid:200028362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200028363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cluemm.za.com"; classtype:attempted-recon; sid:200028364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200028365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200028366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200028367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200028368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200028369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200028370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200028371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200028372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200028373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200028374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.deocmk.za.com"; classtype:attempted-recon; sid:200028375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200028376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200028377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200028378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dknouc.za.com"; classtype:attempted-recon; sid:200028379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200028380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200028381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200028382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200028383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200028384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200028385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200028386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200028387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200028388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200028389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eegabi.za.com"; classtype:attempted-recon; sid:200028390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200028391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.enksln.za.com"; classtype:attempted-recon; sid:200028392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.epdexz.za.com"; classtype:attempted-recon; sid:200028393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200028394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.equmej.za.com"; classtype:attempted-recon; sid:200028395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.etibxf.za.com"; classtype:attempted-recon; sid:200028396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.etswbl.za.com"; classtype:attempted-recon; sid:200028397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eugwas.za.com"; classtype:attempted-recon; sid:200028398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200028399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200028400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200028401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200028402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fhylla.za.com"; classtype:attempted-recon; sid:200028403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.figdiz.za.com"; classtype:attempted-recon; sid:200028404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200028405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.frroav.za.com"; classtype:attempted-recon; sid:200028406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200028407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gclajk.za.com"; classtype:attempted-recon; sid:200028408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200028409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200028410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gplcly.za.com"; classtype:attempted-recon; sid:200028411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200028412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gubhky.za.com"; classtype:attempted-recon; sid:200028413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.guzomb.za.com"; classtype:attempted-recon; sid:200028414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200028415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200028416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hjoven.za.com"; classtype:attempted-recon; sid:200028417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200028418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hklvra.za.com"; classtype:attempted-recon; sid:200028419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200028420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200028421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200028422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200028423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200028424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200028425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iaowza.za.com"; classtype:attempted-recon; sid:200028426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iazdui.za.com"; classtype:attempted-recon; sid:200028427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200028428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200028429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200028430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iieddd.za.com"; classtype:attempted-recon; sid:200028431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200028432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200028433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200028434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.inilsf.za.com"; classtype:attempted-recon; sid:200028435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200028436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200028437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iqhnep.za.com"; classtype:attempted-recon; sid:200028438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.isfnre.za.com"; classtype:attempted-recon; sid:200028439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.itoeyw.za.com"; classtype:attempted-recon; sid:200028440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200028441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200028442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200028443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200028444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200028445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200028446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200028447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jueaim.za.com"; classtype:attempted-recon; sid:200028448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200028449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200028450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kamowm.za.com"; classtype:attempted-recon; sid:200028451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200028452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200028453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200028454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.keiczj.za.com"; classtype:attempted-recon; sid:200028455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200028456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.khaylv.za.com"; classtype:attempted-recon; sid:200028457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200028458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.klngsb.za.com"; classtype:attempted-recon; sid:200028459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200028460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200028461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200028462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200028463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200028464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200028465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200028466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200028467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.laguer.za.com"; classtype:attempted-recon; sid:200028468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lavnql.za.com"; classtype:attempted-recon; sid:200028469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200028470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200028471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200028472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lluhni.za.com"; classtype:attempted-recon; sid:200028473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200028474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lryoni.za.com"; classtype:attempted-recon; sid:200028475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ludrij.za.com"; classtype:attempted-recon; sid:200028476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200028477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200028478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.macpqa.za.com"; classtype:attempted-recon; sid:200028479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.maivih.za.com"; classtype:attempted-recon; sid:200028480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200028481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200028482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200028483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200028484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200028485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200028486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200028487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mrezau.za.com"; classtype:attempted-recon; sid:200028488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200028489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200028490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200028491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200028492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200028493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nijizu.za.com"; classtype:attempted-recon; sid:200028494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.njjguj.za.com"; classtype:attempted-recon; sid:200028495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200028496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200028497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.noegdn.za.com"; classtype:attempted-recon; sid:200028498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200028499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200028500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200028501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200028502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oaotso.za.com"; classtype:attempted-recon; sid:200028503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.odgjer.za.com"; classtype:attempted-recon; sid:200028504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200028505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200028506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200028507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200028508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200028509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200028510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200028511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.orrpya.za.com"; classtype:attempted-recon; sid:200028512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200028513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oudyit.za.com"; classtype:attempted-recon; sid:200028514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200028515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rijenl.za.com"; classtype:attempted-recon; sid:200028516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.tfpdde.za.com"; classtype:attempted-recon; sid:200028517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.xokvig.za.com"; classtype:attempted-recon; sid:200028518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zfbgqn.za.com"; classtype:attempted-recon; sid:200028519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaaeovseon.visazienureeinsi.tbtenr.za.com"; classtype:attempted-recon; sid:200028520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.dbmdfr.za.com"; classtype:attempted-recon; sid:200028521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.gltlxm.za.com"; classtype:attempted-recon; sid:200028522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.hjrhmw.za.com"; classtype:attempted-recon; sid:200028523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.iowdcc.za.com"; classtype:attempted-recon; sid:200028524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.qthyus.za.com"; classtype:attempted-recon; sid:200028525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.spsvre.za.com"; classtype:attempted-recon; sid:200028526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.tzzwdq.za.com"; classtype:attempted-recon; sid:200028527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.kresvt.za.com"; classtype:attempted-recon; sid:200028528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.rtwmgc.za.com"; classtype:attempted-recon; sid:200028529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.acysue.za.com"; classtype:attempted-recon; sid:200028530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.aeaaij.za.com"; classtype:attempted-recon; sid:200028531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.aetzyx.za.com"; classtype:attempted-recon; sid:200028532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.agxyxw.za.com"; classtype:attempted-recon; sid:200028533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.aiczsa.za.com"; classtype:attempted-recon; sid:200028534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.airnja.za.com"; classtype:attempted-recon; sid:200028535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200028536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.alcdkp.za.com"; classtype:attempted-recon; sid:200028537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.atnpja.za.com"; classtype:attempted-recon; sid:200028538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.attlqw.za.com"; classtype:attempted-recon; sid:200028539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.axhyue.za.com"; classtype:attempted-recon; sid:200028540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ayvpej.za.com"; classtype:attempted-recon; sid:200028541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bangme.za.com"; classtype:attempted-recon; sid:200028542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200028543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.befurr.za.com"; classtype:attempted-recon; sid:200028544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bfuapo.za.com"; classtype:attempted-recon; sid:200028545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200028546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bkcywi.za.com"; classtype:attempted-recon; sid:200028547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bvtbny.za.com"; classtype:attempted-recon; sid:200028548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200028549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.byguuc.za.com"; classtype:attempted-recon; sid:200028550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bznaak.za.com"; classtype:attempted-recon; sid:200028551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.caipnu.za.com"; classtype:attempted-recon; sid:200028552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cbxspx.za.com"; classtype:attempted-recon; sid:200028553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ccjole.za.com"; classtype:attempted-recon; sid:200028554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cgrfee.za.com"; classtype:attempted-recon; sid:200028555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cluemm.za.com"; classtype:attempted-recon; sid:200028556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200028557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cpjomt.za.com"; classtype:attempted-recon; sid:200028558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cqikbq.za.com"; classtype:attempted-recon; sid:200028559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cstvyz.za.com"; classtype:attempted-recon; sid:200028560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200028561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200028562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cxvesz.za.com"; classtype:attempted-recon; sid:200028563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.daxqpj.za.com"; classtype:attempted-recon; sid:200028564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dbxmic.za.com"; classtype:attempted-recon; sid:200028565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dbyapt.za.com"; classtype:attempted-recon; sid:200028566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.deocmk.za.com"; classtype:attempted-recon; sid:200028567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200028568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dhitmj.za.com"; classtype:attempted-recon; sid:200028569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dkcyph.za.com"; classtype:attempted-recon; sid:200028570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dknouc.za.com"; classtype:attempted-recon; sid:200028571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200028572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dlhefx.za.com"; classtype:attempted-recon; sid:200028573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200028574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200028575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dohoyv.za.com"; classtype:attempted-recon; sid:200028576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dpfplb.za.com"; classtype:attempted-recon; sid:200028577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.drvpxu.za.com"; classtype:attempted-recon; sid:200028578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200028579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200028580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ebaawf.za.com"; classtype:attempted-recon; sid:200028581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eegabi.za.com"; classtype:attempted-recon; sid:200028582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eiggzc.za.com"; classtype:attempted-recon; sid:200028583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.enksln.za.com"; classtype:attempted-recon; sid:200028584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.epdexz.za.com"; classtype:attempted-recon; sid:200028585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eqfynh.za.com"; classtype:attempted-recon; sid:200028586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.equmej.za.com"; classtype:attempted-recon; sid:200028587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.etibxf.za.com"; classtype:attempted-recon; sid:200028588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.etswbl.za.com"; classtype:attempted-recon; sid:200028589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eugwas.za.com"; classtype:attempted-recon; sid:200028590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200028591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eytnjs.za.com"; classtype:attempted-recon; sid:200028592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fabbxw.za.com"; classtype:attempted-recon; sid:200028593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fauyqv.za.com"; classtype:attempted-recon; sid:200028594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fhylla.za.com"; classtype:attempted-recon; sid:200028595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.figdiz.za.com"; classtype:attempted-recon; sid:200028596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200028597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.frroav.za.com"; classtype:attempted-recon; sid:200028598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fwmztl.za.com"; classtype:attempted-recon; sid:200028599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gclajk.za.com"; classtype:attempted-recon; sid:200028600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200028601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200028602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gplcly.za.com"; classtype:attempted-recon; sid:200028603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.grlmkv.za.com"; classtype:attempted-recon; sid:200028604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gubhky.za.com"; classtype:attempted-recon; sid:200028605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.guzomb.za.com"; classtype:attempted-recon; sid:200028606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200028607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200028608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hjoven.za.com"; classtype:attempted-recon; sid:200028609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hkieuc.za.com"; classtype:attempted-recon; sid:200028610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hklvra.za.com"; classtype:attempted-recon; sid:200028611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hldgqg.za.com"; classtype:attempted-recon; sid:200028612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200028613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hsobxm.za.com"; classtype:attempted-recon; sid:200028614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hsxsye.za.com"; classtype:attempted-recon; sid:200028615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hyhijo.za.com"; classtype:attempted-recon; sid:200028616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200028617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iaowza.za.com"; classtype:attempted-recon; sid:200028618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iazdui.za.com"; classtype:attempted-recon; sid:200028619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ibdznx.za.com"; classtype:attempted-recon; sid:200028620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.icqbyi.za.com"; classtype:attempted-recon; sid:200028621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ihytpv.za.com"; classtype:attempted-recon; sid:200028622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iieddd.za.com"; classtype:attempted-recon; sid:200028623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iivqdq.za.com"; classtype:attempted-recon; sid:200028624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iksnzw.za.com"; classtype:attempted-recon; sid:200028625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200028626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.inilsf.za.com"; classtype:attempted-recon; sid:200028627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ipavwe.za.com"; classtype:attempted-recon; sid:200028628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ipckgf.za.com"; classtype:attempted-recon; sid:200028629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iqhnep.za.com"; classtype:attempted-recon; sid:200028630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.isfnre.za.com"; classtype:attempted-recon; sid:200028631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.itoeyw.za.com"; classtype:attempted-recon; sid:200028632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200028633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jhbjti.za.com"; classtype:attempted-recon; sid:200028634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jimkqm.za.com"; classtype:attempted-recon; sid:200028635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jjtebf.za.com"; classtype:attempted-recon; sid:200028636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200028637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jokoqq.za.com"; classtype:attempted-recon; sid:200028638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200028639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jueaim.za.com"; classtype:attempted-recon; sid:200028640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200028641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kadyvz.za.com"; classtype:attempted-recon; sid:200028642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kamowm.za.com"; classtype:attempted-recon; sid:200028643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kbubhp.za.com"; classtype:attempted-recon; sid:200028644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kbuhif.za.com"; classtype:attempted-recon; sid:200028645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200028646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.keiczj.za.com"; classtype:attempted-recon; sid:200028647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kfwoih.za.com"; classtype:attempted-recon; sid:200028648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.khaylv.za.com"; classtype:attempted-recon; sid:200028649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kklrfz.za.com"; classtype:attempted-recon; sid:200028650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.klngsb.za.com"; classtype:attempted-recon; sid:200028651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200028652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kopnbv.za.com"; classtype:attempted-recon; sid:200028653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200028654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200028655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kuycqq.za.com"; classtype:attempted-recon; sid:200028656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200028657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200028658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200028659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.laguer.za.com"; classtype:attempted-recon; sid:200028660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lavnql.za.com"; classtype:attempted-recon; sid:200028661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200028662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.llfmbd.za.com"; classtype:attempted-recon; sid:200028663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lltgtv.za.com"; classtype:attempted-recon; sid:200028664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lluhni.za.com"; classtype:attempted-recon; sid:200028665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lnhweo.za.com"; classtype:attempted-recon; sid:200028666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lryoni.za.com"; classtype:attempted-recon; sid:200028667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ludrij.za.com"; classtype:attempted-recon; sid:200028668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200028669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lyydbz.za.com"; classtype:attempted-recon; sid:200028670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.macpqa.za.com"; classtype:attempted-recon; sid:200028671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.maivih.za.com"; classtype:attempted-recon; sid:200028672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mcabmo.za.com"; classtype:attempted-recon; sid:200028673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mfnwca.za.com"; classtype:attempted-recon; sid:200028674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200028675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mftcmf.za.com"; classtype:attempted-recon; sid:200028676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200028677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200028678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mnalmf.za.com"; classtype:attempted-recon; sid:200028679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mrezau.za.com"; classtype:attempted-recon; sid:200028680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mrkudt.za.com"; classtype:attempted-recon; sid:200028681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mtedjn.za.com"; classtype:attempted-recon; sid:200028682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200028683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mxphbq.za.com"; classtype:attempted-recon; sid:200028684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ngdpig.za.com"; classtype:attempted-recon; sid:200028685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nijizu.za.com"; classtype:attempted-recon; sid:200028686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.njjguj.za.com"; classtype:attempted-recon; sid:200028687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nkmpia.za.com"; classtype:attempted-recon; sid:200028688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200028689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.noegdn.za.com"; classtype:attempted-recon; sid:200028690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.npxbmj.za.com"; classtype:attempted-recon; sid:200028691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nscrlf.za.com"; classtype:attempted-recon; sid:200028692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nywlkd.za.com"; classtype:attempted-recon; sid:200028693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200028694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oaotso.za.com"; classtype:attempted-recon; sid:200028695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.odgjer.za.com"; classtype:attempted-recon; sid:200028696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.odmvmd.za.com"; classtype:attempted-recon; sid:200028697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oexeuz.za.com"; classtype:attempted-recon; sid:200028698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200028699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ohssdh.za.com"; classtype:attempted-recon; sid:200028700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oijbuk.za.com"; classtype:attempted-recon; sid:200028701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.okzwyp.za.com"; classtype:attempted-recon; sid:200028702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.olgmmh.za.com"; classtype:attempted-recon; sid:200028703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.orrpya.za.com"; classtype:attempted-recon; sid:200028704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.osoqzr.za.com"; classtype:attempted-recon; sid:200028705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oudyit.za.com"; classtype:attempted-recon; sid:200028706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.pdkuld.za.com"; classtype:attempted-recon; sid:200028707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.qfrbez.za.com"; classtype:attempted-recon; sid:200028708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rijenl.za.com"; classtype:attempted-recon; sid:200028709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rzkyqg.za.com"; classtype:attempted-recon; sid:200028710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.umfbax.za.com"; classtype:attempted-recon; sid:200028711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wzrrqp.za.com"; classtype:attempted-recon; sid:200028712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.xpyewd.za.com"; classtype:attempted-recon; sid:200028713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zznany.za.com"; classtype:attempted-recon; sid:200028714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.acysue.za.com"; classtype:attempted-recon; sid:200028715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.aeaaij.za.com"; classtype:attempted-recon; sid:200028716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.aetzyx.za.com"; classtype:attempted-recon; sid:200028717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.agxyxw.za.com"; classtype:attempted-recon; sid:200028718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.aiczsa.za.com"; classtype:attempted-recon; sid:200028719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.airnja.za.com"; classtype:attempted-recon; sid:200028720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ajgwlg.za.com"; classtype:attempted-recon; sid:200028721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.alcdkp.za.com"; classtype:attempted-recon; sid:200028722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.atnpja.za.com"; classtype:attempted-recon; sid:200028723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.attlqw.za.com"; classtype:attempted-recon; sid:200028724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.axhyue.za.com"; classtype:attempted-recon; sid:200028725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ayvpej.za.com"; classtype:attempted-recon; sid:200028726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bangme.za.com"; classtype:attempted-recon; sid:200028727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bdhjoe.za.com"; classtype:attempted-recon; sid:200028728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.befurr.za.com"; classtype:attempted-recon; sid:200028729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bfuapo.za.com"; classtype:attempted-recon; sid:200028730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bjrlsn.za.com"; classtype:attempted-recon; sid:200028731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bkcywi.za.com"; classtype:attempted-recon; sid:200028732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bvtbny.za.com"; classtype:attempted-recon; sid:200028733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bxcbkt.za.com"; classtype:attempted-recon; sid:200028734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.byguuc.za.com"; classtype:attempted-recon; sid:200028735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bznaak.za.com"; classtype:attempted-recon; sid:200028736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.caipnu.za.com"; classtype:attempted-recon; sid:200028737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cbxspx.za.com"; classtype:attempted-recon; sid:200028738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ccjole.za.com"; classtype:attempted-recon; sid:200028739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cgrfee.za.com"; classtype:attempted-recon; sid:200028740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cluemm.za.com"; classtype:attempted-recon; sid:200028741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cnjzqo.za.com"; classtype:attempted-recon; sid:200028742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cpjomt.za.com"; classtype:attempted-recon; sid:200028743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cqikbq.za.com"; classtype:attempted-recon; sid:200028744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cstvyz.za.com"; classtype:attempted-recon; sid:200028745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ctfaoz.za.com"; classtype:attempted-recon; sid:200028746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ctsuwx.za.com"; classtype:attempted-recon; sid:200028747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cxvesz.za.com"; classtype:attempted-recon; sid:200028748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.daxqpj.za.com"; classtype:attempted-recon; sid:200028749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dbxmic.za.com"; classtype:attempted-recon; sid:200028750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dbyapt.za.com"; classtype:attempted-recon; sid:200028751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.deocmk.za.com"; classtype:attempted-recon; sid:200028752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dgqqzk.za.com"; classtype:attempted-recon; sid:200028753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dhitmj.za.com"; classtype:attempted-recon; sid:200028754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dkcyph.za.com"; classtype:attempted-recon; sid:200028755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dknouc.za.com"; classtype:attempted-recon; sid:200028756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dkxwtn.za.com"; classtype:attempted-recon; sid:200028757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dlhefx.za.com"; classtype:attempted-recon; sid:200028758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dlzdwm.za.com"; classtype:attempted-recon; sid:200028759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dmgbrn.za.com"; classtype:attempted-recon; sid:200028760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dohoyv.za.com"; classtype:attempted-recon; sid:200028761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dpfplb.za.com"; classtype:attempted-recon; sid:200028762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.drvpxu.za.com"; classtype:attempted-recon; sid:200028763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dtlrgj.za.com"; classtype:attempted-recon; sid:200028764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dzpmfz.za.com"; classtype:attempted-recon; sid:200028765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ebaawf.za.com"; classtype:attempted-recon; sid:200028766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eegabi.za.com"; classtype:attempted-recon; sid:200028767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eiggzc.za.com"; classtype:attempted-recon; sid:200028768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.enksln.za.com"; classtype:attempted-recon; sid:200028769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.epdexz.za.com"; classtype:attempted-recon; sid:200028770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eqfynh.za.com"; classtype:attempted-recon; sid:200028771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.equmej.za.com"; classtype:attempted-recon; sid:200028772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.etibxf.za.com"; classtype:attempted-recon; sid:200028773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.etswbl.za.com"; classtype:attempted-recon; sid:200028774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eugwas.za.com"; classtype:attempted-recon; sid:200028775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ewhrdc.za.com"; classtype:attempted-recon; sid:200028776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eytnjs.za.com"; classtype:attempted-recon; sid:200028777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fabbxw.za.com"; classtype:attempted-recon; sid:200028778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fauyqv.za.com"; classtype:attempted-recon; sid:200028779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fhylla.za.com"; classtype:attempted-recon; sid:200028780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.figdiz.za.com"; classtype:attempted-recon; sid:200028781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fpyzoz.za.com"; classtype:attempted-recon; sid:200028782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.frroav.za.com"; classtype:attempted-recon; sid:200028783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fwmztl.za.com"; classtype:attempted-recon; sid:200028784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gclajk.za.com"; classtype:attempted-recon; sid:200028785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gfrdxv.za.com"; classtype:attempted-recon; sid:200028786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ggxtiz.za.com"; classtype:attempted-recon; sid:200028787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gplcly.za.com"; classtype:attempted-recon; sid:200028788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.grlmkv.za.com"; classtype:attempted-recon; sid:200028789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gubhky.za.com"; classtype:attempted-recon; sid:200028790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.guzomb.za.com"; classtype:attempted-recon; sid:200028791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gvbmgq.za.com"; classtype:attempted-recon; sid:200028792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gwvhgu.za.com"; classtype:attempted-recon; sid:200028793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hjoven.za.com"; classtype:attempted-recon; sid:200028794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hkieuc.za.com"; classtype:attempted-recon; sid:200028795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hklvra.za.com"; classtype:attempted-recon; sid:200028796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hldgqg.za.com"; classtype:attempted-recon; sid:200028797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hpvzmq.za.com"; classtype:attempted-recon; sid:200028798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hsobxm.za.com"; classtype:attempted-recon; sid:200028799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hsxsye.za.com"; classtype:attempted-recon; sid:200028800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hyhijo.za.com"; classtype:attempted-recon; sid:200028801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hzmmyk.za.com"; classtype:attempted-recon; sid:200028802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iaowza.za.com"; classtype:attempted-recon; sid:200028803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iazdui.za.com"; classtype:attempted-recon; sid:200028804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ibdznx.za.com"; classtype:attempted-recon; sid:200028805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.icqbyi.za.com"; classtype:attempted-recon; sid:200028806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ihytpv.za.com"; classtype:attempted-recon; sid:200028807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iieddd.za.com"; classtype:attempted-recon; sid:200028808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iivqdq.za.com"; classtype:attempted-recon; sid:200028809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iksnzw.za.com"; classtype:attempted-recon; sid:200028810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ilnsyb.za.com"; classtype:attempted-recon; sid:200028811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.inilsf.za.com"; classtype:attempted-recon; sid:200028812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ipavwe.za.com"; classtype:attempted-recon; sid:200028813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ipckgf.za.com"; classtype:attempted-recon; sid:200028814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iqhnep.za.com"; classtype:attempted-recon; sid:200028815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.isfnre.za.com"; classtype:attempted-recon; sid:200028816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.itoeyw.za.com"; classtype:attempted-recon; sid:200028817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jbgyvv.za.com"; classtype:attempted-recon; sid:200028818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jhbjti.za.com"; classtype:attempted-recon; sid:200028819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jimkqm.za.com"; classtype:attempted-recon; sid:200028820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jjtebf.za.com"; classtype:attempted-recon; sid:200028821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jnvwvr.za.com"; classtype:attempted-recon; sid:200028822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jokoqq.za.com"; classtype:attempted-recon; sid:200028823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jrbyeg.za.com"; classtype:attempted-recon; sid:200028824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jueaim.za.com"; classtype:attempted-recon; sid:200028825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jvyhkm.za.com"; classtype:attempted-recon; sid:200028826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kadyvz.za.com"; classtype:attempted-recon; sid:200028827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kamowm.za.com"; classtype:attempted-recon; sid:200028828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kbubhp.za.com"; classtype:attempted-recon; sid:200028829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kbuhif.za.com"; classtype:attempted-recon; sid:200028830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kcsxhb.za.com"; classtype:attempted-recon; sid:200028831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.keiczj.za.com"; classtype:attempted-recon; sid:200028832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kfwoih.za.com"; classtype:attempted-recon; sid:200028833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.khaylv.za.com"; classtype:attempted-recon; sid:200028834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kklrfz.za.com"; classtype:attempted-recon; sid:200028835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.klngsb.za.com"; classtype:attempted-recon; sid:200028836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kmuhkc.za.com"; classtype:attempted-recon; sid:200028837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kopnbv.za.com"; classtype:attempted-recon; sid:200028838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kqfoqs.za.com"; classtype:attempted-recon; sid:200028839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ktzhyt.za.com"; classtype:attempted-recon; sid:200028840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kuycqq.za.com"; classtype:attempted-recon; sid:200028841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kvfyvz.za.com"; classtype:attempted-recon; sid:200028842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kvtqsz.za.com"; classtype:attempted-recon; sid:200028843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kyzuqj.za.com"; classtype:attempted-recon; sid:200028844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.laguer.za.com"; classtype:attempted-recon; sid:200028845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lavnql.za.com"; classtype:attempted-recon; sid:200028846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lfeyoa.za.com"; classtype:attempted-recon; sid:200028847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.llfmbd.za.com"; classtype:attempted-recon; sid:200028848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lltgtv.za.com"; classtype:attempted-recon; sid:200028849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lluhni.za.com"; classtype:attempted-recon; sid:200028850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lnhweo.za.com"; classtype:attempted-recon; sid:200028851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lryoni.za.com"; classtype:attempted-recon; sid:200028852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ludrij.za.com"; classtype:attempted-recon; sid:200028853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lwbpzn.za.com"; classtype:attempted-recon; sid:200028854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lyydbz.za.com"; classtype:attempted-recon; sid:200028855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.macpqa.za.com"; classtype:attempted-recon; sid:200028856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.maivih.za.com"; classtype:attempted-recon; sid:200028857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mcabmo.za.com"; classtype:attempted-recon; sid:200028858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mfnwca.za.com"; classtype:attempted-recon; sid:200028859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mfrfhh.za.com"; classtype:attempted-recon; sid:200028860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mftcmf.za.com"; classtype:attempted-recon; sid:200028861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mhvcvt.za.com"; classtype:attempted-recon; sid:200028862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mhxwoz.za.com"; classtype:attempted-recon; sid:200028863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mnalmf.za.com"; classtype:attempted-recon; sid:200028864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mrezau.za.com"; classtype:attempted-recon; sid:200028865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mrkudt.za.com"; classtype:attempted-recon; sid:200028866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mtedjn.za.com"; classtype:attempted-recon; sid:200028867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mxfqsm.za.com"; classtype:attempted-recon; sid:200028868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mxphbq.za.com"; classtype:attempted-recon; sid:200028869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ngdpig.za.com"; classtype:attempted-recon; sid:200028870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nijizu.za.com"; classtype:attempted-recon; sid:200028871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.njjguj.za.com"; classtype:attempted-recon; sid:200028872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nkmpia.za.com"; classtype:attempted-recon; sid:200028873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nmdzpk.za.com"; classtype:attempted-recon; sid:200028874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.noegdn.za.com"; classtype:attempted-recon; sid:200028875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.npxbmj.za.com"; classtype:attempted-recon; sid:200028876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nscrlf.za.com"; classtype:attempted-recon; sid:200028877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nywlkd.za.com"; classtype:attempted-recon; sid:200028878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nzuvrz.za.com"; classtype:attempted-recon; sid:200028879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oaotso.za.com"; classtype:attempted-recon; sid:200028880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.odgjer.za.com"; classtype:attempted-recon; sid:200028881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.odmvmd.za.com"; classtype:attempted-recon; sid:200028882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oexeuz.za.com"; classtype:attempted-recon; sid:200028883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ohmvcj.za.com"; classtype:attempted-recon; sid:200028884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ohssdh.za.com"; classtype:attempted-recon; sid:200028885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oijbuk.za.com"; classtype:attempted-recon; sid:200028886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.okzwyp.za.com"; classtype:attempted-recon; sid:200028887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.olgmmh.za.com"; classtype:attempted-recon; sid:200028888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.orrpya.za.com"; classtype:attempted-recon; sid:200028889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.osoqzr.za.com"; classtype:attempted-recon; sid:200028890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oudyit.za.com"; classtype:attempted-recon; sid:200028891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.pdkuld.za.com"; classtype:attempted-recon; sid:200028892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rfqqga.za.com"; classtype:attempted-recon; sid:200028893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rijenl.za.com"; classtype:attempted-recon; sid:200028894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.uiiavd.za.com"; classtype:attempted-recon; sid:200028895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ymewff.za.com"; classtype:attempted-recon; sid:200028896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.acysue.za.com"; classtype:attempted-recon; sid:200028897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200028898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200028899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200028900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200028901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.airnja.za.com"; classtype:attempted-recon; sid:200028902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200028903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200028904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200028905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200028906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200028907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200028908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bangme.za.com"; classtype:attempted-recon; sid:200028909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200028910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.befurr.za.com"; classtype:attempted-recon; sid:200028911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200028912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200028913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200028914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200028915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200028916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200028917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200028918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200028919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200028920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200028921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200028922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200028923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200028924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200028925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200028926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200028927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200028928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200028929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200028930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200028931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200028932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200028933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200028934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200028935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200028936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200028937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200028938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200028939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200028940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200028941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200028942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200028943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200028944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200028945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200028946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200028947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200028948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200028949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200028950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.enksln.za.com"; classtype:attempted-recon; sid:200028951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200028952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200028953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.equmej.za.com"; classtype:attempted-recon; sid:200028954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200028955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200028956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200028957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200028958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200028959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200028960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200028961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200028962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200028963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200028964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.frroav.za.com"; classtype:attempted-recon; sid:200028965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200028966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200028967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200028968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200028969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200028970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200028971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200028972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200028973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200028974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200028975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200028976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200028977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200028978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200028979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200028980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200028981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200028982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200028983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200028984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200028985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200028986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200028987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200028988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200028989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200028990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200028991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200028992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200028993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200028994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200028995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200028996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200028997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200028998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200028999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200029000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200029001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200029002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200029003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200029004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200029005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200029006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200029007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200029008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200029009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200029010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200029011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200029012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200029013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200029014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200029015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200029016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200029017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200029018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200029019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200029020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200029021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200029022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200029023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200029024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200029025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200029026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.laguer.za.com"; classtype:attempted-recon; sid:200029027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200029028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200029029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200029030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200029031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200029032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200029033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200029034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200029035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200029036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200029037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200029038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.maivih.za.com"; classtype:attempted-recon; sid:200029039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200029040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200029041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200029042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200029043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200029044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200029045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200029046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200029047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200029048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200029049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200029050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200029051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200029052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200029053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200029054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200029055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200029056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200029057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200029058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200029059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200029060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200029061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200029062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200029063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200029064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200029065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200029066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200029067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200029068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200029069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200029070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200029071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200029072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200029073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200029074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200029075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rmzoht.za.com"; classtype:attempted-recon; sid:200029076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.sjolxi.za.com"; classtype:attempted-recon; sid:200029077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.uhuhey.za.com"; classtype:attempted-recon; sid:200029078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.wzqpee.za.com"; classtype:attempted-recon; sid:200029079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.xpyewd.za.com"; classtype:attempted-recon; sid:200029080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.acysue.za.com"; classtype:attempted-recon; sid:200029081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200029082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200029083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200029084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200029085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.airnja.za.com"; classtype:attempted-recon; sid:200029086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200029087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200029088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200029089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200029090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200029091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200029092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bangme.za.com"; classtype:attempted-recon; sid:200029093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200029094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.befurr.za.com"; classtype:attempted-recon; sid:200029095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200029096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200029097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200029098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200029099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200029100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200029101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200029102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200029103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200029104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200029105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200029106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200029107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200029108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200029109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200029110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200029111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200029112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200029113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200029114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200029115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200029116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200029117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200029118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200029119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200029120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200029121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200029122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200029123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200029124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200029125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200029126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200029127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200029128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200029129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200029130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200029131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200029132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.enksln.za.com"; classtype:attempted-recon; sid:200029133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200029134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200029135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.equmej.za.com"; classtype:attempted-recon; sid:200029136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200029137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200029138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200029139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200029140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200029141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200029142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200029143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200029144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200029145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200029146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.frroav.za.com"; classtype:attempted-recon; sid:200029147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200029148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200029149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200029150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200029151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200029152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200029153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200029154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200029155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200029156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200029157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200029158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200029159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200029160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200029161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200029162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200029163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200029164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200029165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200029166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200029167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200029168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200029169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200029170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200029171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200029172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200029173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200029174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200029175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200029176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200029177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200029178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200029179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200029180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200029181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200029182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200029183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200029184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200029185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200029186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200029187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200029188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200029189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200029190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200029191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200029192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200029193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200029194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200029195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200029196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200029197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200029198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200029199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200029200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200029201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200029202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200029203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200029204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200029205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200029206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200029207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200029208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.laguer.za.com"; classtype:attempted-recon; sid:200029209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200029210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200029211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200029212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200029213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200029214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200029215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200029216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200029217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200029218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200029219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200029220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.maivih.za.com"; classtype:attempted-recon; sid:200029221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200029222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200029223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200029224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200029225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200029226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200029227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200029228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200029229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200029230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200029231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200029232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200029233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200029234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200029235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200029236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200029237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200029238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200029239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200029240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200029241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200029242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200029243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200029244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200029245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200029246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200029247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200029248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200029249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200029250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200029251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200029252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200029253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200029254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200029255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200029256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200029257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.virtxq.za.com"; classtype:attempted-recon; sid:200029258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.vvapfd.za.com"; classtype:attempted-recon; sid:200029259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoaccaeovseon.visazciureeinsi.cqqpsz.za.com"; classtype:attempted-recon; sid:200029260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoaccaeovseon.visazciureeinsi.pqyvgi.za.com"; classtype:attempted-recon; sid:200029261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoaccaeovseon.visazciureeinsi.rqumqp.za.com"; classtype:attempted-recon; sid:200029262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.bnrpkz.za.com"; classtype:attempted-recon; sid:200029263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.cxwohm.za.com"; classtype:attempted-recon; sid:200029264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.cjimsd.za.com"; classtype:attempted-recon; sid:200029265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.koxgxs.za.com"; classtype:attempted-recon; sid:200029266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.tzzwdq.za.com"; classtype:attempted-recon; sid:200029267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.vowycz.za.com"; classtype:attempted-recon; sid:200029268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.blrvdr.za.com"; classtype:attempted-recon; sid:200029269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.ijpawu.za.com"; classtype:attempted-recon; sid:200029270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.oplxoj.za.com"; classtype:attempted-recon; sid:200029271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.pigrir.za.com"; classtype:attempted-recon; sid:200029272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.acysue.za.com"; classtype:attempted-recon; sid:200029273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.aeaaij.za.com"; classtype:attempted-recon; sid:200029274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.aetzyx.za.com"; classtype:attempted-recon; sid:200029275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.agxyxw.za.com"; classtype:attempted-recon; sid:200029276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.aiczsa.za.com"; classtype:attempted-recon; sid:200029277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.airnja.za.com"; classtype:attempted-recon; sid:200029278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ajgwlg.za.com"; classtype:attempted-recon; sid:200029279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.alcdkp.za.com"; classtype:attempted-recon; sid:200029280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.atnpja.za.com"; classtype:attempted-recon; sid:200029281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.attlqw.za.com"; classtype:attempted-recon; sid:200029282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.axhyue.za.com"; classtype:attempted-recon; sid:200029283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ayvpej.za.com"; classtype:attempted-recon; sid:200029284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bangme.za.com"; classtype:attempted-recon; sid:200029285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bdhjoe.za.com"; classtype:attempted-recon; sid:200029286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.befurr.za.com"; classtype:attempted-recon; sid:200029287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bfuapo.za.com"; classtype:attempted-recon; sid:200029288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bjrlsn.za.com"; classtype:attempted-recon; sid:200029289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bkcywi.za.com"; classtype:attempted-recon; sid:200029290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bvtbny.za.com"; classtype:attempted-recon; sid:200029291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bxcbkt.za.com"; classtype:attempted-recon; sid:200029292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.byguuc.za.com"; classtype:attempted-recon; sid:200029293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bznaak.za.com"; classtype:attempted-recon; sid:200029294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.caipnu.za.com"; classtype:attempted-recon; sid:200029295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cbxspx.za.com"; classtype:attempted-recon; sid:200029296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ccjole.za.com"; classtype:attempted-recon; sid:200029297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cgrfee.za.com"; classtype:attempted-recon; sid:200029298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cluemm.za.com"; classtype:attempted-recon; sid:200029299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cnjzqo.za.com"; classtype:attempted-recon; sid:200029300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cpjomt.za.com"; classtype:attempted-recon; sid:200029301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cqikbq.za.com"; classtype:attempted-recon; sid:200029302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cstvyz.za.com"; classtype:attempted-recon; sid:200029303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ctfaoz.za.com"; classtype:attempted-recon; sid:200029304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ctsuwx.za.com"; classtype:attempted-recon; sid:200029305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cxvesz.za.com"; classtype:attempted-recon; sid:200029306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.daxqpj.za.com"; classtype:attempted-recon; sid:200029307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dbxmic.za.com"; classtype:attempted-recon; sid:200029308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dbyapt.za.com"; classtype:attempted-recon; sid:200029309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.deocmk.za.com"; classtype:attempted-recon; sid:200029310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dgqqzk.za.com"; classtype:attempted-recon; sid:200029311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dhitmj.za.com"; classtype:attempted-recon; sid:200029312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dkcyph.za.com"; classtype:attempted-recon; sid:200029313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dknouc.za.com"; classtype:attempted-recon; sid:200029314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dkxwtn.za.com"; classtype:attempted-recon; sid:200029315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dlhefx.za.com"; classtype:attempted-recon; sid:200029316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dlzdwm.za.com"; classtype:attempted-recon; sid:200029317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dmgbrn.za.com"; classtype:attempted-recon; sid:200029318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dohoyv.za.com"; classtype:attempted-recon; sid:200029319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dpfplb.za.com"; classtype:attempted-recon; sid:200029320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.drvpxu.za.com"; classtype:attempted-recon; sid:200029321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dtlrgj.za.com"; classtype:attempted-recon; sid:200029322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dzpmfz.za.com"; classtype:attempted-recon; sid:200029323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ebaawf.za.com"; classtype:attempted-recon; sid:200029324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eegabi.za.com"; classtype:attempted-recon; sid:200029325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eiggzc.za.com"; classtype:attempted-recon; sid:200029326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.enksln.za.com"; classtype:attempted-recon; sid:200029327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.epdexz.za.com"; classtype:attempted-recon; sid:200029328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eqfynh.za.com"; classtype:attempted-recon; sid:200029329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.equmej.za.com"; classtype:attempted-recon; sid:200029330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.etibxf.za.com"; classtype:attempted-recon; sid:200029331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.etswbl.za.com"; classtype:attempted-recon; sid:200029332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eugwas.za.com"; classtype:attempted-recon; sid:200029333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ewhrdc.za.com"; classtype:attempted-recon; sid:200029334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eytnjs.za.com"; classtype:attempted-recon; sid:200029335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fabbxw.za.com"; classtype:attempted-recon; sid:200029336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fauyqv.za.com"; classtype:attempted-recon; sid:200029337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fhylla.za.com"; classtype:attempted-recon; sid:200029338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.figdiz.za.com"; classtype:attempted-recon; sid:200029339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fpyzoz.za.com"; classtype:attempted-recon; sid:200029340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.frroav.za.com"; classtype:attempted-recon; sid:200029341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fwmztl.za.com"; classtype:attempted-recon; sid:200029342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gclajk.za.com"; classtype:attempted-recon; sid:200029343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gfrdxv.za.com"; classtype:attempted-recon; sid:200029344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ggxtiz.za.com"; classtype:attempted-recon; sid:200029345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gplcly.za.com"; classtype:attempted-recon; sid:200029346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.grlmkv.za.com"; classtype:attempted-recon; sid:200029347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gubhky.za.com"; classtype:attempted-recon; sid:200029348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.guzomb.za.com"; classtype:attempted-recon; sid:200029349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gvbmgq.za.com"; classtype:attempted-recon; sid:200029350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gwvhgu.za.com"; classtype:attempted-recon; sid:200029351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hjoven.za.com"; classtype:attempted-recon; sid:200029352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hkieuc.za.com"; classtype:attempted-recon; sid:200029353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hklvra.za.com"; classtype:attempted-recon; sid:200029354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hldgqg.za.com"; classtype:attempted-recon; sid:200029355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hpvzmq.za.com"; classtype:attempted-recon; sid:200029356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hsobxm.za.com"; classtype:attempted-recon; sid:200029357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hsxsye.za.com"; classtype:attempted-recon; sid:200029358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hyhijo.za.com"; classtype:attempted-recon; sid:200029359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hzmmyk.za.com"; classtype:attempted-recon; sid:200029360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iaowza.za.com"; classtype:attempted-recon; sid:200029361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iazdui.za.com"; classtype:attempted-recon; sid:200029362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ibdznx.za.com"; classtype:attempted-recon; sid:200029363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.icqbyi.za.com"; classtype:attempted-recon; sid:200029364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ihytpv.za.com"; classtype:attempted-recon; sid:200029365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iieddd.za.com"; classtype:attempted-recon; sid:200029366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iivqdq.za.com"; classtype:attempted-recon; sid:200029367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iksnzw.za.com"; classtype:attempted-recon; sid:200029368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ilnsyb.za.com"; classtype:attempted-recon; sid:200029369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.inilsf.za.com"; classtype:attempted-recon; sid:200029370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ipavwe.za.com"; classtype:attempted-recon; sid:200029371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ipckgf.za.com"; classtype:attempted-recon; sid:200029372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iqhnep.za.com"; classtype:attempted-recon; sid:200029373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.isfnre.za.com"; classtype:attempted-recon; sid:200029374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.itoeyw.za.com"; classtype:attempted-recon; sid:200029375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jbgyvv.za.com"; classtype:attempted-recon; sid:200029376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jhbjti.za.com"; classtype:attempted-recon; sid:200029377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jimkqm.za.com"; classtype:attempted-recon; sid:200029378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jjtebf.za.com"; classtype:attempted-recon; sid:200029379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jnvwvr.za.com"; classtype:attempted-recon; sid:200029380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jokoqq.za.com"; classtype:attempted-recon; sid:200029381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jrbyeg.za.com"; classtype:attempted-recon; sid:200029382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jueaim.za.com"; classtype:attempted-recon; sid:200029383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jvyhkm.za.com"; classtype:attempted-recon; sid:200029384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kadyvz.za.com"; classtype:attempted-recon; sid:200029385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kamowm.za.com"; classtype:attempted-recon; sid:200029386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kbubhp.za.com"; classtype:attempted-recon; sid:200029387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kbuhif.za.com"; classtype:attempted-recon; sid:200029388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kcsxhb.za.com"; classtype:attempted-recon; sid:200029389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.keiczj.za.com"; classtype:attempted-recon; sid:200029390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kfwoih.za.com"; classtype:attempted-recon; sid:200029391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.khaylv.za.com"; classtype:attempted-recon; sid:200029392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kklrfz.za.com"; classtype:attempted-recon; sid:200029393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.klngsb.za.com"; classtype:attempted-recon; sid:200029394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kmuhkc.za.com"; classtype:attempted-recon; sid:200029395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kopnbv.za.com"; classtype:attempted-recon; sid:200029396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kqfoqs.za.com"; classtype:attempted-recon; sid:200029397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ktzhyt.za.com"; classtype:attempted-recon; sid:200029398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kuycqq.za.com"; classtype:attempted-recon; sid:200029399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kvfyvz.za.com"; classtype:attempted-recon; sid:200029400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kvtqsz.za.com"; classtype:attempted-recon; sid:200029401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kyzuqj.za.com"; classtype:attempted-recon; sid:200029402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.laguer.za.com"; classtype:attempted-recon; sid:200029403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lavnql.za.com"; classtype:attempted-recon; sid:200029404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lfeyoa.za.com"; classtype:attempted-recon; sid:200029405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.llfmbd.za.com"; classtype:attempted-recon; sid:200029406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lltgtv.za.com"; classtype:attempted-recon; sid:200029407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lluhni.za.com"; classtype:attempted-recon; sid:200029408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lnhweo.za.com"; classtype:attempted-recon; sid:200029409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lryoni.za.com"; classtype:attempted-recon; sid:200029410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ludrij.za.com"; classtype:attempted-recon; sid:200029411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lwbpzn.za.com"; classtype:attempted-recon; sid:200029412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lyydbz.za.com"; classtype:attempted-recon; sid:200029413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.macpqa.za.com"; classtype:attempted-recon; sid:200029414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.maivih.za.com"; classtype:attempted-recon; sid:200029415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mcabmo.za.com"; classtype:attempted-recon; sid:200029416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mfnwca.za.com"; classtype:attempted-recon; sid:200029417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mfrfhh.za.com"; classtype:attempted-recon; sid:200029418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mftcmf.za.com"; classtype:attempted-recon; sid:200029419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mhvcvt.za.com"; classtype:attempted-recon; sid:200029420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mhxwoz.za.com"; classtype:attempted-recon; sid:200029421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mnalmf.za.com"; classtype:attempted-recon; sid:200029422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mrezau.za.com"; classtype:attempted-recon; sid:200029423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mrkudt.za.com"; classtype:attempted-recon; sid:200029424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mtedjn.za.com"; classtype:attempted-recon; sid:200029425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mxfqsm.za.com"; classtype:attempted-recon; sid:200029426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mxphbq.za.com"; classtype:attempted-recon; sid:200029427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ngdpig.za.com"; classtype:attempted-recon; sid:200029428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nijizu.za.com"; classtype:attempted-recon; sid:200029429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.njjguj.za.com"; classtype:attempted-recon; sid:200029430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nkmpia.za.com"; classtype:attempted-recon; sid:200029431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nmdzpk.za.com"; classtype:attempted-recon; sid:200029432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.noegdn.za.com"; classtype:attempted-recon; sid:200029433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.npxbmj.za.com"; classtype:attempted-recon; sid:200029434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nscrlf.za.com"; classtype:attempted-recon; sid:200029435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nywlkd.za.com"; classtype:attempted-recon; sid:200029436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nzuvrz.za.com"; classtype:attempted-recon; sid:200029437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oaotso.za.com"; classtype:attempted-recon; sid:200029438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.odgjer.za.com"; classtype:attempted-recon; sid:200029439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.odmvmd.za.com"; classtype:attempted-recon; sid:200029440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oexeuz.za.com"; classtype:attempted-recon; sid:200029441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ohmvcj.za.com"; classtype:attempted-recon; sid:200029442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ohssdh.za.com"; classtype:attempted-recon; sid:200029443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oijbuk.za.com"; classtype:attempted-recon; sid:200029444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.okzwyp.za.com"; classtype:attempted-recon; sid:200029445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.olgmmh.za.com"; classtype:attempted-recon; sid:200029446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.orrpya.za.com"; classtype:attempted-recon; sid:200029447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.osoqzr.za.com"; classtype:attempted-recon; sid:200029448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oudyit.za.com"; classtype:attempted-recon; sid:200029449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.pdkuld.za.com"; classtype:attempted-recon; sid:200029450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.puzdqh.za.com"; classtype:attempted-recon; sid:200029451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rijenl.za.com"; classtype:attempted-recon; sid:200029452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rooreg.za.com"; classtype:attempted-recon; sid:200029453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.sztsok.za.com"; classtype:attempted-recon; sid:200029454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicuivisonaurueszovvseon.vscenssioriursi.vdobfv.za.com"; classtype:attempted-recon; sid:200029455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.fbgnzp.top"; classtype:attempted-recon; sid:200029456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.gbbxdr.top"; classtype:attempted-recon; sid:200029457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.ghdbbh.top"; classtype:attempted-recon; sid:200029458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.hhksfr.top"; classtype:attempted-recon; sid:200029459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.ilgzng.top"; classtype:attempted-recon; sid:200029460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.iuruyp.top"; classtype:attempted-recon; sid:200029461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.kxcepn.top"; classtype:attempted-recon; sid:200029462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.mhnved.top"; classtype:attempted-recon; sid:200029463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.mmcqln.top"; classtype:attempted-recon; sid:200029464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.mravkx.top"; classtype:attempted-recon; sid:200029465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.nbhlvc.top"; classtype:attempted-recon; sid:200029466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.njhpgs.top"; classtype:attempted-recon; sid:200029467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.nxuiqz.top"; classtype:attempted-recon; sid:200029468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.pbkjie.top"; classtype:attempted-recon; sid:200029469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.pgwcxp.top"; classtype:attempted-recon; sid:200029470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.qboxjl.top"; classtype:attempted-recon; sid:200029471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.qjtfvg.top"; classtype:attempted-recon; sid:200029472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.rataxm.top"; classtype:attempted-recon; sid:200029473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseeeceic.rveivreaaevesi.rchahv.top"; classtype:attempted-recon; sid:200029474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.fgmlde.top"; classtype:attempted-recon; sid:200029475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.iktggq.top"; classtype:attempted-recon; sid:200029476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.jdjubw.top"; classtype:attempted-recon; sid:200029477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.ksdadl.top"; classtype:attempted-recon; sid:200029478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.mgandi.top"; classtype:attempted-recon; sid:200029479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.ngtwxt.top"; classtype:attempted-recon; sid:200029480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.osqsyc.top"; classtype:attempted-recon; sid:200029481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.rataxm.top"; classtype:attempted-recon; sid:200029482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.rhwdsq.top"; classtype:attempted-recon; sid:200029483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseevei.cvrieversavesi.rjfbqi.top"; classtype:attempted-recon; sid:200029484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.guxqvw.top"; classtype:attempted-recon; sid:200029485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.iktggq.top"; classtype:attempted-recon; sid:200029486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.jxsfsm.top"; classtype:attempted-recon; sid:200029487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.ksdadl.top"; classtype:attempted-recon; sid:200029488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.lrtzrp.top"; classtype:attempted-recon; sid:200029489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.nbhlvc.top"; classtype:attempted-recon; sid:200029490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.njhpgs.top"; classtype:attempted-recon; sid:200029491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.ojvntr.top"; classtype:attempted-recon; sid:200029492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.qwudnh.top"; classtype:attempted-recon; sid:200029493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.rhwdsq.top"; classtype:attempted-recon; sid:200029494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieececir.evirveiaaevesi.rkafro.top"; classtype:attempted-recon; sid:200029495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.fprrlq.top"; classtype:attempted-recon; sid:200029496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.frhyqg.top"; classtype:attempted-recon; sid:200029497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.fynqxp.top"; classtype:attempted-recon; sid:200029498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.grliwz.top"; classtype:attempted-recon; sid:200029499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.hgpqys.top"; classtype:attempted-recon; sid:200029500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.jxavqz.top"; classtype:attempted-recon; sid:200029501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.lhewuf.top"; classtype:attempted-recon; sid:200029502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.lrtzrp.top"; classtype:attempted-recon; sid:200029503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.munzdr.top"; classtype:attempted-recon; sid:200029504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.mwquzc.top"; classtype:attempted-recon; sid:200029505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.najkys.top"; classtype:attempted-recon; sid:200029506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.nmbqjh.top"; classtype:attempted-recon; sid:200029507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.pdndft.top"; classtype:attempted-recon; sid:200029508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.plqjhl.top"; classtype:attempted-recon; sid:200029509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.qwudnh.top"; classtype:attempted-recon; sid:200029510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcresseieveic.rveivresiavesi.rataxm.top"; classtype:attempted-recon; sid:200029511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.ccvjar.top"; classtype:attempted-recon; sid:200029512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.cjysqjj.icu"; classtype:attempted-recon; sid:200029513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.ckhnlk.top"; classtype:attempted-recon; sid:200029514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.cyqggi.top"; classtype:attempted-recon; sid:200029515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.dlnxzo.top"; classtype:attempted-recon; sid:200029516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.dpqshv.top"; classtype:attempted-recon; sid:200029517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.fksiud.icu"; classtype:attempted-recon; sid:200029518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.huaxiano.icu"; classtype:attempted-recon; sid:200029519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.jkoozw.top"; classtype:attempted-recon; sid:200029520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.kpblio.top"; classtype:attempted-recon; sid:200029521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.pvhngq.top"; classtype:attempted-recon; sid:200029522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.ronipp.top"; classtype:attempted-recon; sid:200029523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.rsfcmb.icu"; classtype:attempted-recon; sid:200029524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.sejmqk.top"; classtype:attempted-recon; sid:200029525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.shaot.icu"; classtype:attempted-recon; sid:200029526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.vfchrz.top"; classtype:attempted-recon; sid:200029527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.wbziul.top"; classtype:attempted-recon; sid:200029528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.wetot.life"; classtype:attempted-recon; sid:200029529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.xqpwkk.top"; classtype:attempted-recon; sid:200029530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.xudixq.top"; classtype:attempted-recon; sid:200029531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.ymwfnw.top"; classtype:attempted-recon; sid:200029532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.yqzemo.top"; classtype:attempted-recon; sid:200029533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.ytvuml.top"; classtype:attempted-recon; sid:200029534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.ajvrm.icu"; classtype:attempted-recon; sid:200029535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.ayqtuj.top"; classtype:attempted-recon; sid:200029536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.badkfs.icu"; classtype:attempted-recon; sid:200029537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.bdbbvv.top"; classtype:attempted-recon; sid:200029538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.bjexfe.top"; classtype:attempted-recon; sid:200029539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.ccvjar.top"; classtype:attempted-recon; sid:200029540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.cjysqjj.icu"; classtype:attempted-recon; sid:200029541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.craycraft.top"; classtype:attempted-recon; sid:200029542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.cyqggi.top"; classtype:attempted-recon; sid:200029543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.dafenghao.icu"; classtype:attempted-recon; sid:200029544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.dauexk.top"; classtype:attempted-recon; sid:200029545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.dtyweh.top"; classtype:attempted-recon; sid:200029546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.fksiud.icu"; classtype:attempted-recon; sid:200029547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.huaxiano.icu"; classtype:attempted-recon; sid:200029548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.jkoozw.top"; classtype:attempted-recon; sid:200029549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.kpblio.top"; classtype:attempted-recon; sid:200029550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.lenorv.top"; classtype:attempted-recon; sid:200029551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.msiesya.icu"; classtype:attempted-recon; sid:200029552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.pvhngq.top"; classtype:attempted-recon; sid:200029553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.ssrpsl.top"; classtype:attempted-recon; sid:200029554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.ufihby.top"; classtype:attempted-recon; sid:200029555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.upuphone.group"; classtype:attempted-recon; sid:200029556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.upuphone.ltd"; classtype:attempted-recon; sid:200029557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.urekwh.top"; classtype:attempted-recon; sid:200029558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.wbvazy.top"; classtype:attempted-recon; sid:200029559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.wetot.icu"; classtype:attempted-recon; sid:200029560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.wetot.life"; classtype:attempted-recon; sid:200029561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.wxnyfl.top"; classtype:attempted-recon; sid:200029562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.xqpwkk.top"; classtype:attempted-recon; sid:200029563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.yanwen.cc"; classtype:attempted-recon; sid:200029564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.ytvuml.top"; classtype:attempted-recon; sid:200029565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.zjsyd.icu"; classtype:attempted-recon; sid:200029566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseevei.cveversavesi.zliboyp.icu"; classtype:attempted-recon; sid:200029567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.bdbbvv.top"; classtype:attempted-recon; sid:200029568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.bporry.top"; classtype:attempted-recon; sid:200029569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.bzfdtw.top"; classtype:attempted-recon; sid:200029570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.ccvjar.top"; classtype:attempted-recon; sid:200029571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.cjysqjj.icu"; classtype:attempted-recon; sid:200029572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.cntxao.top"; classtype:attempted-recon; sid:200029573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.digitize.ltd"; classtype:attempted-recon; sid:200029574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.ehngpw.top"; classtype:attempted-recon; sid:200029575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.fvhuee.icu"; classtype:attempted-recon; sid:200029576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.fvqetn.top"; classtype:attempted-recon; sid:200029577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.hfoesk.top"; classtype:attempted-recon; sid:200029578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.htixjser.icu"; classtype:attempted-recon; sid:200029579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.huaxiano.icu"; classtype:attempted-recon; sid:200029580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.jdqomw.top"; classtype:attempted-recon; sid:200029581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.jkoozw.top"; classtype:attempted-recon; sid:200029582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.ronipp.top"; classtype:attempted-recon; sid:200029583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.sgrxpw.top"; classtype:attempted-recon; sid:200029584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.shaot.icu"; classtype:attempted-recon; sid:200029585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.upuphone.group"; classtype:attempted-recon; sid:200029586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.vfchrz.top"; classtype:attempted-recon; sid:200029587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.wbziul.top"; classtype:attempted-recon; sid:200029588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.wxnyfl.top"; classtype:attempted-recon; sid:200029589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.xaeuyf.top"; classtype:attempted-recon; sid:200029590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.xudixq.top"; classtype:attempted-recon; sid:200029591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.yavkol.top"; classtype:attempted-recon; sid:200029592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.ytvuml.top"; classtype:attempted-recon; sid:200029593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.zjsyd.icu"; classtype:attempted-recon; sid:200029594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieececievirveiaaevesi.zliboyp.icu"; classtype:attempted-recon; sid:200029595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.bdbbvv.top"; classtype:attempted-recon; sid:200029596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.benefitted.icu"; classtype:attempted-recon; sid:200029597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.bjexfe.top"; classtype:attempted-recon; sid:200029598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.bporry.top"; classtype:attempted-recon; sid:200029599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.bspybm.top"; classtype:attempted-recon; sid:200029600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.cjysqjj.icu"; classtype:attempted-recon; sid:200029601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.coflya.top"; classtype:attempted-recon; sid:200029602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.dafenghao.icu"; classtype:attempted-recon; sid:200029603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.digitize.ltd"; classtype:attempted-recon; sid:200029604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.dtyweh.top"; classtype:attempted-recon; sid:200029605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.ehxsyt.top"; classtype:attempted-recon; sid:200029606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.fgcew.icu"; classtype:attempted-recon; sid:200029607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.fvhuee.icu"; classtype:attempted-recon; sid:200029608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.fvqetn.top"; classtype:attempted-recon; sid:200029609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.hyfxgx.top"; classtype:attempted-recon; sid:200029610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.mqiwux.top"; classtype:attempted-recon; sid:200029611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.rkobagr.icu"; classtype:attempted-recon; sid:200029612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.rsfcmb.icu"; classtype:attempted-recon; sid:200029613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.sgrxpw.top"; classtype:attempted-recon; sid:200029614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.tvdoqx.top"; classtype:attempted-recon; sid:200029615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.upuphone.group"; classtype:attempted-recon; sid:200029616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.upuphone.ltd"; classtype:attempted-recon; sid:200029617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.urekwh.top"; classtype:attempted-recon; sid:200029618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.wdtsjr.top"; classtype:attempted-recon; sid:200029619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.wxnyfl.top"; classtype:attempted-recon; sid:200029620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.xaeuyf.top"; classtype:attempted-recon; sid:200029621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.xlrppx.top"; classtype:attempted-recon; sid:200029622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecresseieveic.eivresiavesi.zynepg.top"; classtype:attempted-recon; sid:200029623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.bdbbvv.top"; classtype:attempted-recon; sid:200029624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.bjexfe.top"; classtype:attempted-recon; sid:200029625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.bspybm.top"; classtype:attempted-recon; sid:200029626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.ckhnlk.top"; classtype:attempted-recon; sid:200029627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.cpgspk.top"; classtype:attempted-recon; sid:200029628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.cwadib.top"; classtype:attempted-recon; sid:200029629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.cyqggi.top"; classtype:attempted-recon; sid:200029630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.dauexk.top"; classtype:attempted-recon; sid:200029631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.elhicw.top"; classtype:attempted-recon; sid:200029632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.enkzhe.top"; classtype:attempted-recon; sid:200029633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.fksiud.icu"; classtype:attempted-recon; sid:200029634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.fvhuee.icu"; classtype:attempted-recon; sid:200029635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.htixjser.icu"; classtype:attempted-recon; sid:200029636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.huaxiano.icu"; classtype:attempted-recon; sid:200029637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.jdftpe.top"; classtype:attempted-recon; sid:200029638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.jdqomw.top"; classtype:attempted-recon; sid:200029639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.jkoozw.top"; classtype:attempted-recon; sid:200029640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.mavbpi.top"; classtype:attempted-recon; sid:200029641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.pkilix.top"; classtype:attempted-recon; sid:200029642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.rsfcmb.icu"; classtype:attempted-recon; sid:200029643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.tqmskg.top"; classtype:attempted-recon; sid:200029644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.ufihby.top"; classtype:attempted-recon; sid:200029645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.xudixq.top"; classtype:attempted-recon; sid:200029646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.xvtayq.top"; classtype:attempted-recon; sid:200029647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.yavkol.top"; classtype:attempted-recon; sid:200029648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.zjsyd.icu"; classtype:attempted-recon; sid:200029649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseeecei.vivraevesi.zliboyp.icu"; classtype:attempted-recon; sid:200029650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.abzcr.icu"; classtype:attempted-recon; sid:200029651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.ajvrm.icu"; classtype:attempted-recon; sid:200029652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.ayqtuj.top"; classtype:attempted-recon; sid:200029653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.bporry.top"; classtype:attempted-recon; sid:200029654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.bzfdtw.top"; classtype:attempted-recon; sid:200029655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.cjysqjj.icu"; classtype:attempted-recon; sid:200029656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.cyqggi.top"; classtype:attempted-recon; sid:200029657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.digitize.ltd"; classtype:attempted-recon; sid:200029658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.elhicw.top"; classtype:attempted-recon; sid:200029659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.fvqetn.top"; classtype:attempted-recon; sid:200029660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.jdqomw.top"; classtype:attempted-recon; sid:200029661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.lenorv.top"; classtype:attempted-recon; sid:200029662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.nxxdqw.top"; classtype:attempted-recon; sid:200029663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.qskgtg.top"; classtype:attempted-recon; sid:200029664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.rsfcmb.icu"; classtype:attempted-recon; sid:200029665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.sctgkq.top"; classtype:attempted-recon; sid:200029666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.ssrpsl.top"; classtype:attempted-recon; sid:200029667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.tvdoqx.top"; classtype:attempted-recon; sid:200029668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.ubdjag.top"; classtype:attempted-recon; sid:200029669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.ufihby.top"; classtype:attempted-recon; sid:200029670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.urekwh.top"; classtype:attempted-recon; sid:200029671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.vozep.icu"; classtype:attempted-recon; sid:200029672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.xaeuyf.top"; classtype:attempted-recon; sid:200029673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.yanwen.cc"; classtype:attempted-recon; sid:200029674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.ytvuml.top"; classtype:attempted-recon; sid:200029675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseevei.vivervesi.zjsyd.icu"; classtype:attempted-recon; sid:200029676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.abzcr.icu"; classtype:attempted-recon; sid:200029677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.afevzf.top"; classtype:attempted-recon; sid:200029678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.balaet.icu"; classtype:attempted-recon; sid:200029679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.bdbbvv.top"; classtype:attempted-recon; sid:200029680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.benefitted.icu"; classtype:attempted-recon; sid:200029681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.bjexfe.top"; classtype:attempted-recon; sid:200029682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.bporry.top"; classtype:attempted-recon; sid:200029683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.bspybm.top"; classtype:attempted-recon; sid:200029684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.ccvjar.top"; classtype:attempted-recon; sid:200029685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.cntxao.top"; classtype:attempted-recon; sid:200029686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.dauexk.top"; classtype:attempted-recon; sid:200029687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.evyqhg.top"; classtype:attempted-recon; sid:200029688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.exoysm.top"; classtype:attempted-recon; sid:200029689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.huaxiano.icu"; classtype:attempted-recon; sid:200029690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.jdqomw.top"; classtype:attempted-recon; sid:200029691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.msiesya.icu"; classtype:attempted-recon; sid:200029692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.pvhngq.top"; classtype:attempted-recon; sid:200029693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.quvhdd.top"; classtype:attempted-recon; sid:200029694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.tomorrowstduio.top"; classtype:attempted-recon; sid:200029695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.ufihby.top"; classtype:attempted-recon; sid:200029696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.yqzemo.top"; classtype:attempted-recon; sid:200029697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseieecei.viriaaevesi.zliboyp.icu"; classtype:attempted-recon; sid:200029698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.badkfs.icu"; classtype:attempted-recon; sid:200029699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.cntxao.top"; classtype:attempted-recon; sid:200029700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.cwadib.top"; classtype:attempted-recon; sid:200029701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.dlnxzo.top"; classtype:attempted-recon; sid:200029702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.ehngpw.top"; classtype:attempted-recon; sid:200029703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.fgcew.icu"; classtype:attempted-recon; sid:200029704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.fvqetn.top"; classtype:attempted-recon; sid:200029705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.jtuet.icu"; classtype:attempted-recon; sid:200029706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.kpblio.top"; classtype:attempted-recon; sid:200029707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.lenorv.top"; classtype:attempted-recon; sid:200029708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.pkilix.top"; classtype:attempted-recon; sid:200029709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.pvhngq.top"; classtype:attempted-recon; sid:200029710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.quvhdd.top"; classtype:attempted-recon; sid:200029711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.rkobagr.icu"; classtype:attempted-recon; sid:200029712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.ronipp.top"; classtype:attempted-recon; sid:200029713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.sejmqk.top"; classtype:attempted-recon; sid:200029714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.ssrpsl.top"; classtype:attempted-recon; sid:200029715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.tqmskg.top"; classtype:attempted-recon; sid:200029716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.ttxupv.top"; classtype:attempted-recon; sid:200029717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.ubdjag.top"; classtype:attempted-recon; sid:200029718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.upuphone.ltd"; classtype:attempted-recon; sid:200029719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.wbvazy.top"; classtype:attempted-recon; sid:200029720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.wingfh.top"; classtype:attempted-recon; sid:200029721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.zblgxm.top"; classtype:attempted-recon; sid:200029722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.zliboyp.icu"; classtype:attempted-recon; sid:200029723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcsecseievei.vivriavesi.zynepg.top"; classtype:attempted-recon; sid:200029724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.cnzlue.za.com"; classtype:attempted-recon; sid:200029725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.cpclxs.za.com"; classtype:attempted-recon; sid:200029726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.difkhu.za.com"; classtype:attempted-recon; sid:200029727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.dzniib.za.com"; classtype:attempted-recon; sid:200029728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.frghvs.za.com"; classtype:attempted-recon; sid:200029729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.fyyfxo.za.com"; classtype:attempted-recon; sid:200029730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.iezkxp.za.com"; classtype:attempted-recon; sid:200029731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.ifpdph.za.com"; classtype:attempted-recon; sid:200029732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.jpxnnz.za.com"; classtype:attempted-recon; sid:200029733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.kzdaec.za.com"; classtype:attempted-recon; sid:200029734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.lcuqbc.za.com"; classtype:attempted-recon; sid:200029735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.mgfxpv.za.com"; classtype:attempted-recon; sid:200029736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200029737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.nyapck.za.com"; classtype:attempted-recon; sid:200029738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.obnjjr.za.com"; classtype:attempted-recon; sid:200029739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.peqrlu.za.com"; classtype:attempted-recon; sid:200029740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.pilzbq.za.com"; classtype:attempted-recon; sid:200029741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.pxwxmw.za.com"; classtype:attempted-recon; sid:200029742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.qsgdnx.za.com"; classtype:attempted-recon; sid:200029743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.ryogde.za.com"; classtype:attempted-recon; sid:200029744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.sbonjn.za.com"; classtype:attempted-recon; sid:200029745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.sewril.za.com"; classtype:attempted-recon; sid:200029746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.taqabm.za.com"; classtype:attempted-recon; sid:200029747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.uktqmo.za.com"; classtype:attempted-recon; sid:200029748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.vjyswj.za.com"; classtype:attempted-recon; sid:200029749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.wffxjj.za.com"; classtype:attempted-recon; sid:200029750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.xioxfp.za.com"; classtype:attempted-recon; sid:200029751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.xmigxe.za.com"; classtype:attempted-recon; sid:200029752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseeecei.vivreaaevesi.zudxug.za.com"; classtype:attempted-recon; sid:200029753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.apoljj.za.com"; classtype:attempted-recon; sid:200029754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.axbhie.za.com"; classtype:attempted-recon; sid:200029755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.cbargn.za.com"; classtype:attempted-recon; sid:200029756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.cndiyk.za.com"; classtype:attempted-recon; sid:200029757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.dnjggs.za.com"; classtype:attempted-recon; sid:200029758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.epmgtc.za.com"; classtype:attempted-recon; sid:200029759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.fmmfcz.za.com"; classtype:attempted-recon; sid:200029760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.fthjtm.za.com"; classtype:attempted-recon; sid:200029761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.fyyfxo.za.com"; classtype:attempted-recon; sid:200029762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200029763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.iezkxp.za.com"; classtype:attempted-recon; sid:200029764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.lqonrt.za.com"; classtype:attempted-recon; sid:200029765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.lvuojw.za.com"; classtype:attempted-recon; sid:200029766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.nskxef.za.com"; classtype:attempted-recon; sid:200029767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.nsrsyf.za.com"; classtype:attempted-recon; sid:200029768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200029769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.obnjjr.za.com"; classtype:attempted-recon; sid:200029770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.ojabvb.za.com"; classtype:attempted-recon; sid:200029771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.pilzbq.za.com"; classtype:attempted-recon; sid:200029772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.prfshi.za.com"; classtype:attempted-recon; sid:200029773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.qbkymz.za.com"; classtype:attempted-recon; sid:200029774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.qsgdnx.za.com"; classtype:attempted-recon; sid:200029775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.rsxmth.za.com"; classtype:attempted-recon; sid:200029776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.vhwplz.za.com"; classtype:attempted-recon; sid:200029777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.vixxvg.za.com"; classtype:attempted-recon; sid:200029778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.vmmoue.za.com"; classtype:attempted-recon; sid:200029779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.vnsscq.za.com"; classtype:attempted-recon; sid:200029780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.vtihba.za.com"; classtype:attempted-recon; sid:200029781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.vusnur.za.com"; classtype:attempted-recon; sid:200029782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.wssjge.za.com"; classtype:attempted-recon; sid:200029783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.xmigxe.za.com"; classtype:attempted-recon; sid:200029784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.ygrkwy.za.com"; classtype:attempted-recon; sid:200029785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseevei.viversavesi.zrmusc.za.com"; classtype:attempted-recon; sid:200029786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.cbargn.za.com"; classtype:attempted-recon; sid:200029787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.dnjggs.za.com"; classtype:attempted-recon; sid:200029788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.dzniib.za.com"; classtype:attempted-recon; sid:200029789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.flydpf.za.com"; classtype:attempted-recon; sid:200029790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.fmmfcz.za.com"; classtype:attempted-recon; sid:200029791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.frghvs.za.com"; classtype:attempted-recon; sid:200029792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200029793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.iezkxp.za.com"; classtype:attempted-recon; sid:200029794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.jdjghn.za.com"; classtype:attempted-recon; sid:200029795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.jpxnnz.za.com"; classtype:attempted-recon; sid:200029796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.lcuqbc.za.com"; classtype:attempted-recon; sid:200029797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.lqonrt.za.com"; classtype:attempted-recon; sid:200029798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.lvuojw.za.com"; classtype:attempted-recon; sid:200029799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.lymdeg.za.com"; classtype:attempted-recon; sid:200029800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.nlutye.za.com"; classtype:attempted-recon; sid:200029801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.obnjjr.za.com"; classtype:attempted-recon; sid:200029802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.pfkndl.za.com"; classtype:attempted-recon; sid:200029803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.pfxtar.za.com"; classtype:attempted-recon; sid:200029804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.qsgdnx.za.com"; classtype:attempted-recon; sid:200029805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.sbonjn.za.com"; classtype:attempted-recon; sid:200029806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.stghfe.za.com"; classtype:attempted-recon; sid:200029807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.taqabm.za.com"; classtype:attempted-recon; sid:200029808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.tfdebx.za.com"; classtype:attempted-recon; sid:200029809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.vixxvg.za.com"; classtype:attempted-recon; sid:200029810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.vtihba.za.com"; classtype:attempted-recon; sid:200029811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.vucabx.za.com"; classtype:attempted-recon; sid:200029812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.vunivt.za.com"; classtype:attempted-recon; sid:200029813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.wffxjj.za.com"; classtype:attempted-recon; sid:200029814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.wssjge.za.com"; classtype:attempted-recon; sid:200029815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.xioxfp.za.com"; classtype:attempted-recon; sid:200029816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.yyciai.za.com"; classtype:attempted-recon; sid:200029817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseieecei.virveiaaevesi.zrmusc.za.com"; classtype:attempted-recon; sid:200029818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.apoljj.za.com"; classtype:attempted-recon; sid:200029819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.cndiyk.za.com"; classtype:attempted-recon; sid:200029820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.cnzlue.za.com"; classtype:attempted-recon; sid:200029821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.cpclxs.za.com"; classtype:attempted-recon; sid:200029822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.dnjggs.za.com"; classtype:attempted-recon; sid:200029823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.dyjnbb.za.com"; classtype:attempted-recon; sid:200029824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.dzniib.za.com"; classtype:attempted-recon; sid:200029825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.flydpf.za.com"; classtype:attempted-recon; sid:200029826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200029827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.jdjghn.za.com"; classtype:attempted-recon; sid:200029828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.jygknw.za.com"; classtype:attempted-recon; sid:200029829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.jzemci.za.com"; classtype:attempted-recon; sid:200029830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.kzdaec.za.com"; classtype:attempted-recon; sid:200029831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.lqonrt.za.com"; classtype:attempted-recon; sid:200029832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.lymdeg.za.com"; classtype:attempted-recon; sid:200029833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.nlutye.za.com"; classtype:attempted-recon; sid:200029834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.nqawww.za.com"; classtype:attempted-recon; sid:200029835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.nsrsyf.za.com"; classtype:attempted-recon; sid:200029836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.nyapck.za.com"; classtype:attempted-recon; sid:200029837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.phskmc.za.com"; classtype:attempted-recon; sid:200029838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.pilzbq.za.com"; classtype:attempted-recon; sid:200029839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.pruuwp.za.com"; classtype:attempted-recon; sid:200029840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.ryogde.za.com"; classtype:attempted-recon; sid:200029841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.vhwplz.za.com"; classtype:attempted-recon; sid:200029842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.vjyswj.za.com"; classtype:attempted-recon; sid:200029843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.vmmoue.za.com"; classtype:attempted-recon; sid:200029844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.vnsscq.za.com"; classtype:attempted-recon; sid:200029845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.xmigxe.za.com"; classtype:attempted-recon; sid:200029846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.ygrkwy.za.com"; classtype:attempted-recon; sid:200029847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.yjnkya.za.com"; classtype:attempted-recon; sid:200029848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.yyciai.za.com"; classtype:attempted-recon; sid:200029849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.zhafla.za.com"; classtype:attempted-recon; sid:200029850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvcseievei.vivresiavesi.ziqmtw.za.com"; classtype:attempted-recon; sid:200029851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicveaeaaverei.viavcrvacoiae.d24mu.icu"; classtype:attempted-recon; sid:200029852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicveaeaaverei.viavcrvacoiae.gzj5019.xyz"; classtype:attempted-recon; sid:200029853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicveaeaaverei.viavcrvacoiae.lohjph1.xyz"; classtype:attempted-recon; sid:200029854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicveaeaaverei.viavcrvacoiae.vaylqb.top"; classtype:attempted-recon; sid:200029855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvoseaaaeeei.viaccrvacooaier.1p2igt.icu"; classtype:attempted-recon; sid:200029856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvoseaaaeeei.viaccrvacooaier.iooazb.top"; classtype:attempted-recon; sid:200029857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvoseaaaseei.viacervacosaier.9rjsbn.icu"; classtype:attempted-recon; sid:200029858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvoseaaaseei.viacervacosaier.d24mu.icu"; classtype:attempted-recon; sid:200029859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvoseaaaseei.viacervacosaier.gvxyug.top"; classtype:attempted-recon; sid:200029860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.cbargn.za.com"; classtype:attempted-recon; sid:200029861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.cpclxs.za.com"; classtype:attempted-recon; sid:200029862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.fjdayb.za.com"; classtype:attempted-recon; sid:200029863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.fmdodt.za.com"; classtype:attempted-recon; sid:200029864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.fthjtm.za.com"; classtype:attempted-recon; sid:200029865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.fyyfxo.za.com"; classtype:attempted-recon; sid:200029866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.iezkxp.za.com"; classtype:attempted-recon; sid:200029867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.ifpdph.za.com"; classtype:attempted-recon; sid:200029868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.jdjghn.za.com"; classtype:attempted-recon; sid:200029869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.jygknw.za.com"; classtype:attempted-recon; sid:200029870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.jzemci.za.com"; classtype:attempted-recon; sid:200029871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.lqonrt.za.com"; classtype:attempted-recon; sid:200029872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.lvuojw.za.com"; classtype:attempted-recon; sid:200029873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.nlutye.za.com"; classtype:attempted-recon; sid:200029874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.nqawww.za.com"; classtype:attempted-recon; sid:200029875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.nsrsyf.za.com"; classtype:attempted-recon; sid:200029876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200029877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.nyapck.za.com"; classtype:attempted-recon; sid:200029878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.ojabvb.za.com"; classtype:attempted-recon; sid:200029879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.pfkndl.za.com"; classtype:attempted-recon; sid:200029880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.phskmc.za.com"; classtype:attempted-recon; sid:200029881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.pilzbq.za.com"; classtype:attempted-recon; sid:200029882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.pruuwp.za.com"; classtype:attempted-recon; sid:200029883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.qigckf.za.com"; classtype:attempted-recon; sid:200029884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.qytbke.za.com"; classtype:attempted-recon; sid:200029885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.rouqjs.za.com"; classtype:attempted-recon; sid:200029886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.ryogde.za.com"; classtype:attempted-recon; sid:200029887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.sewril.za.com"; classtype:attempted-recon; sid:200029888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.stghfe.za.com"; classtype:attempted-recon; sid:200029889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.uktqmo.za.com"; classtype:attempted-recon; sid:200029890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.vixxvg.za.com"; classtype:attempted-recon; sid:200029891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.vnsscq.za.com"; classtype:attempted-recon; sid:200029892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.vusnur.za.com"; classtype:attempted-recon; sid:200029893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.xmigxe.za.com"; classtype:attempted-recon; sid:200029894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.ylvgii.za.com"; classtype:attempted-recon; sid:200029895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.ymixml.za.com"; classtype:attempted-recon; sid:200029896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.yoltyz.za.com"; classtype:attempted-recon; sid:200029897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceiveci.vivrseiaveesi.yyciai.za.com"; classtype:attempted-recon; sid:200029898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.aiinpw.za.com"; classtype:attempted-recon; sid:200029899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.apoljj.za.com"; classtype:attempted-recon; sid:200029900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.cbargn.za.com"; classtype:attempted-recon; sid:200029901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.cpclxs.za.com"; classtype:attempted-recon; sid:200029902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.difkhu.za.com"; classtype:attempted-recon; sid:200029903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.fmdodt.za.com"; classtype:attempted-recon; sid:200029904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.kzdaec.za.com"; classtype:attempted-recon; sid:200029905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.lqonrt.za.com"; classtype:attempted-recon; sid:200029906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.lvuojw.za.com"; classtype:attempted-recon; sid:200029907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.lymdeg.za.com"; classtype:attempted-recon; sid:200029908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.nlutye.za.com"; classtype:attempted-recon; sid:200029909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.oaimcs.za.com"; classtype:attempted-recon; sid:200029910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.pddjuu.za.com"; classtype:attempted-recon; sid:200029911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.pxwxmw.za.com"; classtype:attempted-recon; sid:200029912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.qigckf.za.com"; classtype:attempted-recon; sid:200029913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.qyoqyz.za.com"; classtype:attempted-recon; sid:200029914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.sewril.za.com"; classtype:attempted-recon; sid:200029915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.stghfe.za.com"; classtype:attempted-recon; sid:200029916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.uhdxmb.za.com"; classtype:attempted-recon; sid:200029917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.uktqmo.za.com"; classtype:attempted-recon; sid:200029918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.vhwplz.za.com"; classtype:attempted-recon; sid:200029919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.vjyswj.za.com"; classtype:attempted-recon; sid:200029920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.vmmoue.za.com"; classtype:attempted-recon; sid:200029921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.vnsscq.za.com"; classtype:attempted-recon; sid:200029922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.vtihba.za.com"; classtype:attempted-recon; sid:200029923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.vucabx.za.com"; classtype:attempted-recon; sid:200029924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.wssjge.za.com"; classtype:attempted-recon; sid:200029925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.wylftw.za.com"; classtype:attempted-recon; sid:200029926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.ygrkwy.za.com"; classtype:attempted-recon; sid:200029927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.yjnkya.za.com"; classtype:attempted-recon; sid:200029928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.ymixml.za.com"; classtype:attempted-recon; sid:200029929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.yoltyz.za.com"; classtype:attempted-recon; sid:200029930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.yyciai.za.com"; classtype:attempted-recon; sid:200029931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.zhafla.za.com"; classtype:attempted-recon; sid:200029932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.ziuzyk.za.com"; classtype:attempted-recon; sid:200029933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.zrmusc.za.com"; classtype:attempted-recon; sid:200029934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceivei.vivsresivesi.zudxug.za.com"; classtype:attempted-recon; sid:200029935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.apoljj.za.com"; classtype:attempted-recon; sid:200029936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.dyjnbb.za.com"; classtype:attempted-recon; sid:200029937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.fmdodt.za.com"; classtype:attempted-recon; sid:200029938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.fmmfcz.za.com"; classtype:attempted-recon; sid:200029939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200029940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.ifpdph.za.com"; classtype:attempted-recon; sid:200029941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.lcuqbc.za.com"; classtype:attempted-recon; sid:200029942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.nsrsyf.za.com"; classtype:attempted-recon; sid:200029943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.oaimcs.za.com"; classtype:attempted-recon; sid:200029944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.ojabvb.za.com"; classtype:attempted-recon; sid:200029945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.pfxtar.za.com"; classtype:attempted-recon; sid:200029946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.qbkymz.za.com"; classtype:attempted-recon; sid:200029947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.sbonjn.za.com"; classtype:attempted-recon; sid:200029948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.stghfe.za.com"; classtype:attempted-recon; sid:200029949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.vhwplz.za.com"; classtype:attempted-recon; sid:200029950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.vixxvg.za.com"; classtype:attempted-recon; sid:200029951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.vmmoue.za.com"; classtype:attempted-recon; sid:200029952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.vunivt.za.com"; classtype:attempted-recon; sid:200029953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.vusnur.za.com"; classtype:attempted-recon; sid:200029954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.wylftw.za.com"; classtype:attempted-recon; sid:200029955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.ylvgii.za.com"; classtype:attempted-recon; sid:200029956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.yoltyz.za.com"; classtype:attempted-recon; sid:200029957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsceveci.vivsreaveesi.ziuzyk.za.com"; classtype:attempted-recon; sid:200029958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.aiinpw.za.com"; classtype:attempted-recon; sid:200029959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.axbhie.za.com"; classtype:attempted-recon; sid:200029960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.cpclxs.za.com"; classtype:attempted-recon; sid:200029961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.flydpf.za.com"; classtype:attempted-recon; sid:200029962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.iezkxp.za.com"; classtype:attempted-recon; sid:200029963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.lymdeg.za.com"; classtype:attempted-recon; sid:200029964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.nyapck.za.com"; classtype:attempted-recon; sid:200029965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.peqrlu.za.com"; classtype:attempted-recon; sid:200029966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.pfkndl.za.com"; classtype:attempted-recon; sid:200029967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.prfshi.za.com"; classtype:attempted-recon; sid:200029968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.pruuwp.za.com"; classtype:attempted-recon; sid:200029969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.rouqjs.za.com"; classtype:attempted-recon; sid:200029970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.rsxmth.za.com"; classtype:attempted-recon; sid:200029971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.sewril.za.com"; classtype:attempted-recon; sid:200029972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.vixxvg.za.com"; classtype:attempted-recon; sid:200029973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.vucabx.za.com"; classtype:attempted-recon; sid:200029974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.xioxfp.za.com"; classtype:attempted-recon; sid:200029975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.ymixml.za.com"; classtype:attempted-recon; sid:200029976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.zenagx.za.com"; classtype:attempted-recon; sid:200029977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.zhafla.za.com"; classtype:attempted-recon; sid:200029978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.ziuzyk.za.com"; classtype:attempted-recon; sid:200029979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvscevei.vivsersvesi.zrmusc.za.com"; classtype:attempted-recon; sid:200029980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.fiwzrb.top"; classtype:attempted-recon; sid:200029981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.hhksfr.top"; classtype:attempted-recon; sid:200029982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.ilpzgr.top"; classtype:attempted-recon; sid:200029983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.irllcd.top"; classtype:attempted-recon; sid:200029984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.jfmfyj.top"; classtype:attempted-recon; sid:200029985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.ksdadl.top"; classtype:attempted-recon; sid:200029986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.lwxxqk.top"; classtype:attempted-recon; sid:200029987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.mgandi.top"; classtype:attempted-recon; sid:200029988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.mhnved.top"; classtype:attempted-recon; sid:200029989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.mhxoyr.top"; classtype:attempted-recon; sid:200029990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.nbhlvc.top"; classtype:attempted-recon; sid:200029991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.pgwcxp.top"; classtype:attempted-recon; sid:200029992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.plqjhl.top"; classtype:attempted-recon; sid:200029993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.qboxjl.top"; classtype:attempted-recon; sid:200029994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.fshxqm.top"; classtype:attempted-recon; sid:200029995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.fzcftf.top"; classtype:attempted-recon; sid:200029996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.hgpqys.top"; classtype:attempted-recon; sid:200029997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.kxcepn.top"; classtype:attempted-recon; sid:200029998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.lwxxqk.top"; classtype:attempted-recon; sid:200029999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.mravkx.top"; classtype:attempted-recon; sid:200030000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.neidee.top"; classtype:attempted-recon; sid:200030001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.njhpgs.top"; classtype:attempted-recon; sid:200030002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.nxuiqz.top"; classtype:attempted-recon; sid:200030003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.ofburn.top"; classtype:attempted-recon; sid:200030004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.oycpxz.top"; classtype:attempted-recon; sid:200030005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.pdndft.top"; classtype:attempted-recon; sid:200030006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseivei.cvrievsresivesi.plqjhl.top"; classtype:attempted-recon; sid:200030007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.exrjwh.top"; classtype:attempted-recon; sid:200030008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.fbgnzp.top"; classtype:attempted-recon; sid:200030009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.gtfvze.top"; classtype:attempted-recon; sid:200030010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.guxqvw.top"; classtype:attempted-recon; sid:200030011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.hhksfr.top"; classtype:attempted-recon; sid:200030012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.mcbprf.top"; classtype:attempted-recon; sid:200030013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.mdaxpz.top"; classtype:attempted-recon; sid:200030014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.mhnved.top"; classtype:attempted-recon; sid:200030015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.mravkx.top"; classtype:attempted-recon; sid:200030016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.najkys.top"; classtype:attempted-recon; sid:200030017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.ngtwxt.top"; classtype:attempted-recon; sid:200030018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.nyzjio.top"; classtype:attempted-recon; sid:200030019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.ofburn.top"; classtype:attempted-recon; sid:200030020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.opyxhy.top"; classtype:attempted-recon; sid:200030021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.plqjhl.top"; classtype:attempted-recon; sid:200030022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.poaixv.top"; classtype:attempted-recon; sid:200030023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.qnomqo.top"; classtype:attempted-recon; sid:200030024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecseveci.cvrievsreaveesi.rchahv.top"; classtype:attempted-recon; sid:200030025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.klgjib.top"; classtype:attempted-recon; sid:200030026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.kvtvic.top"; classtype:attempted-recon; sid:200030027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.kxcepn.top"; classtype:attempted-recon; sid:200030028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.mcbprf.top"; classtype:attempted-recon; sid:200030029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.ofburn.top"; classtype:attempted-recon; sid:200030030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.oycpxz.top"; classtype:attempted-recon; sid:200030031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.poaixv.top"; classtype:attempted-recon; sid:200030032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.qboxjl.top"; classtype:attempted-recon; sid:200030033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsrecsevei.vcirvesersvesi.rjfbqi.top"; classtype:attempted-recon; sid:200030034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.ajvrm.icu"; classtype:attempted-recon; sid:200030035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.cjysqjj.icu"; classtype:attempted-recon; sid:200030036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.cntxao.top"; classtype:attempted-recon; sid:200030037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.coflya.top"; classtype:attempted-recon; sid:200030038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.dauexk.top"; classtype:attempted-recon; sid:200030039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.dhwynj.top"; classtype:attempted-recon; sid:200030040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.fgcew.icu"; classtype:attempted-recon; sid:200030041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.jkoozw.top"; classtype:attempted-recon; sid:200030042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.lenorv.top"; classtype:attempted-recon; sid:200030043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.mqiwux.top"; classtype:attempted-recon; sid:200030044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.quvhdd.top"; classtype:attempted-recon; sid:200030045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.sdqqgx.top"; classtype:attempted-recon; sid:200030046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.sejmqk.top"; classtype:attempted-recon; sid:200030047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.sgrxpw.top"; classtype:attempted-recon; sid:200030048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.upuphone.group"; classtype:attempted-recon; sid:200030049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.vozep.icu"; classtype:attempted-recon; sid:200030050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.wbziul.top"; classtype:attempted-recon; sid:200030051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.wdtsjr.top"; classtype:attempted-recon; sid:200030052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.wetot.icu"; classtype:attempted-recon; sid:200030053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.wetot.life"; classtype:attempted-recon; sid:200030054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.yanwen.cc"; classtype:attempted-recon; sid:200030055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.zliboyp.icu"; classtype:attempted-recon; sid:200030056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.znegsr.top"; classtype:attempted-recon; sid:200030057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceiveci.vivriaveesi.zynepg.top"; classtype:attempted-recon; sid:200030058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.abzcr.icu"; classtype:attempted-recon; sid:200030059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.ayqtuj.top"; classtype:attempted-recon; sid:200030060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.bspybm.top"; classtype:attempted-recon; sid:200030061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.cjysqjj.icu"; classtype:attempted-recon; sid:200030062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.cntxao.top"; classtype:attempted-recon; sid:200030063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.coflya.top"; classtype:attempted-recon; sid:200030064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.dauexk.top"; classtype:attempted-recon; sid:200030065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.dhwynj.top"; classtype:attempted-recon; sid:200030066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.ehxsyt.top"; classtype:attempted-recon; sid:200030067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.fksiud.icu"; classtype:attempted-recon; sid:200030068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.htixjser.icu"; classtype:attempted-recon; sid:200030069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.kpblio.top"; classtype:attempted-recon; sid:200030070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.lenorv.top"; classtype:attempted-recon; sid:200030071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.mkpiab.top"; classtype:attempted-recon; sid:200030072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.quvhdd.top"; classtype:attempted-recon; sid:200030073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.sctgkq.top"; classtype:attempted-recon; sid:200030074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.sdqqgx.top"; classtype:attempted-recon; sid:200030075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.sejmqk.top"; classtype:attempted-recon; sid:200030076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.shaot.icu"; classtype:attempted-recon; sid:200030077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.vozep.icu"; classtype:attempted-recon; sid:200030078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.wetot.life"; classtype:attempted-recon; sid:200030079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.wgipfc.top"; classtype:attempted-recon; sid:200030080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.wyisqr.top"; classtype:attempted-recon; sid:200030081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.xqpwkk.top"; classtype:attempted-recon; sid:200030082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.xudixq.top"; classtype:attempted-recon; sid:200030083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.xvtayq.top"; classtype:attempted-recon; sid:200030084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.yhitbg.top"; classtype:attempted-recon; sid:200030085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceivei.vivsrivesi.yqzemo.top"; classtype:attempted-recon; sid:200030086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.afevzf.top"; classtype:attempted-recon; sid:200030087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.ajvrm.icu"; classtype:attempted-recon; sid:200030088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.bjexfe.top"; classtype:attempted-recon; sid:200030089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.bspybm.top"; classtype:attempted-recon; sid:200030090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.cipqzd.top"; classtype:attempted-recon; sid:200030091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.cyqggi.top"; classtype:attempted-recon; sid:200030092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.dafenghao.icu"; classtype:attempted-recon; sid:200030093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.dhwynj.top"; classtype:attempted-recon; sid:200030094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.dpqshv.top"; classtype:attempted-recon; sid:200030095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.ehngpw.top"; classtype:attempted-recon; sid:200030096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.eucvbc.top"; classtype:attempted-recon; sid:200030097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.fvqetn.top"; classtype:attempted-recon; sid:200030098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.hyfxgx.top"; classtype:attempted-recon; sid:200030099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.mkpiab.top"; classtype:attempted-recon; sid:200030100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.sgrxpw.top"; classtype:attempted-recon; sid:200030101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.ttxupv.top"; classtype:attempted-recon; sid:200030102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.xudixq.top"; classtype:attempted-recon; sid:200030103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecceveci.vivsrveesi.zjsyd.icu"; classtype:attempted-recon; sid:200030104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.abzcr.icu"; classtype:attempted-recon; sid:200030105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.ayqtuj.top"; classtype:attempted-recon; sid:200030106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.badkfs.icu"; classtype:attempted-recon; sid:200030107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.bdbbvv.top"; classtype:attempted-recon; sid:200030108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.bzfdtw.top"; classtype:attempted-recon; sid:200030109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.cpgspk.top"; classtype:attempted-recon; sid:200030110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.dauexk.top"; classtype:attempted-recon; sid:200030111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.huaxiano.icu"; classtype:attempted-recon; sid:200030112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.msiesya.icu"; classtype:attempted-recon; sid:200030113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.pkilix.top"; classtype:attempted-recon; sid:200030114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.quvhdd.top"; classtype:attempted-recon; sid:200030115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.rkobagr.icu"; classtype:attempted-recon; sid:200030116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.rsfcmb.icu"; classtype:attempted-recon; sid:200030117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.sctgkq.top"; classtype:attempted-recon; sid:200030118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.ttxupv.top"; classtype:attempted-recon; sid:200030119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.upuphone.group"; classtype:attempted-recon; sid:200030120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.vfchrz.top"; classtype:attempted-recon; sid:200030121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.xudixq.top"; classtype:attempted-recon; sid:200030122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.yanwen.cc"; classtype:attempted-recon; sid:200030123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvsseccevei.vivseresi.yhitbg.top"; classtype:attempted-recon; sid:200030124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.ajvrm.icu"; classtype:attempted-recon; sid:200030125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.badkfs.icu"; classtype:attempted-recon; sid:200030126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.benefitted.icu"; classtype:attempted-recon; sid:200030127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.bjexfe.top"; classtype:attempted-recon; sid:200030128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.cyqggi.top"; classtype:attempted-recon; sid:200030129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.dafenghao.icu"; classtype:attempted-recon; sid:200030130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.digitize.ltd"; classtype:attempted-recon; sid:200030131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.hfoesk.top"; classtype:attempted-recon; sid:200030132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.htixjser.icu"; classtype:attempted-recon; sid:200030133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.lenorv.top"; classtype:attempted-recon; sid:200030134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.mavbpi.top"; classtype:attempted-recon; sid:200030135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.mkpiab.top"; classtype:attempted-recon; sid:200030136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.nxxdqw.top"; classtype:attempted-recon; sid:200030137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.pvhngq.top"; classtype:attempted-recon; sid:200030138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.rsfcmb.icu"; classtype:attempted-recon; sid:200030139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.ssrpsl.top"; classtype:attempted-recon; sid:200030140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.ttxupv.top"; classtype:attempted-recon; sid:200030141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.ubdjag.top"; classtype:attempted-recon; sid:200030142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.ufihby.top"; classtype:attempted-recon; sid:200030143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.vfchrz.top"; classtype:attempted-recon; sid:200030144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.vozep.icu"; classtype:attempted-recon; sid:200030145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.wbziul.top"; classtype:attempted-recon; sid:200030146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.wetot.icu"; classtype:attempted-recon; sid:200030147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.wetot.life"; classtype:attempted-recon; sid:200030148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.xvtayq.top"; classtype:attempted-recon; sid:200030149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivecic.eivrseiaveesi.xxdjik.top"; classtype:attempted-recon; sid:200030150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.ayqtuj.top"; classtype:attempted-recon; sid:200030151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.benefitted.icu"; classtype:attempted-recon; sid:200030152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.bporry.top"; classtype:attempted-recon; sid:200030153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.ccvjar.top"; classtype:attempted-recon; sid:200030154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.dlnxzo.top"; classtype:attempted-recon; sid:200030155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.dpqshv.top"; classtype:attempted-recon; sid:200030156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.fgcew.icu"; classtype:attempted-recon; sid:200030157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.hfoesk.top"; classtype:attempted-recon; sid:200030158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.jtuet.icu"; classtype:attempted-recon; sid:200030159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.kpblio.top"; classtype:attempted-recon; sid:200030160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.lenorv.top"; classtype:attempted-recon; sid:200030161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.mkpiab.top"; classtype:attempted-recon; sid:200030162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.mqiwux.top"; classtype:attempted-recon; sid:200030163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.msiesya.icu"; classtype:attempted-recon; sid:200030164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.quvhdd.top"; classtype:attempted-recon; sid:200030165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.ronipp.top"; classtype:attempted-recon; sid:200030166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.sejmqk.top"; classtype:attempted-recon; sid:200030167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.sgrxpw.top"; classtype:attempted-recon; sid:200030168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.upuphone.ltd"; classtype:attempted-recon; sid:200030169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.wbvazy.top"; classtype:attempted-recon; sid:200030170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.wetot.icu"; classtype:attempted-recon; sid:200030171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.wetot.life"; classtype:attempted-recon; sid:200030172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.wyisqr.top"; classtype:attempted-recon; sid:200030173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.xvtayq.top"; classtype:attempted-recon; sid:200030174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.yanwen.cc"; classtype:attempted-recon; sid:200030175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.yhitbg.top"; classtype:attempted-recon; sid:200030176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.zblgxm.top"; classtype:attempted-recon; sid:200030177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.zjsyd.icu"; classtype:attempted-recon; sid:200030178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseivei.cvevsresivesi.zliboyp.icu"; classtype:attempted-recon; sid:200030179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.bspybm.top"; classtype:attempted-recon; sid:200030180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.cjysqjj.icu"; classtype:attempted-recon; sid:200030181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.ckhnlk.top"; classtype:attempted-recon; sid:200030182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.cpgspk.top"; classtype:attempted-recon; sid:200030183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.dauexk.top"; classtype:attempted-recon; sid:200030184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.digitize.ltd"; classtype:attempted-recon; sid:200030185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.fgcew.icu"; classtype:attempted-recon; sid:200030186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.fksiud.icu"; classtype:attempted-recon; sid:200030187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.htixjser.icu"; classtype:attempted-recon; sid:200030188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.jdqomw.top"; classtype:attempted-recon; sid:200030189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.lenorv.top"; classtype:attempted-recon; sid:200030190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.mavbpi.top"; classtype:attempted-recon; sid:200030191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.msiesya.icu"; classtype:attempted-recon; sid:200030192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.qskgtg.top"; classtype:attempted-recon; sid:200030193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.shaot.icu"; classtype:attempted-recon; sid:200030194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.ssrpsl.top"; classtype:attempted-recon; sid:200030195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.tvdoqx.top"; classtype:attempted-recon; sid:200030196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.upuphone.ltd"; classtype:attempted-recon; sid:200030197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.vozep.icu"; classtype:attempted-recon; sid:200030198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.wdtsjr.top"; classtype:attempted-recon; sid:200030199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.wetot.life"; classtype:attempted-recon; sid:200030200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.wxnyfl.top"; classtype:attempted-recon; sid:200030201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.xlrppx.top"; classtype:attempted-recon; sid:200030202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.xxdjik.top"; classtype:attempted-recon; sid:200030203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.yqzemo.top"; classtype:attempted-recon; sid:200030204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.ytvuml.top"; classtype:attempted-recon; sid:200030205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecseveci.cvevsreaveesi.zblgxm.top"; classtype:attempted-recon; sid:200030206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.02vk.top"; classtype:attempted-recon; sid:200030207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.ayqtuj.top"; classtype:attempted-recon; sid:200030208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.badkfs.icu"; classtype:attempted-recon; sid:200030209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.balaet.icu"; classtype:attempted-recon; sid:200030210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.bdbbvv.top"; classtype:attempted-recon; sid:200030211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.bporry.top"; classtype:attempted-recon; sid:200030212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.bspybm.top"; classtype:attempted-recon; sid:200030213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.ckhnlk.top"; classtype:attempted-recon; sid:200030214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.dafenghao.icu"; classtype:attempted-recon; sid:200030215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.dpqshv.top"; classtype:attempted-recon; sid:200030216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.ehngpw.top"; classtype:attempted-recon; sid:200030217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.ehxsyt.top"; classtype:attempted-recon; sid:200030218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.htixjser.icu"; classtype:attempted-recon; sid:200030219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.hyfxgx.top"; classtype:attempted-recon; sid:200030220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.jtuet.icu"; classtype:attempted-recon; sid:200030221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.qskgtg.top"; classtype:attempted-recon; sid:200030222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.rsfcmb.icu"; classtype:attempted-recon; sid:200030223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.sctgkq.top"; classtype:attempted-recon; sid:200030224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.tvdoqx.top"; classtype:attempted-recon; sid:200030225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.ubdjag.top"; classtype:attempted-recon; sid:200030226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.upuphone.ltd"; classtype:attempted-recon; sid:200030227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.vfchrz.top"; classtype:attempted-recon; sid:200030228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.vozep.icu"; classtype:attempted-recon; sid:200030229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.wetot.icu"; classtype:attempted-recon; sid:200030230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.wgipfc.top"; classtype:attempted-recon; sid:200030231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.wxnyfl.top"; classtype:attempted-recon; sid:200030232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.xlrppx.top"; classtype:attempted-recon; sid:200030233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.yanwen.cc"; classtype:attempted-recon; sid:200030234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.ytvuml.top"; classtype:attempted-recon; sid:200030235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vicvssecrecsevei.vciesersvesi.zliboyp.icu"; classtype:attempted-recon; sid:200030236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"videobokepviamediafire2022.duckdns.org"; classtype:attempted-recon; sid:200030237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"videysrhof.duckdns.org"; classtype:attempted-recon; sid:200030238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vidhyaclinic.com"; classtype:attempted-recon; sid:200030239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieal.hyperphp.com"; classtype:attempted-recon; sid:200030240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.a8m6di.icu"; classtype:attempted-recon; sid:200030241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.aaxbpo.top"; classtype:attempted-recon; sid:200030242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.adpslp.top"; classtype:attempted-recon; sid:200030243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.aenjkw.top"; classtype:attempted-recon; sid:200030244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.agdhkb.top"; classtype:attempted-recon; sid:200030245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.akgjcb.top"; classtype:attempted-recon; sid:200030246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.baelbg.top"; classtype:attempted-recon; sid:200030247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.bhqnyq.icu"; classtype:attempted-recon; sid:200030248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.bkwgho.top"; classtype:attempted-recon; sid:200030249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.bmknvf.top"; classtype:attempted-recon; sid:200030250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.buzmri.top"; classtype:attempted-recon; sid:200030251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dgckut.top"; classtype:attempted-recon; sid:200030252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.djtela.top"; classtype:attempted-recon; sid:200030253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dlhsif.top"; classtype:attempted-recon; sid:200030254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dnoftm.top"; classtype:attempted-recon; sid:200030255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.doxryd.top"; classtype:attempted-recon; sid:200030256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dwxrym.top"; classtype:attempted-recon; sid:200030257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dy1nam.icu"; classtype:attempted-recon; sid:200030258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.efcgly.icu"; classtype:attempted-recon; sid:200030259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ejvyvo.top"; classtype:attempted-recon; sid:200030260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.erkzgb.top"; classtype:attempted-recon; sid:200030261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.erqvhz.icu"; classtype:attempted-recon; sid:200030262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ewhdkk.top"; classtype:attempted-recon; sid:200030263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.flgapj.top"; classtype:attempted-recon; sid:200030264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ftnnvo.icu"; classtype:attempted-recon; sid:200030265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.fviult.icu"; classtype:attempted-recon; sid:200030266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.fwgrbb.top"; classtype:attempted-recon; sid:200030267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.fxfbld.top"; classtype:attempted-recon; sid:200030268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.gpik9c.icu"; classtype:attempted-recon; sid:200030269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.gy8u8m.icu"; classtype:attempted-recon; sid:200030270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.hihmof.top"; classtype:attempted-recon; sid:200030271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.hnyrvh.icu"; classtype:attempted-recon; sid:200030272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.hstoja.top"; classtype:attempted-recon; sid:200030273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.icbupe.icu"; classtype:attempted-recon; sid:200030274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ikjthi.top"; classtype:attempted-recon; sid:200030275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ileuct.top"; classtype:attempted-recon; sid:200030276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.iobrjq.icu"; classtype:attempted-recon; sid:200030277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.iyfkny.top"; classtype:attempted-recon; sid:200030278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jashxw.icu"; classtype:attempted-recon; sid:200030279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jfqejr.icu"; classtype:attempted-recon; sid:200030280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.joziry.top"; classtype:attempted-recon; sid:200030281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jvquad.top"; classtype:attempted-recon; sid:200030282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jvzxml.top"; classtype:attempted-recon; sid:200030283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jyszpt.top"; classtype:attempted-recon; sid:200030284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kdhnlt.top"; classtype:attempted-recon; sid:200030285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.keud7w.icu"; classtype:attempted-recon; sid:200030286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kgflqd.top"; classtype:attempted-recon; sid:200030287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kkvrke.icu"; classtype:attempted-recon; sid:200030288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kosoht.icu"; classtype:attempted-recon; sid:200030289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.laojhs.top"; classtype:attempted-recon; sid:200030290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.lcq3yk.icu"; classtype:attempted-recon; sid:200030291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ljnqqs.top"; classtype:attempted-recon; sid:200030292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.llpgun.icu"; classtype:attempted-recon; sid:200030293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.luiyci.top"; classtype:attempted-recon; sid:200030294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.lxszsl.icu"; classtype:attempted-recon; sid:200030295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.mleksy.top"; classtype:attempted-recon; sid:200030296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.msiobh.top"; classtype:attempted-recon; sid:200030297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.msphzi.top"; classtype:attempted-recon; sid:200030298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.mtdqmc.icu"; classtype:attempted-recon; sid:200030299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ndkuwx.top"; classtype:attempted-recon; sid:200030300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.neagfg.top"; classtype:attempted-recon; sid:200030301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.njaczc.top"; classtype:attempted-recon; sid:200030302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.obmxjj.top"; classtype:attempted-recon; sid:200030303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ontgpj.top"; classtype:attempted-recon; sid:200030304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.oshfrh.top"; classtype:attempted-recon; sid:200030305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.oubbeh.top"; classtype:attempted-recon; sid:200030306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.oxfasj.top"; classtype:attempted-recon; sid:200030307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.p0mou1.icu"; classtype:attempted-recon; sid:200030308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.p31bj2.icu"; classtype:attempted-recon; sid:200030309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.p7251j.icu"; classtype:attempted-recon; sid:200030310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.passoe.top"; classtype:attempted-recon; sid:200030311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.pasytj.top"; classtype:attempted-recon; sid:200030312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.pazzro.top"; classtype:attempted-recon; sid:200030313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.pcukoi.icu"; classtype:attempted-recon; sid:200030314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.qyaudr.top"; classtype:attempted-recon; sid:200030315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.rlaptr.top"; classtype:attempted-recon; sid:200030316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.rlrkoz.top"; classtype:attempted-recon; sid:200030317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.rwuluo.top"; classtype:attempted-recon; sid:200030318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.sk6y3y.icu"; classtype:attempted-recon; sid:200030319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.slstjk.top"; classtype:attempted-recon; sid:200030320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.tbsfgl.icu"; classtype:attempted-recon; sid:200030321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.timuyw.icu"; classtype:attempted-recon; sid:200030322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.tpwghl.top"; classtype:attempted-recon; sid:200030323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.tutpfb.icu"; classtype:attempted-recon; sid:200030324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.veuqdd.icu"; classtype:attempted-recon; sid:200030325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.vghrha.top"; classtype:attempted-recon; sid:200030326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.vnhemj.icu"; classtype:attempted-recon; sid:200030327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.wfgyvk.top"; classtype:attempted-recon; sid:200030328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.wgrfay.top"; classtype:attempted-recon; sid:200030329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.xahccw.icu"; classtype:attempted-recon; sid:200030330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.xgnrrh.top"; classtype:attempted-recon; sid:200030331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.xqvlbl.top"; classtype:attempted-recon; sid:200030332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ynaecg.top"; classtype:attempted-recon; sid:200030333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ywcuuj.top"; classtype:attempted-recon; sid:200030334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ywzeqn.top"; classtype:attempted-recon; sid:200030335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zdealp.icu"; classtype:attempted-recon; sid:200030336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zllcxx.top"; classtype:attempted-recon; sid:200030337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zqlmyv.icu"; classtype:attempted-recon; sid:200030338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zxizqv.top"; classtype:attempted-recon; sid:200030339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.a8m6di.icu"; classtype:attempted-recon; sid:200030340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.aaxbpo.top"; classtype:attempted-recon; sid:200030341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.adpslp.top"; classtype:attempted-recon; sid:200030342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.aenjkw.top"; classtype:attempted-recon; sid:200030343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.agdhkb.top"; classtype:attempted-recon; sid:200030344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.akgjcb.top"; classtype:attempted-recon; sid:200030345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.baelbg.top"; classtype:attempted-recon; sid:200030346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.bhqnyq.icu"; classtype:attempted-recon; sid:200030347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.bkwgho.top"; classtype:attempted-recon; sid:200030348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.bmknvf.top"; classtype:attempted-recon; sid:200030349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.buzmri.top"; classtype:attempted-recon; sid:200030350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dgckut.top"; classtype:attempted-recon; sid:200030351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.djtela.top"; classtype:attempted-recon; sid:200030352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dlhsif.top"; classtype:attempted-recon; sid:200030353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dnoftm.top"; classtype:attempted-recon; sid:200030354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.doxryd.top"; classtype:attempted-recon; sid:200030355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dwxrym.top"; classtype:attempted-recon; sid:200030356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dy1nam.icu"; classtype:attempted-recon; sid:200030357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.efcgly.icu"; classtype:attempted-recon; sid:200030358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ejvyvo.top"; classtype:attempted-recon; sid:200030359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.erkzgb.top"; classtype:attempted-recon; sid:200030360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.erqvhz.icu"; classtype:attempted-recon; sid:200030361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ewhdkk.top"; classtype:attempted-recon; sid:200030362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.flgapj.top"; classtype:attempted-recon; sid:200030363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ftnnvo.icu"; classtype:attempted-recon; sid:200030364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.fviult.icu"; classtype:attempted-recon; sid:200030365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.fwgrbb.top"; classtype:attempted-recon; sid:200030366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.fxfbld.top"; classtype:attempted-recon; sid:200030367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.gpik9c.icu"; classtype:attempted-recon; sid:200030368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.gy8u8m.icu"; classtype:attempted-recon; sid:200030369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.hihmof.top"; classtype:attempted-recon; sid:200030370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.hnyrvh.icu"; classtype:attempted-recon; sid:200030371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.hstoja.top"; classtype:attempted-recon; sid:200030372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.icbupe.icu"; classtype:attempted-recon; sid:200030373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ikjthi.top"; classtype:attempted-recon; sid:200030374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ileuct.top"; classtype:attempted-recon; sid:200030375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.iobrjq.icu"; classtype:attempted-recon; sid:200030376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.iyfkny.top"; classtype:attempted-recon; sid:200030377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jashxw.icu"; classtype:attempted-recon; sid:200030378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jfqejr.icu"; classtype:attempted-recon; sid:200030379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.joziry.top"; classtype:attempted-recon; sid:200030380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jvquad.top"; classtype:attempted-recon; sid:200030381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jvzxml.top"; classtype:attempted-recon; sid:200030382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jyszpt.top"; classtype:attempted-recon; sid:200030383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kdhnlt.top"; classtype:attempted-recon; sid:200030384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.keud7w.icu"; classtype:attempted-recon; sid:200030385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kgflqd.top"; classtype:attempted-recon; sid:200030386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kkvrke.icu"; classtype:attempted-recon; sid:200030387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kosoht.icu"; classtype:attempted-recon; sid:200030388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.laojhs.top"; classtype:attempted-recon; sid:200030389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.lcq3yk.icu"; classtype:attempted-recon; sid:200030390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ljnqqs.top"; classtype:attempted-recon; sid:200030391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.llpgun.icu"; classtype:attempted-recon; sid:200030392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.luiyci.top"; classtype:attempted-recon; sid:200030393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.lxszsl.icu"; classtype:attempted-recon; sid:200030394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.mleksy.top"; classtype:attempted-recon; sid:200030395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.msiobh.top"; classtype:attempted-recon; sid:200030396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.msphzi.top"; classtype:attempted-recon; sid:200030397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.mtdqmc.icu"; classtype:attempted-recon; sid:200030398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ndkuwx.top"; classtype:attempted-recon; sid:200030399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.neagfg.top"; classtype:attempted-recon; sid:200030400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.njaczc.top"; classtype:attempted-recon; sid:200030401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.obmxjj.top"; classtype:attempted-recon; sid:200030402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ontgpj.top"; classtype:attempted-recon; sid:200030403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.oshfrh.top"; classtype:attempted-recon; sid:200030404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.oubbeh.top"; classtype:attempted-recon; sid:200030405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.oxfasj.top"; classtype:attempted-recon; sid:200030406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.p0mou1.icu"; classtype:attempted-recon; sid:200030407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.p31bj2.icu"; classtype:attempted-recon; sid:200030408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.p7251j.icu"; classtype:attempted-recon; sid:200030409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.passoe.top"; classtype:attempted-recon; sid:200030410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.pasytj.top"; classtype:attempted-recon; sid:200030411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.pazzro.top"; classtype:attempted-recon; sid:200030412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.pcukoi.icu"; classtype:attempted-recon; sid:200030413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.qyaudr.top"; classtype:attempted-recon; sid:200030414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.rlaptr.top"; classtype:attempted-recon; sid:200030415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.rlrkoz.top"; classtype:attempted-recon; sid:200030416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.rwuluo.top"; classtype:attempted-recon; sid:200030417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.sk6y3y.icu"; classtype:attempted-recon; sid:200030418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.slstjk.top"; classtype:attempted-recon; sid:200030419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.tbsfgl.icu"; classtype:attempted-recon; sid:200030420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.timuyw.icu"; classtype:attempted-recon; sid:200030421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.tpwghl.top"; classtype:attempted-recon; sid:200030422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.tutpfb.icu"; classtype:attempted-recon; sid:200030423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.veuqdd.icu"; classtype:attempted-recon; sid:200030424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.vghrha.top"; classtype:attempted-recon; sid:200030425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.vnhemj.icu"; classtype:attempted-recon; sid:200030426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.wfgyvk.top"; classtype:attempted-recon; sid:200030427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.wgrfay.top"; classtype:attempted-recon; sid:200030428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.xahccw.icu"; classtype:attempted-recon; sid:200030429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.xgnrrh.top"; classtype:attempted-recon; sid:200030430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.xqvlbl.top"; classtype:attempted-recon; sid:200030431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ynaecg.top"; classtype:attempted-recon; sid:200030432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ywcuuj.top"; classtype:attempted-recon; sid:200030433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ywzeqn.top"; classtype:attempted-recon; sid:200030434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.zdealp.icu"; classtype:attempted-recon; sid:200030435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.zllcxx.top"; classtype:attempted-recon; sid:200030436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.zqlmyv.icu"; classtype:attempted-recon; sid:200030437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.zxizqv.top"; classtype:attempted-recon; sid:200030438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.a8m6di.icu"; classtype:attempted-recon; sid:200030439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.aaxbpo.top"; classtype:attempted-recon; sid:200030440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.adpslp.top"; classtype:attempted-recon; sid:200030441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.aenjkw.top"; classtype:attempted-recon; sid:200030442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.agdhkb.top"; classtype:attempted-recon; sid:200030443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.akgjcb.top"; classtype:attempted-recon; sid:200030444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.baelbg.top"; classtype:attempted-recon; sid:200030445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.bhqnyq.icu"; classtype:attempted-recon; sid:200030446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.bkwgho.top"; classtype:attempted-recon; sid:200030447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.bmknvf.top"; classtype:attempted-recon; sid:200030448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.buzmri.top"; classtype:attempted-recon; sid:200030449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.dgckut.top"; classtype:attempted-recon; sid:200030450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.djtela.top"; classtype:attempted-recon; sid:200030451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.dlhsif.top"; classtype:attempted-recon; sid:200030452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.dnoftm.top"; classtype:attempted-recon; sid:200030453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.doxryd.top"; classtype:attempted-recon; sid:200030454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.dwxrym.top"; classtype:attempted-recon; sid:200030455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.dy1nam.icu"; classtype:attempted-recon; sid:200030456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.efcgly.icu"; classtype:attempted-recon; sid:200030457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ejvyvo.top"; classtype:attempted-recon; sid:200030458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.erkzgb.top"; classtype:attempted-recon; sid:200030459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.erqvhz.icu"; classtype:attempted-recon; sid:200030460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ewhdkk.top"; classtype:attempted-recon; sid:200030461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.flgapj.top"; classtype:attempted-recon; sid:200030462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ftnnvo.icu"; classtype:attempted-recon; sid:200030463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.fviult.icu"; classtype:attempted-recon; sid:200030464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.fwgrbb.top"; classtype:attempted-recon; sid:200030465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.fxfbld.top"; classtype:attempted-recon; sid:200030466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.gpik9c.icu"; classtype:attempted-recon; sid:200030467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.gy8u8m.icu"; classtype:attempted-recon; sid:200030468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.hihmof.top"; classtype:attempted-recon; sid:200030469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.hnyrvh.icu"; classtype:attempted-recon; sid:200030470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.hstoja.top"; classtype:attempted-recon; sid:200030471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.icbupe.icu"; classtype:attempted-recon; sid:200030472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ikjthi.top"; classtype:attempted-recon; sid:200030473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ileuct.top"; classtype:attempted-recon; sid:200030474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.iobrjq.icu"; classtype:attempted-recon; sid:200030475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.iyfkny.top"; classtype:attempted-recon; sid:200030476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.jashxw.icu"; classtype:attempted-recon; sid:200030477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.jfqejr.icu"; classtype:attempted-recon; sid:200030478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.joziry.top"; classtype:attempted-recon; sid:200030479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.jvquad.top"; classtype:attempted-recon; sid:200030480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.jvzxml.top"; classtype:attempted-recon; sid:200030481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.jyszpt.top"; classtype:attempted-recon; sid:200030482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.kdhnlt.top"; classtype:attempted-recon; sid:200030483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.keud7w.icu"; classtype:attempted-recon; sid:200030484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.kgflqd.top"; classtype:attempted-recon; sid:200030485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.kkvrke.icu"; classtype:attempted-recon; sid:200030486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.kosoht.icu"; classtype:attempted-recon; sid:200030487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.laojhs.top"; classtype:attempted-recon; sid:200030488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.lcq3yk.icu"; classtype:attempted-recon; sid:200030489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ljnqqs.top"; classtype:attempted-recon; sid:200030490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.llpgun.icu"; classtype:attempted-recon; sid:200030491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.luiyci.top"; classtype:attempted-recon; sid:200030492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.lxszsl.icu"; classtype:attempted-recon; sid:200030493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.mleksy.top"; classtype:attempted-recon; sid:200030494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.msiobh.top"; classtype:attempted-recon; sid:200030495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.msphzi.top"; classtype:attempted-recon; sid:200030496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.mtdqmc.icu"; classtype:attempted-recon; sid:200030497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ndkuwx.top"; classtype:attempted-recon; sid:200030498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.neagfg.top"; classtype:attempted-recon; sid:200030499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.njaczc.top"; classtype:attempted-recon; sid:200030500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.obmxjj.top"; classtype:attempted-recon; sid:200030501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ontgpj.top"; classtype:attempted-recon; sid:200030502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.oshfrh.top"; classtype:attempted-recon; sid:200030503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.oubbeh.top"; classtype:attempted-recon; sid:200030504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.oxfasj.top"; classtype:attempted-recon; sid:200030505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.p0mou1.icu"; classtype:attempted-recon; sid:200030506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.p31bj2.icu"; classtype:attempted-recon; sid:200030507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.p7251j.icu"; classtype:attempted-recon; sid:200030508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.passoe.top"; classtype:attempted-recon; sid:200030509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.pasytj.top"; classtype:attempted-recon; sid:200030510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.pazzro.top"; classtype:attempted-recon; sid:200030511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.pcukoi.icu"; classtype:attempted-recon; sid:200030512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.qyaudr.top"; classtype:attempted-recon; sid:200030513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.rlaptr.top"; classtype:attempted-recon; sid:200030514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.rlrkoz.top"; classtype:attempted-recon; sid:200030515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.rwuluo.top"; classtype:attempted-recon; sid:200030516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.sk6y3y.icu"; classtype:attempted-recon; sid:200030517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.slstjk.top"; classtype:attempted-recon; sid:200030518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.tbsfgl.icu"; classtype:attempted-recon; sid:200030519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.timuyw.icu"; classtype:attempted-recon; sid:200030520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.tpwghl.top"; classtype:attempted-recon; sid:200030521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.tutpfb.icu"; classtype:attempted-recon; sid:200030522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.veuqdd.icu"; classtype:attempted-recon; sid:200030523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.vghrha.top"; classtype:attempted-recon; sid:200030524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.vnhemj.icu"; classtype:attempted-recon; sid:200030525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.wfgyvk.top"; classtype:attempted-recon; sid:200030526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.wgrfay.top"; classtype:attempted-recon; sid:200030527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.xahccw.icu"; classtype:attempted-recon; sid:200030528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.xgnrrh.top"; classtype:attempted-recon; sid:200030529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.xqvlbl.top"; classtype:attempted-recon; sid:200030530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ynaecg.top"; classtype:attempted-recon; sid:200030531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ywcuuj.top"; classtype:attempted-recon; sid:200030532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.ywzeqn.top"; classtype:attempted-recon; sid:200030533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.zdealp.icu"; classtype:attempted-recon; sid:200030534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.zllcxx.top"; classtype:attempted-recon; sid:200030535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.zqlmyv.icu"; classtype:attempted-recon; sid:200030536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinneiure.visorevsirnnermmvi.zxizqv.top"; classtype:attempted-recon; sid:200030537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.a8m6di.icu"; classtype:attempted-recon; sid:200030538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.aaxbpo.top"; classtype:attempted-recon; sid:200030539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.adpslp.top"; classtype:attempted-recon; sid:200030540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.aenjkw.top"; classtype:attempted-recon; sid:200030541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.agdhkb.top"; classtype:attempted-recon; sid:200030542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.akgjcb.top"; classtype:attempted-recon; sid:200030543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.baelbg.top"; classtype:attempted-recon; sid:200030544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.bhqnyq.icu"; classtype:attempted-recon; sid:200030545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.bkwgho.top"; classtype:attempted-recon; sid:200030546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.bmknvf.top"; classtype:attempted-recon; sid:200030547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.buzmri.top"; classtype:attempted-recon; sid:200030548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.dgckut.top"; classtype:attempted-recon; sid:200030549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.djtela.top"; classtype:attempted-recon; sid:200030550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.dlhsif.top"; classtype:attempted-recon; sid:200030551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.dnoftm.top"; classtype:attempted-recon; sid:200030552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.doxryd.top"; classtype:attempted-recon; sid:200030553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.dwxrym.top"; classtype:attempted-recon; sid:200030554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.dy1nam.icu"; classtype:attempted-recon; sid:200030555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.efcgly.icu"; classtype:attempted-recon; sid:200030556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ejvyvo.top"; classtype:attempted-recon; sid:200030557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.erkzgb.top"; classtype:attempted-recon; sid:200030558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.erqvhz.icu"; classtype:attempted-recon; sid:200030559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ewhdkk.top"; classtype:attempted-recon; sid:200030560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.flgapj.top"; classtype:attempted-recon; sid:200030561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ftnnvo.icu"; classtype:attempted-recon; sid:200030562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.fviult.icu"; classtype:attempted-recon; sid:200030563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.fwgrbb.top"; classtype:attempted-recon; sid:200030564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.fxfbld.top"; classtype:attempted-recon; sid:200030565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.gpik9c.icu"; classtype:attempted-recon; sid:200030566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.gy8u8m.icu"; classtype:attempted-recon; sid:200030567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.hihmof.top"; classtype:attempted-recon; sid:200030568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.hnyrvh.icu"; classtype:attempted-recon; sid:200030569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.hstoja.top"; classtype:attempted-recon; sid:200030570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.icbupe.icu"; classtype:attempted-recon; sid:200030571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ikjthi.top"; classtype:attempted-recon; sid:200030572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ileuct.top"; classtype:attempted-recon; sid:200030573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.iobrjq.icu"; classtype:attempted-recon; sid:200030574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.iyfkny.top"; classtype:attempted-recon; sid:200030575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.jashxw.icu"; classtype:attempted-recon; sid:200030576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.jfqejr.icu"; classtype:attempted-recon; sid:200030577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.joziry.top"; classtype:attempted-recon; sid:200030578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.jvquad.top"; classtype:attempted-recon; sid:200030579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.jvzxml.top"; classtype:attempted-recon; sid:200030580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.jyszpt.top"; classtype:attempted-recon; sid:200030581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.kdhnlt.top"; classtype:attempted-recon; sid:200030582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.keud7w.icu"; classtype:attempted-recon; sid:200030583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.kgflqd.top"; classtype:attempted-recon; sid:200030584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.kkvrke.icu"; classtype:attempted-recon; sid:200030585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.kosoht.icu"; classtype:attempted-recon; sid:200030586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.laojhs.top"; classtype:attempted-recon; sid:200030587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.lcq3yk.icu"; classtype:attempted-recon; sid:200030588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ljnqqs.top"; classtype:attempted-recon; sid:200030589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.llpgun.icu"; classtype:attempted-recon; sid:200030590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.luiyci.top"; classtype:attempted-recon; sid:200030591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.lxszsl.icu"; classtype:attempted-recon; sid:200030592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.mleksy.top"; classtype:attempted-recon; sid:200030593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.msiobh.top"; classtype:attempted-recon; sid:200030594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.msphzi.top"; classtype:attempted-recon; sid:200030595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.mtdqmc.icu"; classtype:attempted-recon; sid:200030596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ndkuwx.top"; classtype:attempted-recon; sid:200030597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.neagfg.top"; classtype:attempted-recon; sid:200030598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.njaczc.top"; classtype:attempted-recon; sid:200030599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.obmxjj.top"; classtype:attempted-recon; sid:200030600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ontgpj.top"; classtype:attempted-recon; sid:200030601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.oshfrh.top"; classtype:attempted-recon; sid:200030602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.oubbeh.top"; classtype:attempted-recon; sid:200030603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.oxfasj.top"; classtype:attempted-recon; sid:200030604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.p0mou1.icu"; classtype:attempted-recon; sid:200030605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.p31bj2.icu"; classtype:attempted-recon; sid:200030606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.p7251j.icu"; classtype:attempted-recon; sid:200030607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.passoe.top"; classtype:attempted-recon; sid:200030608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.pasytj.top"; classtype:attempted-recon; sid:200030609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.pazzro.top"; classtype:attempted-recon; sid:200030610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.pcukoi.icu"; classtype:attempted-recon; sid:200030611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.qyaudr.top"; classtype:attempted-recon; sid:200030612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.rlaptr.top"; classtype:attempted-recon; sid:200030613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.rlrkoz.top"; classtype:attempted-recon; sid:200030614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.rwuluo.top"; classtype:attempted-recon; sid:200030615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.sk6y3y.icu"; classtype:attempted-recon; sid:200030616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.slstjk.top"; classtype:attempted-recon; sid:200030617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.tbsfgl.icu"; classtype:attempted-recon; sid:200030618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.timuyw.icu"; classtype:attempted-recon; sid:200030619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.tpwghl.top"; classtype:attempted-recon; sid:200030620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.tutpfb.icu"; classtype:attempted-recon; sid:200030621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.veuqdd.icu"; classtype:attempted-recon; sid:200030622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.vghrha.top"; classtype:attempted-recon; sid:200030623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.vnhemj.icu"; classtype:attempted-recon; sid:200030624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.wfgyvk.top"; classtype:attempted-recon; sid:200030625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.wgrfay.top"; classtype:attempted-recon; sid:200030626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.xahccw.icu"; classtype:attempted-recon; sid:200030627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.xgnrrh.top"; classtype:attempted-recon; sid:200030628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.xqvlbl.top"; classtype:attempted-recon; sid:200030629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ynaecg.top"; classtype:attempted-recon; sid:200030630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ywcuuj.top"; classtype:attempted-recon; sid:200030631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.ywzeqn.top"; classtype:attempted-recon; sid:200030632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.zdealp.icu"; classtype:attempted-recon; sid:200030633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.zllcxx.top"; classtype:attempted-recon; sid:200030634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.zqlmyv.icu"; classtype:attempted-recon; sid:200030635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.zxizqv.top"; classtype:attempted-recon; sid:200030636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.a8m6di.icu"; classtype:attempted-recon; sid:200030637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.aaxbpo.top"; classtype:attempted-recon; sid:200030638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.adpslp.top"; classtype:attempted-recon; sid:200030639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.aenjkw.top"; classtype:attempted-recon; sid:200030640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.agdhkb.top"; classtype:attempted-recon; sid:200030641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.akgjcb.top"; classtype:attempted-recon; sid:200030642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.baelbg.top"; classtype:attempted-recon; sid:200030643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.bhqnyq.icu"; classtype:attempted-recon; sid:200030644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.bkwgho.top"; classtype:attempted-recon; sid:200030645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.bmknvf.top"; classtype:attempted-recon; sid:200030646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.buzmri.top"; classtype:attempted-recon; sid:200030647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.dgckut.top"; classtype:attempted-recon; sid:200030648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.djtela.top"; classtype:attempted-recon; sid:200030649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.dlhsif.top"; classtype:attempted-recon; sid:200030650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.dnoftm.top"; classtype:attempted-recon; sid:200030651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.doxryd.top"; classtype:attempted-recon; sid:200030652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.dwxrym.top"; classtype:attempted-recon; sid:200030653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.dy1nam.icu"; classtype:attempted-recon; sid:200030654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.efcgly.icu"; classtype:attempted-recon; sid:200030655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ejvyvo.top"; classtype:attempted-recon; sid:200030656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.erkzgb.top"; classtype:attempted-recon; sid:200030657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.erqvhz.icu"; classtype:attempted-recon; sid:200030658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ewhdkk.top"; classtype:attempted-recon; sid:200030659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.flgapj.top"; classtype:attempted-recon; sid:200030660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ftnnvo.icu"; classtype:attempted-recon; sid:200030661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.fviult.icu"; classtype:attempted-recon; sid:200030662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.fwgrbb.top"; classtype:attempted-recon; sid:200030663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.fxfbld.top"; classtype:attempted-recon; sid:200030664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.gpik9c.icu"; classtype:attempted-recon; sid:200030665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.gy8u8m.icu"; classtype:attempted-recon; sid:200030666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.hihmof.top"; classtype:attempted-recon; sid:200030667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.hnyrvh.icu"; classtype:attempted-recon; sid:200030668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.hstoja.top"; classtype:attempted-recon; sid:200030669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.icbupe.icu"; classtype:attempted-recon; sid:200030670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ikjthi.top"; classtype:attempted-recon; sid:200030671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ileuct.top"; classtype:attempted-recon; sid:200030672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.iobrjq.icu"; classtype:attempted-recon; sid:200030673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.iyfkny.top"; classtype:attempted-recon; sid:200030674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.jashxw.icu"; classtype:attempted-recon; sid:200030675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.jfqejr.icu"; classtype:attempted-recon; sid:200030676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.joziry.top"; classtype:attempted-recon; sid:200030677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.jvquad.top"; classtype:attempted-recon; sid:200030678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.jvzxml.top"; classtype:attempted-recon; sid:200030679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.jyszpt.top"; classtype:attempted-recon; sid:200030680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.kdhnlt.top"; classtype:attempted-recon; sid:200030681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.keud7w.icu"; classtype:attempted-recon; sid:200030682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.kgflqd.top"; classtype:attempted-recon; sid:200030683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.kkvrke.icu"; classtype:attempted-recon; sid:200030684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.kosoht.icu"; classtype:attempted-recon; sid:200030685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.laojhs.top"; classtype:attempted-recon; sid:200030686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.lcq3yk.icu"; classtype:attempted-recon; sid:200030687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ljnqqs.top"; classtype:attempted-recon; sid:200030688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.llpgun.icu"; classtype:attempted-recon; sid:200030689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.luiyci.top"; classtype:attempted-recon; sid:200030690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.lxszsl.icu"; classtype:attempted-recon; sid:200030691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.mleksy.top"; classtype:attempted-recon; sid:200030692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.msiobh.top"; classtype:attempted-recon; sid:200030693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.msphzi.top"; classtype:attempted-recon; sid:200030694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.mtdqmc.icu"; classtype:attempted-recon; sid:200030695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ndkuwx.top"; classtype:attempted-recon; sid:200030696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.neagfg.top"; classtype:attempted-recon; sid:200030697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.njaczc.top"; classtype:attempted-recon; sid:200030698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.obmxjj.top"; classtype:attempted-recon; sid:200030699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ontgpj.top"; classtype:attempted-recon; sid:200030700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.oshfrh.top"; classtype:attempted-recon; sid:200030701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.oubbeh.top"; classtype:attempted-recon; sid:200030702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.oxfasj.top"; classtype:attempted-recon; sid:200030703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.p0mou1.icu"; classtype:attempted-recon; sid:200030704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.p31bj2.icu"; classtype:attempted-recon; sid:200030705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.p7251j.icu"; classtype:attempted-recon; sid:200030706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.passoe.top"; classtype:attempted-recon; sid:200030707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.pasytj.top"; classtype:attempted-recon; sid:200030708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.pazzro.top"; classtype:attempted-recon; sid:200030709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.pcukoi.icu"; classtype:attempted-recon; sid:200030710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.qyaudr.top"; classtype:attempted-recon; sid:200030711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.rlaptr.top"; classtype:attempted-recon; sid:200030712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.rlrkoz.top"; classtype:attempted-recon; sid:200030713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.rwuluo.top"; classtype:attempted-recon; sid:200030714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.sk6y3y.icu"; classtype:attempted-recon; sid:200030715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.slstjk.top"; classtype:attempted-recon; sid:200030716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.tbsfgl.icu"; classtype:attempted-recon; sid:200030717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.timuyw.icu"; classtype:attempted-recon; sid:200030718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.tpwghl.top"; classtype:attempted-recon; sid:200030719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.tutpfb.icu"; classtype:attempted-recon; sid:200030720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.veuqdd.icu"; classtype:attempted-recon; sid:200030721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.vghrha.top"; classtype:attempted-recon; sid:200030722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.vnhemj.icu"; classtype:attempted-recon; sid:200030723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.wfgyvk.top"; classtype:attempted-recon; sid:200030724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.wgrfay.top"; classtype:attempted-recon; sid:200030725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.xahccw.icu"; classtype:attempted-recon; sid:200030726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.xgnrrh.top"; classtype:attempted-recon; sid:200030727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.xqvlbl.top"; classtype:attempted-recon; sid:200030728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ynaecg.top"; classtype:attempted-recon; sid:200030729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ywcuuj.top"; classtype:attempted-recon; sid:200030730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.ywzeqn.top"; classtype:attempted-recon; sid:200030731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.zdealp.icu"; classtype:attempted-recon; sid:200030732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.zllcxx.top"; classtype:attempted-recon; sid:200030733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.zqlmyv.icu"; classtype:attempted-recon; sid:200030734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.zxizqv.top"; classtype:attempted-recon; sid:200030735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.a8m6di.icu"; classtype:attempted-recon; sid:200030736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.aaxbpo.top"; classtype:attempted-recon; sid:200030737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.adpslp.top"; classtype:attempted-recon; sid:200030738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.aenjkw.top"; classtype:attempted-recon; sid:200030739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.agdhkb.top"; classtype:attempted-recon; sid:200030740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.akgjcb.top"; classtype:attempted-recon; sid:200030741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.baelbg.top"; classtype:attempted-recon; sid:200030742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.bhqnyq.icu"; classtype:attempted-recon; sid:200030743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.bkwgho.top"; classtype:attempted-recon; sid:200030744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.bmknvf.top"; classtype:attempted-recon; sid:200030745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.buzmri.top"; classtype:attempted-recon; sid:200030746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.dgckut.top"; classtype:attempted-recon; sid:200030747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.djtela.top"; classtype:attempted-recon; sid:200030748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.dlhsif.top"; classtype:attempted-recon; sid:200030749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.dnoftm.top"; classtype:attempted-recon; sid:200030750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.doxryd.top"; classtype:attempted-recon; sid:200030751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.dwxrym.top"; classtype:attempted-recon; sid:200030752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.dy1nam.icu"; classtype:attempted-recon; sid:200030753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.efcgly.icu"; classtype:attempted-recon; sid:200030754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ejvyvo.top"; classtype:attempted-recon; sid:200030755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.erkzgb.top"; classtype:attempted-recon; sid:200030756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.erqvhz.icu"; classtype:attempted-recon; sid:200030757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ewhdkk.top"; classtype:attempted-recon; sid:200030758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.flgapj.top"; classtype:attempted-recon; sid:200030759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ftnnvo.icu"; classtype:attempted-recon; sid:200030760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.fviult.icu"; classtype:attempted-recon; sid:200030761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.fwgrbb.top"; classtype:attempted-recon; sid:200030762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.fxfbld.top"; classtype:attempted-recon; sid:200030763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.gpik9c.icu"; classtype:attempted-recon; sid:200030764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.gy8u8m.icu"; classtype:attempted-recon; sid:200030765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.hihmof.top"; classtype:attempted-recon; sid:200030766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.hnyrvh.icu"; classtype:attempted-recon; sid:200030767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.hstoja.top"; classtype:attempted-recon; sid:200030768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.icbupe.icu"; classtype:attempted-recon; sid:200030769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ikjthi.top"; classtype:attempted-recon; sid:200030770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ileuct.top"; classtype:attempted-recon; sid:200030771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.iobrjq.icu"; classtype:attempted-recon; sid:200030772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.iyfkny.top"; classtype:attempted-recon; sid:200030773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.jashxw.icu"; classtype:attempted-recon; sid:200030774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.jfqejr.icu"; classtype:attempted-recon; sid:200030775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.joziry.top"; classtype:attempted-recon; sid:200030776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.jvquad.top"; classtype:attempted-recon; sid:200030777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.jvzxml.top"; classtype:attempted-recon; sid:200030778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.jyszpt.top"; classtype:attempted-recon; sid:200030779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.kdhnlt.top"; classtype:attempted-recon; sid:200030780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.keud7w.icu"; classtype:attempted-recon; sid:200030781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.kgflqd.top"; classtype:attempted-recon; sid:200030782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.kkvrke.icu"; classtype:attempted-recon; sid:200030783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.kosoht.icu"; classtype:attempted-recon; sid:200030784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.laojhs.top"; classtype:attempted-recon; sid:200030785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.lcq3yk.icu"; classtype:attempted-recon; sid:200030786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ljnqqs.top"; classtype:attempted-recon; sid:200030787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.llpgun.icu"; classtype:attempted-recon; sid:200030788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.luiyci.top"; classtype:attempted-recon; sid:200030789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.lxszsl.icu"; classtype:attempted-recon; sid:200030790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.mleksy.top"; classtype:attempted-recon; sid:200030791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.msiobh.top"; classtype:attempted-recon; sid:200030792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.msphzi.top"; classtype:attempted-recon; sid:200030793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.mtdqmc.icu"; classtype:attempted-recon; sid:200030794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ndkuwx.top"; classtype:attempted-recon; sid:200030795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.neagfg.top"; classtype:attempted-recon; sid:200030796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.njaczc.top"; classtype:attempted-recon; sid:200030797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.obmxjj.top"; classtype:attempted-recon; sid:200030798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ontgpj.top"; classtype:attempted-recon; sid:200030799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.oshfrh.top"; classtype:attempted-recon; sid:200030800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.oubbeh.top"; classtype:attempted-recon; sid:200030801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.oxfasj.top"; classtype:attempted-recon; sid:200030802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.p0mou1.icu"; classtype:attempted-recon; sid:200030803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.p31bj2.icu"; classtype:attempted-recon; sid:200030804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.p7251j.icu"; classtype:attempted-recon; sid:200030805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.passoe.top"; classtype:attempted-recon; sid:200030806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.pasytj.top"; classtype:attempted-recon; sid:200030807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.pazzro.top"; classtype:attempted-recon; sid:200030808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.pcukoi.icu"; classtype:attempted-recon; sid:200030809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.qyaudr.top"; classtype:attempted-recon; sid:200030810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.rlaptr.top"; classtype:attempted-recon; sid:200030811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.rlrkoz.top"; classtype:attempted-recon; sid:200030812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.rwuluo.top"; classtype:attempted-recon; sid:200030813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.sk6y3y.icu"; classtype:attempted-recon; sid:200030814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.slstjk.top"; classtype:attempted-recon; sid:200030815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.tbsfgl.icu"; classtype:attempted-recon; sid:200030816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.timuyw.icu"; classtype:attempted-recon; sid:200030817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.tpwghl.top"; classtype:attempted-recon; sid:200030818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.tutpfb.icu"; classtype:attempted-recon; sid:200030819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.veuqdd.icu"; classtype:attempted-recon; sid:200030820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.vghrha.top"; classtype:attempted-recon; sid:200030821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.vnhemj.icu"; classtype:attempted-recon; sid:200030822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.wfgyvk.top"; classtype:attempted-recon; sid:200030823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.wgrfay.top"; classtype:attempted-recon; sid:200030824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.xahccw.icu"; classtype:attempted-recon; sid:200030825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.xgnrrh.top"; classtype:attempted-recon; sid:200030826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.xqvlbl.top"; classtype:attempted-recon; sid:200030827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ynaecg.top"; classtype:attempted-recon; sid:200030828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ywcuuj.top"; classtype:attempted-recon; sid:200030829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.ywzeqn.top"; classtype:attempted-recon; sid:200030830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.zdealp.icu"; classtype:attempted-recon; sid:200030831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.zllcxx.top"; classtype:attempted-recon; sid:200030832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.zqlmyv.icu"; classtype:attempted-recon; sid:200030833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.zxizqv.top"; classtype:attempted-recon; sid:200030834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.a8m6di.icu"; classtype:attempted-recon; sid:200030835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.aaxbpo.top"; classtype:attempted-recon; sid:200030836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.adpslp.top"; classtype:attempted-recon; sid:200030837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.aenjkw.top"; classtype:attempted-recon; sid:200030838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.agdhkb.top"; classtype:attempted-recon; sid:200030839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.akgjcb.top"; classtype:attempted-recon; sid:200030840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.baelbg.top"; classtype:attempted-recon; sid:200030841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.bhqnyq.icu"; classtype:attempted-recon; sid:200030842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.bkwgho.top"; classtype:attempted-recon; sid:200030843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.bmknvf.top"; classtype:attempted-recon; sid:200030844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.buzmri.top"; classtype:attempted-recon; sid:200030845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.dgckut.top"; classtype:attempted-recon; sid:200030846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.djtela.top"; classtype:attempted-recon; sid:200030847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.dlhsif.top"; classtype:attempted-recon; sid:200030848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.dnoftm.top"; classtype:attempted-recon; sid:200030849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.doxryd.top"; classtype:attempted-recon; sid:200030850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.dwxrym.top"; classtype:attempted-recon; sid:200030851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.dy1nam.icu"; classtype:attempted-recon; sid:200030852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.efcgly.icu"; classtype:attempted-recon; sid:200030853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ejvyvo.top"; classtype:attempted-recon; sid:200030854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.erkzgb.top"; classtype:attempted-recon; sid:200030855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.erqvhz.icu"; classtype:attempted-recon; sid:200030856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ewhdkk.top"; classtype:attempted-recon; sid:200030857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.flgapj.top"; classtype:attempted-recon; sid:200030858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ftnnvo.icu"; classtype:attempted-recon; sid:200030859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.fviult.icu"; classtype:attempted-recon; sid:200030860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.fwgrbb.top"; classtype:attempted-recon; sid:200030861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.fxfbld.top"; classtype:attempted-recon; sid:200030862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.gpik9c.icu"; classtype:attempted-recon; sid:200030863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.gy8u8m.icu"; classtype:attempted-recon; sid:200030864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.hihmof.top"; classtype:attempted-recon; sid:200030865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.hnyrvh.icu"; classtype:attempted-recon; sid:200030866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.hstoja.top"; classtype:attempted-recon; sid:200030867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.icbupe.icu"; classtype:attempted-recon; sid:200030868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ikjthi.top"; classtype:attempted-recon; sid:200030869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ileuct.top"; classtype:attempted-recon; sid:200030870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.iobrjq.icu"; classtype:attempted-recon; sid:200030871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.iyfkny.top"; classtype:attempted-recon; sid:200030872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.jashxw.icu"; classtype:attempted-recon; sid:200030873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.jfqejr.icu"; classtype:attempted-recon; sid:200030874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.joziry.top"; classtype:attempted-recon; sid:200030875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.jvquad.top"; classtype:attempted-recon; sid:200030876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.jvzxml.top"; classtype:attempted-recon; sid:200030877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.jyszpt.top"; classtype:attempted-recon; sid:200030878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.kdhnlt.top"; classtype:attempted-recon; sid:200030879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.keud7w.icu"; classtype:attempted-recon; sid:200030880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.kgflqd.top"; classtype:attempted-recon; sid:200030881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.kkvrke.icu"; classtype:attempted-recon; sid:200030882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.kosoht.icu"; classtype:attempted-recon; sid:200030883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.laojhs.top"; classtype:attempted-recon; sid:200030884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.lcq3yk.icu"; classtype:attempted-recon; sid:200030885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ljnqqs.top"; classtype:attempted-recon; sid:200030886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.llpgun.icu"; classtype:attempted-recon; sid:200030887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.luiyci.top"; classtype:attempted-recon; sid:200030888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.lxszsl.icu"; classtype:attempted-recon; sid:200030889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.mleksy.top"; classtype:attempted-recon; sid:200030890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.msiobh.top"; classtype:attempted-recon; sid:200030891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.msphzi.top"; classtype:attempted-recon; sid:200030892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.mtdqmc.icu"; classtype:attempted-recon; sid:200030893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ndkuwx.top"; classtype:attempted-recon; sid:200030894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.neagfg.top"; classtype:attempted-recon; sid:200030895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.njaczc.top"; classtype:attempted-recon; sid:200030896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.obmxjj.top"; classtype:attempted-recon; sid:200030897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ontgpj.top"; classtype:attempted-recon; sid:200030898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.oshfrh.top"; classtype:attempted-recon; sid:200030899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.oubbeh.top"; classtype:attempted-recon; sid:200030900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.oxfasj.top"; classtype:attempted-recon; sid:200030901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.p0mou1.icu"; classtype:attempted-recon; sid:200030902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.p31bj2.icu"; classtype:attempted-recon; sid:200030903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.p7251j.icu"; classtype:attempted-recon; sid:200030904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.passoe.top"; classtype:attempted-recon; sid:200030905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.pasytj.top"; classtype:attempted-recon; sid:200030906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.pazzro.top"; classtype:attempted-recon; sid:200030907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.pcukoi.icu"; classtype:attempted-recon; sid:200030908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.qyaudr.top"; classtype:attempted-recon; sid:200030909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.rlaptr.top"; classtype:attempted-recon; sid:200030910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.rlrkoz.top"; classtype:attempted-recon; sid:200030911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.rwuluo.top"; classtype:attempted-recon; sid:200030912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.sk6y3y.icu"; classtype:attempted-recon; sid:200030913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.slstjk.top"; classtype:attempted-recon; sid:200030914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.tbsfgl.icu"; classtype:attempted-recon; sid:200030915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.timuyw.icu"; classtype:attempted-recon; sid:200030916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.tpwghl.top"; classtype:attempted-recon; sid:200030917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.tutpfb.icu"; classtype:attempted-recon; sid:200030918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.veuqdd.icu"; classtype:attempted-recon; sid:200030919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.vghrha.top"; classtype:attempted-recon; sid:200030920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.vnhemj.icu"; classtype:attempted-recon; sid:200030921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.wfgyvk.top"; classtype:attempted-recon; sid:200030922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.wgrfay.top"; classtype:attempted-recon; sid:200030923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.xahccw.icu"; classtype:attempted-recon; sid:200030924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.xgnrrh.top"; classtype:attempted-recon; sid:200030925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.xqvlbl.top"; classtype:attempted-recon; sid:200030926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ynaecg.top"; classtype:attempted-recon; sid:200030927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ywcuuj.top"; classtype:attempted-recon; sid:200030928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.ywzeqn.top"; classtype:attempted-recon; sid:200030929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.zdealp.icu"; classtype:attempted-recon; sid:200030930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.zllcxx.top"; classtype:attempted-recon; sid:200030931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.zqlmyv.icu"; classtype:attempted-recon; sid:200030932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.zxizqv.top"; classtype:attempted-recon; sid:200030933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.a8m6di.icu"; classtype:attempted-recon; sid:200030934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.aaxbpo.top"; classtype:attempted-recon; sid:200030935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.adpslp.top"; classtype:attempted-recon; sid:200030936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.aenjkw.top"; classtype:attempted-recon; sid:200030937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.agdhkb.top"; classtype:attempted-recon; sid:200030938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.akgjcb.top"; classtype:attempted-recon; sid:200030939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.baelbg.top"; classtype:attempted-recon; sid:200030940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.bhqnyq.icu"; classtype:attempted-recon; sid:200030941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.bkwgho.top"; classtype:attempted-recon; sid:200030942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.bmknvf.top"; classtype:attempted-recon; sid:200030943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.buzmri.top"; classtype:attempted-recon; sid:200030944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dgckut.top"; classtype:attempted-recon; sid:200030945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.djtela.top"; classtype:attempted-recon; sid:200030946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dlhsif.top"; classtype:attempted-recon; sid:200030947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dnoftm.top"; classtype:attempted-recon; sid:200030948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.doxryd.top"; classtype:attempted-recon; sid:200030949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dwxrym.top"; classtype:attempted-recon; sid:200030950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dy1nam.icu"; classtype:attempted-recon; sid:200030951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.efcgly.icu"; classtype:attempted-recon; sid:200030952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ejvyvo.top"; classtype:attempted-recon; sid:200030953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.erkzgb.top"; classtype:attempted-recon; sid:200030954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.erqvhz.icu"; classtype:attempted-recon; sid:200030955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ewhdkk.top"; classtype:attempted-recon; sid:200030956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.flgapj.top"; classtype:attempted-recon; sid:200030957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ftnnvo.icu"; classtype:attempted-recon; sid:200030958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.fviult.icu"; classtype:attempted-recon; sid:200030959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.fwgrbb.top"; classtype:attempted-recon; sid:200030960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.fxfbld.top"; classtype:attempted-recon; sid:200030961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.gpik9c.icu"; classtype:attempted-recon; sid:200030962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.gy8u8m.icu"; classtype:attempted-recon; sid:200030963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.hihmof.top"; classtype:attempted-recon; sid:200030964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.hnyrvh.icu"; classtype:attempted-recon; sid:200030965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.hstoja.top"; classtype:attempted-recon; sid:200030966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.icbupe.icu"; classtype:attempted-recon; sid:200030967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ikjthi.top"; classtype:attempted-recon; sid:200030968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ileuct.top"; classtype:attempted-recon; sid:200030969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.iobrjq.icu"; classtype:attempted-recon; sid:200030970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.iyfkny.top"; classtype:attempted-recon; sid:200030971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jashxw.icu"; classtype:attempted-recon; sid:200030972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jfqejr.icu"; classtype:attempted-recon; sid:200030973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.joziry.top"; classtype:attempted-recon; sid:200030974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jvquad.top"; classtype:attempted-recon; sid:200030975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jvzxml.top"; classtype:attempted-recon; sid:200030976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jyszpt.top"; classtype:attempted-recon; sid:200030977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kdhnlt.top"; classtype:attempted-recon; sid:200030978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.keud7w.icu"; classtype:attempted-recon; sid:200030979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kgflqd.top"; classtype:attempted-recon; sid:200030980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kkvrke.icu"; classtype:attempted-recon; sid:200030981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kosoht.icu"; classtype:attempted-recon; sid:200030982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.laojhs.top"; classtype:attempted-recon; sid:200030983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.lcq3yk.icu"; classtype:attempted-recon; sid:200030984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ljnqqs.top"; classtype:attempted-recon; sid:200030985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.llpgun.icu"; classtype:attempted-recon; sid:200030986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.luiyci.top"; classtype:attempted-recon; sid:200030987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.lxszsl.icu"; classtype:attempted-recon; sid:200030988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.mleksy.top"; classtype:attempted-recon; sid:200030989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.msiobh.top"; classtype:attempted-recon; sid:200030990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.msphzi.top"; classtype:attempted-recon; sid:200030991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.mtdqmc.icu"; classtype:attempted-recon; sid:200030992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ndkuwx.top"; classtype:attempted-recon; sid:200030993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.neagfg.top"; classtype:attempted-recon; sid:200030994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.njaczc.top"; classtype:attempted-recon; sid:200030995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.obmxjj.top"; classtype:attempted-recon; sid:200030996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ontgpj.top"; classtype:attempted-recon; sid:200030997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.oshfrh.top"; classtype:attempted-recon; sid:200030998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.oubbeh.top"; classtype:attempted-recon; sid:200030999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.oxfasj.top"; classtype:attempted-recon; sid:200031000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.p0mou1.icu"; classtype:attempted-recon; sid:200031001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.p31bj2.icu"; classtype:attempted-recon; sid:200031002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.p7251j.icu"; classtype:attempted-recon; sid:200031003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.passoe.top"; classtype:attempted-recon; sid:200031004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.pasytj.top"; classtype:attempted-recon; sid:200031005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.pazzro.top"; classtype:attempted-recon; sid:200031006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.pcukoi.icu"; classtype:attempted-recon; sid:200031007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.qyaudr.top"; classtype:attempted-recon; sid:200031008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.rlaptr.top"; classtype:attempted-recon; sid:200031009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.rlrkoz.top"; classtype:attempted-recon; sid:200031010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.rwuluo.top"; classtype:attempted-recon; sid:200031011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.sk6y3y.icu"; classtype:attempted-recon; sid:200031012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.slstjk.top"; classtype:attempted-recon; sid:200031013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.tbsfgl.icu"; classtype:attempted-recon; sid:200031014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.timuyw.icu"; classtype:attempted-recon; sid:200031015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.tpwghl.top"; classtype:attempted-recon; sid:200031016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.tutpfb.icu"; classtype:attempted-recon; sid:200031017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.veuqdd.icu"; classtype:attempted-recon; sid:200031018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.vghrha.top"; classtype:attempted-recon; sid:200031019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.vnhemj.icu"; classtype:attempted-recon; sid:200031020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.wfgyvk.top"; classtype:attempted-recon; sid:200031021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.wgrfay.top"; classtype:attempted-recon; sid:200031022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.xahccw.icu"; classtype:attempted-recon; sid:200031023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.xgnrrh.top"; classtype:attempted-recon; sid:200031024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.xqvlbl.top"; classtype:attempted-recon; sid:200031025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ynaecg.top"; classtype:attempted-recon; sid:200031026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ywcuuj.top"; classtype:attempted-recon; sid:200031027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ywzeqn.top"; classtype:attempted-recon; sid:200031028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zdealp.icu"; classtype:attempted-recon; sid:200031029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zllcxx.top"; classtype:attempted-recon; sid:200031030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zqlmyv.icu"; classtype:attempted-recon; sid:200031031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zxizqv.top"; classtype:attempted-recon; sid:200031032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.a8m6di.icu"; classtype:attempted-recon; sid:200031033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.aaxbpo.top"; classtype:attempted-recon; sid:200031034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.adpslp.top"; classtype:attempted-recon; sid:200031035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.aenjkw.top"; classtype:attempted-recon; sid:200031036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.agdhkb.top"; classtype:attempted-recon; sid:200031037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.akgjcb.top"; classtype:attempted-recon; sid:200031038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.baelbg.top"; classtype:attempted-recon; sid:200031039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.bhqnyq.icu"; classtype:attempted-recon; sid:200031040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.bkwgho.top"; classtype:attempted-recon; sid:200031041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.bmknvf.top"; classtype:attempted-recon; sid:200031042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.buzmri.top"; classtype:attempted-recon; sid:200031043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dgckut.top"; classtype:attempted-recon; sid:200031044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.djtela.top"; classtype:attempted-recon; sid:200031045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dlhsif.top"; classtype:attempted-recon; sid:200031046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dnoftm.top"; classtype:attempted-recon; sid:200031047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.doxryd.top"; classtype:attempted-recon; sid:200031048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dwxrym.top"; classtype:attempted-recon; sid:200031049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dy1nam.icu"; classtype:attempted-recon; sid:200031050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.efcgly.icu"; classtype:attempted-recon; sid:200031051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ejvyvo.top"; classtype:attempted-recon; sid:200031052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.erkzgb.top"; classtype:attempted-recon; sid:200031053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.erqvhz.icu"; classtype:attempted-recon; sid:200031054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ewhdkk.top"; classtype:attempted-recon; sid:200031055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.flgapj.top"; classtype:attempted-recon; sid:200031056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ftnnvo.icu"; classtype:attempted-recon; sid:200031057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.fviult.icu"; classtype:attempted-recon; sid:200031058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.fwgrbb.top"; classtype:attempted-recon; sid:200031059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.fxfbld.top"; classtype:attempted-recon; sid:200031060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.gpik9c.icu"; classtype:attempted-recon; sid:200031061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.gy8u8m.icu"; classtype:attempted-recon; sid:200031062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.hihmof.top"; classtype:attempted-recon; sid:200031063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.hnyrvh.icu"; classtype:attempted-recon; sid:200031064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.hstoja.top"; classtype:attempted-recon; sid:200031065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.icbupe.icu"; classtype:attempted-recon; sid:200031066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ikjthi.top"; classtype:attempted-recon; sid:200031067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ileuct.top"; classtype:attempted-recon; sid:200031068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.iobrjq.icu"; classtype:attempted-recon; sid:200031069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.iyfkny.top"; classtype:attempted-recon; sid:200031070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jashxw.icu"; classtype:attempted-recon; sid:200031071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jfqejr.icu"; classtype:attempted-recon; sid:200031072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.joziry.top"; classtype:attempted-recon; sid:200031073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jvquad.top"; classtype:attempted-recon; sid:200031074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jvzxml.top"; classtype:attempted-recon; sid:200031075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jyszpt.top"; classtype:attempted-recon; sid:200031076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kdhnlt.top"; classtype:attempted-recon; sid:200031077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.keud7w.icu"; classtype:attempted-recon; sid:200031078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kgflqd.top"; classtype:attempted-recon; sid:200031079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kkvrke.icu"; classtype:attempted-recon; sid:200031080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kosoht.icu"; classtype:attempted-recon; sid:200031081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.laojhs.top"; classtype:attempted-recon; sid:200031082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.lcq3yk.icu"; classtype:attempted-recon; sid:200031083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ljnqqs.top"; classtype:attempted-recon; sid:200031084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.llpgun.icu"; classtype:attempted-recon; sid:200031085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.luiyci.top"; classtype:attempted-recon; sid:200031086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.lxszsl.icu"; classtype:attempted-recon; sid:200031087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.mleksy.top"; classtype:attempted-recon; sid:200031088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.msiobh.top"; classtype:attempted-recon; sid:200031089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.msphzi.top"; classtype:attempted-recon; sid:200031090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.mtdqmc.icu"; classtype:attempted-recon; sid:200031091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ndkuwx.top"; classtype:attempted-recon; sid:200031092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.neagfg.top"; classtype:attempted-recon; sid:200031093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.njaczc.top"; classtype:attempted-recon; sid:200031094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.obmxjj.top"; classtype:attempted-recon; sid:200031095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ontgpj.top"; classtype:attempted-recon; sid:200031096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.oshfrh.top"; classtype:attempted-recon; sid:200031097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.oubbeh.top"; classtype:attempted-recon; sid:200031098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.oxfasj.top"; classtype:attempted-recon; sid:200031099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.p0mou1.icu"; classtype:attempted-recon; sid:200031100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.p31bj2.icu"; classtype:attempted-recon; sid:200031101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.p7251j.icu"; classtype:attempted-recon; sid:200031102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.passoe.top"; classtype:attempted-recon; sid:200031103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.pasytj.top"; classtype:attempted-recon; sid:200031104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.pazzro.top"; classtype:attempted-recon; sid:200031105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.pcukoi.icu"; classtype:attempted-recon; sid:200031106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.qyaudr.top"; classtype:attempted-recon; sid:200031107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.rlaptr.top"; classtype:attempted-recon; sid:200031108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.rlrkoz.top"; classtype:attempted-recon; sid:200031109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.rwuluo.top"; classtype:attempted-recon; sid:200031110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.sk6y3y.icu"; classtype:attempted-recon; sid:200031111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.slstjk.top"; classtype:attempted-recon; sid:200031112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.tbsfgl.icu"; classtype:attempted-recon; sid:200031113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.timuyw.icu"; classtype:attempted-recon; sid:200031114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.tpwghl.top"; classtype:attempted-recon; sid:200031115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.tutpfb.icu"; classtype:attempted-recon; sid:200031116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.veuqdd.icu"; classtype:attempted-recon; sid:200031117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.vghrha.top"; classtype:attempted-recon; sid:200031118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.vnhemj.icu"; classtype:attempted-recon; sid:200031119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.wfgyvk.top"; classtype:attempted-recon; sid:200031120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.wgrfay.top"; classtype:attempted-recon; sid:200031121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.xahccw.icu"; classtype:attempted-recon; sid:200031122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.xgnrrh.top"; classtype:attempted-recon; sid:200031123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.xqvlbl.top"; classtype:attempted-recon; sid:200031124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ynaecg.top"; classtype:attempted-recon; sid:200031125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ywcuuj.top"; classtype:attempted-recon; sid:200031126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ywzeqn.top"; classtype:attempted-recon; sid:200031127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zdealp.icu"; classtype:attempted-recon; sid:200031128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zllcxx.top"; classtype:attempted-recon; sid:200031129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zqlmyv.icu"; classtype:attempted-recon; sid:200031130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zxizqv.top"; classtype:attempted-recon; sid:200031131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.a8m6di.icu"; classtype:attempted-recon; sid:200031132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.aaxbpo.top"; classtype:attempted-recon; sid:200031133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.adpslp.top"; classtype:attempted-recon; sid:200031134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.aenjkw.top"; classtype:attempted-recon; sid:200031135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.agdhkb.top"; classtype:attempted-recon; sid:200031136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.akgjcb.top"; classtype:attempted-recon; sid:200031137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.baelbg.top"; classtype:attempted-recon; sid:200031138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.bhqnyq.icu"; classtype:attempted-recon; sid:200031139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.bkwgho.top"; classtype:attempted-recon; sid:200031140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.bmknvf.top"; classtype:attempted-recon; sid:200031141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.buzmri.top"; classtype:attempted-recon; sid:200031142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dgckut.top"; classtype:attempted-recon; sid:200031143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.djtela.top"; classtype:attempted-recon; sid:200031144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dlhsif.top"; classtype:attempted-recon; sid:200031145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dnoftm.top"; classtype:attempted-recon; sid:200031146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.doxryd.top"; classtype:attempted-recon; sid:200031147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dwxrym.top"; classtype:attempted-recon; sid:200031148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dy1nam.icu"; classtype:attempted-recon; sid:200031149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.efcgly.icu"; classtype:attempted-recon; sid:200031150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ejvyvo.top"; classtype:attempted-recon; sid:200031151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.erkzgb.top"; classtype:attempted-recon; sid:200031152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.erqvhz.icu"; classtype:attempted-recon; sid:200031153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ewhdkk.top"; classtype:attempted-recon; sid:200031154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.flgapj.top"; classtype:attempted-recon; sid:200031155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ftnnvo.icu"; classtype:attempted-recon; sid:200031156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.fviult.icu"; classtype:attempted-recon; sid:200031157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.fwgrbb.top"; classtype:attempted-recon; sid:200031158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.fxfbld.top"; classtype:attempted-recon; sid:200031159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.gpik9c.icu"; classtype:attempted-recon; sid:200031160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.gy8u8m.icu"; classtype:attempted-recon; sid:200031161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.hihmof.top"; classtype:attempted-recon; sid:200031162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.hnyrvh.icu"; classtype:attempted-recon; sid:200031163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.hstoja.top"; classtype:attempted-recon; sid:200031164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.icbupe.icu"; classtype:attempted-recon; sid:200031165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ikjthi.top"; classtype:attempted-recon; sid:200031166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ileuct.top"; classtype:attempted-recon; sid:200031167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.iobrjq.icu"; classtype:attempted-recon; sid:200031168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.iyfkny.top"; classtype:attempted-recon; sid:200031169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jashxw.icu"; classtype:attempted-recon; sid:200031170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jfqejr.icu"; classtype:attempted-recon; sid:200031171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.joziry.top"; classtype:attempted-recon; sid:200031172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jvquad.top"; classtype:attempted-recon; sid:200031173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jvzxml.top"; classtype:attempted-recon; sid:200031174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jyszpt.top"; classtype:attempted-recon; sid:200031175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kdhnlt.top"; classtype:attempted-recon; sid:200031176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.keud7w.icu"; classtype:attempted-recon; sid:200031177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kgflqd.top"; classtype:attempted-recon; sid:200031178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kkvrke.icu"; classtype:attempted-recon; sid:200031179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kosoht.icu"; classtype:attempted-recon; sid:200031180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.laojhs.top"; classtype:attempted-recon; sid:200031181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.lcq3yk.icu"; classtype:attempted-recon; sid:200031182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ljnqqs.top"; classtype:attempted-recon; sid:200031183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.llpgun.icu"; classtype:attempted-recon; sid:200031184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.luiyci.top"; classtype:attempted-recon; sid:200031185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.lxszsl.icu"; classtype:attempted-recon; sid:200031186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.mleksy.top"; classtype:attempted-recon; sid:200031187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.msiobh.top"; classtype:attempted-recon; sid:200031188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.msphzi.top"; classtype:attempted-recon; sid:200031189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.mtdqmc.icu"; classtype:attempted-recon; sid:200031190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ndkuwx.top"; classtype:attempted-recon; sid:200031191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.neagfg.top"; classtype:attempted-recon; sid:200031192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.njaczc.top"; classtype:attempted-recon; sid:200031193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.obmxjj.top"; classtype:attempted-recon; sid:200031194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ontgpj.top"; classtype:attempted-recon; sid:200031195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.oshfrh.top"; classtype:attempted-recon; sid:200031196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.oubbeh.top"; classtype:attempted-recon; sid:200031197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.oxfasj.top"; classtype:attempted-recon; sid:200031198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.p0mou1.icu"; classtype:attempted-recon; sid:200031199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.p31bj2.icu"; classtype:attempted-recon; sid:200031200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.p7251j.icu"; classtype:attempted-recon; sid:200031201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.passoe.top"; classtype:attempted-recon; sid:200031202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.pasytj.top"; classtype:attempted-recon; sid:200031203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.pazzro.top"; classtype:attempted-recon; sid:200031204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.pcukoi.icu"; classtype:attempted-recon; sid:200031205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.qyaudr.top"; classtype:attempted-recon; sid:200031206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.rlaptr.top"; classtype:attempted-recon; sid:200031207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.rlrkoz.top"; classtype:attempted-recon; sid:200031208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.rwuluo.top"; classtype:attempted-recon; sid:200031209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.sk6y3y.icu"; classtype:attempted-recon; sid:200031210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.slstjk.top"; classtype:attempted-recon; sid:200031211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.tbsfgl.icu"; classtype:attempted-recon; sid:200031212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.timuyw.icu"; classtype:attempted-recon; sid:200031213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.tpwghl.top"; classtype:attempted-recon; sid:200031214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.tutpfb.icu"; classtype:attempted-recon; sid:200031215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.veuqdd.icu"; classtype:attempted-recon; sid:200031216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.vghrha.top"; classtype:attempted-recon; sid:200031217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.wfgyvk.top"; classtype:attempted-recon; sid:200031218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.wgrfay.top"; classtype:attempted-recon; sid:200031219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.xahccw.icu"; classtype:attempted-recon; sid:200031220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.xgnrrh.top"; classtype:attempted-recon; sid:200031221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.xqvlbl.top"; classtype:attempted-recon; sid:200031222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ynaecg.top"; classtype:attempted-recon; sid:200031223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ywcuuj.top"; classtype:attempted-recon; sid:200031224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ywzeqn.top"; classtype:attempted-recon; sid:200031225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zdealp.icu"; classtype:attempted-recon; sid:200031226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zllcxx.top"; classtype:attempted-recon; sid:200031227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zqlmyv.icu"; classtype:attempted-recon; sid:200031228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zxizqv.top"; classtype:attempted-recon; sid:200031229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.a8m6di.icu"; classtype:attempted-recon; sid:200031230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.aaxbpo.top"; classtype:attempted-recon; sid:200031231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.adpslp.top"; classtype:attempted-recon; sid:200031232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.aenjkw.top"; classtype:attempted-recon; sid:200031233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.agdhkb.top"; classtype:attempted-recon; sid:200031234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.akgjcb.top"; classtype:attempted-recon; sid:200031235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.baelbg.top"; classtype:attempted-recon; sid:200031236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.bhqnyq.icu"; classtype:attempted-recon; sid:200031237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.bkwgho.top"; classtype:attempted-recon; sid:200031238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.bmknvf.top"; classtype:attempted-recon; sid:200031239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.buzmri.top"; classtype:attempted-recon; sid:200031240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dgckut.top"; classtype:attempted-recon; sid:200031241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.djtela.top"; classtype:attempted-recon; sid:200031242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dlhsif.top"; classtype:attempted-recon; sid:200031243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dnoftm.top"; classtype:attempted-recon; sid:200031244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.doxryd.top"; classtype:attempted-recon; sid:200031245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dwxrym.top"; classtype:attempted-recon; sid:200031246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dy1nam.icu"; classtype:attempted-recon; sid:200031247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.efcgly.icu"; classtype:attempted-recon; sid:200031248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ejvyvo.top"; classtype:attempted-recon; sid:200031249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.erkzgb.top"; classtype:attempted-recon; sid:200031250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.erqvhz.icu"; classtype:attempted-recon; sid:200031251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ewhdkk.top"; classtype:attempted-recon; sid:200031252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.flgapj.top"; classtype:attempted-recon; sid:200031253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ftnnvo.icu"; classtype:attempted-recon; sid:200031254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.fviult.icu"; classtype:attempted-recon; sid:200031255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.fwgrbb.top"; classtype:attempted-recon; sid:200031256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.fxfbld.top"; classtype:attempted-recon; sid:200031257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.gpik9c.icu"; classtype:attempted-recon; sid:200031258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.gy8u8m.icu"; classtype:attempted-recon; sid:200031259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.hihmof.top"; classtype:attempted-recon; sid:200031260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.hnyrvh.icu"; classtype:attempted-recon; sid:200031261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.hstoja.top"; classtype:attempted-recon; sid:200031262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.icbupe.icu"; classtype:attempted-recon; sid:200031263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ikjthi.top"; classtype:attempted-recon; sid:200031264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ileuct.top"; classtype:attempted-recon; sid:200031265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.iobrjq.icu"; classtype:attempted-recon; sid:200031266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.iyfkny.top"; classtype:attempted-recon; sid:200031267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jashxw.icu"; classtype:attempted-recon; sid:200031268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jfqejr.icu"; classtype:attempted-recon; sid:200031269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.joziry.top"; classtype:attempted-recon; sid:200031270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jvquad.top"; classtype:attempted-recon; sid:200031271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jvzxml.top"; classtype:attempted-recon; sid:200031272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jyszpt.top"; classtype:attempted-recon; sid:200031273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kdhnlt.top"; classtype:attempted-recon; sid:200031274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.keud7w.icu"; classtype:attempted-recon; sid:200031275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kgflqd.top"; classtype:attempted-recon; sid:200031276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kkvrke.icu"; classtype:attempted-recon; sid:200031277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kosoht.icu"; classtype:attempted-recon; sid:200031278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.laojhs.top"; classtype:attempted-recon; sid:200031279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.lcq3yk.icu"; classtype:attempted-recon; sid:200031280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ljnqqs.top"; classtype:attempted-recon; sid:200031281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.llpgun.icu"; classtype:attempted-recon; sid:200031282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.luiyci.top"; classtype:attempted-recon; sid:200031283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.lxszsl.icu"; classtype:attempted-recon; sid:200031284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.mleksy.top"; classtype:attempted-recon; sid:200031285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.msiobh.top"; classtype:attempted-recon; sid:200031286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.msphzi.top"; classtype:attempted-recon; sid:200031287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.mtdqmc.icu"; classtype:attempted-recon; sid:200031288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ndkuwx.top"; classtype:attempted-recon; sid:200031289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.neagfg.top"; classtype:attempted-recon; sid:200031290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.njaczc.top"; classtype:attempted-recon; sid:200031291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.obmxjj.top"; classtype:attempted-recon; sid:200031292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ontgpj.top"; classtype:attempted-recon; sid:200031293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.oshfrh.top"; classtype:attempted-recon; sid:200031294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.oubbeh.top"; classtype:attempted-recon; sid:200031295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.oxfasj.top"; classtype:attempted-recon; sid:200031296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.p0mou1.icu"; classtype:attempted-recon; sid:200031297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.p31bj2.icu"; classtype:attempted-recon; sid:200031298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.p7251j.icu"; classtype:attempted-recon; sid:200031299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.passoe.top"; classtype:attempted-recon; sid:200031300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.pasytj.top"; classtype:attempted-recon; sid:200031301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.pazzro.top"; classtype:attempted-recon; sid:200031302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.pcukoi.icu"; classtype:attempted-recon; sid:200031303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.qyaudr.top"; classtype:attempted-recon; sid:200031304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.rlaptr.top"; classtype:attempted-recon; sid:200031305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.rlrkoz.top"; classtype:attempted-recon; sid:200031306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.rwuluo.top"; classtype:attempted-recon; sid:200031307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.sk6y3y.icu"; classtype:attempted-recon; sid:200031308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.slstjk.top"; classtype:attempted-recon; sid:200031309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.tbsfgl.icu"; classtype:attempted-recon; sid:200031310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.timuyw.icu"; classtype:attempted-recon; sid:200031311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.tpwghl.top"; classtype:attempted-recon; sid:200031312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.tutpfb.icu"; classtype:attempted-recon; sid:200031313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.veuqdd.icu"; classtype:attempted-recon; sid:200031314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.vghrha.top"; classtype:attempted-recon; sid:200031315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.vnhemj.icu"; classtype:attempted-recon; sid:200031316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.wfgyvk.top"; classtype:attempted-recon; sid:200031317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.wgrfay.top"; classtype:attempted-recon; sid:200031318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.xahccw.icu"; classtype:attempted-recon; sid:200031319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.xgnrrh.top"; classtype:attempted-recon; sid:200031320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.xqvlbl.top"; classtype:attempted-recon; sid:200031321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ynaecg.top"; classtype:attempted-recon; sid:200031322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ywcuuj.top"; classtype:attempted-recon; sid:200031323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ywzeqn.top"; classtype:attempted-recon; sid:200031324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zdealp.icu"; classtype:attempted-recon; sid:200031325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zllcxx.top"; classtype:attempted-recon; sid:200031326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zqlmyv.icu"; classtype:attempted-recon; sid:200031327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zxizqv.top"; classtype:attempted-recon; sid:200031328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.a8m6di.icu"; classtype:attempted-recon; sid:200031329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.aaxbpo.top"; classtype:attempted-recon; sid:200031330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.adpslp.top"; classtype:attempted-recon; sid:200031331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.aenjkw.top"; classtype:attempted-recon; sid:200031332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.agdhkb.top"; classtype:attempted-recon; sid:200031333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.akgjcb.top"; classtype:attempted-recon; sid:200031334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.baelbg.top"; classtype:attempted-recon; sid:200031335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.bhqnyq.icu"; classtype:attempted-recon; sid:200031336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.bkwgho.top"; classtype:attempted-recon; sid:200031337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.bmknvf.top"; classtype:attempted-recon; sid:200031338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.buzmri.top"; classtype:attempted-recon; sid:200031339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dgckut.top"; classtype:attempted-recon; sid:200031340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.djtela.top"; classtype:attempted-recon; sid:200031341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dlhsif.top"; classtype:attempted-recon; sid:200031342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dnoftm.top"; classtype:attempted-recon; sid:200031343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.doxryd.top"; classtype:attempted-recon; sid:200031344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dwxrym.top"; classtype:attempted-recon; sid:200031345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dy1nam.icu"; classtype:attempted-recon; sid:200031346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.efcgly.icu"; classtype:attempted-recon; sid:200031347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ejvyvo.top"; classtype:attempted-recon; sid:200031348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.erkzgb.top"; classtype:attempted-recon; sid:200031349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.erqvhz.icu"; classtype:attempted-recon; sid:200031350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ewhdkk.top"; classtype:attempted-recon; sid:200031351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.flgapj.top"; classtype:attempted-recon; sid:200031352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ftnnvo.icu"; classtype:attempted-recon; sid:200031353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.fviult.icu"; classtype:attempted-recon; sid:200031354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.fwgrbb.top"; classtype:attempted-recon; sid:200031355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.fxfbld.top"; classtype:attempted-recon; sid:200031356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.gpik9c.icu"; classtype:attempted-recon; sid:200031357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.gy8u8m.icu"; classtype:attempted-recon; sid:200031358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.hihmof.top"; classtype:attempted-recon; sid:200031359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.hnyrvh.icu"; classtype:attempted-recon; sid:200031360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.hstoja.top"; classtype:attempted-recon; sid:200031361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.icbupe.icu"; classtype:attempted-recon; sid:200031362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ikjthi.top"; classtype:attempted-recon; sid:200031363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ileuct.top"; classtype:attempted-recon; sid:200031364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.iobrjq.icu"; classtype:attempted-recon; sid:200031365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.iyfkny.top"; classtype:attempted-recon; sid:200031366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jashxw.icu"; classtype:attempted-recon; sid:200031367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jfqejr.icu"; classtype:attempted-recon; sid:200031368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.joziry.top"; classtype:attempted-recon; sid:200031369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jvquad.top"; classtype:attempted-recon; sid:200031370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jvzxml.top"; classtype:attempted-recon; sid:200031371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jyszpt.top"; classtype:attempted-recon; sid:200031372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kdhnlt.top"; classtype:attempted-recon; sid:200031373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.keud7w.icu"; classtype:attempted-recon; sid:200031374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kgflqd.top"; classtype:attempted-recon; sid:200031375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kkvrke.icu"; classtype:attempted-recon; sid:200031376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kosoht.icu"; classtype:attempted-recon; sid:200031377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.laojhs.top"; classtype:attempted-recon; sid:200031378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.lcq3yk.icu"; classtype:attempted-recon; sid:200031379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ljnqqs.top"; classtype:attempted-recon; sid:200031380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.llpgun.icu"; classtype:attempted-recon; sid:200031381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.luiyci.top"; classtype:attempted-recon; sid:200031382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.lxszsl.icu"; classtype:attempted-recon; sid:200031383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.mleksy.top"; classtype:attempted-recon; sid:200031384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.msiobh.top"; classtype:attempted-recon; sid:200031385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.msphzi.top"; classtype:attempted-recon; sid:200031386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.mtdqmc.icu"; classtype:attempted-recon; sid:200031387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ndkuwx.top"; classtype:attempted-recon; sid:200031388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.neagfg.top"; classtype:attempted-recon; sid:200031389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.njaczc.top"; classtype:attempted-recon; sid:200031390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.obmxjj.top"; classtype:attempted-recon; sid:200031391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ontgpj.top"; classtype:attempted-recon; sid:200031392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.oubbeh.top"; classtype:attempted-recon; sid:200031393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.oxfasj.top"; classtype:attempted-recon; sid:200031394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.p0mou1.icu"; classtype:attempted-recon; sid:200031395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.p31bj2.icu"; classtype:attempted-recon; sid:200031396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.p7251j.icu"; classtype:attempted-recon; sid:200031397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.passoe.top"; classtype:attempted-recon; sid:200031398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.pasytj.top"; classtype:attempted-recon; sid:200031399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.pazzro.top"; classtype:attempted-recon; sid:200031400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.pcukoi.icu"; classtype:attempted-recon; sid:200031401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.qyaudr.top"; classtype:attempted-recon; sid:200031402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.rlaptr.top"; classtype:attempted-recon; sid:200031403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.rlrkoz.top"; classtype:attempted-recon; sid:200031404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.rwuluo.top"; classtype:attempted-recon; sid:200031405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.sk6y3y.icu"; classtype:attempted-recon; sid:200031406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.slstjk.top"; classtype:attempted-recon; sid:200031407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.tbsfgl.icu"; classtype:attempted-recon; sid:200031408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.timuyw.icu"; classtype:attempted-recon; sid:200031409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.tpwghl.top"; classtype:attempted-recon; sid:200031410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.tutpfb.icu"; classtype:attempted-recon; sid:200031411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.veuqdd.icu"; classtype:attempted-recon; sid:200031412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.vghrha.top"; classtype:attempted-recon; sid:200031413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.vnhemj.icu"; classtype:attempted-recon; sid:200031414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.wfgyvk.top"; classtype:attempted-recon; sid:200031415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.wgrfay.top"; classtype:attempted-recon; sid:200031416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.xahccw.icu"; classtype:attempted-recon; sid:200031417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.xgnrrh.top"; classtype:attempted-recon; sid:200031418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.xqvlbl.top"; classtype:attempted-recon; sid:200031419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ynaecg.top"; classtype:attempted-recon; sid:200031420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ywcuuj.top"; classtype:attempted-recon; sid:200031421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ywzeqn.top"; classtype:attempted-recon; sid:200031422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zdealp.icu"; classtype:attempted-recon; sid:200031423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zllcxx.top"; classtype:attempted-recon; sid:200031424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zqlmyv.icu"; classtype:attempted-recon; sid:200031425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zxizqv.top"; classtype:attempted-recon; sid:200031426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.a8m6di.icu"; classtype:attempted-recon; sid:200031427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.aaxbpo.top"; classtype:attempted-recon; sid:200031428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.adpslp.top"; classtype:attempted-recon; sid:200031429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.aenjkw.top"; classtype:attempted-recon; sid:200031430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.agdhkb.top"; classtype:attempted-recon; sid:200031431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.akgjcb.top"; classtype:attempted-recon; sid:200031432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.baelbg.top"; classtype:attempted-recon; sid:200031433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.bhqnyq.icu"; classtype:attempted-recon; sid:200031434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.bkwgho.top"; classtype:attempted-recon; sid:200031435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.bmknvf.top"; classtype:attempted-recon; sid:200031436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.buzmri.top"; classtype:attempted-recon; sid:200031437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dgckut.top"; classtype:attempted-recon; sid:200031438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.djtela.top"; classtype:attempted-recon; sid:200031439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dlhsif.top"; classtype:attempted-recon; sid:200031440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dnoftm.top"; classtype:attempted-recon; sid:200031441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.doxryd.top"; classtype:attempted-recon; sid:200031442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dwxrym.top"; classtype:attempted-recon; sid:200031443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dy1nam.icu"; classtype:attempted-recon; sid:200031444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.efcgly.icu"; classtype:attempted-recon; sid:200031445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ejvyvo.top"; classtype:attempted-recon; sid:200031446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.erkzgb.top"; classtype:attempted-recon; sid:200031447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.erqvhz.icu"; classtype:attempted-recon; sid:200031448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ewhdkk.top"; classtype:attempted-recon; sid:200031449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.flgapj.top"; classtype:attempted-recon; sid:200031450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ftnnvo.icu"; classtype:attempted-recon; sid:200031451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.fviult.icu"; classtype:attempted-recon; sid:200031452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.fwgrbb.top"; classtype:attempted-recon; sid:200031453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.fxfbld.top"; classtype:attempted-recon; sid:200031454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.gpik9c.icu"; classtype:attempted-recon; sid:200031455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.gy8u8m.icu"; classtype:attempted-recon; sid:200031456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.hihmof.top"; classtype:attempted-recon; sid:200031457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.hnyrvh.icu"; classtype:attempted-recon; sid:200031458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.icbupe.icu"; classtype:attempted-recon; sid:200031459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ikjthi.top"; classtype:attempted-recon; sid:200031460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ileuct.top"; classtype:attempted-recon; sid:200031461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.iobrjq.icu"; classtype:attempted-recon; sid:200031462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.iyfkny.top"; classtype:attempted-recon; sid:200031463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jashxw.icu"; classtype:attempted-recon; sid:200031464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jfqejr.icu"; classtype:attempted-recon; sid:200031465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.joziry.top"; classtype:attempted-recon; sid:200031466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jvquad.top"; classtype:attempted-recon; sid:200031467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jvzxml.top"; classtype:attempted-recon; sid:200031468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jyszpt.top"; classtype:attempted-recon; sid:200031469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kdhnlt.top"; classtype:attempted-recon; sid:200031470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.keud7w.icu"; classtype:attempted-recon; sid:200031471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kgflqd.top"; classtype:attempted-recon; sid:200031472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kkvrke.icu"; classtype:attempted-recon; sid:200031473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kosoht.icu"; classtype:attempted-recon; sid:200031474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.laojhs.top"; classtype:attempted-recon; sid:200031475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.lcq3yk.icu"; classtype:attempted-recon; sid:200031476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ljnqqs.top"; classtype:attempted-recon; sid:200031477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.llpgun.icu"; classtype:attempted-recon; sid:200031478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.luiyci.top"; classtype:attempted-recon; sid:200031479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.lxszsl.icu"; classtype:attempted-recon; sid:200031480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.mleksy.top"; classtype:attempted-recon; sid:200031481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.msiobh.top"; classtype:attempted-recon; sid:200031482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.msphzi.top"; classtype:attempted-recon; sid:200031483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.mtdqmc.icu"; classtype:attempted-recon; sid:200031484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ndkuwx.top"; classtype:attempted-recon; sid:200031485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.neagfg.top"; classtype:attempted-recon; sid:200031486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.njaczc.top"; classtype:attempted-recon; sid:200031487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.obmxjj.top"; classtype:attempted-recon; sid:200031488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ontgpj.top"; classtype:attempted-recon; sid:200031489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.oshfrh.top"; classtype:attempted-recon; sid:200031490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.oubbeh.top"; classtype:attempted-recon; sid:200031491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.oxfasj.top"; classtype:attempted-recon; sid:200031492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.p0mou1.icu"; classtype:attempted-recon; sid:200031493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.p31bj2.icu"; classtype:attempted-recon; sid:200031494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.p7251j.icu"; classtype:attempted-recon; sid:200031495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.passoe.top"; classtype:attempted-recon; sid:200031496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.pasytj.top"; classtype:attempted-recon; sid:200031497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.pazzro.top"; classtype:attempted-recon; sid:200031498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.pcukoi.icu"; classtype:attempted-recon; sid:200031499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.qyaudr.top"; classtype:attempted-recon; sid:200031500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.rlaptr.top"; classtype:attempted-recon; sid:200031501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.rlrkoz.top"; classtype:attempted-recon; sid:200031502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.rwuluo.top"; classtype:attempted-recon; sid:200031503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.sk6y3y.icu"; classtype:attempted-recon; sid:200031504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.slstjk.top"; classtype:attempted-recon; sid:200031505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.tbsfgl.icu"; classtype:attempted-recon; sid:200031506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.timuyw.icu"; classtype:attempted-recon; sid:200031507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.tpwghl.top"; classtype:attempted-recon; sid:200031508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.tutpfb.icu"; classtype:attempted-recon; sid:200031509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.veuqdd.icu"; classtype:attempted-recon; sid:200031510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.vghrha.top"; classtype:attempted-recon; sid:200031511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.vnhemj.icu"; classtype:attempted-recon; sid:200031512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.wfgyvk.top"; classtype:attempted-recon; sid:200031513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.wgrfay.top"; classtype:attempted-recon; sid:200031514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.xahccw.icu"; classtype:attempted-recon; sid:200031515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.xgnrrh.top"; classtype:attempted-recon; sid:200031516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.xqvlbl.top"; classtype:attempted-recon; sid:200031517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ynaecg.top"; classtype:attempted-recon; sid:200031518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ywcuuj.top"; classtype:attempted-recon; sid:200031519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ywzeqn.top"; classtype:attempted-recon; sid:200031520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zdealp.icu"; classtype:attempted-recon; sid:200031521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zllcxx.top"; classtype:attempted-recon; sid:200031522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zqlmyv.icu"; classtype:attempted-recon; sid:200031523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zxizqv.top"; classtype:attempted-recon; sid:200031524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.a8m6di.icu"; classtype:attempted-recon; sid:200031525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.aaxbpo.top"; classtype:attempted-recon; sid:200031526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.adpslp.top"; classtype:attempted-recon; sid:200031527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.aenjkw.top"; classtype:attempted-recon; sid:200031528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.agdhkb.top"; classtype:attempted-recon; sid:200031529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.akgjcb.top"; classtype:attempted-recon; sid:200031530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.baelbg.top"; classtype:attempted-recon; sid:200031531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.bhqnyq.icu"; classtype:attempted-recon; sid:200031532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.bkwgho.top"; classtype:attempted-recon; sid:200031533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.bmknvf.top"; classtype:attempted-recon; sid:200031534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.buzmri.top"; classtype:attempted-recon; sid:200031535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.dgckut.top"; classtype:attempted-recon; sid:200031536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.djtela.top"; classtype:attempted-recon; sid:200031537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.dlhsif.top"; classtype:attempted-recon; sid:200031538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.dnoftm.top"; classtype:attempted-recon; sid:200031539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.doxryd.top"; classtype:attempted-recon; sid:200031540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.dwxrym.top"; classtype:attempted-recon; sid:200031541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.dy1nam.icu"; classtype:attempted-recon; sid:200031542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.efcgly.icu"; classtype:attempted-recon; sid:200031543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ejvyvo.top"; classtype:attempted-recon; sid:200031544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.erkzgb.top"; classtype:attempted-recon; sid:200031545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.erqvhz.icu"; classtype:attempted-recon; sid:200031546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ewhdkk.top"; classtype:attempted-recon; sid:200031547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.flgapj.top"; classtype:attempted-recon; sid:200031548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ftnnvo.icu"; classtype:attempted-recon; sid:200031549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.fviult.icu"; classtype:attempted-recon; sid:200031550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.fwgrbb.top"; classtype:attempted-recon; sid:200031551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.fxfbld.top"; classtype:attempted-recon; sid:200031552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.gpik9c.icu"; classtype:attempted-recon; sid:200031553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.gy8u8m.icu"; classtype:attempted-recon; sid:200031554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.hihmof.top"; classtype:attempted-recon; sid:200031555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.hnyrvh.icu"; classtype:attempted-recon; sid:200031556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.hstoja.top"; classtype:attempted-recon; sid:200031557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.icbupe.icu"; classtype:attempted-recon; sid:200031558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ikjthi.top"; classtype:attempted-recon; sid:200031559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ileuct.top"; classtype:attempted-recon; sid:200031560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.iobrjq.icu"; classtype:attempted-recon; sid:200031561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.iyfkny.top"; classtype:attempted-recon; sid:200031562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.jashxw.icu"; classtype:attempted-recon; sid:200031563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.jfqejr.icu"; classtype:attempted-recon; sid:200031564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.joziry.top"; classtype:attempted-recon; sid:200031565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.jvquad.top"; classtype:attempted-recon; sid:200031566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.jvzxml.top"; classtype:attempted-recon; sid:200031567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.jyszpt.top"; classtype:attempted-recon; sid:200031568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.kdhnlt.top"; classtype:attempted-recon; sid:200031569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.keud7w.icu"; classtype:attempted-recon; sid:200031570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.kgflqd.top"; classtype:attempted-recon; sid:200031571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.kkvrke.icu"; classtype:attempted-recon; sid:200031572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.kosoht.icu"; classtype:attempted-recon; sid:200031573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.laojhs.top"; classtype:attempted-recon; sid:200031574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.lcq3yk.icu"; classtype:attempted-recon; sid:200031575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ljnqqs.top"; classtype:attempted-recon; sid:200031576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.llpgun.icu"; classtype:attempted-recon; sid:200031577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.luiyci.top"; classtype:attempted-recon; sid:200031578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.lxszsl.icu"; classtype:attempted-recon; sid:200031579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.mleksy.top"; classtype:attempted-recon; sid:200031580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.msiobh.top"; classtype:attempted-recon; sid:200031581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.msphzi.top"; classtype:attempted-recon; sid:200031582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.mtdqmc.icu"; classtype:attempted-recon; sid:200031583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ndkuwx.top"; classtype:attempted-recon; sid:200031584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.neagfg.top"; classtype:attempted-recon; sid:200031585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.njaczc.top"; classtype:attempted-recon; sid:200031586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.obmxjj.top"; classtype:attempted-recon; sid:200031587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ontgpj.top"; classtype:attempted-recon; sid:200031588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.oshfrh.top"; classtype:attempted-recon; sid:200031589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.oubbeh.top"; classtype:attempted-recon; sid:200031590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.oxfasj.top"; classtype:attempted-recon; sid:200031591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.p0mou1.icu"; classtype:attempted-recon; sid:200031592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.p31bj2.icu"; classtype:attempted-recon; sid:200031593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.p7251j.icu"; classtype:attempted-recon; sid:200031594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.passoe.top"; classtype:attempted-recon; sid:200031595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.pasytj.top"; classtype:attempted-recon; sid:200031596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.pazzro.top"; classtype:attempted-recon; sid:200031597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.pcukoi.icu"; classtype:attempted-recon; sid:200031598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.qyaudr.top"; classtype:attempted-recon; sid:200031599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.rlaptr.top"; classtype:attempted-recon; sid:200031600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.rlrkoz.top"; classtype:attempted-recon; sid:200031601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.rwuluo.top"; classtype:attempted-recon; sid:200031602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.sk6y3y.icu"; classtype:attempted-recon; sid:200031603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.slstjk.top"; classtype:attempted-recon; sid:200031604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.tbsfgl.icu"; classtype:attempted-recon; sid:200031605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.timuyw.icu"; classtype:attempted-recon; sid:200031606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.tpwghl.top"; classtype:attempted-recon; sid:200031607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.tutpfb.icu"; classtype:attempted-recon; sid:200031608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.veuqdd.icu"; classtype:attempted-recon; sid:200031609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.vghrha.top"; classtype:attempted-recon; sid:200031610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.vnhemj.icu"; classtype:attempted-recon; sid:200031611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.wfgyvk.top"; classtype:attempted-recon; sid:200031612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.wgrfay.top"; classtype:attempted-recon; sid:200031613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.xahccw.icu"; classtype:attempted-recon; sid:200031614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.xgnrrh.top"; classtype:attempted-recon; sid:200031615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.xqvlbl.top"; classtype:attempted-recon; sid:200031616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ynaecg.top"; classtype:attempted-recon; sid:200031617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ywcuuj.top"; classtype:attempted-recon; sid:200031618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.ywzeqn.top"; classtype:attempted-recon; sid:200031619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.zdealp.icu"; classtype:attempted-recon; sid:200031620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.zllcxx.top"; classtype:attempted-recon; sid:200031621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.zqlmyv.icu"; classtype:attempted-recon; sid:200031622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.zxizqv.top"; classtype:attempted-recon; sid:200031623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.a8m6di.icu"; classtype:attempted-recon; sid:200031624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.aaxbpo.top"; classtype:attempted-recon; sid:200031625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.adpslp.top"; classtype:attempted-recon; sid:200031626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.aenjkw.top"; classtype:attempted-recon; sid:200031627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.agdhkb.top"; classtype:attempted-recon; sid:200031628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.akgjcb.top"; classtype:attempted-recon; sid:200031629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.baelbg.top"; classtype:attempted-recon; sid:200031630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.bhqnyq.icu"; classtype:attempted-recon; sid:200031631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.bkwgho.top"; classtype:attempted-recon; sid:200031632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.bmknvf.top"; classtype:attempted-recon; sid:200031633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.buzmri.top"; classtype:attempted-recon; sid:200031634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dgckut.top"; classtype:attempted-recon; sid:200031635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.djtela.top"; classtype:attempted-recon; sid:200031636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dlhsif.top"; classtype:attempted-recon; sid:200031637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dnoftm.top"; classtype:attempted-recon; sid:200031638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.doxryd.top"; classtype:attempted-recon; sid:200031639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dwxrym.top"; classtype:attempted-recon; sid:200031640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dy1nam.icu"; classtype:attempted-recon; sid:200031641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.efcgly.icu"; classtype:attempted-recon; sid:200031642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ejvyvo.top"; classtype:attempted-recon; sid:200031643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.erkzgb.top"; classtype:attempted-recon; sid:200031644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.erqvhz.icu"; classtype:attempted-recon; sid:200031645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ewhdkk.top"; classtype:attempted-recon; sid:200031646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.flgapj.top"; classtype:attempted-recon; sid:200031647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ftnnvo.icu"; classtype:attempted-recon; sid:200031648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.fviult.icu"; classtype:attempted-recon; sid:200031649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.fwgrbb.top"; classtype:attempted-recon; sid:200031650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.fxfbld.top"; classtype:attempted-recon; sid:200031651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.gpik9c.icu"; classtype:attempted-recon; sid:200031652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.gy8u8m.icu"; classtype:attempted-recon; sid:200031653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.hihmof.top"; classtype:attempted-recon; sid:200031654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.hnyrvh.icu"; classtype:attempted-recon; sid:200031655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.hstoja.top"; classtype:attempted-recon; sid:200031656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.icbupe.icu"; classtype:attempted-recon; sid:200031657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ikjthi.top"; classtype:attempted-recon; sid:200031658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ileuct.top"; classtype:attempted-recon; sid:200031659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.iobrjq.icu"; classtype:attempted-recon; sid:200031660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.iyfkny.top"; classtype:attempted-recon; sid:200031661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jashxw.icu"; classtype:attempted-recon; sid:200031662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jfqejr.icu"; classtype:attempted-recon; sid:200031663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.joziry.top"; classtype:attempted-recon; sid:200031664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jvquad.top"; classtype:attempted-recon; sid:200031665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jvzxml.top"; classtype:attempted-recon; sid:200031666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jyszpt.top"; classtype:attempted-recon; sid:200031667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kdhnlt.top"; classtype:attempted-recon; sid:200031668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.keud7w.icu"; classtype:attempted-recon; sid:200031669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kgflqd.top"; classtype:attempted-recon; sid:200031670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kkvrke.icu"; classtype:attempted-recon; sid:200031671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kosoht.icu"; classtype:attempted-recon; sid:200031672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.laojhs.top"; classtype:attempted-recon; sid:200031673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.lcq3yk.icu"; classtype:attempted-recon; sid:200031674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ljnqqs.top"; classtype:attempted-recon; sid:200031675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.llpgun.icu"; classtype:attempted-recon; sid:200031676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.luiyci.top"; classtype:attempted-recon; sid:200031677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.lxszsl.icu"; classtype:attempted-recon; sid:200031678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.mleksy.top"; classtype:attempted-recon; sid:200031679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.msiobh.top"; classtype:attempted-recon; sid:200031680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.msphzi.top"; classtype:attempted-recon; sid:200031681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.mtdqmc.icu"; classtype:attempted-recon; sid:200031682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ndkuwx.top"; classtype:attempted-recon; sid:200031683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.neagfg.top"; classtype:attempted-recon; sid:200031684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.njaczc.top"; classtype:attempted-recon; sid:200031685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.obmxjj.top"; classtype:attempted-recon; sid:200031686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ontgpj.top"; classtype:attempted-recon; sid:200031687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.oshfrh.top"; classtype:attempted-recon; sid:200031688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.oubbeh.top"; classtype:attempted-recon; sid:200031689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.oxfasj.top"; classtype:attempted-recon; sid:200031690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.p0mou1.icu"; classtype:attempted-recon; sid:200031691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.p31bj2.icu"; classtype:attempted-recon; sid:200031692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.p7251j.icu"; classtype:attempted-recon; sid:200031693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.passoe.top"; classtype:attempted-recon; sid:200031694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.pasytj.top"; classtype:attempted-recon; sid:200031695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.pazzro.top"; classtype:attempted-recon; sid:200031696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.pcukoi.icu"; classtype:attempted-recon; sid:200031697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.qyaudr.top"; classtype:attempted-recon; sid:200031698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.rlaptr.top"; classtype:attempted-recon; sid:200031699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.rlrkoz.top"; classtype:attempted-recon; sid:200031700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.rwuluo.top"; classtype:attempted-recon; sid:200031701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.sk6y3y.icu"; classtype:attempted-recon; sid:200031702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.slstjk.top"; classtype:attempted-recon; sid:200031703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.tbsfgl.icu"; classtype:attempted-recon; sid:200031704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.timuyw.icu"; classtype:attempted-recon; sid:200031705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.tpwghl.top"; classtype:attempted-recon; sid:200031706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.tutpfb.icu"; classtype:attempted-recon; sid:200031707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.veuqdd.icu"; classtype:attempted-recon; sid:200031708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.vghrha.top"; classtype:attempted-recon; sid:200031709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.vnhemj.icu"; classtype:attempted-recon; sid:200031710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.wfgyvk.top"; classtype:attempted-recon; sid:200031711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.wgrfay.top"; classtype:attempted-recon; sid:200031712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.xahccw.icu"; classtype:attempted-recon; sid:200031713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.xgnrrh.top"; classtype:attempted-recon; sid:200031714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.xqvlbl.top"; classtype:attempted-recon; sid:200031715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ynaecg.top"; classtype:attempted-recon; sid:200031716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ywcuuj.top"; classtype:attempted-recon; sid:200031717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ywzeqn.top"; classtype:attempted-recon; sid:200031718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zdealp.icu"; classtype:attempted-recon; sid:200031719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zllcxx.top"; classtype:attempted-recon; sid:200031720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zqlmyv.icu"; classtype:attempted-recon; sid:200031721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zxizqv.top"; classtype:attempted-recon; sid:200031722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaaesi.visecevvasseaors.2124458.xyz"; classtype:attempted-recon; sid:200031723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaaesi.visecevvasseaors.7788513.xyz"; classtype:attempted-recon; sid:200031724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaaesi.visecevvasseaors.ajrwdo.shop"; classtype:attempted-recon; sid:200031725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaaesi.visecevvasseaors.lajmqf.top"; classtype:attempted-recon; sid:200031726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaaesi.visecevvasseaors.uxhejc.top"; classtype:attempted-recon; sid:200031727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.3838833.xyz"; classtype:attempted-recon; sid:200031728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.5378887.xyz"; classtype:attempted-recon; sid:200031729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.6887453.xyz"; classtype:attempted-recon; sid:200031730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.bcjgin.top"; classtype:attempted-recon; sid:200031731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.fodxlh.top"; classtype:attempted-recon; sid:200031732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.hxsyjk.top"; classtype:attempted-recon; sid:200031733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.hzwrnd.top"; classtype:attempted-recon; sid:200031734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.pdmvfc.top"; classtype:attempted-recon; sid:200031735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.vppvl.top"; classtype:attempted-recon; sid:200031736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaasi.visaecevvssaosr.yb7rew.shop"; classtype:attempted-recon; sid:200031737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaosi.visaecevvssaosr.ebltts.top"; classtype:attempted-recon; sid:200031738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaosi.visaecevvssaosr.hxsyjk.top"; classtype:attempted-recon; sid:200031739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaosi.visaecevvssaosr.hzwrnd.top"; classtype:attempted-recon; sid:200031740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaosi.visaecevvssaosr.ivupqh.top"; classtype:attempted-recon; sid:200031741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaaosi.visaecevvssaosr.uxhejc.top"; classtype:attempted-recon; sid:200031742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.2124458.xyz"; classtype:attempted-recon; sid:200031743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.3838833.xyz"; classtype:attempted-recon; sid:200031744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.bqygsc.top"; classtype:attempted-recon; sid:200031745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.ebltts.top"; classtype:attempted-recon; sid:200031746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.fodxlh.top"; classtype:attempted-recon; sid:200031747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.gjrbgg.top"; classtype:attempted-recon; sid:200031748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.hzwrnd.top"; classtype:attempted-recon; sid:200031749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.ivupqh.top"; classtype:attempted-recon; sid:200031750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeaesi.viscaasseaors.ssmkdz.top"; classtype:attempted-recon; sid:200031751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeasi.visaeassaosr.2355587.xyz"; classtype:attempted-recon; sid:200031752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeasi.visaeassaosr.5yfjuq.shop"; classtype:attempted-recon; sid:200031753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeasi.visaeassaosr.bcjgin.top"; classtype:attempted-recon; sid:200031754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeasi.visaeassaosr.ftrdog.top"; classtype:attempted-recon; sid:200031755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeasi.visaeassaosr.homhcy.top"; classtype:attempted-recon; sid:200031756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeasi.visaeassaosr.uxhejc.top"; classtype:attempted-recon; sid:200031757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.2124458.xyz"; classtype:attempted-recon; sid:200031758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.2355587.xyz"; classtype:attempted-recon; sid:200031759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.3838833.xyz"; classtype:attempted-recon; sid:200031760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.ebltts.top"; classtype:attempted-recon; sid:200031761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.ssmkdz.top"; classtype:attempted-recon; sid:200031762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.uxhejc.top"; classtype:attempted-recon; sid:200031763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.vppvl.top"; classtype:attempted-recon; sid:200031764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecaaeosi.visavassaosr.wtkiwf.top"; classtype:attempted-recon; sid:200031765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceaeroi.6887453.xyz"; classtype:attempted-recon; sid:200031766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceaeroi.dlsefg.top"; classtype:attempted-recon; sid:200031767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceaeroi.hxsyjk.top"; classtype:attempted-recon; sid:200031768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceaeroi.hzwrnd.top"; classtype:attempted-recon; sid:200031769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceaeroi.pukrre.top"; classtype:attempted-recon; sid:200031770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceaeroi.ssmkdz.top"; classtype:attempted-recon; sid:200031771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.2355587.xyz"; classtype:attempted-recon; sid:200031772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.3838833.xyz"; classtype:attempted-recon; sid:200031773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.6887453.xyz"; classtype:attempted-recon; sid:200031774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.dlsefg.top"; classtype:attempted-recon; sid:200031775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.ebltts.top"; classtype:attempted-recon; sid:200031776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.fodxlh.top"; classtype:attempted-recon; sid:200031777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.hxsyjk.top"; classtype:attempted-recon; sid:200031778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.hzwrnd.top"; classtype:attempted-recon; sid:200031779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.ivupqh.top"; classtype:attempted-recon; sid:200031780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaaevier.vecevvasceveroi.ubdjag.top"; classtype:attempted-recon; sid:200031781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaavier.vaecevvcsaeoir.3838833.xyz"; classtype:attempted-recon; sid:200031782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaavier.vaecevvcsaeoir.7788513.xyz"; classtype:attempted-recon; sid:200031783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaavier.vaecevvcsaeoir.dlsefg.top"; classtype:attempted-recon; sid:200031784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaavier.vaecevvcsaeoir.hxsyjk.top"; classtype:attempted-recon; sid:200031785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaaavier.vaecevvcsaeoir.pdmvfc.top"; classtype:attempted-recon; sid:200031786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaasvier.vaecevvcsveoir.ivupqh.top"; classtype:attempted-recon; sid:200031787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaasvier.vaecevvcsveoir.qyvyve.shop"; classtype:attempted-recon; sid:200031788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaasvier.vaecevvcsveoir.txvcqg.top"; classtype:attempted-recon; sid:200031789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaasvier.vaecevvcsveoir.vppvl.top"; classtype:attempted-recon; sid:200031790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaasvier.vaecevvcsveoir.xxdjik.top"; classtype:attempted-recon; sid:200031791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceaeroi.2355587.xyz"; classtype:attempted-recon; sid:200031792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceaeroi.bcjgin.top"; classtype:attempted-recon; sid:200031793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceaeroi.ebltts.top"; classtype:attempted-recon; sid:200031794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceaeroi.qlkmeq.top"; classtype:attempted-recon; sid:200031795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceaeroi.ssmkdz.top"; classtype:attempted-recon; sid:200031796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceveroi.3838833.xyz"; classtype:attempted-recon; sid:200031797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceveroi.6887453.xyz"; classtype:attempted-recon; sid:200031798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceveroi.dlsefg.top"; classtype:attempted-recon; sid:200031799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceveroi.homhcy.top"; classtype:attempted-recon; sid:200031800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceveroi.ivupqh.top"; classtype:attempted-recon; sid:200031801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeaevier.vcaasceveroi.wtkiwf.top"; classtype:attempted-recon; sid:200031802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeavier.vaeacsaeoir.3838833.xyz"; classtype:attempted-recon; sid:200031803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaeavier.vaeacsaeoir.ebltts.top"; classtype:attempted-recon; sid:200031804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.6887453.xyz"; classtype:attempted-recon; sid:200031805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.7788513.xyz"; classtype:attempted-recon; sid:200031806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.ebltts.top"; classtype:attempted-recon; sid:200031807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.hxsyjk.top"; classtype:attempted-recon; sid:200031808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.ivupqh.top"; classtype:attempted-recon; sid:200031809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.pdmvfc.top"; classtype:attempted-recon; sid:200031810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.rijpva.top"; classtype:attempted-recon; sid:200031811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.ssmkdz.top"; classtype:attempted-recon; sid:200031812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.uxhejc.top"; classtype:attempted-recon; sid:200031813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecsaesvier.vasacsveoir.wtkiwf.top"; classtype:attempted-recon; sid:200031814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneaire.2124458.xyz"; classtype:attempted-recon; sid:200031815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneaire.6887453.xyz"; classtype:attempted-recon; sid:200031816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneaire.fodxlh.top"; classtype:attempted-recon; sid:200031817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneaire.hxsyjk.top"; classtype:attempted-recon; sid:200031818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneaire.hzwrnd.top"; classtype:attempted-recon; sid:200031819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneaire.wtkiwf.top"; classtype:attempted-recon; sid:200031820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneeire.6887453.xyz"; classtype:attempted-recon; sid:200031821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneeire.hzwrnd.top"; classtype:attempted-recon; sid:200031822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaees.visecevvasneeire.ssmkdz.top"; classtype:attempted-recon; sid:200031823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaes.visaecevvnsaier.2355587.xyz"; classtype:attempted-recon; sid:200031824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaes.visaecevvnsaier.fodxlh.top"; classtype:attempted-recon; sid:200031825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaes.visaecevvnsaier.gzovnq.shop"; classtype:attempted-recon; sid:200031826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaes.visaecevvnsaier.hxsyjk.top"; classtype:attempted-recon; sid:200031827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaes.visaecevvnsaier.hzwrnd.top"; classtype:attempted-recon; sid:200031828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaaes.visaecevvnsaier.uxhejc.top"; classtype:attempted-recon; sid:200031829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaves.visaecevvnseier.coflya.top"; classtype:attempted-recon; sid:200031830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaves.visaecevvnseier.ssmkdz.top"; classtype:attempted-recon; sid:200031831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaves.visaecevvnseier.tajsmp.top"; classtype:attempted-recon; sid:200031832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaves.visaecevvnseier.txvcqg.top"; classtype:attempted-recon; sid:200031833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaaves.visaecevvnseier.uxhejc.top"; classtype:attempted-recon; sid:200031834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneaire.7788513.xyz"; classtype:attempted-recon; sid:200031835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneaire.7nu97.icu"; classtype:attempted-recon; sid:200031836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneaire.hxsyjk.top"; classtype:attempted-recon; sid:200031837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneaire.itelsq.top"; classtype:attempted-recon; sid:200031838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneaire.pyseum.top"; classtype:attempted-recon; sid:200031839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneaire.ssmkdz.top"; classtype:attempted-recon; sid:200031840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneaire.wtkiwf.top"; classtype:attempted-recon; sid:200031841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneeire.2124458.xyz"; classtype:attempted-recon; sid:200031842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneeire.5378887.xyz"; classtype:attempted-recon; sid:200031843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneeire.bcjgin.top"; classtype:attempted-recon; sid:200031844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneeire.fodxlh.top"; classtype:attempted-recon; sid:200031845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneeire.uxhejc.top"; classtype:attempted-recon; sid:200031846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneeire.vppvl.top"; classtype:attempted-recon; sid:200031847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaees.viscaasneeire.wtkiwf.top"; classtype:attempted-recon; sid:200031848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.2124458.xyz"; classtype:attempted-recon; sid:200031849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.7788513.xyz"; classtype:attempted-recon; sid:200031850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.dlsefg.top"; classtype:attempted-recon; sid:200031851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.ebltts.top"; classtype:attempted-recon; sid:200031852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.pdmvfc.top"; classtype:attempted-recon; sid:200031853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.ssmkdz.top"; classtype:attempted-recon; sid:200031854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.txvcqg.top"; classtype:attempted-recon; sid:200031855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.uxhejc.top"; classtype:attempted-recon; sid:200031856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeaes.visaeansaier.vppvl.top"; classtype:attempted-recon; sid:200031857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeves.visasanseier.2355587.xyz"; classtype:attempted-recon; sid:200031858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeves.visasanseier.5378887.xyz"; classtype:attempted-recon; sid:200031859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeves.visasanseier.7nu97.icu"; classtype:attempted-recon; sid:200031860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeves.visasanseier.dlsefg.top"; classtype:attempted-recon; sid:200031861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeves.visasanseier.fodxlh.top"; classtype:attempted-recon; sid:200031862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeves.visasanseier.homhcy.top"; classtype:attempted-recon; sid:200031863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viecvaeves.visasanseier.hxsyjk.top"; classtype:attempted-recon; sid:200031864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceaeoi.benxhh.za.com"; classtype:attempted-recon; sid:200031865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceaeoi.cmiflk.id"; classtype:attempted-recon; sid:200031866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceaeoi.dvtdev.id"; classtype:attempted-recon; sid:200031867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceaeoi.puowqu.id"; classtype:attempted-recon; sid:200031868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceaeoi.pyz890k.tokyo"; classtype:attempted-recon; sid:200031869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceveoi.ceedca.id"; classtype:attempted-recon; sid:200031870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceveoi.do4w0yy.tokyo"; classtype:attempted-recon; sid:200031871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecaevier.vccavceveoi.samckkf.bar"; classtype:attempted-recon; sid:200031872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecavier.vaevceaeoi.dovxqw.cyou"; classtype:attempted-recon; sid:200031873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecavier.vaevceaeoi.wgarlq.za.com"; classtype:attempted-recon; sid:200031874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecsvier.vasvceveoi.lyjtug.cyou"; classtype:attempted-recon; sid:200031875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieisecsvier.vasvceveoi.t9f0v91.tokyo"; classtype:attempted-recon; sid:200031876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaees.visccaaneaie.hmfhsq.za.com"; classtype:attempted-recon; sid:200031877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaees.visccaaneaie.lq0cebn.tokyo"; classtype:attempted-recon; sid:200031878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaees.visccaaneeie.bhgmqp.id"; classtype:attempted-recon; sid:200031879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaees.visccaaneeie.eowzeh.za.com"; classtype:attempted-recon; sid:200031880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaees.visccaaneeie.gmveprp.bar"; classtype:attempted-recon; sid:200031881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaees.visccaaneeie.uaxfks.za.com"; classtype:attempted-recon; sid:200031882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaes.visaeaneaie.fmplct.id"; classtype:attempted-recon; sid:200031883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaes.visaeaneaie.lqslas.cyou"; classtype:attempted-recon; sid:200031884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaes.visaeaneaie.qxy0g3r.tokyo"; classtype:attempted-recon; sid:200031885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaes.visaeaneaie.ulcodn.za.com"; classtype:attempted-recon; sid:200031886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaaes.visaeaneaie.xvaunoh.bar"; classtype:attempted-recon; sid:200031887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaves.visasaneeie.luhant.za.com"; classtype:attempted-recon; sid:200031888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieivsaves.visasaneeie.rlgaswg.bar"; classtype:attempted-recon; sid:200031889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.a8m6di.icu"; classtype:attempted-recon; sid:200031890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.aaxbpo.top"; classtype:attempted-recon; sid:200031891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.adpslp.top"; classtype:attempted-recon; sid:200031892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.aenjkw.top"; classtype:attempted-recon; sid:200031893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.agdhkb.top"; classtype:attempted-recon; sid:200031894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.akgjcb.top"; classtype:attempted-recon; sid:200031895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.baelbg.top"; classtype:attempted-recon; sid:200031896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.bhqnyq.icu"; classtype:attempted-recon; sid:200031897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.bkwgho.top"; classtype:attempted-recon; sid:200031898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.bmknvf.top"; classtype:attempted-recon; sid:200031899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.buzmri.top"; classtype:attempted-recon; sid:200031900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.dgckut.top"; classtype:attempted-recon; sid:200031901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.djtela.top"; classtype:attempted-recon; sid:200031902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.dlhsif.top"; classtype:attempted-recon; sid:200031903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.dnoftm.top"; classtype:attempted-recon; sid:200031904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.doxryd.top"; classtype:attempted-recon; sid:200031905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.dwxrym.top"; classtype:attempted-recon; sid:200031906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.dy1nam.icu"; classtype:attempted-recon; sid:200031907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.efcgly.icu"; classtype:attempted-recon; sid:200031908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ejvyvo.top"; classtype:attempted-recon; sid:200031909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.erkzgb.top"; classtype:attempted-recon; sid:200031910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.erqvhz.icu"; classtype:attempted-recon; sid:200031911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ewhdkk.top"; classtype:attempted-recon; sid:200031912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.flgapj.top"; classtype:attempted-recon; sid:200031913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ftnnvo.icu"; classtype:attempted-recon; sid:200031914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.fviult.icu"; classtype:attempted-recon; sid:200031915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.fwgrbb.top"; classtype:attempted-recon; sid:200031916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.fxfbld.top"; classtype:attempted-recon; sid:200031917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.gpik9c.icu"; classtype:attempted-recon; sid:200031918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.gy8u8m.icu"; classtype:attempted-recon; sid:200031919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.hihmof.top"; classtype:attempted-recon; sid:200031920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.hnyrvh.icu"; classtype:attempted-recon; sid:200031921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.hstoja.top"; classtype:attempted-recon; sid:200031922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.icbupe.icu"; classtype:attempted-recon; sid:200031923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ikjthi.top"; classtype:attempted-recon; sid:200031924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ileuct.top"; classtype:attempted-recon; sid:200031925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.iobrjq.icu"; classtype:attempted-recon; sid:200031926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.iyfkny.top"; classtype:attempted-recon; sid:200031927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.jashxw.icu"; classtype:attempted-recon; sid:200031928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.jfqejr.icu"; classtype:attempted-recon; sid:200031929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.joziry.top"; classtype:attempted-recon; sid:200031930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.jvquad.top"; classtype:attempted-recon; sid:200031931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.jvzxml.top"; classtype:attempted-recon; sid:200031932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.jyszpt.top"; classtype:attempted-recon; sid:200031933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.kdhnlt.top"; classtype:attempted-recon; sid:200031934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.keud7w.icu"; classtype:attempted-recon; sid:200031935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.kgflqd.top"; classtype:attempted-recon; sid:200031936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.kkvrke.icu"; classtype:attempted-recon; sid:200031937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.kosoht.icu"; classtype:attempted-recon; sid:200031938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.laojhs.top"; classtype:attempted-recon; sid:200031939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.lcq3yk.icu"; classtype:attempted-recon; sid:200031940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ljnqqs.top"; classtype:attempted-recon; sid:200031941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.llpgun.icu"; classtype:attempted-recon; sid:200031942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.luiyci.top"; classtype:attempted-recon; sid:200031943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.lxszsl.icu"; classtype:attempted-recon; sid:200031944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.mleksy.top"; classtype:attempted-recon; sid:200031945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.msiobh.top"; classtype:attempted-recon; sid:200031946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.msphzi.top"; classtype:attempted-recon; sid:200031947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.mtdqmc.icu"; classtype:attempted-recon; sid:200031948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ndkuwx.top"; classtype:attempted-recon; sid:200031949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.neagfg.top"; classtype:attempted-recon; sid:200031950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.njaczc.top"; classtype:attempted-recon; sid:200031951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.obmxjj.top"; classtype:attempted-recon; sid:200031952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ontgpj.top"; classtype:attempted-recon; sid:200031953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.oshfrh.top"; classtype:attempted-recon; sid:200031954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.oubbeh.top"; classtype:attempted-recon; sid:200031955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.oxfasj.top"; classtype:attempted-recon; sid:200031956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.p0mou1.icu"; classtype:attempted-recon; sid:200031957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.p31bj2.icu"; classtype:attempted-recon; sid:200031958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.p7251j.icu"; classtype:attempted-recon; sid:200031959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.passoe.top"; classtype:attempted-recon; sid:200031960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.pasytj.top"; classtype:attempted-recon; sid:200031961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.pazzro.top"; classtype:attempted-recon; sid:200031962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.pcukoi.icu"; classtype:attempted-recon; sid:200031963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.qyaudr.top"; classtype:attempted-recon; sid:200031964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.rlaptr.top"; classtype:attempted-recon; sid:200031965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.rlrkoz.top"; classtype:attempted-recon; sid:200031966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.rwuluo.top"; classtype:attempted-recon; sid:200031967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.sk6y3y.icu"; classtype:attempted-recon; sid:200031968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.slstjk.top"; classtype:attempted-recon; sid:200031969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.tbsfgl.icu"; classtype:attempted-recon; sid:200031970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.timuyw.icu"; classtype:attempted-recon; sid:200031971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.tpwghl.top"; classtype:attempted-recon; sid:200031972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.tutpfb.icu"; classtype:attempted-recon; sid:200031973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.veuqdd.icu"; classtype:attempted-recon; sid:200031974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.vghrha.top"; classtype:attempted-recon; sid:200031975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.vnhemj.icu"; classtype:attempted-recon; sid:200031976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.wfgyvk.top"; classtype:attempted-recon; sid:200031977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.wgrfay.top"; classtype:attempted-recon; sid:200031978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.xahccw.icu"; classtype:attempted-recon; sid:200031979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.xgnrrh.top"; classtype:attempted-recon; sid:200031980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.xqvlbl.top"; classtype:attempted-recon; sid:200031981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ynaecg.top"; classtype:attempted-recon; sid:200031982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ywcuuj.top"; classtype:attempted-recon; sid:200031983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.ywzeqn.top"; classtype:attempted-recon; sid:200031984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.zdealp.icu"; classtype:attempted-recon; sid:200031985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.zllcxx.top"; classtype:attempted-recon; sid:200031986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.zqlmyv.icu"; classtype:attempted-recon; sid:200031987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.zxizqv.top"; classtype:attempted-recon; sid:200031988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.a8m6di.icu"; classtype:attempted-recon; sid:200031989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.aaxbpo.top"; classtype:attempted-recon; sid:200031990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.adpslp.top"; classtype:attempted-recon; sid:200031991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.aenjkw.top"; classtype:attempted-recon; sid:200031992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.agdhkb.top"; classtype:attempted-recon; sid:200031993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.akgjcb.top"; classtype:attempted-recon; sid:200031994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.baelbg.top"; classtype:attempted-recon; sid:200031995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.bhqnyq.icu"; classtype:attempted-recon; sid:200031996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.bkwgho.top"; classtype:attempted-recon; sid:200031997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.bmknvf.top"; classtype:attempted-recon; sid:200031998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.buzmri.top"; classtype:attempted-recon; sid:200031999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.dgckut.top"; classtype:attempted-recon; sid:200032000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.djtela.top"; classtype:attempted-recon; sid:200032001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.dlhsif.top"; classtype:attempted-recon; sid:200032002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.dnoftm.top"; classtype:attempted-recon; sid:200032003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.doxryd.top"; classtype:attempted-recon; sid:200032004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.dwxrym.top"; classtype:attempted-recon; sid:200032005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.dy1nam.icu"; classtype:attempted-recon; sid:200032006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.efcgly.icu"; classtype:attempted-recon; sid:200032007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ejvyvo.top"; classtype:attempted-recon; sid:200032008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.erkzgb.top"; classtype:attempted-recon; sid:200032009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.erqvhz.icu"; classtype:attempted-recon; sid:200032010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ewhdkk.top"; classtype:attempted-recon; sid:200032011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.flgapj.top"; classtype:attempted-recon; sid:200032012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ftnnvo.icu"; classtype:attempted-recon; sid:200032013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.fviult.icu"; classtype:attempted-recon; sid:200032014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.fwgrbb.top"; classtype:attempted-recon; sid:200032015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.fxfbld.top"; classtype:attempted-recon; sid:200032016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.gpik9c.icu"; classtype:attempted-recon; sid:200032017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.gy8u8m.icu"; classtype:attempted-recon; sid:200032018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.hihmof.top"; classtype:attempted-recon; sid:200032019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.hnyrvh.icu"; classtype:attempted-recon; sid:200032020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.hstoja.top"; classtype:attempted-recon; sid:200032021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.icbupe.icu"; classtype:attempted-recon; sid:200032022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ikjthi.top"; classtype:attempted-recon; sid:200032023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ileuct.top"; classtype:attempted-recon; sid:200032024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.iobrjq.icu"; classtype:attempted-recon; sid:200032025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.iyfkny.top"; classtype:attempted-recon; sid:200032026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.jashxw.icu"; classtype:attempted-recon; sid:200032027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.jfqejr.icu"; classtype:attempted-recon; sid:200032028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.joziry.top"; classtype:attempted-recon; sid:200032029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.jvquad.top"; classtype:attempted-recon; sid:200032030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.jvzxml.top"; classtype:attempted-recon; sid:200032031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.jyszpt.top"; classtype:attempted-recon; sid:200032032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.kdhnlt.top"; classtype:attempted-recon; sid:200032033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.keud7w.icu"; classtype:attempted-recon; sid:200032034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.kgflqd.top"; classtype:attempted-recon; sid:200032035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.kkvrke.icu"; classtype:attempted-recon; sid:200032036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.kosoht.icu"; classtype:attempted-recon; sid:200032037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.laojhs.top"; classtype:attempted-recon; sid:200032038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.lcq3yk.icu"; classtype:attempted-recon; sid:200032039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ljnqqs.top"; classtype:attempted-recon; sid:200032040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.llpgun.icu"; classtype:attempted-recon; sid:200032041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.luiyci.top"; classtype:attempted-recon; sid:200032042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.lxszsl.icu"; classtype:attempted-recon; sid:200032043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.mleksy.top"; classtype:attempted-recon; sid:200032044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.msiobh.top"; classtype:attempted-recon; sid:200032045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.msphzi.top"; classtype:attempted-recon; sid:200032046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.mtdqmc.icu"; classtype:attempted-recon; sid:200032047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ndkuwx.top"; classtype:attempted-recon; sid:200032048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.neagfg.top"; classtype:attempted-recon; sid:200032049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.njaczc.top"; classtype:attempted-recon; sid:200032050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.obmxjj.top"; classtype:attempted-recon; sid:200032051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ontgpj.top"; classtype:attempted-recon; sid:200032052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.oshfrh.top"; classtype:attempted-recon; sid:200032053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.oubbeh.top"; classtype:attempted-recon; sid:200032054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.oxfasj.top"; classtype:attempted-recon; sid:200032055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.p0mou1.icu"; classtype:attempted-recon; sid:200032056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.p31bj2.icu"; classtype:attempted-recon; sid:200032057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.p7251j.icu"; classtype:attempted-recon; sid:200032058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.passoe.top"; classtype:attempted-recon; sid:200032059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.pasytj.top"; classtype:attempted-recon; sid:200032060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.pazzro.top"; classtype:attempted-recon; sid:200032061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.pcukoi.icu"; classtype:attempted-recon; sid:200032062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.qyaudr.top"; classtype:attempted-recon; sid:200032063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.rlaptr.top"; classtype:attempted-recon; sid:200032064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.rlrkoz.top"; classtype:attempted-recon; sid:200032065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.rwuluo.top"; classtype:attempted-recon; sid:200032066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.sk6y3y.icu"; classtype:attempted-recon; sid:200032067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.slstjk.top"; classtype:attempted-recon; sid:200032068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.tbsfgl.icu"; classtype:attempted-recon; sid:200032069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.timuyw.icu"; classtype:attempted-recon; sid:200032070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.tpwghl.top"; classtype:attempted-recon; sid:200032071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.tutpfb.icu"; classtype:attempted-recon; sid:200032072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.veuqdd.icu"; classtype:attempted-recon; sid:200032073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.vghrha.top"; classtype:attempted-recon; sid:200032074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.vnhemj.icu"; classtype:attempted-recon; sid:200032075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.wfgyvk.top"; classtype:attempted-recon; sid:200032076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.wgrfay.top"; classtype:attempted-recon; sid:200032077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.xahccw.icu"; classtype:attempted-recon; sid:200032078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.xgnrrh.top"; classtype:attempted-recon; sid:200032079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.xqvlbl.top"; classtype:attempted-recon; sid:200032080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ynaecg.top"; classtype:attempted-recon; sid:200032081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ywcuuj.top"; classtype:attempted-recon; sid:200032082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.ywzeqn.top"; classtype:attempted-recon; sid:200032083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.zdealp.icu"; classtype:attempted-recon; sid:200032084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.zllcxx.top"; classtype:attempted-recon; sid:200032085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.zqlmyv.icu"; classtype:attempted-recon; sid:200032086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.zxizqv.top"; classtype:attempted-recon; sid:200032087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.a8m6di.icu"; classtype:attempted-recon; sid:200032088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.aaxbpo.top"; classtype:attempted-recon; sid:200032089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.adpslp.top"; classtype:attempted-recon; sid:200032090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.aenjkw.top"; classtype:attempted-recon; sid:200032091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.agdhkb.top"; classtype:attempted-recon; sid:200032092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.akgjcb.top"; classtype:attempted-recon; sid:200032093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.baelbg.top"; classtype:attempted-recon; sid:200032094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.bkwgho.top"; classtype:attempted-recon; sid:200032096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.bmknvf.top"; classtype:attempted-recon; sid:200032097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.buzmri.top"; classtype:attempted-recon; sid:200032098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.dgckut.top"; classtype:attempted-recon; sid:200032099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.djtela.top"; classtype:attempted-recon; sid:200032100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.dlhsif.top"; classtype:attempted-recon; sid:200032101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.dnoftm.top"; classtype:attempted-recon; sid:200032102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.doxryd.top"; classtype:attempted-recon; sid:200032103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.dwxrym.top"; classtype:attempted-recon; sid:200032104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.dy1nam.icu"; classtype:attempted-recon; sid:200032105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.efcgly.icu"; classtype:attempted-recon; sid:200032106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ejvyvo.top"; classtype:attempted-recon; sid:200032107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.erkzgb.top"; classtype:attempted-recon; sid:200032108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.erqvhz.icu"; classtype:attempted-recon; sid:200032109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ewhdkk.top"; classtype:attempted-recon; sid:200032110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.flgapj.top"; classtype:attempted-recon; sid:200032111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.fviult.icu"; classtype:attempted-recon; sid:200032113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.fwgrbb.top"; classtype:attempted-recon; sid:200032114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.fxfbld.top"; classtype:attempted-recon; sid:200032115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.gpik9c.icu"; classtype:attempted-recon; sid:200032116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.hihmof.top"; classtype:attempted-recon; sid:200032118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.hstoja.top"; classtype:attempted-recon; sid:200032120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.icbupe.icu"; classtype:attempted-recon; sid:200032121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ikjthi.top"; classtype:attempted-recon; sid:200032122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ileuct.top"; classtype:attempted-recon; sid:200032123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.iobrjq.icu"; classtype:attempted-recon; sid:200032124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.iyfkny.top"; classtype:attempted-recon; sid:200032125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.jashxw.icu"; classtype:attempted-recon; sid:200032126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.jfqejr.icu"; classtype:attempted-recon; sid:200032127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.joziry.top"; classtype:attempted-recon; sid:200032128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.jvquad.top"; classtype:attempted-recon; sid:200032129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.jvzxml.top"; classtype:attempted-recon; sid:200032130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.jyszpt.top"; classtype:attempted-recon; sid:200032131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.kdhnlt.top"; classtype:attempted-recon; sid:200032132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.keud7w.icu"; classtype:attempted-recon; sid:200032133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.kgflqd.top"; classtype:attempted-recon; sid:200032134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.kkvrke.icu"; classtype:attempted-recon; sid:200032135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.kosoht.icu"; classtype:attempted-recon; sid:200032136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.laojhs.top"; classtype:attempted-recon; sid:200032137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ljnqqs.top"; classtype:attempted-recon; sid:200032139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.llpgun.icu"; classtype:attempted-recon; sid:200032140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.luiyci.top"; classtype:attempted-recon; sid:200032141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.lxszsl.icu"; classtype:attempted-recon; sid:200032142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.mleksy.top"; classtype:attempted-recon; sid:200032143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.msiobh.top"; classtype:attempted-recon; sid:200032144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.msphzi.top"; classtype:attempted-recon; sid:200032145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ndkuwx.top"; classtype:attempted-recon; sid:200032147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.neagfg.top"; classtype:attempted-recon; sid:200032148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.njaczc.top"; classtype:attempted-recon; sid:200032149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.obmxjj.top"; classtype:attempted-recon; sid:200032150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ontgpj.top"; classtype:attempted-recon; sid:200032151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.oshfrh.top"; classtype:attempted-recon; sid:200032152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.oubbeh.top"; classtype:attempted-recon; sid:200032153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.oxfasj.top"; classtype:attempted-recon; sid:200032154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.p0mou1.icu"; classtype:attempted-recon; sid:200032155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.p31bj2.icu"; classtype:attempted-recon; sid:200032156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.p7251j.icu"; classtype:attempted-recon; sid:200032157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.passoe.top"; classtype:attempted-recon; sid:200032158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.pasytj.top"; classtype:attempted-recon; sid:200032159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.pazzro.top"; classtype:attempted-recon; sid:200032160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.pcukoi.icu"; classtype:attempted-recon; sid:200032161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.qyaudr.top"; classtype:attempted-recon; sid:200032162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.rlaptr.top"; classtype:attempted-recon; sid:200032163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.rlrkoz.top"; classtype:attempted-recon; sid:200032164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.rwuluo.top"; classtype:attempted-recon; sid:200032165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.slstjk.top"; classtype:attempted-recon; sid:200032167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.timuyw.icu"; classtype:attempted-recon; sid:200032169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.tpwghl.top"; classtype:attempted-recon; sid:200032170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.tutpfb.icu"; classtype:attempted-recon; sid:200032171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.veuqdd.icu"; classtype:attempted-recon; sid:200032172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.vghrha.top"; classtype:attempted-recon; sid:200032173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.vnhemj.icu"; classtype:attempted-recon; sid:200032174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.wfgyvk.top"; classtype:attempted-recon; sid:200032175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.wgrfay.top"; classtype:attempted-recon; sid:200032176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.xahccw.icu"; classtype:attempted-recon; sid:200032177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.xgnrrh.top"; classtype:attempted-recon; sid:200032178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.xqvlbl.top"; classtype:attempted-recon; sid:200032179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ynaecg.top"; classtype:attempted-recon; sid:200032180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ywcuuj.top"; classtype:attempted-recon; sid:200032181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.ywzeqn.top"; classtype:attempted-recon; sid:200032182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.zdealp.icu"; classtype:attempted-recon; sid:200032183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.zllcxx.top"; classtype:attempted-recon; sid:200032184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.zxizqv.top"; classtype:attempted-recon; sid:200032186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.a8m6di.icu"; classtype:attempted-recon; sid:200032187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.aaxbpo.top"; classtype:attempted-recon; sid:200032188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.adpslp.top"; classtype:attempted-recon; sid:200032189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.aenjkw.top"; classtype:attempted-recon; sid:200032190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.agdhkb.top"; classtype:attempted-recon; sid:200032191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.akgjcb.top"; classtype:attempted-recon; sid:200032192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.baelbg.top"; classtype:attempted-recon; sid:200032193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.bkwgho.top"; classtype:attempted-recon; sid:200032195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.bmknvf.top"; classtype:attempted-recon; sid:200032196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.buzmri.top"; classtype:attempted-recon; sid:200032197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.dgckut.top"; classtype:attempted-recon; sid:200032198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.djtela.top"; classtype:attempted-recon; sid:200032199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.dlhsif.top"; classtype:attempted-recon; sid:200032200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.dnoftm.top"; classtype:attempted-recon; sid:200032201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.doxryd.top"; classtype:attempted-recon; sid:200032202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.dwxrym.top"; classtype:attempted-recon; sid:200032203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.dy1nam.icu"; classtype:attempted-recon; sid:200032204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.efcgly.icu"; classtype:attempted-recon; sid:200032205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ejvyvo.top"; classtype:attempted-recon; sid:200032206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.erkzgb.top"; classtype:attempted-recon; sid:200032207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.erqvhz.icu"; classtype:attempted-recon; sid:200032208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ewhdkk.top"; classtype:attempted-recon; sid:200032209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.flgapj.top"; classtype:attempted-recon; sid:200032210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.fviult.icu"; classtype:attempted-recon; sid:200032212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.fwgrbb.top"; classtype:attempted-recon; sid:200032213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.fxfbld.top"; classtype:attempted-recon; sid:200032214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.gpik9c.icu"; classtype:attempted-recon; sid:200032215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.hihmof.top"; classtype:attempted-recon; sid:200032217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.hstoja.top"; classtype:attempted-recon; sid:200032219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.icbupe.icu"; classtype:attempted-recon; sid:200032220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ikjthi.top"; classtype:attempted-recon; sid:200032221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ileuct.top"; classtype:attempted-recon; sid:200032222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.iobrjq.icu"; classtype:attempted-recon; sid:200032223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.iyfkny.top"; classtype:attempted-recon; sid:200032224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.jashxw.icu"; classtype:attempted-recon; sid:200032225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.jfqejr.icu"; classtype:attempted-recon; sid:200032226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.joziry.top"; classtype:attempted-recon; sid:200032227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.jvquad.top"; classtype:attempted-recon; sid:200032228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.jvzxml.top"; classtype:attempted-recon; sid:200032229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.jyszpt.top"; classtype:attempted-recon; sid:200032230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.kdhnlt.top"; classtype:attempted-recon; sid:200032231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.keud7w.icu"; classtype:attempted-recon; sid:200032232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.kgflqd.top"; classtype:attempted-recon; sid:200032233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.kkvrke.icu"; classtype:attempted-recon; sid:200032234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.kosoht.icu"; classtype:attempted-recon; sid:200032235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.laojhs.top"; classtype:attempted-recon; sid:200032236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ljnqqs.top"; classtype:attempted-recon; sid:200032238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.llpgun.icu"; classtype:attempted-recon; sid:200032239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.luiyci.top"; classtype:attempted-recon; sid:200032240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.lxszsl.icu"; classtype:attempted-recon; sid:200032241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.mleksy.top"; classtype:attempted-recon; sid:200032242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.msiobh.top"; classtype:attempted-recon; sid:200032243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.msphzi.top"; classtype:attempted-recon; sid:200032244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ndkuwx.top"; classtype:attempted-recon; sid:200032246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.neagfg.top"; classtype:attempted-recon; sid:200032247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.njaczc.top"; classtype:attempted-recon; sid:200032248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.obmxjj.top"; classtype:attempted-recon; sid:200032249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ontgpj.top"; classtype:attempted-recon; sid:200032250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.oshfrh.top"; classtype:attempted-recon; sid:200032251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.oubbeh.top"; classtype:attempted-recon; sid:200032252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.oxfasj.top"; classtype:attempted-recon; sid:200032253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.p0mou1.icu"; classtype:attempted-recon; sid:200032254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.p31bj2.icu"; classtype:attempted-recon; sid:200032255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.p7251j.icu"; classtype:attempted-recon; sid:200032256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.passoe.top"; classtype:attempted-recon; sid:200032257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.pasytj.top"; classtype:attempted-recon; sid:200032258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.pazzro.top"; classtype:attempted-recon; sid:200032259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.pcukoi.icu"; classtype:attempted-recon; sid:200032260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.qyaudr.top"; classtype:attempted-recon; sid:200032261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.rlaptr.top"; classtype:attempted-recon; sid:200032262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.rlrkoz.top"; classtype:attempted-recon; sid:200032263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.rwuluo.top"; classtype:attempted-recon; sid:200032264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.slstjk.top"; classtype:attempted-recon; sid:200032266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.timuyw.icu"; classtype:attempted-recon; sid:200032268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.tpwghl.top"; classtype:attempted-recon; sid:200032269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.tutpfb.icu"; classtype:attempted-recon; sid:200032270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.veuqdd.icu"; classtype:attempted-recon; sid:200032271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.vghrha.top"; classtype:attempted-recon; sid:200032272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.vnhemj.icu"; classtype:attempted-recon; sid:200032273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.wfgyvk.top"; classtype:attempted-recon; sid:200032274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.wgrfay.top"; classtype:attempted-recon; sid:200032275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.xahccw.icu"; classtype:attempted-recon; sid:200032276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.xgnrrh.top"; classtype:attempted-recon; sid:200032277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.xqvlbl.top"; classtype:attempted-recon; sid:200032278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ynaecg.top"; classtype:attempted-recon; sid:200032279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ywcuuj.top"; classtype:attempted-recon; sid:200032280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.ywzeqn.top"; classtype:attempted-recon; sid:200032281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.zdealp.icu"; classtype:attempted-recon; sid:200032282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.zllcxx.top"; classtype:attempted-recon; sid:200032283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.zxizqv.top"; classtype:attempted-recon; sid:200032285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.a8m6di.icu"; classtype:attempted-recon; sid:200032286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.aaxbpo.top"; classtype:attempted-recon; sid:200032287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.adpslp.top"; classtype:attempted-recon; sid:200032288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.aenjkw.top"; classtype:attempted-recon; sid:200032289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.agdhkb.top"; classtype:attempted-recon; sid:200032290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.akgjcb.top"; classtype:attempted-recon; sid:200032291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.baelbg.top"; classtype:attempted-recon; sid:200032292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.bkwgho.top"; classtype:attempted-recon; sid:200032294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.bmknvf.top"; classtype:attempted-recon; sid:200032295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.buzmri.top"; classtype:attempted-recon; sid:200032296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.dgckut.top"; classtype:attempted-recon; sid:200032297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.djtela.top"; classtype:attempted-recon; sid:200032298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.dlhsif.top"; classtype:attempted-recon; sid:200032299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.dnoftm.top"; classtype:attempted-recon; sid:200032300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.doxryd.top"; classtype:attempted-recon; sid:200032301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.dwxrym.top"; classtype:attempted-recon; sid:200032302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.dy1nam.icu"; classtype:attempted-recon; sid:200032303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.efcgly.icu"; classtype:attempted-recon; sid:200032304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ejvyvo.top"; classtype:attempted-recon; sid:200032305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.erkzgb.top"; classtype:attempted-recon; sid:200032306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.erqvhz.icu"; classtype:attempted-recon; sid:200032307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ewhdkk.top"; classtype:attempted-recon; sid:200032308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.flgapj.top"; classtype:attempted-recon; sid:200032309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.fviult.icu"; classtype:attempted-recon; sid:200032311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.fwgrbb.top"; classtype:attempted-recon; sid:200032312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.fxfbld.top"; classtype:attempted-recon; sid:200032313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.gpik9c.icu"; classtype:attempted-recon; sid:200032314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.hihmof.top"; classtype:attempted-recon; sid:200032316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.hstoja.top"; classtype:attempted-recon; sid:200032318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.icbupe.icu"; classtype:attempted-recon; sid:200032319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ikjthi.top"; classtype:attempted-recon; sid:200032320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ileuct.top"; classtype:attempted-recon; sid:200032321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.iobrjq.icu"; classtype:attempted-recon; sid:200032322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.iyfkny.top"; classtype:attempted-recon; sid:200032323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.jashxw.icu"; classtype:attempted-recon; sid:200032324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.jfqejr.icu"; classtype:attempted-recon; sid:200032325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.joziry.top"; classtype:attempted-recon; sid:200032326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.jvquad.top"; classtype:attempted-recon; sid:200032327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.jvzxml.top"; classtype:attempted-recon; sid:200032328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.jyszpt.top"; classtype:attempted-recon; sid:200032329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.kdhnlt.top"; classtype:attempted-recon; sid:200032330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.keud7w.icu"; classtype:attempted-recon; sid:200032331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.kgflqd.top"; classtype:attempted-recon; sid:200032332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.kkvrke.icu"; classtype:attempted-recon; sid:200032333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.kosoht.icu"; classtype:attempted-recon; sid:200032334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.laojhs.top"; classtype:attempted-recon; sid:200032335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ljnqqs.top"; classtype:attempted-recon; sid:200032337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.llpgun.icu"; classtype:attempted-recon; sid:200032338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.luiyci.top"; classtype:attempted-recon; sid:200032339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.lxszsl.icu"; classtype:attempted-recon; sid:200032340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.mleksy.top"; classtype:attempted-recon; sid:200032341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.msiobh.top"; classtype:attempted-recon; sid:200032342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.msphzi.top"; classtype:attempted-recon; sid:200032343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ndkuwx.top"; classtype:attempted-recon; sid:200032345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.neagfg.top"; classtype:attempted-recon; sid:200032346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.njaczc.top"; classtype:attempted-recon; sid:200032347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.obmxjj.top"; classtype:attempted-recon; sid:200032348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ontgpj.top"; classtype:attempted-recon; sid:200032349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.oshfrh.top"; classtype:attempted-recon; sid:200032350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.oubbeh.top"; classtype:attempted-recon; sid:200032351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.oxfasj.top"; classtype:attempted-recon; sid:200032352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.p0mou1.icu"; classtype:attempted-recon; sid:200032353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.p31bj2.icu"; classtype:attempted-recon; sid:200032354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.p7251j.icu"; classtype:attempted-recon; sid:200032355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.passoe.top"; classtype:attempted-recon; sid:200032356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.pasytj.top"; classtype:attempted-recon; sid:200032357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.pazzro.top"; classtype:attempted-recon; sid:200032358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.pcukoi.icu"; classtype:attempted-recon; sid:200032359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.qyaudr.top"; classtype:attempted-recon; sid:200032360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.rlaptr.top"; classtype:attempted-recon; sid:200032361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.rlrkoz.top"; classtype:attempted-recon; sid:200032362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.rwuluo.top"; classtype:attempted-recon; sid:200032363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.slstjk.top"; classtype:attempted-recon; sid:200032365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.timuyw.icu"; classtype:attempted-recon; sid:200032367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.tpwghl.top"; classtype:attempted-recon; sid:200032368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.tutpfb.icu"; classtype:attempted-recon; sid:200032369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.veuqdd.icu"; classtype:attempted-recon; sid:200032370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.vghrha.top"; classtype:attempted-recon; sid:200032371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.vnhemj.icu"; classtype:attempted-recon; sid:200032372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.wfgyvk.top"; classtype:attempted-recon; sid:200032373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.wgrfay.top"; classtype:attempted-recon; sid:200032374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.xahccw.icu"; classtype:attempted-recon; sid:200032375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.xgnrrh.top"; classtype:attempted-recon; sid:200032376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.xqvlbl.top"; classtype:attempted-recon; sid:200032377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ynaecg.top"; classtype:attempted-recon; sid:200032378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ywcuuj.top"; classtype:attempted-recon; sid:200032379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.ywzeqn.top"; classtype:attempted-recon; sid:200032380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.zdealp.icu"; classtype:attempted-recon; sid:200032381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.zllcxx.top"; classtype:attempted-recon; sid:200032382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.zxizqv.top"; classtype:attempted-recon; sid:200032384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.a8m6di.icu"; classtype:attempted-recon; sid:200032385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.aaxbpo.top"; classtype:attempted-recon; sid:200032386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.adpslp.top"; classtype:attempted-recon; sid:200032387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.aenjkw.top"; classtype:attempted-recon; sid:200032388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.agdhkb.top"; classtype:attempted-recon; sid:200032389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.akgjcb.top"; classtype:attempted-recon; sid:200032390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.baelbg.top"; classtype:attempted-recon; sid:200032391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.bkwgho.top"; classtype:attempted-recon; sid:200032393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.bmknvf.top"; classtype:attempted-recon; sid:200032394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.buzmri.top"; classtype:attempted-recon; sid:200032395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.dgckut.top"; classtype:attempted-recon; sid:200032396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.djtela.top"; classtype:attempted-recon; sid:200032397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.dlhsif.top"; classtype:attempted-recon; sid:200032398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.dnoftm.top"; classtype:attempted-recon; sid:200032399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.doxryd.top"; classtype:attempted-recon; sid:200032400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.dwxrym.top"; classtype:attempted-recon; sid:200032401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.dy1nam.icu"; classtype:attempted-recon; sid:200032402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.efcgly.icu"; classtype:attempted-recon; sid:200032403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ejvyvo.top"; classtype:attempted-recon; sid:200032404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.erkzgb.top"; classtype:attempted-recon; sid:200032405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.erqvhz.icu"; classtype:attempted-recon; sid:200032406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ewhdkk.top"; classtype:attempted-recon; sid:200032407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.flgapj.top"; classtype:attempted-recon; sid:200032408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.fviult.icu"; classtype:attempted-recon; sid:200032410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.fwgrbb.top"; classtype:attempted-recon; sid:200032411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.fxfbld.top"; classtype:attempted-recon; sid:200032412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.gpik9c.icu"; classtype:attempted-recon; sid:200032413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.hihmof.top"; classtype:attempted-recon; sid:200032415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.hstoja.top"; classtype:attempted-recon; sid:200032417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.icbupe.icu"; classtype:attempted-recon; sid:200032418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ikjthi.top"; classtype:attempted-recon; sid:200032419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ileuct.top"; classtype:attempted-recon; sid:200032420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.iobrjq.icu"; classtype:attempted-recon; sid:200032421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.iyfkny.top"; classtype:attempted-recon; sid:200032422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.jashxw.icu"; classtype:attempted-recon; sid:200032423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.jfqejr.icu"; classtype:attempted-recon; sid:200032424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.joziry.top"; classtype:attempted-recon; sid:200032425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.jvquad.top"; classtype:attempted-recon; sid:200032426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.jvzxml.top"; classtype:attempted-recon; sid:200032427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.jyszpt.top"; classtype:attempted-recon; sid:200032428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.kdhnlt.top"; classtype:attempted-recon; sid:200032429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.keud7w.icu"; classtype:attempted-recon; sid:200032430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.kgflqd.top"; classtype:attempted-recon; sid:200032431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.kkvrke.icu"; classtype:attempted-recon; sid:200032432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.kosoht.icu"; classtype:attempted-recon; sid:200032433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.laojhs.top"; classtype:attempted-recon; sid:200032434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ljnqqs.top"; classtype:attempted-recon; sid:200032436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.llpgun.icu"; classtype:attempted-recon; sid:200032437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.luiyci.top"; classtype:attempted-recon; sid:200032438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.lxszsl.icu"; classtype:attempted-recon; sid:200032439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.mleksy.top"; classtype:attempted-recon; sid:200032440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.msiobh.top"; classtype:attempted-recon; sid:200032441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.msphzi.top"; classtype:attempted-recon; sid:200032442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ndkuwx.top"; classtype:attempted-recon; sid:200032444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.neagfg.top"; classtype:attempted-recon; sid:200032445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.njaczc.top"; classtype:attempted-recon; sid:200032446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.obmxjj.top"; classtype:attempted-recon; sid:200032447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ontgpj.top"; classtype:attempted-recon; sid:200032448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.oshfrh.top"; classtype:attempted-recon; sid:200032449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.oubbeh.top"; classtype:attempted-recon; sid:200032450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.oxfasj.top"; classtype:attempted-recon; sid:200032451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.p0mou1.icu"; classtype:attempted-recon; sid:200032452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.p31bj2.icu"; classtype:attempted-recon; sid:200032453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.p7251j.icu"; classtype:attempted-recon; sid:200032454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.passoe.top"; classtype:attempted-recon; sid:200032455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.pasytj.top"; classtype:attempted-recon; sid:200032456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.pazzro.top"; classtype:attempted-recon; sid:200032457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.pcukoi.icu"; classtype:attempted-recon; sid:200032458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.qyaudr.top"; classtype:attempted-recon; sid:200032459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.rlaptr.top"; classtype:attempted-recon; sid:200032460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.rlrkoz.top"; classtype:attempted-recon; sid:200032461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.rwuluo.top"; classtype:attempted-recon; sid:200032462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.slstjk.top"; classtype:attempted-recon; sid:200032464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.timuyw.icu"; classtype:attempted-recon; sid:200032466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.tpwghl.top"; classtype:attempted-recon; sid:200032467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.tutpfb.icu"; classtype:attempted-recon; sid:200032468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.veuqdd.icu"; classtype:attempted-recon; sid:200032469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.vghrha.top"; classtype:attempted-recon; sid:200032470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.vnhemj.icu"; classtype:attempted-recon; sid:200032471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.wfgyvk.top"; classtype:attempted-recon; sid:200032472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.wgrfay.top"; classtype:attempted-recon; sid:200032473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.xahccw.icu"; classtype:attempted-recon; sid:200032474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.xgnrrh.top"; classtype:attempted-recon; sid:200032475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.xqvlbl.top"; classtype:attempted-recon; sid:200032476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ynaecg.top"; classtype:attempted-recon; sid:200032477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ywcuuj.top"; classtype:attempted-recon; sid:200032478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.ywzeqn.top"; classtype:attempted-recon; sid:200032479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.zdealp.icu"; classtype:attempted-recon; sid:200032480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.zllcxx.top"; classtype:attempted-recon; sid:200032481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.zxizqv.top"; classtype:attempted-recon; sid:200032483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.a8m6di.icu"; classtype:attempted-recon; sid:200032484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.aaxbpo.top"; classtype:attempted-recon; sid:200032485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.adpslp.top"; classtype:attempted-recon; sid:200032486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.aenjkw.top"; classtype:attempted-recon; sid:200032487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.agdhkb.top"; classtype:attempted-recon; sid:200032488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.akgjcb.top"; classtype:attempted-recon; sid:200032489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.baelbg.top"; classtype:attempted-recon; sid:200032490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.bkwgho.top"; classtype:attempted-recon; sid:200032492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.bmknvf.top"; classtype:attempted-recon; sid:200032493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.buzmri.top"; classtype:attempted-recon; sid:200032494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.dgckut.top"; classtype:attempted-recon; sid:200032495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.djtela.top"; classtype:attempted-recon; sid:200032496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.dlhsif.top"; classtype:attempted-recon; sid:200032497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.dnoftm.top"; classtype:attempted-recon; sid:200032498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.doxryd.top"; classtype:attempted-recon; sid:200032499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.dwxrym.top"; classtype:attempted-recon; sid:200032500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.dy1nam.icu"; classtype:attempted-recon; sid:200032501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.efcgly.icu"; classtype:attempted-recon; sid:200032502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ejvyvo.top"; classtype:attempted-recon; sid:200032503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.erkzgb.top"; classtype:attempted-recon; sid:200032504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.erqvhz.icu"; classtype:attempted-recon; sid:200032505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ewhdkk.top"; classtype:attempted-recon; sid:200032506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.flgapj.top"; classtype:attempted-recon; sid:200032507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.fviult.icu"; classtype:attempted-recon; sid:200032509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.fwgrbb.top"; classtype:attempted-recon; sid:200032510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.fxfbld.top"; classtype:attempted-recon; sid:200032511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.gpik9c.icu"; classtype:attempted-recon; sid:200032512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.hihmof.top"; classtype:attempted-recon; sid:200032514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.hstoja.top"; classtype:attempted-recon; sid:200032516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.icbupe.icu"; classtype:attempted-recon; sid:200032517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ikjthi.top"; classtype:attempted-recon; sid:200032518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ileuct.top"; classtype:attempted-recon; sid:200032519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.iobrjq.icu"; classtype:attempted-recon; sid:200032520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.iyfkny.top"; classtype:attempted-recon; sid:200032521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.jashxw.icu"; classtype:attempted-recon; sid:200032522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.jfqejr.icu"; classtype:attempted-recon; sid:200032523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.joziry.top"; classtype:attempted-recon; sid:200032524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.jvquad.top"; classtype:attempted-recon; sid:200032525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.jvzxml.top"; classtype:attempted-recon; sid:200032526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.jyszpt.top"; classtype:attempted-recon; sid:200032527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.kdhnlt.top"; classtype:attempted-recon; sid:200032528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.keud7w.icu"; classtype:attempted-recon; sid:200032529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.kgflqd.top"; classtype:attempted-recon; sid:200032530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.kkvrke.icu"; classtype:attempted-recon; sid:200032531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.kosoht.icu"; classtype:attempted-recon; sid:200032532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.laojhs.top"; classtype:attempted-recon; sid:200032533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ljnqqs.top"; classtype:attempted-recon; sid:200032535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.llpgun.icu"; classtype:attempted-recon; sid:200032536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.luiyci.top"; classtype:attempted-recon; sid:200032537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.lxszsl.icu"; classtype:attempted-recon; sid:200032538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.mleksy.top"; classtype:attempted-recon; sid:200032539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.msiobh.top"; classtype:attempted-recon; sid:200032540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.msphzi.top"; classtype:attempted-recon; sid:200032541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ndkuwx.top"; classtype:attempted-recon; sid:200032543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.neagfg.top"; classtype:attempted-recon; sid:200032544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.njaczc.top"; classtype:attempted-recon; sid:200032545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.obmxjj.top"; classtype:attempted-recon; sid:200032546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ontgpj.top"; classtype:attempted-recon; sid:200032547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.oshfrh.top"; classtype:attempted-recon; sid:200032548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.oubbeh.top"; classtype:attempted-recon; sid:200032549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.oxfasj.top"; classtype:attempted-recon; sid:200032550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.p0mou1.icu"; classtype:attempted-recon; sid:200032551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.p31bj2.icu"; classtype:attempted-recon; sid:200032552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.p7251j.icu"; classtype:attempted-recon; sid:200032553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.passoe.top"; classtype:attempted-recon; sid:200032554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.pasytj.top"; classtype:attempted-recon; sid:200032555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.pazzro.top"; classtype:attempted-recon; sid:200032556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.pcukoi.icu"; classtype:attempted-recon; sid:200032557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.qyaudr.top"; classtype:attempted-recon; sid:200032558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.rlaptr.top"; classtype:attempted-recon; sid:200032559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.rlrkoz.top"; classtype:attempted-recon; sid:200032560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.rwuluo.top"; classtype:attempted-recon; sid:200032561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.slstjk.top"; classtype:attempted-recon; sid:200032563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.timuyw.icu"; classtype:attempted-recon; sid:200032565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.tpwghl.top"; classtype:attempted-recon; sid:200032566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.tutpfb.icu"; classtype:attempted-recon; sid:200032567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.veuqdd.icu"; classtype:attempted-recon; sid:200032568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.vghrha.top"; classtype:attempted-recon; sid:200032569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.vnhemj.icu"; classtype:attempted-recon; sid:200032570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.wfgyvk.top"; classtype:attempted-recon; sid:200032571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.wgrfay.top"; classtype:attempted-recon; sid:200032572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.xahccw.icu"; classtype:attempted-recon; sid:200032573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.xgnrrh.top"; classtype:attempted-recon; sid:200032574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.xqvlbl.top"; classtype:attempted-recon; sid:200032575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ynaecg.top"; classtype:attempted-recon; sid:200032576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ywcuuj.top"; classtype:attempted-recon; sid:200032577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.ywzeqn.top"; classtype:attempted-recon; sid:200032578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.zdealp.icu"; classtype:attempted-recon; sid:200032579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.zllcxx.top"; classtype:attempted-recon; sid:200032580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.zxizqv.top"; classtype:attempted-recon; sid:200032582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.a8m6di.icu"; classtype:attempted-recon; sid:200032583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.aaxbpo.top"; classtype:attempted-recon; sid:200032584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.adpslp.top"; classtype:attempted-recon; sid:200032585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.aenjkw.top"; classtype:attempted-recon; sid:200032586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.agdhkb.top"; classtype:attempted-recon; sid:200032587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.akgjcb.top"; classtype:attempted-recon; sid:200032588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.baelbg.top"; classtype:attempted-recon; sid:200032589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.bkwgho.top"; classtype:attempted-recon; sid:200032591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.bmknvf.top"; classtype:attempted-recon; sid:200032592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.buzmri.top"; classtype:attempted-recon; sid:200032593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.dgckut.top"; classtype:attempted-recon; sid:200032594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.djtela.top"; classtype:attempted-recon; sid:200032595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.dlhsif.top"; classtype:attempted-recon; sid:200032596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.dnoftm.top"; classtype:attempted-recon; sid:200032597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.doxryd.top"; classtype:attempted-recon; sid:200032598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.dwxrym.top"; classtype:attempted-recon; sid:200032599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.dy1nam.icu"; classtype:attempted-recon; sid:200032600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.efcgly.icu"; classtype:attempted-recon; sid:200032601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ejvyvo.top"; classtype:attempted-recon; sid:200032602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.erkzgb.top"; classtype:attempted-recon; sid:200032603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.erqvhz.icu"; classtype:attempted-recon; sid:200032604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ewhdkk.top"; classtype:attempted-recon; sid:200032605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.flgapj.top"; classtype:attempted-recon; sid:200032606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.fviult.icu"; classtype:attempted-recon; sid:200032608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.fwgrbb.top"; classtype:attempted-recon; sid:200032609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.fxfbld.top"; classtype:attempted-recon; sid:200032610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.gpik9c.icu"; classtype:attempted-recon; sid:200032611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.hihmof.top"; classtype:attempted-recon; sid:200032613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.hstoja.top"; classtype:attempted-recon; sid:200032615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.icbupe.icu"; classtype:attempted-recon; sid:200032616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ikjthi.top"; classtype:attempted-recon; sid:200032617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ileuct.top"; classtype:attempted-recon; sid:200032618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.iobrjq.icu"; classtype:attempted-recon; sid:200032619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.iyfkny.top"; classtype:attempted-recon; sid:200032620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.jashxw.icu"; classtype:attempted-recon; sid:200032621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.jfqejr.icu"; classtype:attempted-recon; sid:200032622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.joziry.top"; classtype:attempted-recon; sid:200032623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.jvquad.top"; classtype:attempted-recon; sid:200032624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.jvzxml.top"; classtype:attempted-recon; sid:200032625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.jyszpt.top"; classtype:attempted-recon; sid:200032626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.kdhnlt.top"; classtype:attempted-recon; sid:200032627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.keud7w.icu"; classtype:attempted-recon; sid:200032628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.kgflqd.top"; classtype:attempted-recon; sid:200032629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.kkvrke.icu"; classtype:attempted-recon; sid:200032630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.kosoht.icu"; classtype:attempted-recon; sid:200032631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.laojhs.top"; classtype:attempted-recon; sid:200032632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ljnqqs.top"; classtype:attempted-recon; sid:200032634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.llpgun.icu"; classtype:attempted-recon; sid:200032635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.luiyci.top"; classtype:attempted-recon; sid:200032636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.lxszsl.icu"; classtype:attempted-recon; sid:200032637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.mleksy.top"; classtype:attempted-recon; sid:200032638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.msiobh.top"; classtype:attempted-recon; sid:200032639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.msphzi.top"; classtype:attempted-recon; sid:200032640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ndkuwx.top"; classtype:attempted-recon; sid:200032642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.neagfg.top"; classtype:attempted-recon; sid:200032643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.njaczc.top"; classtype:attempted-recon; sid:200032644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.obmxjj.top"; classtype:attempted-recon; sid:200032645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ontgpj.top"; classtype:attempted-recon; sid:200032646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.oshfrh.top"; classtype:attempted-recon; sid:200032647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.oubbeh.top"; classtype:attempted-recon; sid:200032648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.oxfasj.top"; classtype:attempted-recon; sid:200032649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.p0mou1.icu"; classtype:attempted-recon; sid:200032650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.p31bj2.icu"; classtype:attempted-recon; sid:200032651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.p7251j.icu"; classtype:attempted-recon; sid:200032652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.passoe.top"; classtype:attempted-recon; sid:200032653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.pasytj.top"; classtype:attempted-recon; sid:200032654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.pazzro.top"; classtype:attempted-recon; sid:200032655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.pcukoi.icu"; classtype:attempted-recon; sid:200032656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.qyaudr.top"; classtype:attempted-recon; sid:200032657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.rlaptr.top"; classtype:attempted-recon; sid:200032658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.rlrkoz.top"; classtype:attempted-recon; sid:200032659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.rwuluo.top"; classtype:attempted-recon; sid:200032660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.slstjk.top"; classtype:attempted-recon; sid:200032662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.timuyw.icu"; classtype:attempted-recon; sid:200032664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.tpwghl.top"; classtype:attempted-recon; sid:200032665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.tutpfb.icu"; classtype:attempted-recon; sid:200032666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.veuqdd.icu"; classtype:attempted-recon; sid:200032667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.vghrha.top"; classtype:attempted-recon; sid:200032668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.vnhemj.icu"; classtype:attempted-recon; sid:200032669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.wfgyvk.top"; classtype:attempted-recon; sid:200032670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.wgrfay.top"; classtype:attempted-recon; sid:200032671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.xahccw.icu"; classtype:attempted-recon; sid:200032672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.xgnrrh.top"; classtype:attempted-recon; sid:200032673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.xqvlbl.top"; classtype:attempted-recon; sid:200032674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ynaecg.top"; classtype:attempted-recon; sid:200032675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ywcuuj.top"; classtype:attempted-recon; sid:200032676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.ywzeqn.top"; classtype:attempted-recon; sid:200032677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.zdealp.icu"; classtype:attempted-recon; sid:200032678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.zllcxx.top"; classtype:attempted-recon; sid:200032679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.zxizqv.top"; classtype:attempted-recon; sid:200032681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.a8m6di.icu"; classtype:attempted-recon; sid:200032682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.aaxbpo.top"; classtype:attempted-recon; sid:200032683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.adpslp.top"; classtype:attempted-recon; sid:200032684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.aenjkw.top"; classtype:attempted-recon; sid:200032685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.agdhkb.top"; classtype:attempted-recon; sid:200032686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.akgjcb.top"; classtype:attempted-recon; sid:200032687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.baelbg.top"; classtype:attempted-recon; sid:200032688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.bhqnyq.icu"; classtype:attempted-recon; sid:200032689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.bkwgho.top"; classtype:attempted-recon; sid:200032690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.bmknvf.top"; classtype:attempted-recon; sid:200032691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.buzmri.top"; classtype:attempted-recon; sid:200032692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dgckut.top"; classtype:attempted-recon; sid:200032693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.djtela.top"; classtype:attempted-recon; sid:200032694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dlhsif.top"; classtype:attempted-recon; sid:200032695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dnoftm.top"; classtype:attempted-recon; sid:200032696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.doxryd.top"; classtype:attempted-recon; sid:200032697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dwxrym.top"; classtype:attempted-recon; sid:200032698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dy1nam.icu"; classtype:attempted-recon; sid:200032699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.efcgly.icu"; classtype:attempted-recon; sid:200032700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ejvyvo.top"; classtype:attempted-recon; sid:200032701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.erkzgb.top"; classtype:attempted-recon; sid:200032702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.erqvhz.icu"; classtype:attempted-recon; sid:200032703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ewhdkk.top"; classtype:attempted-recon; sid:200032704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.flgapj.top"; classtype:attempted-recon; sid:200032705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ftnnvo.icu"; classtype:attempted-recon; sid:200032706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.fviult.icu"; classtype:attempted-recon; sid:200032707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.fwgrbb.top"; classtype:attempted-recon; sid:200032708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.fxfbld.top"; classtype:attempted-recon; sid:200032709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.gpik9c.icu"; classtype:attempted-recon; sid:200032710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.gy8u8m.icu"; classtype:attempted-recon; sid:200032711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.hihmof.top"; classtype:attempted-recon; sid:200032712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.hnyrvh.icu"; classtype:attempted-recon; sid:200032713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.hstoja.top"; classtype:attempted-recon; sid:200032714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.icbupe.icu"; classtype:attempted-recon; sid:200032715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ikjthi.top"; classtype:attempted-recon; sid:200032716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ileuct.top"; classtype:attempted-recon; sid:200032717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.iobrjq.icu"; classtype:attempted-recon; sid:200032718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.iyfkny.top"; classtype:attempted-recon; sid:200032719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jashxw.icu"; classtype:attempted-recon; sid:200032720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jfqejr.icu"; classtype:attempted-recon; sid:200032721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.joziry.top"; classtype:attempted-recon; sid:200032722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jvquad.top"; classtype:attempted-recon; sid:200032723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jvzxml.top"; classtype:attempted-recon; sid:200032724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jyszpt.top"; classtype:attempted-recon; sid:200032725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kdhnlt.top"; classtype:attempted-recon; sid:200032726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.keud7w.icu"; classtype:attempted-recon; sid:200032727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kgflqd.top"; classtype:attempted-recon; sid:200032728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kkvrke.icu"; classtype:attempted-recon; sid:200032729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kosoht.icu"; classtype:attempted-recon; sid:200032730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.laojhs.top"; classtype:attempted-recon; sid:200032731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.lcq3yk.icu"; classtype:attempted-recon; sid:200032732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ljnqqs.top"; classtype:attempted-recon; sid:200032733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.llpgun.icu"; classtype:attempted-recon; sid:200032734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.luiyci.top"; classtype:attempted-recon; sid:200032735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.lxszsl.icu"; classtype:attempted-recon; sid:200032736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.mleksy.top"; classtype:attempted-recon; sid:200032737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.msiobh.top"; classtype:attempted-recon; sid:200032738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.msphzi.top"; classtype:attempted-recon; sid:200032739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.mtdqmc.icu"; classtype:attempted-recon; sid:200032740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ndkuwx.top"; classtype:attempted-recon; sid:200032741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.neagfg.top"; classtype:attempted-recon; sid:200032742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.njaczc.top"; classtype:attempted-recon; sid:200032743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.obmxjj.top"; classtype:attempted-recon; sid:200032744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ontgpj.top"; classtype:attempted-recon; sid:200032745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.oshfrh.top"; classtype:attempted-recon; sid:200032746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.oubbeh.top"; classtype:attempted-recon; sid:200032747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.oxfasj.top"; classtype:attempted-recon; sid:200032748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.p0mou1.icu"; classtype:attempted-recon; sid:200032749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.p31bj2.icu"; classtype:attempted-recon; sid:200032750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.p7251j.icu"; classtype:attempted-recon; sid:200032751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.passoe.top"; classtype:attempted-recon; sid:200032752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.pasytj.top"; classtype:attempted-recon; sid:200032753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.pazzro.top"; classtype:attempted-recon; sid:200032754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.pcukoi.icu"; classtype:attempted-recon; sid:200032755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.qyaudr.top"; classtype:attempted-recon; sid:200032756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.rlaptr.top"; classtype:attempted-recon; sid:200032757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.rlrkoz.top"; classtype:attempted-recon; sid:200032758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.rwuluo.top"; classtype:attempted-recon; sid:200032759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.sk6y3y.icu"; classtype:attempted-recon; sid:200032760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.slstjk.top"; classtype:attempted-recon; sid:200032761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.tbsfgl.icu"; classtype:attempted-recon; sid:200032762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.timuyw.icu"; classtype:attempted-recon; sid:200032763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.tpwghl.top"; classtype:attempted-recon; sid:200032764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.tutpfb.icu"; classtype:attempted-recon; sid:200032765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.veuqdd.icu"; classtype:attempted-recon; sid:200032766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.vghrha.top"; classtype:attempted-recon; sid:200032767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.vnhemj.icu"; classtype:attempted-recon; sid:200032768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.wfgyvk.top"; classtype:attempted-recon; sid:200032769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.wgrfay.top"; classtype:attempted-recon; sid:200032770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.xahccw.icu"; classtype:attempted-recon; sid:200032771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.xgnrrh.top"; classtype:attempted-recon; sid:200032772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.xqvlbl.top"; classtype:attempted-recon; sid:200032773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ynaecg.top"; classtype:attempted-recon; sid:200032774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ywcuuj.top"; classtype:attempted-recon; sid:200032775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ywzeqn.top"; classtype:attempted-recon; sid:200032776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zdealp.icu"; classtype:attempted-recon; sid:200032777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zllcxx.top"; classtype:attempted-recon; sid:200032778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zqlmyv.icu"; classtype:attempted-recon; sid:200032779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zxizqv.top"; classtype:attempted-recon; sid:200032780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.a8m6di.icu"; classtype:attempted-recon; sid:200032781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.aaxbpo.top"; classtype:attempted-recon; sid:200032782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.adpslp.top"; classtype:attempted-recon; sid:200032783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.aenjkw.top"; classtype:attempted-recon; sid:200032784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.agdhkb.top"; classtype:attempted-recon; sid:200032785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.akgjcb.top"; classtype:attempted-recon; sid:200032786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.baelbg.top"; classtype:attempted-recon; sid:200032787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.bkwgho.top"; classtype:attempted-recon; sid:200032789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.bmknvf.top"; classtype:attempted-recon; sid:200032790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.buzmri.top"; classtype:attempted-recon; sid:200032791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dgckut.top"; classtype:attempted-recon; sid:200032792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.djtela.top"; classtype:attempted-recon; sid:200032793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dlhsif.top"; classtype:attempted-recon; sid:200032794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dnoftm.top"; classtype:attempted-recon; sid:200032795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.doxryd.top"; classtype:attempted-recon; sid:200032796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dwxrym.top"; classtype:attempted-recon; sid:200032797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.efcgly.icu"; classtype:attempted-recon; sid:200032798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ejvyvo.top"; classtype:attempted-recon; sid:200032799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.erkzgb.top"; classtype:attempted-recon; sid:200032800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.erqvhz.icu"; classtype:attempted-recon; sid:200032801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ewhdkk.top"; classtype:attempted-recon; sid:200032802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.flgapj.top"; classtype:attempted-recon; sid:200032803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.fviult.icu"; classtype:attempted-recon; sid:200032805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.fwgrbb.top"; classtype:attempted-recon; sid:200032806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.fxfbld.top"; classtype:attempted-recon; sid:200032807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.gpik9c.icu"; classtype:attempted-recon; sid:200032808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.hihmof.top"; classtype:attempted-recon; sid:200032810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.hstoja.top"; classtype:attempted-recon; sid:200032812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.icbupe.icu"; classtype:attempted-recon; sid:200032813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ikjthi.top"; classtype:attempted-recon; sid:200032814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ileuct.top"; classtype:attempted-recon; sid:200032815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.iobrjq.icu"; classtype:attempted-recon; sid:200032816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.iyfkny.top"; classtype:attempted-recon; sid:200032817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jashxw.icu"; classtype:attempted-recon; sid:200032818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jfqejr.icu"; classtype:attempted-recon; sid:200032819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.joziry.top"; classtype:attempted-recon; sid:200032820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jvquad.top"; classtype:attempted-recon; sid:200032821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jvzxml.top"; classtype:attempted-recon; sid:200032822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jyszpt.top"; classtype:attempted-recon; sid:200032823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kdhnlt.top"; classtype:attempted-recon; sid:200032824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.keud7w.icu"; classtype:attempted-recon; sid:200032825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kgflqd.top"; classtype:attempted-recon; sid:200032826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kkvrke.icu"; classtype:attempted-recon; sid:200032827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kosoht.icu"; classtype:attempted-recon; sid:200032828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.laojhs.top"; classtype:attempted-recon; sid:200032829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ljnqqs.top"; classtype:attempted-recon; sid:200032831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.llpgun.icu"; classtype:attempted-recon; sid:200032832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.luiyci.top"; classtype:attempted-recon; sid:200032833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.lxszsl.icu"; classtype:attempted-recon; sid:200032834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.mleksy.top"; classtype:attempted-recon; sid:200032835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.msiobh.top"; classtype:attempted-recon; sid:200032836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.msphzi.top"; classtype:attempted-recon; sid:200032837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ndkuwx.top"; classtype:attempted-recon; sid:200032839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.neagfg.top"; classtype:attempted-recon; sid:200032840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.njaczc.top"; classtype:attempted-recon; sid:200032841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.obmxjj.top"; classtype:attempted-recon; sid:200032842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ontgpj.top"; classtype:attempted-recon; sid:200032843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.oshfrh.top"; classtype:attempted-recon; sid:200032844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.oubbeh.top"; classtype:attempted-recon; sid:200032845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.oxfasj.top"; classtype:attempted-recon; sid:200032846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.p0mou1.icu"; classtype:attempted-recon; sid:200032847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.p31bj2.icu"; classtype:attempted-recon; sid:200032848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.p7251j.icu"; classtype:attempted-recon; sid:200032849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.passoe.top"; classtype:attempted-recon; sid:200032850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.pasytj.top"; classtype:attempted-recon; sid:200032851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.pazzro.top"; classtype:attempted-recon; sid:200032852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.pcukoi.icu"; classtype:attempted-recon; sid:200032853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.qyaudr.top"; classtype:attempted-recon; sid:200032854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.rlaptr.top"; classtype:attempted-recon; sid:200032855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.rlrkoz.top"; classtype:attempted-recon; sid:200032856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.rwuluo.top"; classtype:attempted-recon; sid:200032857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.slstjk.top"; classtype:attempted-recon; sid:200032859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.timuyw.icu"; classtype:attempted-recon; sid:200032861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.tpwghl.top"; classtype:attempted-recon; sid:200032862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.tutpfb.icu"; classtype:attempted-recon; sid:200032863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.veuqdd.icu"; classtype:attempted-recon; sid:200032864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.vghrha.top"; classtype:attempted-recon; sid:200032865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.vnhemj.icu"; classtype:attempted-recon; sid:200032866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.wfgyvk.top"; classtype:attempted-recon; sid:200032867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.wgrfay.top"; classtype:attempted-recon; sid:200032868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.xahccw.icu"; classtype:attempted-recon; sid:200032869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.xgnrrh.top"; classtype:attempted-recon; sid:200032870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.xqvlbl.top"; classtype:attempted-recon; sid:200032871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ynaecg.top"; classtype:attempted-recon; sid:200032872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ywcuuj.top"; classtype:attempted-recon; sid:200032873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ywzeqn.top"; classtype:attempted-recon; sid:200032874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zdealp.icu"; classtype:attempted-recon; sid:200032875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zllcxx.top"; classtype:attempted-recon; sid:200032876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zxizqv.top"; classtype:attempted-recon; sid:200032878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.a8m6di.icu"; classtype:attempted-recon; sid:200032879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.aaxbpo.top"; classtype:attempted-recon; sid:200032880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.adpslp.top"; classtype:attempted-recon; sid:200032881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.aenjkw.top"; classtype:attempted-recon; sid:200032882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.agdhkb.top"; classtype:attempted-recon; sid:200032883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.akgjcb.top"; classtype:attempted-recon; sid:200032884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.baelbg.top"; classtype:attempted-recon; sid:200032885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.bhqnyq.icu"; classtype:attempted-recon; sid:200032886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.bkwgho.top"; classtype:attempted-recon; sid:200032887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.bmknvf.top"; classtype:attempted-recon; sid:200032888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.buzmri.top"; classtype:attempted-recon; sid:200032889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dgckut.top"; classtype:attempted-recon; sid:200032890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.djtela.top"; classtype:attempted-recon; sid:200032891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dlhsif.top"; classtype:attempted-recon; sid:200032892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dnoftm.top"; classtype:attempted-recon; sid:200032893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.doxryd.top"; classtype:attempted-recon; sid:200032894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dwxrym.top"; classtype:attempted-recon; sid:200032895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dy1nam.icu"; classtype:attempted-recon; sid:200032896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.efcgly.icu"; classtype:attempted-recon; sid:200032897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ejvyvo.top"; classtype:attempted-recon; sid:200032898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.erkzgb.top"; classtype:attempted-recon; sid:200032899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.erqvhz.icu"; classtype:attempted-recon; sid:200032900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ewhdkk.top"; classtype:attempted-recon; sid:200032901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.flgapj.top"; classtype:attempted-recon; sid:200032902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ftnnvo.icu"; classtype:attempted-recon; sid:200032903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.fviult.icu"; classtype:attempted-recon; sid:200032904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.fwgrbb.top"; classtype:attempted-recon; sid:200032905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.fxfbld.top"; classtype:attempted-recon; sid:200032906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.gpik9c.icu"; classtype:attempted-recon; sid:200032907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.gy8u8m.icu"; classtype:attempted-recon; sid:200032908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.hihmof.top"; classtype:attempted-recon; sid:200032909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.hnyrvh.icu"; classtype:attempted-recon; sid:200032910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.hstoja.top"; classtype:attempted-recon; sid:200032911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.icbupe.icu"; classtype:attempted-recon; sid:200032912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ikjthi.top"; classtype:attempted-recon; sid:200032913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ileuct.top"; classtype:attempted-recon; sid:200032914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.iobrjq.icu"; classtype:attempted-recon; sid:200032915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.iyfkny.top"; classtype:attempted-recon; sid:200032916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jashxw.icu"; classtype:attempted-recon; sid:200032917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jfqejr.icu"; classtype:attempted-recon; sid:200032918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.joziry.top"; classtype:attempted-recon; sid:200032919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jvquad.top"; classtype:attempted-recon; sid:200032920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jvzxml.top"; classtype:attempted-recon; sid:200032921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jyszpt.top"; classtype:attempted-recon; sid:200032922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kdhnlt.top"; classtype:attempted-recon; sid:200032923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.keud7w.icu"; classtype:attempted-recon; sid:200032924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kgflqd.top"; classtype:attempted-recon; sid:200032925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kkvrke.icu"; classtype:attempted-recon; sid:200032926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kosoht.icu"; classtype:attempted-recon; sid:200032927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.laojhs.top"; classtype:attempted-recon; sid:200032928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.lcq3yk.icu"; classtype:attempted-recon; sid:200032929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ljnqqs.top"; classtype:attempted-recon; sid:200032930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.llpgun.icu"; classtype:attempted-recon; sid:200032931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.luiyci.top"; classtype:attempted-recon; sid:200032932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.lxszsl.icu"; classtype:attempted-recon; sid:200032933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.mleksy.top"; classtype:attempted-recon; sid:200032934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.msiobh.top"; classtype:attempted-recon; sid:200032935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.msphzi.top"; classtype:attempted-recon; sid:200032936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.mtdqmc.icu"; classtype:attempted-recon; sid:200032937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ndkuwx.top"; classtype:attempted-recon; sid:200032938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.neagfg.top"; classtype:attempted-recon; sid:200032939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.njaczc.top"; classtype:attempted-recon; sid:200032940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.obmxjj.top"; classtype:attempted-recon; sid:200032941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ontgpj.top"; classtype:attempted-recon; sid:200032942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.oshfrh.top"; classtype:attempted-recon; sid:200032943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.oubbeh.top"; classtype:attempted-recon; sid:200032944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.oxfasj.top"; classtype:attempted-recon; sid:200032945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.p0mou1.icu"; classtype:attempted-recon; sid:200032946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.p31bj2.icu"; classtype:attempted-recon; sid:200032947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.p7251j.icu"; classtype:attempted-recon; sid:200032948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.passoe.top"; classtype:attempted-recon; sid:200032949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.pasytj.top"; classtype:attempted-recon; sid:200032950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.pazzro.top"; classtype:attempted-recon; sid:200032951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.pcukoi.icu"; classtype:attempted-recon; sid:200032952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.qyaudr.top"; classtype:attempted-recon; sid:200032953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.rlaptr.top"; classtype:attempted-recon; sid:200032954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.rlrkoz.top"; classtype:attempted-recon; sid:200032955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.rwuluo.top"; classtype:attempted-recon; sid:200032956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.sk6y3y.icu"; classtype:attempted-recon; sid:200032957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.slstjk.top"; classtype:attempted-recon; sid:200032958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.tbsfgl.icu"; classtype:attempted-recon; sid:200032959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.timuyw.icu"; classtype:attempted-recon; sid:200032960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.tpwghl.top"; classtype:attempted-recon; sid:200032961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.tutpfb.icu"; classtype:attempted-recon; sid:200032962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.veuqdd.icu"; classtype:attempted-recon; sid:200032963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.vghrha.top"; classtype:attempted-recon; sid:200032964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.vnhemj.icu"; classtype:attempted-recon; sid:200032965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.wfgyvk.top"; classtype:attempted-recon; sid:200032966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.wgrfay.top"; classtype:attempted-recon; sid:200032967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.xahccw.icu"; classtype:attempted-recon; sid:200032968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.xgnrrh.top"; classtype:attempted-recon; sid:200032969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.xqvlbl.top"; classtype:attempted-recon; sid:200032970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ynaecg.top"; classtype:attempted-recon; sid:200032971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ywcuuj.top"; classtype:attempted-recon; sid:200032972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ywzeqn.top"; classtype:attempted-recon; sid:200032973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zdealp.icu"; classtype:attempted-recon; sid:200032974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zllcxx.top"; classtype:attempted-recon; sid:200032975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zqlmyv.icu"; classtype:attempted-recon; sid:200032976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zxizqv.top"; classtype:attempted-recon; sid:200032977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.a8m6di.icu"; classtype:attempted-recon; sid:200032978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.aaxbpo.top"; classtype:attempted-recon; sid:200032979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.adpslp.top"; classtype:attempted-recon; sid:200032980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.aenjkw.top"; classtype:attempted-recon; sid:200032981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.agdhkb.top"; classtype:attempted-recon; sid:200032982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.akgjcb.top"; classtype:attempted-recon; sid:200032983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.baelbg.top"; classtype:attempted-recon; sid:200032984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.bhqnyq.icu"; classtype:attempted-recon; sid:200032985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.bkwgho.top"; classtype:attempted-recon; sid:200032986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.bmknvf.top"; classtype:attempted-recon; sid:200032987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.buzmri.top"; classtype:attempted-recon; sid:200032988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dgckut.top"; classtype:attempted-recon; sid:200032989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.djtela.top"; classtype:attempted-recon; sid:200032990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dlhsif.top"; classtype:attempted-recon; sid:200032991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dnoftm.top"; classtype:attempted-recon; sid:200032992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.doxryd.top"; classtype:attempted-recon; sid:200032993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dwxrym.top"; classtype:attempted-recon; sid:200032994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dy1nam.icu"; classtype:attempted-recon; sid:200032995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.efcgly.icu"; classtype:attempted-recon; sid:200032996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ejvyvo.top"; classtype:attempted-recon; sid:200032997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.erkzgb.top"; classtype:attempted-recon; sid:200032998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.erqvhz.icu"; classtype:attempted-recon; sid:200032999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ewhdkk.top"; classtype:attempted-recon; sid:200033000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.flgapj.top"; classtype:attempted-recon; sid:200033001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ftnnvo.icu"; classtype:attempted-recon; sid:200033002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.fviult.icu"; classtype:attempted-recon; sid:200033003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.fwgrbb.top"; classtype:attempted-recon; sid:200033004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.fxfbld.top"; classtype:attempted-recon; sid:200033005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.gpik9c.icu"; classtype:attempted-recon; sid:200033006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.gy8u8m.icu"; classtype:attempted-recon; sid:200033007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.hihmof.top"; classtype:attempted-recon; sid:200033008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.hnyrvh.icu"; classtype:attempted-recon; sid:200033009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.hstoja.top"; classtype:attempted-recon; sid:200033010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.icbupe.icu"; classtype:attempted-recon; sid:200033011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ikjthi.top"; classtype:attempted-recon; sid:200033012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ileuct.top"; classtype:attempted-recon; sid:200033013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.iobrjq.icu"; classtype:attempted-recon; sid:200033014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.iyfkny.top"; classtype:attempted-recon; sid:200033015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jashxw.icu"; classtype:attempted-recon; sid:200033016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jfqejr.icu"; classtype:attempted-recon; sid:200033017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.joziry.top"; classtype:attempted-recon; sid:200033018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jvquad.top"; classtype:attempted-recon; sid:200033019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jvzxml.top"; classtype:attempted-recon; sid:200033020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jyszpt.top"; classtype:attempted-recon; sid:200033021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kdhnlt.top"; classtype:attempted-recon; sid:200033022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.keud7w.icu"; classtype:attempted-recon; sid:200033023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kgflqd.top"; classtype:attempted-recon; sid:200033024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kkvrke.icu"; classtype:attempted-recon; sid:200033025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kosoht.icu"; classtype:attempted-recon; sid:200033026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.laojhs.top"; classtype:attempted-recon; sid:200033027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.lcq3yk.icu"; classtype:attempted-recon; sid:200033028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ljnqqs.top"; classtype:attempted-recon; sid:200033029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.llpgun.icu"; classtype:attempted-recon; sid:200033030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.luiyci.top"; classtype:attempted-recon; sid:200033031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.lxszsl.icu"; classtype:attempted-recon; sid:200033032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.mleksy.top"; classtype:attempted-recon; sid:200033033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.msiobh.top"; classtype:attempted-recon; sid:200033034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.msphzi.top"; classtype:attempted-recon; sid:200033035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.mtdqmc.icu"; classtype:attempted-recon; sid:200033036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ndkuwx.top"; classtype:attempted-recon; sid:200033037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.neagfg.top"; classtype:attempted-recon; sid:200033038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.njaczc.top"; classtype:attempted-recon; sid:200033039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.oshfrh.top"; classtype:attempted-recon; sid:200033040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.oubbeh.top"; classtype:attempted-recon; sid:200033041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.oxfasj.top"; classtype:attempted-recon; sid:200033042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.p0mou1.icu"; classtype:attempted-recon; sid:200033043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.p31bj2.icu"; classtype:attempted-recon; sid:200033044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.p7251j.icu"; classtype:attempted-recon; sid:200033045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.passoe.top"; classtype:attempted-recon; sid:200033046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.pasytj.top"; classtype:attempted-recon; sid:200033047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.pazzro.top"; classtype:attempted-recon; sid:200033048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.pcukoi.icu"; classtype:attempted-recon; sid:200033049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.qyaudr.top"; classtype:attempted-recon; sid:200033050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.rlaptr.top"; classtype:attempted-recon; sid:200033051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.rlrkoz.top"; classtype:attempted-recon; sid:200033052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.rwuluo.top"; classtype:attempted-recon; sid:200033053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.sk6y3y.icu"; classtype:attempted-recon; sid:200033054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.slstjk.top"; classtype:attempted-recon; sid:200033055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.tbsfgl.icu"; classtype:attempted-recon; sid:200033056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.timuyw.icu"; classtype:attempted-recon; sid:200033057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.tpwghl.top"; classtype:attempted-recon; sid:200033058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.tutpfb.icu"; classtype:attempted-recon; sid:200033059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.veuqdd.icu"; classtype:attempted-recon; sid:200033060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.vghrha.top"; classtype:attempted-recon; sid:200033061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.vnhemj.icu"; classtype:attempted-recon; sid:200033062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.wfgyvk.top"; classtype:attempted-recon; sid:200033063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.wgrfay.top"; classtype:attempted-recon; sid:200033064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.xahccw.icu"; classtype:attempted-recon; sid:200033065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.xgnrrh.top"; classtype:attempted-recon; sid:200033066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.xqvlbl.top"; classtype:attempted-recon; sid:200033067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ynaecg.top"; classtype:attempted-recon; sid:200033068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ywcuuj.top"; classtype:attempted-recon; sid:200033069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ywzeqn.top"; classtype:attempted-recon; sid:200033070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zdealp.icu"; classtype:attempted-recon; sid:200033071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zllcxx.top"; classtype:attempted-recon; sid:200033072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zqlmyv.icu"; classtype:attempted-recon; sid:200033073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zxizqv.top"; classtype:attempted-recon; sid:200033074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.a8m6di.icu"; classtype:attempted-recon; sid:200033075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.aaxbpo.top"; classtype:attempted-recon; sid:200033076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.adpslp.top"; classtype:attempted-recon; sid:200033077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.aenjkw.top"; classtype:attempted-recon; sid:200033078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.agdhkb.top"; classtype:attempted-recon; sid:200033079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.akgjcb.top"; classtype:attempted-recon; sid:200033080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.baelbg.top"; classtype:attempted-recon; sid:200033081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.bhqnyq.icu"; classtype:attempted-recon; sid:200033082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.bkwgho.top"; classtype:attempted-recon; sid:200033083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.bmknvf.top"; classtype:attempted-recon; sid:200033084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.buzmri.top"; classtype:attempted-recon; sid:200033085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dgckut.top"; classtype:attempted-recon; sid:200033086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.djtela.top"; classtype:attempted-recon; sid:200033087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dlhsif.top"; classtype:attempted-recon; sid:200033088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dnoftm.top"; classtype:attempted-recon; sid:200033089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.doxryd.top"; classtype:attempted-recon; sid:200033090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dwxrym.top"; classtype:attempted-recon; sid:200033091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dy1nam.icu"; classtype:attempted-recon; sid:200033092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.efcgly.icu"; classtype:attempted-recon; sid:200033093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ejvyvo.top"; classtype:attempted-recon; sid:200033094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.erkzgb.top"; classtype:attempted-recon; sid:200033095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.erqvhz.icu"; classtype:attempted-recon; sid:200033096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ewhdkk.top"; classtype:attempted-recon; sid:200033097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.flgapj.top"; classtype:attempted-recon; sid:200033098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ftnnvo.icu"; classtype:attempted-recon; sid:200033099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.fviult.icu"; classtype:attempted-recon; sid:200033100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.fwgrbb.top"; classtype:attempted-recon; sid:200033101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.fxfbld.top"; classtype:attempted-recon; sid:200033102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.gpik9c.icu"; classtype:attempted-recon; sid:200033103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.gy8u8m.icu"; classtype:attempted-recon; sid:200033104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.hihmof.top"; classtype:attempted-recon; sid:200033105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.hnyrvh.icu"; classtype:attempted-recon; sid:200033106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.hstoja.top"; classtype:attempted-recon; sid:200033107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ikjthi.top"; classtype:attempted-recon; sid:200033108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ileuct.top"; classtype:attempted-recon; sid:200033109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.iobrjq.icu"; classtype:attempted-recon; sid:200033110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.iyfkny.top"; classtype:attempted-recon; sid:200033111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jashxw.icu"; classtype:attempted-recon; sid:200033112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jfqejr.icu"; classtype:attempted-recon; sid:200033113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.joziry.top"; classtype:attempted-recon; sid:200033114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jvquad.top"; classtype:attempted-recon; sid:200033115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jvzxml.top"; classtype:attempted-recon; sid:200033116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jyszpt.top"; classtype:attempted-recon; sid:200033117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kdhnlt.top"; classtype:attempted-recon; sid:200033118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.keud7w.icu"; classtype:attempted-recon; sid:200033119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kgflqd.top"; classtype:attempted-recon; sid:200033120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kkvrke.icu"; classtype:attempted-recon; sid:200033121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kosoht.icu"; classtype:attempted-recon; sid:200033122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ndkuwx.top"; classtype:attempted-recon; sid:200033123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.neagfg.top"; classtype:attempted-recon; sid:200033124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.njaczc.top"; classtype:attempted-recon; sid:200033125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.obmxjj.top"; classtype:attempted-recon; sid:200033126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ontgpj.top"; classtype:attempted-recon; sid:200033127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.oshfrh.top"; classtype:attempted-recon; sid:200033128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.oubbeh.top"; classtype:attempted-recon; sid:200033129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.oxfasj.top"; classtype:attempted-recon; sid:200033130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.p0mou1.icu"; classtype:attempted-recon; sid:200033131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.p31bj2.icu"; classtype:attempted-recon; sid:200033132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.p7251j.icu"; classtype:attempted-recon; sid:200033133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.passoe.top"; classtype:attempted-recon; sid:200033134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.pasytj.top"; classtype:attempted-recon; sid:200033135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.pazzro.top"; classtype:attempted-recon; sid:200033136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.pcukoi.icu"; classtype:attempted-recon; sid:200033137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.qyaudr.top"; classtype:attempted-recon; sid:200033138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.rlaptr.top"; classtype:attempted-recon; sid:200033139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.rlrkoz.top"; classtype:attempted-recon; sid:200033140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.rwuluo.top"; classtype:attempted-recon; sid:200033141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.sk6y3y.icu"; classtype:attempted-recon; sid:200033142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.slstjk.top"; classtype:attempted-recon; sid:200033143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.tbsfgl.icu"; classtype:attempted-recon; sid:200033144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.timuyw.icu"; classtype:attempted-recon; sid:200033145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.tpwghl.top"; classtype:attempted-recon; sid:200033146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.tutpfb.icu"; classtype:attempted-recon; sid:200033147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.veuqdd.icu"; classtype:attempted-recon; sid:200033148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.vghrha.top"; classtype:attempted-recon; sid:200033149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.vnhemj.icu"; classtype:attempted-recon; sid:200033150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.wfgyvk.top"; classtype:attempted-recon; sid:200033151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.wgrfay.top"; classtype:attempted-recon; sid:200033152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.xahccw.icu"; classtype:attempted-recon; sid:200033153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.xgnrrh.top"; classtype:attempted-recon; sid:200033154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.xqvlbl.top"; classtype:attempted-recon; sid:200033155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ynaecg.top"; classtype:attempted-recon; sid:200033156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ywcuuj.top"; classtype:attempted-recon; sid:200033157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ywzeqn.top"; classtype:attempted-recon; sid:200033158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zdealp.icu"; classtype:attempted-recon; sid:200033159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zllcxx.top"; classtype:attempted-recon; sid:200033160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zqlmyv.icu"; classtype:attempted-recon; sid:200033161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zxizqv.top"; classtype:attempted-recon; sid:200033162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.a8m6di.icu"; classtype:attempted-recon; sid:200033163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.aaxbpo.top"; classtype:attempted-recon; sid:200033164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.adpslp.top"; classtype:attempted-recon; sid:200033165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.aenjkw.top"; classtype:attempted-recon; sid:200033166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.agdhkb.top"; classtype:attempted-recon; sid:200033167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.akgjcb.top"; classtype:attempted-recon; sid:200033168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.baelbg.top"; classtype:attempted-recon; sid:200033169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.bhqnyq.icu"; classtype:attempted-recon; sid:200033170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.bkwgho.top"; classtype:attempted-recon; sid:200033171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.bmknvf.top"; classtype:attempted-recon; sid:200033172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.buzmri.top"; classtype:attempted-recon; sid:200033173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dgckut.top"; classtype:attempted-recon; sid:200033174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.djtela.top"; classtype:attempted-recon; sid:200033175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dlhsif.top"; classtype:attempted-recon; sid:200033176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dnoftm.top"; classtype:attempted-recon; sid:200033177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.doxryd.top"; classtype:attempted-recon; sid:200033178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dwxrym.top"; classtype:attempted-recon; sid:200033179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dy1nam.icu"; classtype:attempted-recon; sid:200033180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.efcgly.icu"; classtype:attempted-recon; sid:200033181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ejvyvo.top"; classtype:attempted-recon; sid:200033182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.erkzgb.top"; classtype:attempted-recon; sid:200033183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.erqvhz.icu"; classtype:attempted-recon; sid:200033184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ewhdkk.top"; classtype:attempted-recon; sid:200033185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.flgapj.top"; classtype:attempted-recon; sid:200033186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ftnnvo.icu"; classtype:attempted-recon; sid:200033187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.fviult.icu"; classtype:attempted-recon; sid:200033188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.fwgrbb.top"; classtype:attempted-recon; sid:200033189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.fxfbld.top"; classtype:attempted-recon; sid:200033190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.gpik9c.icu"; classtype:attempted-recon; sid:200033191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.gy8u8m.icu"; classtype:attempted-recon; sid:200033192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.hihmof.top"; classtype:attempted-recon; sid:200033193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.hnyrvh.icu"; classtype:attempted-recon; sid:200033194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.hstoja.top"; classtype:attempted-recon; sid:200033195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.icbupe.icu"; classtype:attempted-recon; sid:200033196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ikjthi.top"; classtype:attempted-recon; sid:200033197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ileuct.top"; classtype:attempted-recon; sid:200033198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.iobrjq.icu"; classtype:attempted-recon; sid:200033199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.iyfkny.top"; classtype:attempted-recon; sid:200033200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jashxw.icu"; classtype:attempted-recon; sid:200033201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jfqejr.icu"; classtype:attempted-recon; sid:200033202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.joziry.top"; classtype:attempted-recon; sid:200033203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jvquad.top"; classtype:attempted-recon; sid:200033204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jvzxml.top"; classtype:attempted-recon; sid:200033205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jyszpt.top"; classtype:attempted-recon; sid:200033206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kdhnlt.top"; classtype:attempted-recon; sid:200033207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.keud7w.icu"; classtype:attempted-recon; sid:200033208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kgflqd.top"; classtype:attempted-recon; sid:200033209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kkvrke.icu"; classtype:attempted-recon; sid:200033210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kosoht.icu"; classtype:attempted-recon; sid:200033211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.laojhs.top"; classtype:attempted-recon; sid:200033212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.lcq3yk.icu"; classtype:attempted-recon; sid:200033213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ljnqqs.top"; classtype:attempted-recon; sid:200033214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.llpgun.icu"; classtype:attempted-recon; sid:200033215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.luiyci.top"; classtype:attempted-recon; sid:200033216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.lxszsl.icu"; classtype:attempted-recon; sid:200033217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.mleksy.top"; classtype:attempted-recon; sid:200033218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.msiobh.top"; classtype:attempted-recon; sid:200033219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.msphzi.top"; classtype:attempted-recon; sid:200033220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.mtdqmc.icu"; classtype:attempted-recon; sid:200033221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ndkuwx.top"; classtype:attempted-recon; sid:200033222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.neagfg.top"; classtype:attempted-recon; sid:200033223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.njaczc.top"; classtype:attempted-recon; sid:200033224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.obmxjj.top"; classtype:attempted-recon; sid:200033225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ontgpj.top"; classtype:attempted-recon; sid:200033226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.oshfrh.top"; classtype:attempted-recon; sid:200033227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.oubbeh.top"; classtype:attempted-recon; sid:200033228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.oxfasj.top"; classtype:attempted-recon; sid:200033229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.p0mou1.icu"; classtype:attempted-recon; sid:200033230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.p31bj2.icu"; classtype:attempted-recon; sid:200033231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.p7251j.icu"; classtype:attempted-recon; sid:200033232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.passoe.top"; classtype:attempted-recon; sid:200033233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.pasytj.top"; classtype:attempted-recon; sid:200033234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.pazzro.top"; classtype:attempted-recon; sid:200033235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.pcukoi.icu"; classtype:attempted-recon; sid:200033236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.qyaudr.top"; classtype:attempted-recon; sid:200033237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.rlaptr.top"; classtype:attempted-recon; sid:200033238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.rlrkoz.top"; classtype:attempted-recon; sid:200033239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.rwuluo.top"; classtype:attempted-recon; sid:200033240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.sk6y3y.icu"; classtype:attempted-recon; sid:200033241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.slstjk.top"; classtype:attempted-recon; sid:200033242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.tbsfgl.icu"; classtype:attempted-recon; sid:200033243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.timuyw.icu"; classtype:attempted-recon; sid:200033244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.tpwghl.top"; classtype:attempted-recon; sid:200033245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.tutpfb.icu"; classtype:attempted-recon; sid:200033246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.veuqdd.icu"; classtype:attempted-recon; sid:200033247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.vghrha.top"; classtype:attempted-recon; sid:200033248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.vnhemj.icu"; classtype:attempted-recon; sid:200033249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.wfgyvk.top"; classtype:attempted-recon; sid:200033250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.wgrfay.top"; classtype:attempted-recon; sid:200033251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.xahccw.icu"; classtype:attempted-recon; sid:200033252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.xgnrrh.top"; classtype:attempted-recon; sid:200033253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.xqvlbl.top"; classtype:attempted-recon; sid:200033254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ynaecg.top"; classtype:attempted-recon; sid:200033255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ywcuuj.top"; classtype:attempted-recon; sid:200033256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ywzeqn.top"; classtype:attempted-recon; sid:200033257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zdealp.icu"; classtype:attempted-recon; sid:200033258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zllcxx.top"; classtype:attempted-recon; sid:200033259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zqlmyv.icu"; classtype:attempted-recon; sid:200033260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zxizqv.top"; classtype:attempted-recon; sid:200033261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.a8m6di.icu"; classtype:attempted-recon; sid:200033262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.aaxbpo.top"; classtype:attempted-recon; sid:200033263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.adpslp.top"; classtype:attempted-recon; sid:200033264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.aenjkw.top"; classtype:attempted-recon; sid:200033265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.agdhkb.top"; classtype:attempted-recon; sid:200033266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.akgjcb.top"; classtype:attempted-recon; sid:200033267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.baelbg.top"; classtype:attempted-recon; sid:200033268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.bhqnyq.icu"; classtype:attempted-recon; sid:200033269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.bkwgho.top"; classtype:attempted-recon; sid:200033270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.bmknvf.top"; classtype:attempted-recon; sid:200033271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.buzmri.top"; classtype:attempted-recon; sid:200033272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dgckut.top"; classtype:attempted-recon; sid:200033273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.djtela.top"; classtype:attempted-recon; sid:200033274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dlhsif.top"; classtype:attempted-recon; sid:200033275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dnoftm.top"; classtype:attempted-recon; sid:200033276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.doxryd.top"; classtype:attempted-recon; sid:200033277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dwxrym.top"; classtype:attempted-recon; sid:200033278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dy1nam.icu"; classtype:attempted-recon; sid:200033279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.efcgly.icu"; classtype:attempted-recon; sid:200033280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ejvyvo.top"; classtype:attempted-recon; sid:200033281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.erkzgb.top"; classtype:attempted-recon; sid:200033282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.erqvhz.icu"; classtype:attempted-recon; sid:200033283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ewhdkk.top"; classtype:attempted-recon; sid:200033284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.flgapj.top"; classtype:attempted-recon; sid:200033285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ftnnvo.icu"; classtype:attempted-recon; sid:200033286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.fviult.icu"; classtype:attempted-recon; sid:200033287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.fwgrbb.top"; classtype:attempted-recon; sid:200033288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.fxfbld.top"; classtype:attempted-recon; sid:200033289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.gpik9c.icu"; classtype:attempted-recon; sid:200033290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.gy8u8m.icu"; classtype:attempted-recon; sid:200033291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.hihmof.top"; classtype:attempted-recon; sid:200033292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.hnyrvh.icu"; classtype:attempted-recon; sid:200033293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.hstoja.top"; classtype:attempted-recon; sid:200033294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.icbupe.icu"; classtype:attempted-recon; sid:200033295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ikjthi.top"; classtype:attempted-recon; sid:200033296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ileuct.top"; classtype:attempted-recon; sid:200033297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.iobrjq.icu"; classtype:attempted-recon; sid:200033298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.iyfkny.top"; classtype:attempted-recon; sid:200033299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jashxw.icu"; classtype:attempted-recon; sid:200033300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jfqejr.icu"; classtype:attempted-recon; sid:200033301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.joziry.top"; classtype:attempted-recon; sid:200033302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jvquad.top"; classtype:attempted-recon; sid:200033303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jvzxml.top"; classtype:attempted-recon; sid:200033304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jyszpt.top"; classtype:attempted-recon; sid:200033305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kdhnlt.top"; classtype:attempted-recon; sid:200033306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.keud7w.icu"; classtype:attempted-recon; sid:200033307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kgflqd.top"; classtype:attempted-recon; sid:200033308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kkvrke.icu"; classtype:attempted-recon; sid:200033309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kosoht.icu"; classtype:attempted-recon; sid:200033310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.laojhs.top"; classtype:attempted-recon; sid:200033311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.lcq3yk.icu"; classtype:attempted-recon; sid:200033312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ljnqqs.top"; classtype:attempted-recon; sid:200033313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.llpgun.icu"; classtype:attempted-recon; sid:200033314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.luiyci.top"; classtype:attempted-recon; sid:200033315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.lxszsl.icu"; classtype:attempted-recon; sid:200033316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.mleksy.top"; classtype:attempted-recon; sid:200033317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.msiobh.top"; classtype:attempted-recon; sid:200033318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.msphzi.top"; classtype:attempted-recon; sid:200033319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.mtdqmc.icu"; classtype:attempted-recon; sid:200033320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ndkuwx.top"; classtype:attempted-recon; sid:200033321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.neagfg.top"; classtype:attempted-recon; sid:200033322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.njaczc.top"; classtype:attempted-recon; sid:200033323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.obmxjj.top"; classtype:attempted-recon; sid:200033324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ontgpj.top"; classtype:attempted-recon; sid:200033325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.oshfrh.top"; classtype:attempted-recon; sid:200033326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.oubbeh.top"; classtype:attempted-recon; sid:200033327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.oxfasj.top"; classtype:attempted-recon; sid:200033328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.p0mou1.icu"; classtype:attempted-recon; sid:200033329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.p31bj2.icu"; classtype:attempted-recon; sid:200033330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.p7251j.icu"; classtype:attempted-recon; sid:200033331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.passoe.top"; classtype:attempted-recon; sid:200033332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.pasytj.top"; classtype:attempted-recon; sid:200033333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.pazzro.top"; classtype:attempted-recon; sid:200033334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.pcukoi.icu"; classtype:attempted-recon; sid:200033335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.qyaudr.top"; classtype:attempted-recon; sid:200033336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.rlaptr.top"; classtype:attempted-recon; sid:200033337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.rlrkoz.top"; classtype:attempted-recon; sid:200033338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.rwuluo.top"; classtype:attempted-recon; sid:200033339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.sk6y3y.icu"; classtype:attempted-recon; sid:200033340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.slstjk.top"; classtype:attempted-recon; sid:200033341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.tbsfgl.icu"; classtype:attempted-recon; sid:200033342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.timuyw.icu"; classtype:attempted-recon; sid:200033343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.tpwghl.top"; classtype:attempted-recon; sid:200033344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.tutpfb.icu"; classtype:attempted-recon; sid:200033345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.veuqdd.icu"; classtype:attempted-recon; sid:200033346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.vghrha.top"; classtype:attempted-recon; sid:200033347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.vnhemj.icu"; classtype:attempted-recon; sid:200033348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.wfgyvk.top"; classtype:attempted-recon; sid:200033349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.wgrfay.top"; classtype:attempted-recon; sid:200033350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.xahccw.icu"; classtype:attempted-recon; sid:200033351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.xgnrrh.top"; classtype:attempted-recon; sid:200033352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.xqvlbl.top"; classtype:attempted-recon; sid:200033353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ynaecg.top"; classtype:attempted-recon; sid:200033354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ywcuuj.top"; classtype:attempted-recon; sid:200033355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ywzeqn.top"; classtype:attempted-recon; sid:200033356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zdealp.icu"; classtype:attempted-recon; sid:200033357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zllcxx.top"; classtype:attempted-recon; sid:200033358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zqlmyv.icu"; classtype:attempted-recon; sid:200033359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zxizqv.top"; classtype:attempted-recon; sid:200033360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.a8m6di.icu"; classtype:attempted-recon; sid:200033361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.aaxbpo.top"; classtype:attempted-recon; sid:200033362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.adpslp.top"; classtype:attempted-recon; sid:200033363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.aenjkw.top"; classtype:attempted-recon; sid:200033364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.agdhkb.top"; classtype:attempted-recon; sid:200033365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.akgjcb.top"; classtype:attempted-recon; sid:200033366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.baelbg.top"; classtype:attempted-recon; sid:200033367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.bhqnyq.icu"; classtype:attempted-recon; sid:200033368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.bkwgho.top"; classtype:attempted-recon; sid:200033369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.bmknvf.top"; classtype:attempted-recon; sid:200033370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.buzmri.top"; classtype:attempted-recon; sid:200033371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dgckut.top"; classtype:attempted-recon; sid:200033372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.djtela.top"; classtype:attempted-recon; sid:200033373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dlhsif.top"; classtype:attempted-recon; sid:200033374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dnoftm.top"; classtype:attempted-recon; sid:200033375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.doxryd.top"; classtype:attempted-recon; sid:200033376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dwxrym.top"; classtype:attempted-recon; sid:200033377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dy1nam.icu"; classtype:attempted-recon; sid:200033378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.efcgly.icu"; classtype:attempted-recon; sid:200033379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ejvyvo.top"; classtype:attempted-recon; sid:200033380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.erkzgb.top"; classtype:attempted-recon; sid:200033381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.erqvhz.icu"; classtype:attempted-recon; sid:200033382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ewhdkk.top"; classtype:attempted-recon; sid:200033383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.flgapj.top"; classtype:attempted-recon; sid:200033384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ftnnvo.icu"; classtype:attempted-recon; sid:200033385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.fviult.icu"; classtype:attempted-recon; sid:200033386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.fwgrbb.top"; classtype:attempted-recon; sid:200033387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.fxfbld.top"; classtype:attempted-recon; sid:200033388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.gpik9c.icu"; classtype:attempted-recon; sid:200033389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.gy8u8m.icu"; classtype:attempted-recon; sid:200033390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.hihmof.top"; classtype:attempted-recon; sid:200033391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.hnyrvh.icu"; classtype:attempted-recon; sid:200033392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.hstoja.top"; classtype:attempted-recon; sid:200033393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.icbupe.icu"; classtype:attempted-recon; sid:200033394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ikjthi.top"; classtype:attempted-recon; sid:200033395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ileuct.top"; classtype:attempted-recon; sid:200033396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.iobrjq.icu"; classtype:attempted-recon; sid:200033397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.iyfkny.top"; classtype:attempted-recon; sid:200033398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jashxw.icu"; classtype:attempted-recon; sid:200033399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jfqejr.icu"; classtype:attempted-recon; sid:200033400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.joziry.top"; classtype:attempted-recon; sid:200033401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jvquad.top"; classtype:attempted-recon; sid:200033402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jvzxml.top"; classtype:attempted-recon; sid:200033403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jyszpt.top"; classtype:attempted-recon; sid:200033404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kdhnlt.top"; classtype:attempted-recon; sid:200033405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.keud7w.icu"; classtype:attempted-recon; sid:200033406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kgflqd.top"; classtype:attempted-recon; sid:200033407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kkvrke.icu"; classtype:attempted-recon; sid:200033408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kosoht.icu"; classtype:attempted-recon; sid:200033409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.laojhs.top"; classtype:attempted-recon; sid:200033410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.lcq3yk.icu"; classtype:attempted-recon; sid:200033411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ljnqqs.top"; classtype:attempted-recon; sid:200033412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.llpgun.icu"; classtype:attempted-recon; sid:200033413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.luiyci.top"; classtype:attempted-recon; sid:200033414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.lxszsl.icu"; classtype:attempted-recon; sid:200033415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.mleksy.top"; classtype:attempted-recon; sid:200033416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.msiobh.top"; classtype:attempted-recon; sid:200033417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.msphzi.top"; classtype:attempted-recon; sid:200033418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.mtdqmc.icu"; classtype:attempted-recon; sid:200033419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ndkuwx.top"; classtype:attempted-recon; sid:200033420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.neagfg.top"; classtype:attempted-recon; sid:200033421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.njaczc.top"; classtype:attempted-recon; sid:200033422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.obmxjj.top"; classtype:attempted-recon; sid:200033423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ontgpj.top"; classtype:attempted-recon; sid:200033424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.oshfrh.top"; classtype:attempted-recon; sid:200033425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.oubbeh.top"; classtype:attempted-recon; sid:200033426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.oxfasj.top"; classtype:attempted-recon; sid:200033427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.p0mou1.icu"; classtype:attempted-recon; sid:200033428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.p31bj2.icu"; classtype:attempted-recon; sid:200033429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.p7251j.icu"; classtype:attempted-recon; sid:200033430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.passoe.top"; classtype:attempted-recon; sid:200033431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.pasytj.top"; classtype:attempted-recon; sid:200033432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.pazzro.top"; classtype:attempted-recon; sid:200033433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.pcukoi.icu"; classtype:attempted-recon; sid:200033434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.qyaudr.top"; classtype:attempted-recon; sid:200033435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.rlaptr.top"; classtype:attempted-recon; sid:200033436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.rlrkoz.top"; classtype:attempted-recon; sid:200033437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.rwuluo.top"; classtype:attempted-recon; sid:200033438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.sk6y3y.icu"; classtype:attempted-recon; sid:200033439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.slstjk.top"; classtype:attempted-recon; sid:200033440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.tbsfgl.icu"; classtype:attempted-recon; sid:200033441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.timuyw.icu"; classtype:attempted-recon; sid:200033442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.tpwghl.top"; classtype:attempted-recon; sid:200033443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.tutpfb.icu"; classtype:attempted-recon; sid:200033444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.veuqdd.icu"; classtype:attempted-recon; sid:200033445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.vghrha.top"; classtype:attempted-recon; sid:200033446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.vnhemj.icu"; classtype:attempted-recon; sid:200033447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.wfgyvk.top"; classtype:attempted-recon; sid:200033448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.wgrfay.top"; classtype:attempted-recon; sid:200033449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.xahccw.icu"; classtype:attempted-recon; sid:200033450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.xgnrrh.top"; classtype:attempted-recon; sid:200033451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.xqvlbl.top"; classtype:attempted-recon; sid:200033452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ynaecg.top"; classtype:attempted-recon; sid:200033453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ywcuuj.top"; classtype:attempted-recon; sid:200033454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ywzeqn.top"; classtype:attempted-recon; sid:200033455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zdealp.icu"; classtype:attempted-recon; sid:200033456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zllcxx.top"; classtype:attempted-recon; sid:200033457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zqlmyv.icu"; classtype:attempted-recon; sid:200033458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zxizqv.top"; classtype:attempted-recon; sid:200033459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieosreinneiv.vsoersioivrrennvxmrvi.aa8m6di.icu"; classtype:attempted-recon; sid:200033460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieosreinneiv.vsoersioivrrennvxmrvi.abkwgho.top"; classtype:attempted-recon; sid:200033461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieosreinneiv.vsoersioivrrennvxmrvi.abmknvf.top"; classtype:attempted-recon; sid:200033462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieosreinneiv.vsoersioivrrennvxmrvi.aluiyci.top"; classtype:attempted-recon; sid:200033463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieosreinneiv.vsoersioivrrennvxmrvi.alxszsl.icu"; classtype:attempted-recon; sid:200033464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vieosreinneiv.vsoersioivrrennvxmrvi.avghrha.top"; classtype:attempted-recon; sid:200033465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.cehzkhd.bar"; classtype:attempted-recon; sid:200033466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.gavarzl.bar"; classtype:attempted-recon; sid:200033467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.hwej2s6.tokyo"; classtype:attempted-recon; sid:200033468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.mtfjgc.za.com"; classtype:attempted-recon; sid:200033469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.pnctmk.za.com"; classtype:attempted-recon; sid:200033470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.qlxnzl.za.com"; classtype:attempted-recon; sid:200033471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.wopjkh.za.com"; classtype:attempted-recon; sid:200033472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.xotcze.id"; classtype:attempted-recon; sid:200033473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceaesi.visccavseaos.yfhljn.id"; classtype:attempted-recon; sid:200033474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceasi.visaevseaos.5y4gj2a.tokyo"; classtype:attempted-recon; sid:200033475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceasi.visaevseaos.benxhh.za.com"; classtype:attempted-recon; sid:200033476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceasi.visaevseaos.nhhsvd.id"; classtype:attempted-recon; sid:200033477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceasi.visaevseaos.slolhv.za.com"; classtype:attempted-recon; sid:200033478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceosi.visavvseaos.acdycf.id"; classtype:attempted-recon; sid:200033479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceosi.visavvseaos.dovxqw.cyou"; classtype:attempted-recon; sid:200033480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceosi.visavvseaos.hhblko.id"; classtype:attempted-recon; sid:200033481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceosi.visavvseaos.uflpeu.za.com"; classtype:attempted-recon; sid:200033482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viesaceosi.visavvseaos.xhtarn.za.com"; classtype:attempted-recon; sid:200033483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vietgahp.com"; classtype:attempted-recon; sid:200033484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viettel-com-dot-c2c01-531c7.uc.r.appspot.com"; classtype:attempted-recon; sid:200033485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"view-folder-share-doc-logistic.web.app"; classtype:attempted-recon; sid:200033486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"view-power-share-file.firebaseapp.com"; classtype:attempted-recon; sid:200033487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"view-power-share-file.web.app"; classtype:attempted-recon; sid:200033488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"view-shared-file-folder-login.web.app"; classtype:attempted-recon; sid:200033489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"view.campanhasbradesco.com.br"; classtype:attempted-recon; sid:200033490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viewdocs.drizzlead.com"; classtype:attempted-recon; sid:200033491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viewproposaldocument.myportfolio.com"; classtype:attempted-recon; sid:200033492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viewsnet.jp.kutcim.com"; classtype:attempted-recon; sid:200033493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viewthescreen.com"; classtype:attempted-recon; sid:200033494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vifkorvdrx.duckdns.org"; classtype:attempted-recon; sid:200033495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vigrjckmjd.duckdns.org"; classtype:attempted-recon; sid:200033496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viirtualconfi.webcindario.com"; classtype:attempted-recon; sid:200033497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vijomitpsb.duckdns.org"; classtype:attempted-recon; sid:200033498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vimsadhytm.duckdns.org"; classtype:attempted-recon; sid:200033499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viniocure.visorcsiercvxarevi.eaplgjq.rest"; classtype:attempted-recon; sid:200033500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viniocure.visorcsiercvxarevi.igsxqxl.rest"; classtype:attempted-recon; sid:200033501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viniocure.visorcsiercvxarevi.vtwwkwu.rest"; classtype:attempted-recon; sid:200033502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-delivery.000457888.xyz"; classtype:attempted-recon; sid:200033503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-delivery.8900092.xyz"; classtype:attempted-recon; sid:200033504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-informing.5566432.xyz"; classtype:attempted-recon; sid:200033505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-market.54659812.xyz"; classtype:attempted-recon; sid:200033506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.15a2.xyz"; classtype:attempted-recon; sid:200033507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.1waypz.top"; classtype:attempted-recon; sid:200033508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.1xpwq.top"; classtype:attempted-recon; sid:200033509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.4lapy.top"; classtype:attempted-recon; sid:200033510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.51hiyd.live"; classtype:attempted-recon; sid:200033511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.7rdh.top"; classtype:attempted-recon; sid:200033512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.aemine.top"; classtype:attempted-recon; sid:200033513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.apurva.life"; classtype:attempted-recon; sid:200033514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.bitster.top"; classtype:attempted-recon; sid:200033515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.daipao.top"; classtype:attempted-recon; sid:200033516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.datais.live"; classtype:attempted-recon; sid:200033517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.dgrwy1.xyz"; classtype:attempted-recon; sid:200033518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.dokuritsu.xyz"; classtype:attempted-recon; sid:200033519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.dvdwap.xyz"; classtype:attempted-recon; sid:200033520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.dwqaz.xyz"; classtype:attempted-recon; sid:200033521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.educar.live"; classtype:attempted-recon; sid:200033522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.ekspertiz.xyz"; classtype:attempted-recon; sid:200033523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.freerp.xyz"; classtype:attempted-recon; sid:200033524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.fuliren.life"; classtype:attempted-recon; sid:200033525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.highvis.xyz"; classtype:attempted-recon; sid:200033526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.hiyuu.life"; classtype:attempted-recon; sid:200033527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.hkwesi3.xyz"; classtype:attempted-recon; sid:200033528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.iamhindu.live"; classtype:attempted-recon; sid:200033529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.irritum.xyz"; classtype:attempted-recon; sid:200033530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.jackyc.top"; classtype:attempted-recon; sid:200033531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.jpb01.xyz"; classtype:attempted-recon; sid:200033532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.knwldg.xyz"; classtype:attempted-recon; sid:200033533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.koufax.xyz"; classtype:attempted-recon; sid:200033534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.ladytit.xyz"; classtype:attempted-recon; sid:200033535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.lajiao3.xyz"; classtype:attempted-recon; sid:200033536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.lezzyloni.xyz"; classtype:attempted-recon; sid:200033537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.lspgdh.top"; classtype:attempted-recon; sid:200033538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.mainqq.xyz"; classtype:attempted-recon; sid:200033539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.mikamii.top"; classtype:attempted-recon; sid:200033540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.multor.xyz"; classtype:attempted-recon; sid:200033541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.nivdal.top"; classtype:attempted-recon; sid:200033542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.ohlucah.top"; classtype:attempted-recon; sid:200033543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.pgng.life"; classtype:attempted-recon; sid:200033544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.pk003.top"; classtype:attempted-recon; sid:200033545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.qqmzan.top"; classtype:attempted-recon; sid:200033546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.reify.live"; classtype:attempted-recon; sid:200033547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.sanbds.top"; classtype:attempted-recon; sid:200033548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.sejige.top"; classtype:attempted-recon; sid:200033549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.seshu.live"; classtype:attempted-recon; sid:200033550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.sfse.live"; classtype:attempted-recon; sid:200033551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.somr4.live"; classtype:attempted-recon; sid:200033552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.spturate.top"; classtype:attempted-recon; sid:200033553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.srjfvg.top"; classtype:attempted-recon; sid:200033554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.theuli.live"; classtype:attempted-recon; sid:200033555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.toket.live"; classtype:attempted-recon; sid:200033556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.triplerc.life"; classtype:attempted-recon; sid:200033557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.tyzsa.top"; classtype:attempted-recon; sid:200033558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.wearwe.live"; classtype:attempted-recon; sid:200033559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.wizb.top"; classtype:attempted-recon; sid:200033560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.xbdh8.top"; classtype:attempted-recon; sid:200033561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.xvntlzlr.top"; classtype:attempted-recon; sid:200033562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gj32d.yb49.top"; classtype:attempted-recon; sid:200033563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gkk219.bolajalan.live"; classtype:attempted-recon; sid:200033564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gkk219.gxjokyu.life"; classtype:attempted-recon; sid:200033565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-gkk219.katta.live"; classtype:attempted-recon; sid:200033566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-id002c.anzijie.top"; classtype:attempted-recon; sid:200033567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-id002c.canam.life"; classtype:attempted-recon; sid:200033568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-id002c.seriefr.xyz"; classtype:attempted-recon; sid:200033569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-pl-lzlxo.rlsbb.xyz"; classtype:attempted-recon; sid:200033570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-bey.order442.info"; classtype:attempted-recon; sid:200033571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-jjy.order941.info"; classtype:attempted-recon; sid:200033572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-lxi.order941.info"; classtype:attempted-recon; sid:200033573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-rr124.eholot.top"; classtype:attempted-recon; sid:200033574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-rr124.hycdgx.xyz"; classtype:attempted-recon; sid:200033575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-rr124.seriefr.xyz"; classtype:attempted-recon; sid:200033576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-rr124.wocao0.top"; classtype:attempted-recon; sid:200033577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-polska-yug.order941.info"; classtype:attempted-recon; sid:200033578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted-stzs.order941.info"; classtype:attempted-recon; sid:200033579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted.lu33.top"; classtype:attempted-recon; sid:200033580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vinted.sprzedaz.me"; classtype:attempted-recon; sid:200033581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vintedform-inform.1221235.xyz"; classtype:attempted-recon; sid:200033582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.bkiljbe.rest"; classtype:attempted-recon; sid:200033583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.ctuhgfk.rest"; classtype:attempted-recon; sid:200033584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.nulhvqm.rest"; classtype:attempted-recon; sid:200033585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.ocsbjyy.rest"; classtype:attempted-recon; sid:200033586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.ovuydax.rest"; classtype:attempted-recon; sid:200033587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.pbeozzc.rest"; classtype:attempted-recon; sid:200033588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.poywtcc.rest"; classtype:attempted-recon; sid:200033589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.ranzilm.rest"; classtype:attempted-recon; sid:200033590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioerescsnv.vsoersroirevxarevi.zklwhxa.rest"; classtype:attempted-recon; sid:200033591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.gybmzej.rest"; classtype:attempted-recon; sid:200033592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.gywmubl.rest"; classtype:attempted-recon; sid:200033593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.iuwqqxo.rest"; classtype:attempted-recon; sid:200033594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.jeseavd.rest"; classtype:attempted-recon; sid:200033595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.ranzilm.rest"; classtype:attempted-recon; sid:200033596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.thnoceg.rest"; classtype:attempted-recon; sid:200033597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.ydtfxhz.rest"; classtype:attempted-recon; sid:200033598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreorceosnv.vsoersoecsioirescvi.zikhocp.rest"; classtype:attempted-recon; sid:200033599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreosnv.vsoersioirescvi.dtgskgr.rest"; classtype:attempted-recon; sid:200033600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreosnv.vsoersioirescvi.mbjalki.rest"; classtype:attempted-recon; sid:200033601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreosnv.vsoersioirescvi.vcobpue.rest"; classtype:attempted-recon; sid:200033602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesreosnv.vsoersioirescvi.zmwmbck.rest"; classtype:attempted-recon; sid:200033603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.cnufsqh.rest"; classtype:attempted-recon; sid:200033604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.fzjyqpy.rest"; classtype:attempted-recon; sid:200033605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.kteglik.rest"; classtype:attempted-recon; sid:200033606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ranzilm.rest"; classtype:attempted-recon; sid:200033607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrescsnv.vsoersroirescvi.fcuccth.rest"; classtype:attempted-recon; sid:200033608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrescsnv.vsoersroirescvi.nulhvqm.rest"; classtype:attempted-recon; sid:200033609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrescsnv.vsoersroirescvi.qtroqhr.rest"; classtype:attempted-recon; sid:200033610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrescsnv.vsoersroirescvi.thnoceg.rest"; classtype:attempted-recon; sid:200033611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesrescsnv.vsoersroirescvi.zikhocp.rest"; classtype:attempted-recon; sid:200033612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresorcecsnv.vsoersoecsroirescvi.baflrzt.rest"; classtype:attempted-recon; sid:200033613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresorcecsnv.vsoersoecsroirescvi.nhqgutl.rest"; classtype:attempted-recon; sid:200033614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresorcecsnv.vsoersoecsroirescvi.vtwwkwu.rest"; classtype:attempted-recon; sid:200033615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresorcecsnv.vsoersoecsroirescvi.wokutiv.rest"; classtype:attempted-recon; sid:200033616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresorcecsnv.vsoersoecsroirescvi.yvlpjam.rest"; classtype:attempted-recon; sid:200033617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.bftggqb.rest"; classtype:attempted-recon; sid:200033618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.lghbwne.rest"; classtype:attempted-recon; sid:200033619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.qmvhsgu.rest"; classtype:attempted-recon; sid:200033620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.qthlkxf.rest"; classtype:attempted-recon; sid:200033621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ranzilm.rest"; classtype:attempted-recon; sid:200033622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.thnoceg.rest"; classtype:attempted-recon; sid:200033623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ttniksm.rest"; classtype:attempted-recon; sid:200033624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.arowal.id"; classtype:attempted-recon; sid:200033625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.bomgwz.id"; classtype:attempted-recon; sid:200033626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.bypiqw.id"; classtype:attempted-recon; sid:200033627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.ciuwoo.id"; classtype:attempted-recon; sid:200033628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.cmoqdm.id"; classtype:attempted-recon; sid:200033629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.eaezlo.id"; classtype:attempted-recon; sid:200033630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.egrhtq.id"; classtype:attempted-recon; sid:200033631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.eickib.id"; classtype:attempted-recon; sid:200033632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.fjfuni.id"; classtype:attempted-recon; sid:200033633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.fkbwav.id"; classtype:attempted-recon; sid:200033634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.gykmlg.id"; classtype:attempted-recon; sid:200033635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.hbzhrq.id"; classtype:attempted-recon; sid:200033636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.hilrzx.id"; classtype:attempted-recon; sid:200033637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.hqnjab.id"; classtype:attempted-recon; sid:200033638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.jlxkma.id"; classtype:attempted-recon; sid:200033639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.jvahcx.id"; classtype:attempted-recon; sid:200033640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.khlzjd.id"; classtype:attempted-recon; sid:200033641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.lndzay.id"; classtype:attempted-recon; sid:200033642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.lxxdeq.id"; classtype:attempted-recon; sid:200033643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.lyiqnd.id"; classtype:attempted-recon; sid:200033644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.lyxyuf.id"; classtype:attempted-recon; sid:200033645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.mifikv.id"; classtype:attempted-recon; sid:200033646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.mqvjkr.id"; classtype:attempted-recon; sid:200033647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.nbzllz.id"; classtype:attempted-recon; sid:200033648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.ntdght.id"; classtype:attempted-recon; sid:200033649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.ovpzzh.id"; classtype:attempted-recon; sid:200033650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.pdzcxc.id"; classtype:attempted-recon; sid:200033651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.qigfcj.id"; classtype:attempted-recon; sid:200033652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.rdinpk.id"; classtype:attempted-recon; sid:200033653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.rqrpjt.id"; classtype:attempted-recon; sid:200033654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.rzyssw.id"; classtype:attempted-recon; sid:200033655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.sfqlok.id"; classtype:attempted-recon; sid:200033656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.ukpvop.id"; classtype:attempted-recon; sid:200033657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.upblku.id"; classtype:attempted-recon; sid:200033658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.wfzola.id"; classtype:attempted-recon; sid:200033659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.wgkngu.id"; classtype:attempted-recon; sid:200033660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.whdeeh.id"; classtype:attempted-recon; sid:200033661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.xkpjpw.id"; classtype:attempted-recon; sid:200033662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.yabztv.id"; classtype:attempted-recon; sid:200033663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.yvzlne.id"; classtype:attempted-recon; sid:200033664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.zcyttz.id"; classtype:attempted-recon; sid:200033665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.zdknwh.id"; classtype:attempted-recon; sid:200033666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.ziehxi.id"; classtype:attempted-recon; sid:200033667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.zuaswx.id"; classtype:attempted-recon; sid:200033668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.arowal.id"; classtype:attempted-recon; sid:200033669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.bomgwz.id"; classtype:attempted-recon; sid:200033670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.bypiqw.id"; classtype:attempted-recon; sid:200033671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.cmoqdm.id"; classtype:attempted-recon; sid:200033672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.eickib.id"; classtype:attempted-recon; sid:200033673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.fjfuni.id"; classtype:attempted-recon; sid:200033674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.fkbwav.id"; classtype:attempted-recon; sid:200033675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gbaluw.id"; classtype:attempted-recon; sid:200033676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gkaxhu.id"; classtype:attempted-recon; sid:200033677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gykmlg.id"; classtype:attempted-recon; sid:200033678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.hbzhrq.id"; classtype:attempted-recon; sid:200033679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.hilrzx.id"; classtype:attempted-recon; sid:200033680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.hqnjab.id"; classtype:attempted-recon; sid:200033681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.jlxkma.id"; classtype:attempted-recon; sid:200033682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.jvahcx.id"; classtype:attempted-recon; sid:200033683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.jzuxde.id"; classtype:attempted-recon; sid:200033684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.khlzjd.id"; classtype:attempted-recon; sid:200033685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.lndzay.id"; classtype:attempted-recon; sid:200033686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.lxxdeq.id"; classtype:attempted-recon; sid:200033687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.lyiqnd.id"; classtype:attempted-recon; sid:200033688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.mhlvfi.id"; classtype:attempted-recon; sid:200033689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.mqvjkr.id"; classtype:attempted-recon; sid:200033690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.nbzllz.id"; classtype:attempted-recon; sid:200033691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ntdght.id"; classtype:attempted-recon; sid:200033692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ovpzzh.id"; classtype:attempted-recon; sid:200033693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.pdzcxc.id"; classtype:attempted-recon; sid:200033694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.podujg.id"; classtype:attempted-recon; sid:200033695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.qigfcj.id"; classtype:attempted-recon; sid:200033696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.rdinpk.id"; classtype:attempted-recon; sid:200033697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.rqrpjt.id"; classtype:attempted-recon; sid:200033698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.rzyssw.id"; classtype:attempted-recon; sid:200033699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.sfqlok.id"; classtype:attempted-recon; sid:200033700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ukpvop.id"; classtype:attempted-recon; sid:200033701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.upblku.id"; classtype:attempted-recon; sid:200033702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.uuppfm.id"; classtype:attempted-recon; sid:200033703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.wfzola.id"; classtype:attempted-recon; sid:200033704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.wgkngu.id"; classtype:attempted-recon; sid:200033705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.whdeeh.id"; classtype:attempted-recon; sid:200033706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.xkpjpw.id"; classtype:attempted-recon; sid:200033707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.xutdbc.id"; classtype:attempted-recon; sid:200033708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.yabztv.id"; classtype:attempted-recon; sid:200033709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.yvzlne.id"; classtype:attempted-recon; sid:200033710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zcyttz.id"; classtype:attempted-recon; sid:200033711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ziehxi.id"; classtype:attempted-recon; sid:200033712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zkxahi.id"; classtype:attempted-recon; sid:200033713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zuaswx.id"; classtype:attempted-recon; sid:200033714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.arowal.id"; classtype:attempted-recon; sid:200033715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.asciqo.id"; classtype:attempted-recon; sid:200033716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.bomgwz.id"; classtype:attempted-recon; sid:200033717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.bypiqw.id"; classtype:attempted-recon; sid:200033718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.cmoqdm.id"; classtype:attempted-recon; sid:200033719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.eickib.id"; classtype:attempted-recon; sid:200033720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.fjfuni.id"; classtype:attempted-recon; sid:200033721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.fkbwav.id"; classtype:attempted-recon; sid:200033722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.gbaluw.id"; classtype:attempted-recon; sid:200033723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.gkaxhu.id"; classtype:attempted-recon; sid:200033724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.gpaqia.id"; classtype:attempted-recon; sid:200033725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.gykmlg.id"; classtype:attempted-recon; sid:200033726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.hbzhrq.id"; classtype:attempted-recon; sid:200033727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.hqnjab.id"; classtype:attempted-recon; sid:200033728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.jvahcx.id"; classtype:attempted-recon; sid:200033729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.jzuxde.id"; classtype:attempted-recon; sid:200033730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.khlzjd.id"; classtype:attempted-recon; sid:200033731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.ksbgin.id"; classtype:attempted-recon; sid:200033732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.lndzay.id"; classtype:attempted-recon; sid:200033733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.lyiqnd.id"; classtype:attempted-recon; sid:200033734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.lyxyuf.id"; classtype:attempted-recon; sid:200033735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.mbjhhd.id"; classtype:attempted-recon; sid:200033736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.mifikv.id"; classtype:attempted-recon; sid:200033737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.mqvjkr.id"; classtype:attempted-recon; sid:200033738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.mrinog.id"; classtype:attempted-recon; sid:200033739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.nbzllz.id"; classtype:attempted-recon; sid:200033740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.ntdght.id"; classtype:attempted-recon; sid:200033741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.ovpzzh.id"; classtype:attempted-recon; sid:200033742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.pdzcxc.id"; classtype:attempted-recon; sid:200033743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.podujg.id"; classtype:attempted-recon; sid:200033744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.qigfcj.id"; classtype:attempted-recon; sid:200033745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.rdinpk.id"; classtype:attempted-recon; sid:200033746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.rqrpjt.id"; classtype:attempted-recon; sid:200033747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.sfqlok.id"; classtype:attempted-recon; sid:200033748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.ukpvop.id"; classtype:attempted-recon; sid:200033749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.upblku.id"; classtype:attempted-recon; sid:200033750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.uuppfm.id"; classtype:attempted-recon; sid:200033751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.wfzola.id"; classtype:attempted-recon; sid:200033752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.wgkngu.id"; classtype:attempted-recon; sid:200033753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.whdeeh.id"; classtype:attempted-recon; sid:200033754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.xkpjpw.id"; classtype:attempted-recon; sid:200033755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.yabztv.id"; classtype:attempted-recon; sid:200033756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.yvzlne.id"; classtype:attempted-recon; sid:200033757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.zdknwh.id"; classtype:attempted-recon; sid:200033758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.ziehxi.id"; classtype:attempted-recon; sid:200033759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.zuaswx.id"; classtype:attempted-recon; sid:200033760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.arowal.id"; classtype:attempted-recon; sid:200033761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.bomgwz.id"; classtype:attempted-recon; sid:200033762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.bypiqw.id"; classtype:attempted-recon; sid:200033763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ciuwoo.id"; classtype:attempted-recon; sid:200033764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.cmoqdm.id"; classtype:attempted-recon; sid:200033765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.eaezlo.id"; classtype:attempted-recon; sid:200033766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.egrhtq.id"; classtype:attempted-recon; sid:200033767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.eickib.id"; classtype:attempted-recon; sid:200033768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.fjfuni.id"; classtype:attempted-recon; sid:200033769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.fkbwav.id"; classtype:attempted-recon; sid:200033770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gkaxhu.id"; classtype:attempted-recon; sid:200033771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gykmlg.id"; classtype:attempted-recon; sid:200033772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gyyiwk.id"; classtype:attempted-recon; sid:200033773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.hbzhrq.id"; classtype:attempted-recon; sid:200033774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.hqnjab.id"; classtype:attempted-recon; sid:200033775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.iclxtv.id"; classtype:attempted-recon; sid:200033776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.jlxkma.id"; classtype:attempted-recon; sid:200033777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.jvahcx.id"; classtype:attempted-recon; sid:200033778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.khlzjd.id"; classtype:attempted-recon; sid:200033779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ksbgin.id"; classtype:attempted-recon; sid:200033780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lndzay.id"; classtype:attempted-recon; sid:200033781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lxxdeq.id"; classtype:attempted-recon; sid:200033782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lyiqnd.id"; classtype:attempted-recon; sid:200033783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lyxyuf.id"; classtype:attempted-recon; sid:200033784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.mqvjkr.id"; classtype:attempted-recon; sid:200033785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.nbzllz.id"; classtype:attempted-recon; sid:200033786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ntdght.id"; classtype:attempted-recon; sid:200033787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ovpzzh.id"; classtype:attempted-recon; sid:200033788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.pdzcxc.id"; classtype:attempted-recon; sid:200033789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.qigfcj.id"; classtype:attempted-recon; sid:200033790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.rdinpk.id"; classtype:attempted-recon; sid:200033791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.rqrpjt.id"; classtype:attempted-recon; sid:200033792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.rzyssw.id"; classtype:attempted-recon; sid:200033793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.sfqlok.id"; classtype:attempted-recon; sid:200033794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ukpvop.id"; classtype:attempted-recon; sid:200033795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.upblku.id"; classtype:attempted-recon; sid:200033796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.wfzola.id"; classtype:attempted-recon; sid:200033797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.wgkngu.id"; classtype:attempted-recon; sid:200033798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.whdeeh.id"; classtype:attempted-recon; sid:200033799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.xkpjpw.id"; classtype:attempted-recon; sid:200033800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.yabztv.id"; classtype:attempted-recon; sid:200033801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.yvzlne.id"; classtype:attempted-recon; sid:200033802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zdknwh.id"; classtype:attempted-recon; sid:200033803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ziehxi.id"; classtype:attempted-recon; sid:200033804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zkxahi.id"; classtype:attempted-recon; sid:200033805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zmjezy.id"; classtype:attempted-recon; sid:200033806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zuaswx.id"; classtype:attempted-recon; sid:200033807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.arowal.id"; classtype:attempted-recon; sid:200033808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.bomgwz.id"; classtype:attempted-recon; sid:200033809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.bypiqw.id"; classtype:attempted-recon; sid:200033810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ciuwoo.id"; classtype:attempted-recon; sid:200033811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.cmoqdm.id"; classtype:attempted-recon; sid:200033812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.egrhtq.id"; classtype:attempted-recon; sid:200033813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.eickib.id"; classtype:attempted-recon; sid:200033814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.fjfuni.id"; classtype:attempted-recon; sid:200033815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.fkbwav.id"; classtype:attempted-recon; sid:200033816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.gbaluw.id"; classtype:attempted-recon; sid:200033817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.gykmlg.id"; classtype:attempted-recon; sid:200033818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.hbzhrq.id"; classtype:attempted-recon; sid:200033819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.hqnjab.id"; classtype:attempted-recon; sid:200033820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.jvahcx.id"; classtype:attempted-recon; sid:200033821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.khlzjd.id"; classtype:attempted-recon; sid:200033822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ksbgin.id"; classtype:attempted-recon; sid:200033823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.lndzay.id"; classtype:attempted-recon; sid:200033824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.lyiqnd.id"; classtype:attempted-recon; sid:200033825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mbjhhd.id"; classtype:attempted-recon; sid:200033826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mhlvfi.id"; classtype:attempted-recon; sid:200033827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mifikv.id"; classtype:attempted-recon; sid:200033828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mqvjkr.id"; classtype:attempted-recon; sid:200033829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.nbzllz.id"; classtype:attempted-recon; sid:200033830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ntdght.id"; classtype:attempted-recon; sid:200033831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ovpzzh.id"; classtype:attempted-recon; sid:200033832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.pdzcxc.id"; classtype:attempted-recon; sid:200033833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.pvqbdr.id"; classtype:attempted-recon; sid:200033834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.qigfcj.id"; classtype:attempted-recon; sid:200033835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.rdinpk.id"; classtype:attempted-recon; sid:200033836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.rqrpjt.id"; classtype:attempted-recon; sid:200033837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.sfqlok.id"; classtype:attempted-recon; sid:200033838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ukpvop.id"; classtype:attempted-recon; sid:200033839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.upblku.id"; classtype:attempted-recon; sid:200033840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.uuppfm.id"; classtype:attempted-recon; sid:200033841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.wfzola.id"; classtype:attempted-recon; sid:200033842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.wgkngu.id"; classtype:attempted-recon; sid:200033843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.whdeeh.id"; classtype:attempted-recon; sid:200033844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.xkpjpw.id"; classtype:attempted-recon; sid:200033845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.yabztv.id"; classtype:attempted-recon; sid:200033846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.yvzlne.id"; classtype:attempted-recon; sid:200033847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zdknwh.id"; classtype:attempted-recon; sid:200033848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ziehxi.id"; classtype:attempted-recon; sid:200033849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zmjezy.id"; classtype:attempted-recon; sid:200033850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zuaswx.id"; classtype:attempted-recon; sid:200033851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.arowal.id"; classtype:attempted-recon; sid:200033852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.bomgwz.id"; classtype:attempted-recon; sid:200033853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.bypiqw.id"; classtype:attempted-recon; sid:200033854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.cmoqdm.id"; classtype:attempted-recon; sid:200033855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.cufjaj.id"; classtype:attempted-recon; sid:200033856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.egrhtq.id"; classtype:attempted-recon; sid:200033857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.eickib.id"; classtype:attempted-recon; sid:200033858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fdtieg.id"; classtype:attempted-recon; sid:200033859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fjfuni.id"; classtype:attempted-recon; sid:200033860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fkbwav.id"; classtype:attempted-recon; sid:200033861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.gykmlg.id"; classtype:attempted-recon; sid:200033862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.hbzhrq.id"; classtype:attempted-recon; sid:200033863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.hqnjab.id"; classtype:attempted-recon; sid:200033864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.jlxkma.id"; classtype:attempted-recon; sid:200033865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.jvahcx.id"; classtype:attempted-recon; sid:200033866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.khlzjd.id"; classtype:attempted-recon; sid:200033867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ksbgin.id"; classtype:attempted-recon; sid:200033868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.lndzay.id"; classtype:attempted-recon; sid:200033869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.lyiqnd.id"; classtype:attempted-recon; sid:200033870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mbjhhd.id"; classtype:attempted-recon; sid:200033871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mhlvfi.id"; classtype:attempted-recon; sid:200033872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mifikv.id"; classtype:attempted-recon; sid:200033873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mqvjkr.id"; classtype:attempted-recon; sid:200033874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mrinog.id"; classtype:attempted-recon; sid:200033875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.nbzllz.id"; classtype:attempted-recon; sid:200033876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ntdght.id"; classtype:attempted-recon; sid:200033877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ovpzzh.id"; classtype:attempted-recon; sid:200033878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.pdzcxc.id"; classtype:attempted-recon; sid:200033879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.pvqbdr.id"; classtype:attempted-recon; sid:200033880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.qigfcj.id"; classtype:attempted-recon; sid:200033881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.rdinpk.id"; classtype:attempted-recon; sid:200033882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.rqrpjt.id"; classtype:attempted-recon; sid:200033883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.rzyssw.id"; classtype:attempted-recon; sid:200033884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.sfqlok.id"; classtype:attempted-recon; sid:200033885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ukpvop.id"; classtype:attempted-recon; sid:200033886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.upblku.id"; classtype:attempted-recon; sid:200033887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.wfzola.id"; classtype:attempted-recon; sid:200033888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.wgkngu.id"; classtype:attempted-recon; sid:200033889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.whdeeh.id"; classtype:attempted-recon; sid:200033890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.xkpjpw.id"; classtype:attempted-recon; sid:200033891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.xqjgyc.id"; classtype:attempted-recon; sid:200033892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.yabztv.id"; classtype:attempted-recon; sid:200033893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.yvzlne.id"; classtype:attempted-recon; sid:200033894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zdknwh.id"; classtype:attempted-recon; sid:200033895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ziehxi.id"; classtype:attempted-recon; sid:200033896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zmjezy.id"; classtype:attempted-recon; sid:200033897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zuaswx.id"; classtype:attempted-recon; sid:200033898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.arowal.id"; classtype:attempted-recon; sid:200033899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.bomgwz.id"; classtype:attempted-recon; sid:200033900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.bypiqw.id"; classtype:attempted-recon; sid:200033901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.cmoqdm.id"; classtype:attempted-recon; sid:200033902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.cufjaj.id"; classtype:attempted-recon; sid:200033903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.eickib.id"; classtype:attempted-recon; sid:200033904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.fjfuni.id"; classtype:attempted-recon; sid:200033905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.fkbwav.id"; classtype:attempted-recon; sid:200033906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gbaluw.id"; classtype:attempted-recon; sid:200033907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gpaqia.id"; classtype:attempted-recon; sid:200033908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gykmlg.id"; classtype:attempted-recon; sid:200033909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.hbzhrq.id"; classtype:attempted-recon; sid:200033910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.hqnjab.id"; classtype:attempted-recon; sid:200033911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.jqlcwt.id"; classtype:attempted-recon; sid:200033912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.jvahcx.id"; classtype:attempted-recon; sid:200033913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.khlzjd.id"; classtype:attempted-recon; sid:200033914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ksbgin.id"; classtype:attempted-recon; sid:200033915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.lndzay.id"; classtype:attempted-recon; sid:200033916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.lyiqnd.id"; classtype:attempted-recon; sid:200033917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mhlvfi.id"; classtype:attempted-recon; sid:200033918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mqvjkr.id"; classtype:attempted-recon; sid:200033919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mrinog.id"; classtype:attempted-recon; sid:200033920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.nbzllz.id"; classtype:attempted-recon; sid:200033921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ntdght.id"; classtype:attempted-recon; sid:200033922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ovpzzh.id"; classtype:attempted-recon; sid:200033923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.pdzcxc.id"; classtype:attempted-recon; sid:200033924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.pvqbdr.id"; classtype:attempted-recon; sid:200033925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.qigfcj.id"; classtype:attempted-recon; sid:200033926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.rdinpk.id"; classtype:attempted-recon; sid:200033927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.rqrpjt.id"; classtype:attempted-recon; sid:200033928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.sfqlok.id"; classtype:attempted-recon; sid:200033929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ukpvop.id"; classtype:attempted-recon; sid:200033930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.upblku.id"; classtype:attempted-recon; sid:200033931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.wfzola.id"; classtype:attempted-recon; sid:200033932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.wgkngu.id"; classtype:attempted-recon; sid:200033933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.whdeeh.id"; classtype:attempted-recon; sid:200033934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.xkpjpw.id"; classtype:attempted-recon; sid:200033935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.xutdbc.id"; classtype:attempted-recon; sid:200033936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.yabztv.id"; classtype:attempted-recon; sid:200033937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.yvzlne.id"; classtype:attempted-recon; sid:200033938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ziehxi.id"; classtype:attempted-recon; sid:200033939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.zuaswx.id"; classtype:attempted-recon; sid:200033940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.accunn.id"; classtype:attempted-recon; sid:200033941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.arowal.id"; classtype:attempted-recon; sid:200033942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.asciqo.id"; classtype:attempted-recon; sid:200033943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.bomgwz.id"; classtype:attempted-recon; sid:200033944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.bypiqw.id"; classtype:attempted-recon; sid:200033945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ciuwoo.id"; classtype:attempted-recon; sid:200033946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.cmoqdm.id"; classtype:attempted-recon; sid:200033947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.eickib.id"; classtype:attempted-recon; sid:200033948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.fjfuni.id"; classtype:attempted-recon; sid:200033949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.fkbwav.id"; classtype:attempted-recon; sid:200033950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.gbaluw.id"; classtype:attempted-recon; sid:200033951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.gykmlg.id"; classtype:attempted-recon; sid:200033952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.hbzhrq.id"; classtype:attempted-recon; sid:200033953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.hilrzx.id"; classtype:attempted-recon; sid:200033954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.hqnjab.id"; classtype:attempted-recon; sid:200033955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.jvahcx.id"; classtype:attempted-recon; sid:200033956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.khlzjd.id"; classtype:attempted-recon; sid:200033957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.lndzay.id"; classtype:attempted-recon; sid:200033958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.lyiqnd.id"; classtype:attempted-recon; sid:200033959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mhlvfi.id"; classtype:attempted-recon; sid:200033960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mifikv.id"; classtype:attempted-recon; sid:200033961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mqvjkr.id"; classtype:attempted-recon; sid:200033962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.nbzllz.id"; classtype:attempted-recon; sid:200033963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ntdght.id"; classtype:attempted-recon; sid:200033964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ovpzzh.id"; classtype:attempted-recon; sid:200033965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.pdzcxc.id"; classtype:attempted-recon; sid:200033966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.qigfcj.id"; classtype:attempted-recon; sid:200033967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.rdinpk.id"; classtype:attempted-recon; sid:200033968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.rqrpjt.id"; classtype:attempted-recon; sid:200033969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.rzyssw.id"; classtype:attempted-recon; sid:200033970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.sfqlok.id"; classtype:attempted-recon; sid:200033971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ukpvop.id"; classtype:attempted-recon; sid:200033972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.upblku.id"; classtype:attempted-recon; sid:200033973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.uuppfm.id"; classtype:attempted-recon; sid:200033974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.wfzola.id"; classtype:attempted-recon; sid:200033975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.wgkngu.id"; classtype:attempted-recon; sid:200033976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.whdeeh.id"; classtype:attempted-recon; sid:200033977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.xkpjpw.id"; classtype:attempted-recon; sid:200033978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.xutdbc.id"; classtype:attempted-recon; sid:200033979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.yabztv.id"; classtype:attempted-recon; sid:200033980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.yvzlne.id"; classtype:attempted-recon; sid:200033981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zdknwh.id"; classtype:attempted-recon; sid:200033982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ziehxi.id"; classtype:attempted-recon; sid:200033983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zkxahi.id"; classtype:attempted-recon; sid:200033984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zmjezy.id"; classtype:attempted-recon; sid:200033985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zuaswx.id"; classtype:attempted-recon; sid:200033986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viosreosnv.vsoersioirevxarevi.dwvwhpm.rest"; classtype:attempted-recon; sid:200033987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viosreosnv.vsoersioirevxarevi.gywmubl.rest"; classtype:attempted-recon; sid:200033988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viosreosnv.vsoersioirevxarevi.hymzwrr.rest"; classtype:attempted-recon; sid:200033989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viosreosnv.vsoersioirevxarevi.ouqcrce.rest"; classtype:attempted-recon; sid:200033990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viosreosnv.vsoersioirevxarevi.zikhocp.rest"; classtype:attempted-recon; sid:200033991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vipfbtools.com"; classtype:attempted-recon; sid:200033992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viqzlfnvsd.duckdns.org"; classtype:attempted-recon; sid:200033993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"virted-pl-fi551.zenpond.life"; classtype:attempted-recon; sid:200033994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"virtual.labdigbdbqapb.com"; classtype:attempted-recon; sid:200033995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"virtual.labdigbdbstgpb.com"; classtype:attempted-recon; sid:200033996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"virtualnetbrasil.com"; classtype:attempted-recon; sid:200033997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"virtualper.bancols.repl.co"; classtype:attempted-recon; sid:200033998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vis-stort.github.io"; classtype:attempted-recon; sid:200033999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaaeveeccsvcrcaorsai.vieissacirvoeainicrcivsioir.dzwrms.top"; classtype:attempted-recon; sid:200034000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaaeveeccsvcrcaorsai.vieissacirvoeainicrcivsioir.edziyc.top"; classtype:attempted-recon; sid:200034001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaaeveeccsvcrcaorsai.vieissacirvoeainicrcivsioir.enkzhe.top"; classtype:attempted-recon; sid:200034002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaaeveeccsvcrcaorsai.vieissacirvoeainicrcivsioir.evyqhg.top"; classtype:attempted-recon; sid:200034003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaaeveeccsvcrcaorsai.vieissacirvoeainicrcivsioir.gyzt808.xyz"; classtype:attempted-recon; sid:200034004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaaeveeccsvcrcaorsai.vieissacirvoeainicrcivsioir.oybdmv.top"; classtype:attempted-recon; sid:200034005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaaevesccvccrasoria.viiessvaciraoecinivrsiiori.p8qjo.icu"; classtype:attempted-recon; sid:200034006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaieveecsevcrcaorsai.vieissvcioeoacincvrsiiori.loxcvk.top"; classtype:attempted-recon; sid:200034007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaaievescveccrasoria.viiessvacioeocvinsiroiri.0633348.xyz"; classtype:attempted-recon; sid:200034008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaavesevccascri.orvaisvieaseccivsoioinrrii.nhejxw.top"; classtype:attempted-recon; sid:200034009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.axrcbx.top"; classtype:attempted-recon; sid:200034010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.azrsog.top"; classtype:attempted-recon; sid:200034011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.buavhf.top"; classtype:attempted-recon; sid:200034012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.geqnuq.top"; classtype:attempted-recon; sid:200034013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.isvuiy.top"; classtype:attempted-recon; sid:200034014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.jfcxph.top"; classtype:attempted-recon; sid:200034015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.jsmfgc.top"; classtype:attempted-recon; sid:200034016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.kbroxv.top"; classtype:attempted-recon; sid:200034017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.kvdxks.top"; classtype:attempted-recon; sid:200034018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.mdxbrn.top"; classtype:attempted-recon; sid:200034019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.nnawmj.top"; classtype:attempted-recon; sid:200034020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.nofalw.top"; classtype:attempted-recon; sid:200034021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.oajqfn.top"; classtype:attempted-recon; sid:200034022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.orcbvv.top"; classtype:attempted-recon; sid:200034023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.pgdfhw.top"; classtype:attempted-recon; sid:200034024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.pkwrdl.top"; classtype:attempted-recon; sid:200034025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.pmnaeh.top"; classtype:attempted-recon; sid:200034026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.qbcbta.top"; classtype:attempted-recon; sid:200034027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.rgqjka.top"; classtype:attempted-recon; sid:200034028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.sorjpe.top"; classtype:attempted-recon; sid:200034029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.svfocp.top"; classtype:attempted-recon; sid:200034030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.tppwpi.top"; classtype:attempted-recon; sid:200034031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.tvbcmo.top"; classtype:attempted-recon; sid:200034032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.uarmbh.top"; classtype:attempted-recon; sid:200034033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.uiedwv.top"; classtype:attempted-recon; sid:200034034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.ukohwk.top"; classtype:attempted-recon; sid:200034035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.vlunrr.top"; classtype:attempted-recon; sid:200034036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.wezouj.top"; classtype:attempted-recon; sid:200034037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.wiqlcn.top"; classtype:attempted-recon; sid:200034038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.xewfoa.top"; classtype:attempted-recon; sid:200034039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.xuacoo.shop"; classtype:attempted-recon; sid:200034040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.xwdvad.top"; classtype:attempted-recon; sid:200034041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.zqawii.top"; classtype:attempted-recon; sid:200034042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiceesiver.c.zvzqtl.top"; classtype:attempted-recon; sid:200034043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.axrcbx.top"; classtype:attempted-recon; sid:200034044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.azrsog.top"; classtype:attempted-recon; sid:200034045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.buavhf.top"; classtype:attempted-recon; sid:200034046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.geqnuq.top"; classtype:attempted-recon; sid:200034047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.isvuiy.top"; classtype:attempted-recon; sid:200034048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.jfcxph.top"; classtype:attempted-recon; sid:200034049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.jsmfgc.top"; classtype:attempted-recon; sid:200034050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.kbroxv.top"; classtype:attempted-recon; sid:200034051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.kvdxks.top"; classtype:attempted-recon; sid:200034052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.mdxbrn.top"; classtype:attempted-recon; sid:200034053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.nnawmj.top"; classtype:attempted-recon; sid:200034054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.nofalw.top"; classtype:attempted-recon; sid:200034055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.oajqfn.top"; classtype:attempted-recon; sid:200034056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.orcbvv.top"; classtype:attempted-recon; sid:200034057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.owbxts.top"; classtype:attempted-recon; sid:200034058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.pgdfhw.top"; classtype:attempted-recon; sid:200034059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.pkwrdl.top"; classtype:attempted-recon; sid:200034060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.pmnaeh.top"; classtype:attempted-recon; sid:200034061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.qbcbta.top"; classtype:attempted-recon; sid:200034062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.rgqjka.top"; classtype:attempted-recon; sid:200034063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.sorjpe.top"; classtype:attempted-recon; sid:200034064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.svfocp.top"; classtype:attempted-recon; sid:200034065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.tppwpi.top"; classtype:attempted-recon; sid:200034066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.tvbcmo.top"; classtype:attempted-recon; sid:200034067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.uarmbh.top"; classtype:attempted-recon; sid:200034068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.uiedwv.top"; classtype:attempted-recon; sid:200034069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.ukohwk.top"; classtype:attempted-recon; sid:200034070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.vlunrr.top"; classtype:attempted-recon; sid:200034071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.wezouj.top"; classtype:attempted-recon; sid:200034072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.wiqlcn.top"; classtype:attempted-recon; sid:200034073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.xewfoa.top"; classtype:attempted-recon; sid:200034074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.xwdvad.top"; classtype:attempted-recon; sid:200034075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.zqawii.top"; classtype:attempted-recon; sid:200034076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsoiesiver.o.zvzqtl.top"; classtype:attempted-recon; sid:200034077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.axrcbx.top"; classtype:attempted-recon; sid:200034078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.azrsog.top"; classtype:attempted-recon; sid:200034079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.buavhf.top"; classtype:attempted-recon; sid:200034080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.geqnuq.top"; classtype:attempted-recon; sid:200034081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.isvuiy.top"; classtype:attempted-recon; sid:200034082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.jfcxph.top"; classtype:attempted-recon; sid:200034083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.jsmfgc.top"; classtype:attempted-recon; sid:200034084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.kbroxv.top"; classtype:attempted-recon; sid:200034085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.kvdxks.top"; classtype:attempted-recon; sid:200034086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.mdxbrn.top"; classtype:attempted-recon; sid:200034087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.mjfemh.shop"; classtype:attempted-recon; sid:200034088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.nnawmj.top"; classtype:attempted-recon; sid:200034089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.nofalw.top"; classtype:attempted-recon; sid:200034090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.oajqfn.top"; classtype:attempted-recon; sid:200034091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.obekup.shop"; classtype:attempted-recon; sid:200034092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.orcbvv.top"; classtype:attempted-recon; sid:200034093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.pgdfhw.top"; classtype:attempted-recon; sid:200034094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.pkwrdl.top"; classtype:attempted-recon; sid:200034095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.pmnaeh.top"; classtype:attempted-recon; sid:200034096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.qbcbta.top"; classtype:attempted-recon; sid:200034097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.rgqjka.top"; classtype:attempted-recon; sid:200034098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.sorjpe.top"; classtype:attempted-recon; sid:200034099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.svfocp.top"; classtype:attempted-recon; sid:200034100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.tppwpi.top"; classtype:attempted-recon; sid:200034101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.tvbcmo.top"; classtype:attempted-recon; sid:200034102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.uarmbh.top"; classtype:attempted-recon; sid:200034103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.uiedwv.top"; classtype:attempted-recon; sid:200034104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.ukohwk.top"; classtype:attempted-recon; sid:200034105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.urgggv.shop"; classtype:attempted-recon; sid:200034106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.vlunrr.top"; classtype:attempted-recon; sid:200034107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.wezouj.top"; classtype:attempted-recon; sid:200034108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.wiqlcn.top"; classtype:attempted-recon; sid:200034109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.xewfoa.top"; classtype:attempted-recon; sid:200034110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.xwdvad.top"; classtype:attempted-recon; sid:200034111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.zqawii.top"; classtype:attempted-recon; sid:200034112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoiceeesiver.cea.zvzqtl.top"; classtype:attempted-recon; sid:200034113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.axrcbx.top"; classtype:attempted-recon; sid:200034114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.azrsog.top"; classtype:attempted-recon; sid:200034115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.buavhf.top"; classtype:attempted-recon; sid:200034116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.geqnuq.top"; classtype:attempted-recon; sid:200034117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.isvuiy.top"; classtype:attempted-recon; sid:200034118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.jfcxph.top"; classtype:attempted-recon; sid:200034119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.jsmfgc.top"; classtype:attempted-recon; sid:200034120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.kbroxv.top"; classtype:attempted-recon; sid:200034121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.kvdxks.top"; classtype:attempted-recon; sid:200034122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.mdxbrn.top"; classtype:attempted-recon; sid:200034123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.nnawmj.top"; classtype:attempted-recon; sid:200034124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.nofalw.top"; classtype:attempted-recon; sid:200034125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.oajqfn.top"; classtype:attempted-recon; sid:200034126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.orcbvv.top"; classtype:attempted-recon; sid:200034127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.owbxts.top"; classtype:attempted-recon; sid:200034128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.pgdfhw.top"; classtype:attempted-recon; sid:200034129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.pkwrdl.top"; classtype:attempted-recon; sid:200034130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.pmnaeh.top"; classtype:attempted-recon; sid:200034131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.qbcbta.top"; classtype:attempted-recon; sid:200034132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.rgqjka.top"; classtype:attempted-recon; sid:200034133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.sorjpe.top"; classtype:attempted-recon; sid:200034134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.svfocp.top"; classtype:attempted-recon; sid:200034135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.tppwpi.top"; classtype:attempted-recon; sid:200034136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.tvbcmo.top"; classtype:attempted-recon; sid:200034137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.uarmbh.top"; classtype:attempted-recon; sid:200034138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.uiedwv.top"; classtype:attempted-recon; sid:200034139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.ukohwk.top"; classtype:attempted-recon; sid:200034140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.vlunrr.top"; classtype:attempted-recon; sid:200034141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.wezouj.top"; classtype:attempted-recon; sid:200034142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.wiqlcn.top"; classtype:attempted-recon; sid:200034143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.xewfoa.top"; classtype:attempted-recon; sid:200034144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.xwdvad.top"; classtype:attempted-recon; sid:200034145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.zqawii.top"; classtype:attempted-recon; sid:200034146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visacsvoieesiver.oea.zvzqtl.top"; classtype:attempted-recon; sid:200034147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaeavcececsvrcasii.viiorsaervesaiccvnsiovreri.bzlrqb.top"; classtype:attempted-recon; sid:200034148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaeavcececsvrcasii.viiorsaervesaiccvnsiovreri.mylnsr.top"; classtype:attempted-recon; sid:200034149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200034150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200034151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200034152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200034153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200034154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200034155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200034156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200034157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200034158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200034159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200034160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200034161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200034162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200034163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200034164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200034165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200034166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200034167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200034168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200034169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200034170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200034171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200034172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200034173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200034174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200034175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200034176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200034177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200034178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200034179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200034180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200034181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200034182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200034183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200034184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200034185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200034186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200034187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200034188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200034189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200034190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200034191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200034192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200034193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200034194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200034195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200034196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200034197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200034198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200034199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200034200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200034201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200034202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200034203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200034204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200034205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200034206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200034207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200034208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200034209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200034210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200034211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200034212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200034213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200034214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200034215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200034216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200034217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200034218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200034219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200034220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200034221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200034222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200034223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200034224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200034225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200034226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200034227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200034228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200034229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200034230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200034231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200034232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200034233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200034234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200034235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200034236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200034237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200034238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200034239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200034240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200034241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200034242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200034243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200034244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200034245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200034246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200034247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200034248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200034249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200034250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200034251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200034252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200034253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200034254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200034255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200034256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200034257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200034258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200034259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200034260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200034261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200034262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200034263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200034264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200034265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200034266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200034267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200034268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200034269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200034270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200034271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200034272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200034273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200034274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200034275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200034276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200034277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200034278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200034279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200034280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200034281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200034282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200034283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200034284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200034285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaesccaiceer.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200034286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200034287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200034288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200034289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200034290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200034291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200034292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200034293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200034294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200034295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200034296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200034297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200034298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200034299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200034300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200034301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200034302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200034303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200034304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200034305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200034306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200034307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200034308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200034309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200034310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200034311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200034312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200034313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200034314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200034315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200034316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200034317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200034318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200034319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200034320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200034321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200034322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200034323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200034324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200034325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200034326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200034327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200034328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200034329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200034330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200034331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200034332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200034333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200034334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200034335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200034336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200034337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200034338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200034339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200034340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200034341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200034342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200034343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200034344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200034345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200034346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200034347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200034348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200034349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200034350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200034351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200034352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200034353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200034354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200034355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200034356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200034357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200034358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200034359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200034360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200034361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200034362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200034363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200034364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200034365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200034366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200034367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200034368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200034369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200034370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200034371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200034372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200034373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200034374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200034375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200034376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200034377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200034378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200034379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200034380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200034381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200034382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200034383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200034384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200034385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200034386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200034387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200034388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200034389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200034390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200034391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200034392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200034393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200034394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200034395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200034396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200034397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200034398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200034399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200034400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200034401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200034402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200034403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200034404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200034405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200034406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200034407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200034408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200034409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200034410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200034411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200034412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200034413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200034414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200034415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200034416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200034417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200034418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200034419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200034420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200034421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaessccaivr.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200034422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200034423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200034424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200034425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200034426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200034427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200034428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200034429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200034430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200034431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200034432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200034433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200034434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200034435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200034436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200034437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.csndax.icu"; classtype:attempted-recon; sid:200034438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200034439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200034440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200034441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.erqer.icu"; classtype:attempted-recon; sid:200034442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200034443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200034444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200034445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200034446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200034447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200034448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200034449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200034450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200034451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200034452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200034453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200034454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200034455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200034456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200034457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200034458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200034459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200034460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200034461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200034462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200034463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200034464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200034465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200034466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200034467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200034468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200034469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200034470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lianges.icu"; classtype:attempted-recon; sid:200034471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200034472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200034473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.likijs.icu"; classtype:attempted-recon; sid:200034474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200034475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200034476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200034477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200034478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200034479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200034480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200034481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200034482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200034483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200034484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200034485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200034486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200034487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200034488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200034489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200034490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200034491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200034492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200034493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200034494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200034495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200034496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200034497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200034498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200034499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.maediof.icu"; classtype:attempted-recon; sid:200034500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200034501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200034502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200034503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200034504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200034505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200034506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200034507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200034508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200034509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.msodik.icu"; classtype:attempted-recon; sid:200034510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200034511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200034512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nanish.icu"; classtype:attempted-recon; sid:200034513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200034514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200034515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200034516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200034517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200034518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200034519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200034520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200034521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200034522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200034523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200034524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.paddki.icu"; classtype:attempted-recon; sid:200034525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200034526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200034527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200034528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200034529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200034530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.recordd.icu"; classtype:attempted-recon; sid:200034531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200034532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200034533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200034534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200034535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200034536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200034537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200034538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200034539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200034540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.trsas.icu"; classtype:attempted-recon; sid:200034541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200034542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200034543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.usideq.icu"; classtype:attempted-recon; sid:200034544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.v3454.icu"; classtype:attempted-recon; sid:200034545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200034546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.vardir.icu"; classtype:attempted-recon; sid:200034547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200034548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200034549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200034550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200034551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200034552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200034553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200034554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200034555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200034556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200034557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieer.aeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200034558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200034559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200034560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200034561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200034562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200034563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200034564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200034565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200034566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200034567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200034568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200034569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200034570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200034571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200034572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200034573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200034574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200034575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200034576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200034577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200034578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200034579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200034580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200034581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200034582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200034583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200034584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200034585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200034586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200034587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200034588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200034589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200034590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200034591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200034592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200034593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200034594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200034595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200034596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200034597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200034598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200034599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200034600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200034601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200034602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200034603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200034604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200034605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200034606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200034607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200034608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200034609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200034610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200034611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200034612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200034613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200034614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200034615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200034616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200034617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200034618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200034619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200034620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200034621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200034622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200034623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200034624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200034625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200034626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200034627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200034628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200034629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200034630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200034631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200034632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200034633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200034634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200034635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200034636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200034637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200034638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200034639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200034640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200034641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200034642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200034643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200034644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200034645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200034646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200034647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200034648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200034649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200034650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200034651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200034652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200034653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200034654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200034655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200034656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200034657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200034658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200034659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200034660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200034661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200034662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200034663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200034664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200034665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200034666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200034667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200034668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200034669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200034670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200034671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200034672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200034673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200034674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200034675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200034676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200034677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200034678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200034679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200034680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200034681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200034682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200034683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200034684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200034685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200034686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200034687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200034688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200034689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200034690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200034691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200034692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200034693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200034694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevccasieveer.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200034695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.axrcbx.top"; classtype:attempted-recon; sid:200034696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.azrsog.top"; classtype:attempted-recon; sid:200034697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.buavhf.top"; classtype:attempted-recon; sid:200034698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.geqnuq.top"; classtype:attempted-recon; sid:200034699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.isvuiy.top"; classtype:attempted-recon; sid:200034700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.jcqpfm.top"; classtype:attempted-recon; sid:200034701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.jfcxph.top"; classtype:attempted-recon; sid:200034702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.jsmfgc.top"; classtype:attempted-recon; sid:200034703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.kbroxv.top"; classtype:attempted-recon; sid:200034704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.kvdxks.top"; classtype:attempted-recon; sid:200034705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.mdxbrn.top"; classtype:attempted-recon; sid:200034706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.nnawmj.top"; classtype:attempted-recon; sid:200034707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.nofalw.top"; classtype:attempted-recon; sid:200034708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.oajqfn.top"; classtype:attempted-recon; sid:200034709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.onazqm.top"; classtype:attempted-recon; sid:200034710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.orcbvv.top"; classtype:attempted-recon; sid:200034711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.pgdfhw.top"; classtype:attempted-recon; sid:200034712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.pkwrdl.top"; classtype:attempted-recon; sid:200034713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.pmnaeh.top"; classtype:attempted-recon; sid:200034714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.qbcbta.top"; classtype:attempted-recon; sid:200034715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.rgqjka.top"; classtype:attempted-recon; sid:200034716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.sorjpe.top"; classtype:attempted-recon; sid:200034717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.svfocp.top"; classtype:attempted-recon; sid:200034718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.sxmerd.shop"; classtype:attempted-recon; sid:200034719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.tppwpi.top"; classtype:attempted-recon; sid:200034720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.tvbcmo.top"; classtype:attempted-recon; sid:200034721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.uarmbh.top"; classtype:attempted-recon; sid:200034722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.uiedwv.top"; classtype:attempted-recon; sid:200034723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.ukohwk.top"; classtype:attempted-recon; sid:200034724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.vlunrr.top"; classtype:attempted-recon; sid:200034725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.wezouj.top"; classtype:attempted-recon; sid:200034726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.wiqlcn.top"; classtype:attempted-recon; sid:200034727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.xewfoa.top"; classtype:attempted-recon; sid:200034728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.xwdvad.top"; classtype:attempted-recon; sid:200034729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.zqawii.top"; classtype:attempted-recon; sid:200034730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcscoeissiver.c.zvzqtl.top"; classtype:attempted-recon; sid:200034731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.axrcbx.top"; classtype:attempted-recon; sid:200034732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.azrsog.top"; classtype:attempted-recon; sid:200034733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.buavhf.top"; classtype:attempted-recon; sid:200034734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.geqnuq.top"; classtype:attempted-recon; sid:200034735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.isvuiy.top"; classtype:attempted-recon; sid:200034736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.jfcxph.top"; classtype:attempted-recon; sid:200034737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.jsmfgc.top"; classtype:attempted-recon; sid:200034738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.kbroxv.top"; classtype:attempted-recon; sid:200034739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.kvdxks.top"; classtype:attempted-recon; sid:200034740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.mdxbrn.top"; classtype:attempted-recon; sid:200034741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.mjfemh.shop"; classtype:attempted-recon; sid:200034742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.nnawmj.top"; classtype:attempted-recon; sid:200034743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.nofalw.top"; classtype:attempted-recon; sid:200034744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.oajqfn.top"; classtype:attempted-recon; sid:200034745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.orcbvv.top"; classtype:attempted-recon; sid:200034746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.pgdfhw.top"; classtype:attempted-recon; sid:200034747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.pkwrdl.top"; classtype:attempted-recon; sid:200034748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.pmnaeh.top"; classtype:attempted-recon; sid:200034749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.qbcbta.top"; classtype:attempted-recon; sid:200034750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.rgqjka.top"; classtype:attempted-recon; sid:200034751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.sorjpe.top"; classtype:attempted-recon; sid:200034752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.svfocp.top"; classtype:attempted-recon; sid:200034753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.tppwpi.top"; classtype:attempted-recon; sid:200034754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.tvbcmo.top"; classtype:attempted-recon; sid:200034755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.uarmbh.top"; classtype:attempted-recon; sid:200034756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.uiedwv.top"; classtype:attempted-recon; sid:200034757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.ukohwk.top"; classtype:attempted-recon; sid:200034758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.vlunrr.top"; classtype:attempted-recon; sid:200034759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.wezouj.top"; classtype:attempted-recon; sid:200034760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.wiqlcn.top"; classtype:attempted-recon; sid:200034761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.xewfoa.top"; classtype:attempted-recon; sid:200034762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.xwdvad.top"; classtype:attempted-recon; sid:200034763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.zqawii.top"; classtype:attempted-recon; sid:200034764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevcsoissiver.o.zvzqtl.top"; classtype:attempted-recon; sid:200034765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevececsvcarsi.viisvioreaeccvssiornveri.ryygdq.top"; classtype:attempted-recon; sid:200034766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.axrcbx.top"; classtype:attempted-recon; sid:200034767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.azrsog.top"; classtype:attempted-recon; sid:200034768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.buavhf.top"; classtype:attempted-recon; sid:200034769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.geqnuq.top"; classtype:attempted-recon; sid:200034770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.isvuiy.top"; classtype:attempted-recon; sid:200034771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.jfcxph.top"; classtype:attempted-recon; sid:200034772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.jsmfgc.top"; classtype:attempted-recon; sid:200034773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.kbroxv.top"; classtype:attempted-recon; sid:200034774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.kvdxks.top"; classtype:attempted-recon; sid:200034775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.mdxbrn.top"; classtype:attempted-recon; sid:200034776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.nnawmj.top"; classtype:attempted-recon; sid:200034777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.nofalw.top"; classtype:attempted-recon; sid:200034778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.oajqfn.top"; classtype:attempted-recon; sid:200034779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.orcbvv.top"; classtype:attempted-recon; sid:200034780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.pgdfhw.top"; classtype:attempted-recon; sid:200034781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.pkwrdl.top"; classtype:attempted-recon; sid:200034782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.pmnaeh.top"; classtype:attempted-recon; sid:200034783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.qbcbta.top"; classtype:attempted-recon; sid:200034784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.rgqjka.top"; classtype:attempted-recon; sid:200034785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.sorjpe.top"; classtype:attempted-recon; sid:200034786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.svfocp.top"; classtype:attempted-recon; sid:200034787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.sxmerd.shop"; classtype:attempted-recon; sid:200034788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.tppwpi.top"; classtype:attempted-recon; sid:200034789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.tvbcmo.top"; classtype:attempted-recon; sid:200034790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.uarmbh.top"; classtype:attempted-recon; sid:200034791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.uiedwv.top"; classtype:attempted-recon; sid:200034792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.ukohwk.top"; classtype:attempted-recon; sid:200034793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.vlunrr.top"; classtype:attempted-recon; sid:200034794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.wezouj.top"; classtype:attempted-recon; sid:200034795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.wiqlcn.top"; classtype:attempted-recon; sid:200034796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.xewfoa.top"; classtype:attempted-recon; sid:200034797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.xuacoo.shop"; classtype:attempted-recon; sid:200034798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.xwdvad.top"; classtype:attempted-recon; sid:200034799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.zqawii.top"; classtype:attempted-recon; sid:200034800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevescseiver.c.zvzqtl.top"; classtype:attempted-recon; sid:200034801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.axrcbx.top"; classtype:attempted-recon; sid:200034802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.azrsog.top"; classtype:attempted-recon; sid:200034803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.buavhf.top"; classtype:attempted-recon; sid:200034804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.geqnuq.top"; classtype:attempted-recon; sid:200034805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.isvuiy.top"; classtype:attempted-recon; sid:200034806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.jfcxph.top"; classtype:attempted-recon; sid:200034807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.jsmfgc.top"; classtype:attempted-recon; sid:200034808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.kbroxv.top"; classtype:attempted-recon; sid:200034809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.kvdxks.top"; classtype:attempted-recon; sid:200034810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.mdxbrn.top"; classtype:attempted-recon; sid:200034811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.mjfemh.shop"; classtype:attempted-recon; sid:200034812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.nnawmj.top"; classtype:attempted-recon; sid:200034813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.nofalw.top"; classtype:attempted-recon; sid:200034814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.oajqfn.top"; classtype:attempted-recon; sid:200034815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.onazqm.top"; classtype:attempted-recon; sid:200034816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.orcbvv.top"; classtype:attempted-recon; sid:200034817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.pgdfhw.top"; classtype:attempted-recon; sid:200034818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.pkwrdl.top"; classtype:attempted-recon; sid:200034819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.pmnaeh.top"; classtype:attempted-recon; sid:200034820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.qbcbta.top"; classtype:attempted-recon; sid:200034821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.rgqjka.top"; classtype:attempted-recon; sid:200034822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.sorjpe.top"; classtype:attempted-recon; sid:200034823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.svfocp.top"; classtype:attempted-recon; sid:200034824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.tppwpi.top"; classtype:attempted-recon; sid:200034825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.tvbcmo.top"; classtype:attempted-recon; sid:200034826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.uarmbh.top"; classtype:attempted-recon; sid:200034827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.uiedwv.top"; classtype:attempted-recon; sid:200034828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.ukohwk.top"; classtype:attempted-recon; sid:200034829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.vlunrr.top"; classtype:attempted-recon; sid:200034830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.wezouj.top"; classtype:attempted-recon; sid:200034831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.wiqlcn.top"; classtype:attempted-recon; sid:200034832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.xewfoa.top"; classtype:attempted-recon; sid:200034833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.xuacoo.shop"; classtype:attempted-recon; sid:200034834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.xwdvad.top"; classtype:attempted-recon; sid:200034835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.zqawii.top"; classtype:attempted-recon; sid:200034836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevessiver.a.zvzqtl.top"; classtype:attempted-recon; sid:200034837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevscecvcasri.viisvaiorecevsisornveri.mzzemr.top"; classtype:attempted-recon; sid:200034838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevscecvcasri.viisvaiorecevsisornveri.tlocgg.top"; classtype:attempted-recon; sid:200034839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.axrcbx.top"; classtype:attempted-recon; sid:200034840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.azrsog.top"; classtype:attempted-recon; sid:200034841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.buavhf.top"; classtype:attempted-recon; sid:200034842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.geqnuq.top"; classtype:attempted-recon; sid:200034843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.isvuiy.top"; classtype:attempted-recon; sid:200034844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.jfcxph.top"; classtype:attempted-recon; sid:200034845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.jsmfgc.top"; classtype:attempted-recon; sid:200034846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.kbroxv.top"; classtype:attempted-recon; sid:200034847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.kvdxks.top"; classtype:attempted-recon; sid:200034848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.mdxbrn.top"; classtype:attempted-recon; sid:200034849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.nnawmj.top"; classtype:attempted-recon; sid:200034850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.nofalw.top"; classtype:attempted-recon; sid:200034851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.oajqfn.top"; classtype:attempted-recon; sid:200034852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.orcbvv.top"; classtype:attempted-recon; sid:200034853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.owbxts.top"; classtype:attempted-recon; sid:200034854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.peshlh.shop"; classtype:attempted-recon; sid:200034855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.pgdfhw.top"; classtype:attempted-recon; sid:200034856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.pkwrdl.top"; classtype:attempted-recon; sid:200034857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.pmnaeh.top"; classtype:attempted-recon; sid:200034858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.qbcbta.top"; classtype:attempted-recon; sid:200034859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.rgqjka.top"; classtype:attempted-recon; sid:200034860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.sorjpe.top"; classtype:attempted-recon; sid:200034861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.svfocp.top"; classtype:attempted-recon; sid:200034862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.tppwpi.top"; classtype:attempted-recon; sid:200034863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.tvbcmo.top"; classtype:attempted-recon; sid:200034864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.uarmbh.top"; classtype:attempted-recon; sid:200034865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.uiedwv.top"; classtype:attempted-recon; sid:200034866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.ukohwk.top"; classtype:attempted-recon; sid:200034867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.vlunrr.top"; classtype:attempted-recon; sid:200034868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.wezouj.top"; classtype:attempted-recon; sid:200034869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.wiqlcn.top"; classtype:attempted-recon; sid:200034870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.xewfoa.top"; classtype:attempted-recon; sid:200034871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.xwdvad.top"; classtype:attempted-recon; sid:200034872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.zqawii.top"; classtype:attempted-recon; sid:200034873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsceoeissiver.cea.zvzqtl.top"; classtype:attempted-recon; sid:200034874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.axrcbx.top"; classtype:attempted-recon; sid:200034875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.azrsog.top"; classtype:attempted-recon; sid:200034876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.buavhf.top"; classtype:attempted-recon; sid:200034877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.geqnuq.top"; classtype:attempted-recon; sid:200034878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.isvuiy.top"; classtype:attempted-recon; sid:200034879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.jfcxph.top"; classtype:attempted-recon; sid:200034880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.jsmfgc.top"; classtype:attempted-recon; sid:200034881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.kbroxv.top"; classtype:attempted-recon; sid:200034882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.kvdxks.top"; classtype:attempted-recon; sid:200034883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.mdxbrn.top"; classtype:attempted-recon; sid:200034884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.nnawmj.top"; classtype:attempted-recon; sid:200034885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.nofalw.top"; classtype:attempted-recon; sid:200034886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.oajqfn.top"; classtype:attempted-recon; sid:200034887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.orcbvv.top"; classtype:attempted-recon; sid:200034888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.pgdfhw.top"; classtype:attempted-recon; sid:200034889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.pkwrdl.top"; classtype:attempted-recon; sid:200034890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.pmnaeh.top"; classtype:attempted-recon; sid:200034891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.qbcbta.top"; classtype:attempted-recon; sid:200034892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.rgqjka.top"; classtype:attempted-recon; sid:200034893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.sorjpe.top"; classtype:attempted-recon; sid:200034894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.svfocp.top"; classtype:attempted-recon; sid:200034895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.tppwpi.top"; classtype:attempted-recon; sid:200034896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.tvbcmo.top"; classtype:attempted-recon; sid:200034897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.uarmbh.top"; classtype:attempted-recon; sid:200034898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.uiedwv.top"; classtype:attempted-recon; sid:200034899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.ukohwk.top"; classtype:attempted-recon; sid:200034900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.vlunrr.top"; classtype:attempted-recon; sid:200034901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.wezouj.top"; classtype:attempted-recon; sid:200034902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.wiqlcn.top"; classtype:attempted-recon; sid:200034903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.xewfoa.top"; classtype:attempted-recon; sid:200034904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.xwdvad.top"; classtype:attempted-recon; sid:200034905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.zqawii.top"; classtype:attempted-recon; sid:200034906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvcsoeissiver.oea.zvzqtl.top"; classtype:attempted-recon; sid:200034907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.axrcbx.top"; classtype:attempted-recon; sid:200034908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.azrsog.top"; classtype:attempted-recon; sid:200034909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.buavhf.top"; classtype:attempted-recon; sid:200034910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.cckrka.shop"; classtype:attempted-recon; sid:200034911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.geqnuq.top"; classtype:attempted-recon; sid:200034912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.isvuiy.top"; classtype:attempted-recon; sid:200034913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.jfcxph.top"; classtype:attempted-recon; sid:200034914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.jsmfgc.top"; classtype:attempted-recon; sid:200034915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.kbroxv.top"; classtype:attempted-recon; sid:200034916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.kvdxks.top"; classtype:attempted-recon; sid:200034917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.mdxbrn.top"; classtype:attempted-recon; sid:200034918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.mjfemh.shop"; classtype:attempted-recon; sid:200034919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.nnawmj.top"; classtype:attempted-recon; sid:200034920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.nofalw.top"; classtype:attempted-recon; sid:200034921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.oajqfn.top"; classtype:attempted-recon; sid:200034922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.orcbvv.top"; classtype:attempted-recon; sid:200034923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.pgdfhw.top"; classtype:attempted-recon; sid:200034924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.pkwrdl.top"; classtype:attempted-recon; sid:200034925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.pmnaeh.top"; classtype:attempted-recon; sid:200034926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.qbcbta.top"; classtype:attempted-recon; sid:200034927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.rgqjka.top"; classtype:attempted-recon; sid:200034928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.sorjpe.top"; classtype:attempted-recon; sid:200034929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.svfocp.top"; classtype:attempted-recon; sid:200034930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.tppwpi.top"; classtype:attempted-recon; sid:200034931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.tvbcmo.top"; classtype:attempted-recon; sid:200034932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.uarmbh.top"; classtype:attempted-recon; sid:200034933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.uiedwv.top"; classtype:attempted-recon; sid:200034934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.ukohwk.top"; classtype:attempted-recon; sid:200034935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.vlunrr.top"; classtype:attempted-recon; sid:200034936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.wezouj.top"; classtype:attempted-recon; sid:200034937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.wiqlcn.top"; classtype:attempted-recon; sid:200034938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.xewfoa.top"; classtype:attempted-recon; sid:200034939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.xwdvad.top"; classtype:attempted-recon; sid:200034940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.yxpfzh.top"; classtype:attempted-recon; sid:200034941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.zqawii.top"; classtype:attempted-recon; sid:200034942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesceseiver.cea.zvzqtl.top"; classtype:attempted-recon; sid:200034943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.axrcbx.top"; classtype:attempted-recon; sid:200034944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.azrsog.top"; classtype:attempted-recon; sid:200034945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.buavhf.top"; classtype:attempted-recon; sid:200034946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.geqnuq.top"; classtype:attempted-recon; sid:200034947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.isvuiy.top"; classtype:attempted-recon; sid:200034948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.jcqpfm.top"; classtype:attempted-recon; sid:200034949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.jfcxph.top"; classtype:attempted-recon; sid:200034950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.jsmfgc.top"; classtype:attempted-recon; sid:200034951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.kbroxv.top"; classtype:attempted-recon; sid:200034952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.kvdxks.top"; classtype:attempted-recon; sid:200034953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.mdxbrn.top"; classtype:attempted-recon; sid:200034954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.nnawmj.top"; classtype:attempted-recon; sid:200034955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.nofalw.top"; classtype:attempted-recon; sid:200034956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.oajqfn.top"; classtype:attempted-recon; sid:200034957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.orcbvv.top"; classtype:attempted-recon; sid:200034958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.peshlh.shop"; classtype:attempted-recon; sid:200034959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.pgdfhw.top"; classtype:attempted-recon; sid:200034960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.pkwrdl.top"; classtype:attempted-recon; sid:200034961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.pmnaeh.top"; classtype:attempted-recon; sid:200034962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.qbcbta.top"; classtype:attempted-recon; sid:200034963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.rgqjka.top"; classtype:attempted-recon; sid:200034964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.sorjpe.top"; classtype:attempted-recon; sid:200034965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.svfocp.top"; classtype:attempted-recon; sid:200034966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.tppwpi.top"; classtype:attempted-recon; sid:200034967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.tvbcmo.top"; classtype:attempted-recon; sid:200034968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.uarmbh.top"; classtype:attempted-recon; sid:200034969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.uiedwv.top"; classtype:attempted-recon; sid:200034970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.ukohwk.top"; classtype:attempted-recon; sid:200034971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.vlunrr.top"; classtype:attempted-recon; sid:200034972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.wezouj.top"; classtype:attempted-recon; sid:200034973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.wiqlcn.top"; classtype:attempted-recon; sid:200034974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.xewfoa.top"; classtype:attempted-recon; sid:200034975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.xwdvad.top"; classtype:attempted-recon; sid:200034976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.zqawii.top"; classtype:attempted-recon; sid:200034977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaevvesseiver.aea.zvzqtl.top"; classtype:attempted-recon; sid:200034978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visamasecoocsoersd.moasecsecsccrerd.btqhqpo.cn"; classtype:attempted-recon; sid:200034979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200034980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200034981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200034982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200034983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200034984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200034985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200034986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200034987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200034988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200034989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200034990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200034991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200034992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200034993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200034994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200034995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200034996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200034997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200034998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200034999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200035028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200035031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200035043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200035044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200035045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200035046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200035047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200035048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200035049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200035050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200035051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200035052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200035053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200035054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200035055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200035056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200035057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200035058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200035059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200035060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200035061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200035062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200035063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200035064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200035065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200035066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200035067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200035068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200035069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200035070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200035071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200035072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200035073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200035074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200035075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200035076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200035077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200035078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200035079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200035080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200035081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200035082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200035083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200035084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200035085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200035086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200035087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200035088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200035089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200035090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200035091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200035092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200035093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200035094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200035095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200035096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200035097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200035098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200035099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200035100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200035101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200035102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200035103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200035104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200035105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200035106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200035107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200035108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200035109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200035110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200035111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200035112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200035113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200035114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaicesiver.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200035115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200035116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200035117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200035118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200035119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200035120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200035121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200035122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200035123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200035124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200035125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200035126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200035127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200035128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200035129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200035130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200035131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200035132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200035133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200035134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200035135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200035164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200035167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200035179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200035180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200035181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200035182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200035183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200035184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200035185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200035186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200035187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200035188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200035189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200035190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200035191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200035192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200035193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200035194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200035195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200035196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200035197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200035198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200035199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200035200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200035201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200035202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200035203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200035204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200035205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200035206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200035207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200035208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200035209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200035210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200035211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200035212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200035213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200035214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200035215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200035216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200035217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200035218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200035219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200035220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200035221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200035222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200035223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200035224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200035225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200035226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200035227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200035228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200035229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200035230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200035231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200035232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200035233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200035234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200035235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200035236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200035237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200035238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200035239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200035240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200035241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200035242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200035243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200035244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200035245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200035246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200035247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200035248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200035249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200035250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200035251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasoccaieiver.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200035252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200035253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200035254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200035255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200035256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200035257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200035258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200035259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200035260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200035261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200035262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200035263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200035264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200035265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200035266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200035267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200035268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200035269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200035270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200035271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200035272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200035301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200035304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200035316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200035317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200035318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200035319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200035320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200035321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200035322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200035323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200035324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200035325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200035326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200035327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200035328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200035329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200035330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200035331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200035332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200035333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200035334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200035335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200035336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200035337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200035338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200035339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200035340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200035341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200035342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200035343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200035344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200035345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200035346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200035347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200035348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200035349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200035350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200035351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200035352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200035353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200035354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200035355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200035356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200035357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200035358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200035359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200035360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200035361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200035362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200035363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200035364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200035365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200035366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200035367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200035368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200035369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200035370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200035371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200035372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200035373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200035374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200035375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200035376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200035377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200035378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200035379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200035380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200035381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200035382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200035383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200035384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200035385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200035386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200035387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200035388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoieeesiver.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200035389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200035390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200035391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200035392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200035393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200035394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200035395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200035396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200035397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200035398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200035399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200035400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200035401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200035402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200035403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200035404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.csndax.icu"; classtype:attempted-recon; sid:200035405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200035406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200035407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200035408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.erqer.icu"; classtype:attempted-recon; sid:200035409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lianges.icu"; classtype:attempted-recon; sid:200035438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.likijs.icu"; classtype:attempted-recon; sid:200035441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200035453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200035454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200035455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200035456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200035457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200035458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200035459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200035460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200035461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200035462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200035463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200035464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200035465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200035466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200035467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.maediof.icu"; classtype:attempted-recon; sid:200035468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200035469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200035470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200035471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200035472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200035473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200035474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200035475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200035476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200035477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.msodik.icu"; classtype:attempted-recon; sid:200035478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200035479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200035480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nanish.icu"; classtype:attempted-recon; sid:200035481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200035482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200035483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200035484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200035485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200035486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200035487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200035488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200035489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200035490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200035491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200035492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.paddki.icu"; classtype:attempted-recon; sid:200035493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200035494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200035495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200035496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200035497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200035498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.recordd.icu"; classtype:attempted-recon; sid:200035499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200035500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200035501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200035502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200035503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200035504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200035505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200035506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200035507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200035508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.trsas.icu"; classtype:attempted-recon; sid:200035509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200035510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200035511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.usideq.icu"; classtype:attempted-recon; sid:200035512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.v3454.icu"; classtype:attempted-recon; sid:200035513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200035514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.vardir.icu"; classtype:attempted-recon; sid:200035515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200035516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200035517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200035518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200035519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200035520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200035521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200035522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200035523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200035524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visasvccaoiesiver.oeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200035525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200035526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200035527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200035528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200035529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200035530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200035531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200035532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200035533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200035534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200035535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200035536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200035537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200035538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200035539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200035540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200035541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200035542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200035543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200035544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200035545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200035574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200035577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200035589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200035590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200035591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200035592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200035593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200035594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200035595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200035596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200035597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200035598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200035599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200035600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200035601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200035602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200035603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200035604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200035605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200035606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200035607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200035608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200035609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200035610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200035611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200035612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200035613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200035614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200035615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200035616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200035617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200035618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200035619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200035620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200035621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200035622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200035623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200035624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200035625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200035626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200035627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200035628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200035629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200035630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200035631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200035632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200035633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200035634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200035635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200035636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200035637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200035638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200035639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200035640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200035641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200035642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200035643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200035644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200035645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200035646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200035647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200035648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200035649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200035650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200035651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200035652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200035653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200035654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200035655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200035656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200035657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200035658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200035659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200035660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200035661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasceissiver.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200035662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200035663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200035664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200035665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200035666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200035667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200035668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200035669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200035670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200035671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200035672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200035673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200035674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200035675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200035676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200035677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200035678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200035679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200035680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200035681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200035682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200035711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200035714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200035726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200035727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200035728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200035729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200035730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200035731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200035732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200035733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200035734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200035735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200035736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200035737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200035738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200035739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200035740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200035741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200035742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200035743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200035744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200035745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200035746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200035747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200035748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200035749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200035750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200035751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200035752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200035753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200035754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200035755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200035756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200035757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200035758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200035759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200035760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200035761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200035762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200035763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200035764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200035765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200035766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200035767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200035768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200035769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200035770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200035771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200035772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200035773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200035774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200035775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200035776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200035777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200035778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200035779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200035780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200035781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200035782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200035783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200035784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200035785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200035786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200035787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200035788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200035789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200035790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200035791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200035792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200035793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200035794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200035795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200035796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200035797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200035798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavcccasossiver.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200035799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200035800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200035801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200035802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200035803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200035804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200035805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200035806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200035807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200035808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200035809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200035810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200035811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200035812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200035813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200035814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200035815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200035816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200035817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200035818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200035819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200035848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200035851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200035863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200035864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200035865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200035866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200035867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200035868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200035869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200035870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200035871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200035872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200035873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200035874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200035875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200035876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200035877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200035878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200035879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200035880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200035881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200035882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200035883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200035884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200035885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200035886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200035887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200035888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200035889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200035890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200035891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200035892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200035893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200035894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200035895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200035896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200035897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200035898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200035899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200035900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200035901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200035902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200035903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200035904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200035905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200035906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200035907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200035908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200035909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200035910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200035911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200035912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200035913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200035914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200035915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200035916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200035917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200035918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200035919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200035920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200035921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200035922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200035923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200035924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200035925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200035926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200035927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200035928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200035929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200035930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200035931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200035932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200035933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200035934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200035935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccasceiver.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200035936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200035937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200035938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200035939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200035940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200035941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200035942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200035943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200035944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200035945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200035946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200035947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200035948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200035949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200035950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200035951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200035952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200035953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200035954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200035955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200035956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200035957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200035958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200035959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200035960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200035961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200035962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200035963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200035964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200035965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200035966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200035967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200035968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200035969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200035970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200035971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200035972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200035973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200035974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200035975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200035976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200035977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200035978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200035979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200035980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200035981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200035982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200035983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200035984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200035985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200035986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200035987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200035988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200035989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200035990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200035991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200035992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200035993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200035994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200035995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200035996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200035997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200035998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200035999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200036000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200036001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200036002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200036003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200036004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200036005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200036006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200036007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200036008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200036009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200036010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200036011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200036012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200036013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200036014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200036015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200036016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200036017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200036018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200036019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200036020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200036021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200036022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200036023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200036024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200036025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200036026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200036027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200036028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200036029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200036030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200036031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200036032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200036033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200036034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200036035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200036036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200036037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200036038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200036039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200036040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200036041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200036042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200036043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200036044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200036045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200036046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200036047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200036048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200036049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200036050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200036051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200036052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200036053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200036054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200036055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200036056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200036057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200036058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200036059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200036060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200036061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200036062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200036063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200036064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200036065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200036066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200036067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200036068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200036069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200036070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200036071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200036072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visaveccassver.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200036073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.axrcbx.top"; classtype:attempted-recon; sid:200036074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.azrsog.top"; classtype:attempted-recon; sid:200036075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.buavhf.top"; classtype:attempted-recon; sid:200036076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.geqnuq.top"; classtype:attempted-recon; sid:200036077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.isvuiy.top"; classtype:attempted-recon; sid:200036078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.jfcxph.top"; classtype:attempted-recon; sid:200036079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.jsmfgc.top"; classtype:attempted-recon; sid:200036080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.kbroxv.top"; classtype:attempted-recon; sid:200036081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.kvdxks.top"; classtype:attempted-recon; sid:200036082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.mdxbrn.top"; classtype:attempted-recon; sid:200036083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.nnawmj.top"; classtype:attempted-recon; sid:200036084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.nofalw.top"; classtype:attempted-recon; sid:200036085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.oajqfn.top"; classtype:attempted-recon; sid:200036086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.obekup.shop"; classtype:attempted-recon; sid:200036087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.onazqm.top"; classtype:attempted-recon; sid:200036088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.orcbvv.top"; classtype:attempted-recon; sid:200036089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.pgdfhw.top"; classtype:attempted-recon; sid:200036090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.pkwrdl.top"; classtype:attempted-recon; sid:200036091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.pmnaeh.top"; classtype:attempted-recon; sid:200036092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.qbcbta.top"; classtype:attempted-recon; sid:200036093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.rgqjka.top"; classtype:attempted-recon; sid:200036094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.sorjpe.top"; classtype:attempted-recon; sid:200036095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.svfocp.top"; classtype:attempted-recon; sid:200036096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.tppwpi.top"; classtype:attempted-recon; sid:200036097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.tvbcmo.top"; classtype:attempted-recon; sid:200036098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.uarmbh.top"; classtype:attempted-recon; sid:200036099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.uiedwv.top"; classtype:attempted-recon; sid:200036100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.ukohwk.top"; classtype:attempted-recon; sid:200036101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.vlunrr.top"; classtype:attempted-recon; sid:200036102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.vnbmwi.shop"; classtype:attempted-recon; sid:200036103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.wezouj.top"; classtype:attempted-recon; sid:200036104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.wiqlcn.top"; classtype:attempted-recon; sid:200036105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.xewfoa.top"; classtype:attempted-recon; sid:200036106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.xwdvad.top"; classtype:attempted-recon; sid:200036107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.zqawii.top"; classtype:attempted-recon; sid:200036108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesicveer.c.zvzqtl.top"; classtype:attempted-recon; sid:200036109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.axrcbx.top"; classtype:attempted-recon; sid:200036110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.azrsog.top"; classtype:attempted-recon; sid:200036111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.buavhf.top"; classtype:attempted-recon; sid:200036112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.geqnuq.top"; classtype:attempted-recon; sid:200036113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.isvuiy.top"; classtype:attempted-recon; sid:200036114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.jcqpfm.top"; classtype:attempted-recon; sid:200036115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.jfcxph.top"; classtype:attempted-recon; sid:200036116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.jsmfgc.top"; classtype:attempted-recon; sid:200036117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.kbroxv.top"; classtype:attempted-recon; sid:200036118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.kvdxks.top"; classtype:attempted-recon; sid:200036119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.mdxbrn.top"; classtype:attempted-recon; sid:200036120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.nnawmj.top"; classtype:attempted-recon; sid:200036121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.nofalw.top"; classtype:attempted-recon; sid:200036122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.oajqfn.top"; classtype:attempted-recon; sid:200036123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.obekup.shop"; classtype:attempted-recon; sid:200036124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.orcbvv.top"; classtype:attempted-recon; sid:200036125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.pgdfhw.top"; classtype:attempted-recon; sid:200036126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.pkwrdl.top"; classtype:attempted-recon; sid:200036127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.pmnaeh.top"; classtype:attempted-recon; sid:200036128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.qbcbta.top"; classtype:attempted-recon; sid:200036129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.rgqjka.top"; classtype:attempted-recon; sid:200036130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.sorjpe.top"; classtype:attempted-recon; sid:200036131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.svfocp.top"; classtype:attempted-recon; sid:200036132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.tppwpi.top"; classtype:attempted-recon; sid:200036133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.tvbcmo.top"; classtype:attempted-recon; sid:200036134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.uarmbh.top"; classtype:attempted-recon; sid:200036135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.uiedwv.top"; classtype:attempted-recon; sid:200036136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.ukohwk.top"; classtype:attempted-recon; sid:200036137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.vlunrr.top"; classtype:attempted-recon; sid:200036138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.wezouj.top"; classtype:attempted-recon; sid:200036139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.wiqlcn.top"; classtype:attempted-recon; sid:200036140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.xewfoa.top"; classtype:attempted-recon; sid:200036141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.xwdvad.top"; classtype:attempted-recon; sid:200036142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.zqawii.top"; classtype:attempted-recon; sid:200036143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavesiver.a.zvzqtl.top"; classtype:attempted-recon; sid:200036144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.axrcbx.top"; classtype:attempted-recon; sid:200036145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.azrsog.top"; classtype:attempted-recon; sid:200036146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.buavhf.top"; classtype:attempted-recon; sid:200036147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.fmttqq.top"; classtype:attempted-recon; sid:200036148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.geqnuq.top"; classtype:attempted-recon; sid:200036149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.isvuiy.top"; classtype:attempted-recon; sid:200036150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.jfcxph.top"; classtype:attempted-recon; sid:200036151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.jsmfgc.top"; classtype:attempted-recon; sid:200036152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.kbroxv.top"; classtype:attempted-recon; sid:200036153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.kvdxks.top"; classtype:attempted-recon; sid:200036154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.mdxbrn.top"; classtype:attempted-recon; sid:200036155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.nnawmj.top"; classtype:attempted-recon; sid:200036156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.nofalw.top"; classtype:attempted-recon; sid:200036157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.oajqfn.top"; classtype:attempted-recon; sid:200036158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.orcbvv.top"; classtype:attempted-recon; sid:200036159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.pgdfhw.top"; classtype:attempted-recon; sid:200036160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.pkwrdl.top"; classtype:attempted-recon; sid:200036161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.pmnaeh.top"; classtype:attempted-recon; sid:200036162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.qbcbta.top"; classtype:attempted-recon; sid:200036163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.rgqjka.top"; classtype:attempted-recon; sid:200036164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.sorjpe.top"; classtype:attempted-recon; sid:200036165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.svfocp.top"; classtype:attempted-recon; sid:200036166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.sxmerd.shop"; classtype:attempted-recon; sid:200036167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.tppwpi.top"; classtype:attempted-recon; sid:200036168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.tvbcmo.top"; classtype:attempted-recon; sid:200036169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.uarmbh.top"; classtype:attempted-recon; sid:200036170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.uiedwv.top"; classtype:attempted-recon; sid:200036171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.ukohwk.top"; classtype:attempted-recon; sid:200036172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.vlunrr.top"; classtype:attempted-recon; sid:200036173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.wezouj.top"; classtype:attempted-recon; sid:200036174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.wiqlcn.top"; classtype:attempted-recon; sid:200036175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.xewfoa.top"; classtype:attempted-recon; sid:200036176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.xwdvad.top"; classtype:attempted-recon; sid:200036177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.zqawii.top"; classtype:attempted-recon; sid:200036178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiceveer.cea.zvzqtl.top"; classtype:attempted-recon; sid:200036179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.axrcbx.top"; classtype:attempted-recon; sid:200036180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.azrsog.top"; classtype:attempted-recon; sid:200036181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.buavhf.top"; classtype:attempted-recon; sid:200036182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.cckrka.shop"; classtype:attempted-recon; sid:200036183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.geqnuq.top"; classtype:attempted-recon; sid:200036184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.isvuiy.top"; classtype:attempted-recon; sid:200036185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.jfcxph.top"; classtype:attempted-recon; sid:200036186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.jsmfgc.top"; classtype:attempted-recon; sid:200036187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.kbroxv.top"; classtype:attempted-recon; sid:200036188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.kvdxks.top"; classtype:attempted-recon; sid:200036189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.mdxbrn.top"; classtype:attempted-recon; sid:200036190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.nnawmj.top"; classtype:attempted-recon; sid:200036191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.nofalw.top"; classtype:attempted-recon; sid:200036192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.oajqfn.top"; classtype:attempted-recon; sid:200036193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.orcbvv.top"; classtype:attempted-recon; sid:200036194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.pgdfhw.top"; classtype:attempted-recon; sid:200036195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.pkwrdl.top"; classtype:attempted-recon; sid:200036196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.pmnaeh.top"; classtype:attempted-recon; sid:200036197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.qbcbta.top"; classtype:attempted-recon; sid:200036198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.rgqjka.top"; classtype:attempted-recon; sid:200036199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.sorjpe.top"; classtype:attempted-recon; sid:200036200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.svfocp.top"; classtype:attempted-recon; sid:200036201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.sxmerd.shop"; classtype:attempted-recon; sid:200036202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.tppwpi.top"; classtype:attempted-recon; sid:200036203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.tvbcmo.top"; classtype:attempted-recon; sid:200036204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.uarmbh.top"; classtype:attempted-recon; sid:200036205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.uiedwv.top"; classtype:attempted-recon; sid:200036206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.ukohwk.top"; classtype:attempted-recon; sid:200036207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.vlunrr.top"; classtype:attempted-recon; sid:200036208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.wezouj.top"; classtype:attempted-recon; sid:200036209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.wiqlcn.top"; classtype:attempted-recon; sid:200036210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.xewfoa.top"; classtype:attempted-recon; sid:200036211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.xwdvad.top"; classtype:attempted-recon; sid:200036212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.zqawii.top"; classtype:attempted-recon; sid:200036213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavevsiveer.aea.zvzqtl.top"; classtype:attempted-recon; sid:200036214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200036215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200036216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200036217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200036218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200036219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200036220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200036221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200036222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200036223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200036224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200036225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200036226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200036227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200036228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200036229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.csndax.icu"; classtype:attempted-recon; sid:200036230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200036231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200036232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200036233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.erqer.icu"; classtype:attempted-recon; sid:200036234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200036235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200036236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200036237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200036238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200036239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200036240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200036241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200036242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200036243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200036244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200036245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200036246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200036247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200036248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200036249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200036250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200036251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200036252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200036253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200036254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200036255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200036256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200036257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200036258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200036259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200036260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200036261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200036262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lianges.icu"; classtype:attempted-recon; sid:200036263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200036264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200036265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.likijs.icu"; classtype:attempted-recon; sid:200036266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200036267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200036268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200036269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200036270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200036271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200036272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200036273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200036274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200036275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200036276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200036277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200036278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200036279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200036280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200036281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200036282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200036283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200036284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200036285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200036286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200036287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200036288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200036289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200036290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200036291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200036292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.maediof.icu"; classtype:attempted-recon; sid:200036293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200036294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200036295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200036296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200036297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200036298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200036299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200036300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200036301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200036302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.msodik.icu"; classtype:attempted-recon; sid:200036303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200036304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200036305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nanish.icu"; classtype:attempted-recon; sid:200036306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200036307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200036308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200036309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200036310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200036311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200036312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200036313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200036314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200036315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200036316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200036317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.paddki.icu"; classtype:attempted-recon; sid:200036318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200036319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200036320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200036321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200036322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200036323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.recordd.icu"; classtype:attempted-recon; sid:200036324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200036325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200036326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200036327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200036328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200036329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200036330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200036331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200036332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200036333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.trsas.icu"; classtype:attempted-recon; sid:200036334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200036335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200036336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.usideq.icu"; classtype:attempted-recon; sid:200036337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.v3454.icu"; classtype:attempted-recon; sid:200036338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200036339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.vardir.icu"; classtype:attempted-recon; sid:200036340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200036341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200036342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200036343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200036344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200036345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200036346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200036347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200036348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200036349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200036350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseissiver.oeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200036351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200036352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200036353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200036354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200036355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200036356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200036357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200036358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200036359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200036360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200036361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200036362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200036363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200036364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200036365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200036366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200036367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200036368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200036369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200036370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200036371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200036372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200036373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200036374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200036375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200036376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200036377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200036378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200036379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200036380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200036381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200036382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200036383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200036384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200036385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200036386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200036387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200036388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200036389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200036390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200036391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200036392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200036393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200036394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200036395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200036396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200036397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200036398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200036399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200036400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200036401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200036402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200036403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200036404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200036405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200036406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200036407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200036408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200036409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200036410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200036411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200036412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200036413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200036414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200036415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200036416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200036417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200036418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200036419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200036420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200036421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200036422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200036423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200036424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200036425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200036426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200036427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200036428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200036429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200036430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200036431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200036432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200036433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200036434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200036435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200036436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200036437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200036438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200036439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200036440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200036441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200036442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200036443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200036444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200036445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200036446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200036447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200036448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200036449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200036450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200036451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200036452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200036453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200036454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200036455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200036456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200036457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200036458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200036459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200036460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200036461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200036462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200036463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200036464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200036465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200036466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200036467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200036468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200036469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200036470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200036471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200036472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200036473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200036474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200036475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200036476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200036477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200036478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200036479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200036480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200036481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200036482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200036483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200036484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200036485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200036486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200036487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccacseoeissiver.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200036488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200036489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200036490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200036491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200036492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200036493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200036494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200036495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200036496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200036497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200036498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200036499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200036500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200036501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200036502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200036503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.csndax.icu"; classtype:attempted-recon; sid:200036504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200036505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200036506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200036507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.erqer.icu"; classtype:attempted-recon; sid:200036508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200036509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200036510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200036511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200036512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200036513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200036514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200036515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200036516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200036517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200036518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200036519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200036520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200036521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200036522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200036523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200036524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200036525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200036526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200036527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200036528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200036529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200036530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200036531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200036532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200036533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200036534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200036535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200036536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lianges.icu"; classtype:attempted-recon; sid:200036537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200036538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200036539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.likijs.icu"; classtype:attempted-recon; sid:200036540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200036541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200036542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200036543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200036544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200036545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200036546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200036547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200036548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200036549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200036550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200036551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200036552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200036553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200036554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200036555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200036556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200036557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200036558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200036559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200036560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200036561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200036562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200036563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200036564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200036565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200036566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.maediof.icu"; classtype:attempted-recon; sid:200036567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200036568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200036569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200036570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200036571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200036572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200036573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200036574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200036575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200036576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.msodik.icu"; classtype:attempted-recon; sid:200036577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200036578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200036579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nanish.icu"; classtype:attempted-recon; sid:200036580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200036581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200036582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200036583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200036584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200036585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200036586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200036587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200036588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200036589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200036590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200036591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.paddki.icu"; classtype:attempted-recon; sid:200036592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200036593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200036594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200036595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200036596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200036597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.recordd.icu"; classtype:attempted-recon; sid:200036598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200036599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200036600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200036601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200036602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200036603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200036604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200036605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200036606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200036607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.trsas.icu"; classtype:attempted-recon; sid:200036608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200036609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200036610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.usideq.icu"; classtype:attempted-recon; sid:200036611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.v3454.icu"; classtype:attempted-recon; sid:200036612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200036613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.vardir.icu"; classtype:attempted-recon; sid:200036614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200036615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200036616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200036617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200036618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200036619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200036620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200036621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200036622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200036623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200036624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseiver.aeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200036625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200036626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200036627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200036628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200036629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200036630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200036631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200036632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200036633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200036634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200036635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200036636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200036637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200036638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200036639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200036640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200036641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200036642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200036643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200036644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200036645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200036646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200036647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200036648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200036649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200036650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200036651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200036652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200036653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200036654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200036655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200036656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200036657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200036658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200036659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200036660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200036661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200036662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200036663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200036664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200036665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200036666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200036667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200036668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200036669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200036670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200036671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200036672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200036673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200036674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200036675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200036676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200036677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200036678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200036679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200036680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200036681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200036682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200036683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200036684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200036685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200036686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200036687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200036688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200036689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200036690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200036691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200036692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200036693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200036694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200036695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200036696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200036697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200036698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200036699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200036700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200036701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200036702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200036703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200036704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200036705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200036706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200036707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200036708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200036709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200036710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200036711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200036712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200036713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200036714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200036715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200036716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200036717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200036718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200036719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200036720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200036721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200036722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200036723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200036724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200036725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200036726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200036727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200036728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200036729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200036730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200036731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200036732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200036733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200036734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200036735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200036736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200036737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200036738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200036739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200036740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200036741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200036742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200036743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200036744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200036745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200036746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200036747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200036748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200036749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200036750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200036751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200036752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200036753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200036754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200036755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200036756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200036757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200036758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200036759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200036760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200036761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visavvccaeseseiver.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200036762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.6hu6jz.icu"; classtype:attempted-recon; sid:200036763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.7788513.xyz"; classtype:attempted-recon; sid:200036764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.bcjgin.top"; classtype:attempted-recon; sid:200036765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.qlkmeq.top"; classtype:attempted-recon; sid:200036766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.ssmkdz.top"; classtype:attempted-recon; sid:200036767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.uxhejc.top"; classtype:attempted-recon; sid:200036768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.vppvl.top"; classtype:attempted-recon; sid:200036769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaaaeier.vaecevvasaeoir.wtkiwf.top"; classtype:attempted-recon; sid:200036770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaavier.vaeecevvasoir.2124458.xyz"; classtype:attempted-recon; sid:200036771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaavier.vaeecevvasoir.6887453.xyz"; classtype:attempted-recon; sid:200036772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaavier.vaeecevvasoir.7788513.xyz"; classtype:attempted-recon; sid:200036773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaavier.vaeecevvasoir.evzxzh.top"; classtype:attempted-recon; sid:200036774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaavier.vaeecevvasoir.fodxlh.top"; classtype:attempted-recon; sid:200036775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaavier.vaeecevvasoir.ssmkdz.top"; classtype:attempted-recon; sid:200036776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaavier.vaeecevvasoir.xtkiwg.top"; classtype:attempted-recon; sid:200036777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.2355587.xyz"; classtype:attempted-recon; sid:200036778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.6887453.xyz"; classtype:attempted-recon; sid:200036779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.fveprw.shop"; classtype:attempted-recon; sid:200036780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.hzwrnd.top"; classtype:attempted-recon; sid:200036781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.ivupqh.top"; classtype:attempted-recon; sid:200036782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.pdmvfc.top"; classtype:attempted-recon; sid:200036783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.ssmkdz.top"; classtype:attempted-recon; sid:200036784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaeaeier.vacaasaeoir.uxhejc.top"; classtype:attempted-recon; sid:200036785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.3838833.xyz"; classtype:attempted-recon; sid:200036786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.5i4ov5.icu"; classtype:attempted-recon; sid:200036787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.6887453.xyz"; classtype:attempted-recon; sid:200036788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.dlsefg.top"; classtype:attempted-recon; sid:200036789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.fodxlh.top"; classtype:attempted-recon; sid:200036790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.hzwrnd.top"; classtype:attempted-recon; sid:200036791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.ivupqh.top"; classtype:attempted-recon; sid:200036792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visccaevier.vaevaasoir.melwtr.top"; classtype:attempted-recon; sid:200036793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaaaeier.vaecevvasveoir.2124458.xyz"; classtype:attempted-recon; sid:200036794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaaaeier.vaecevvasveoir.2355587.xyz"; classtype:attempted-recon; sid:200036795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaaaeier.vaecevvasveoir.ssmkdz.top"; classtype:attempted-recon; sid:200036796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaaaeier.vaecevvasveoir.uxhejc.top"; classtype:attempted-recon; sid:200036797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaaaeier.vaecevvasveoir.wtkiwf.top"; classtype:attempted-recon; sid:200036798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaavier.vasecevvvsoir.hxsyjk.top"; classtype:attempted-recon; sid:200036799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaavier.vasecevvvsoir.pdmvfc.top"; classtype:attempted-recon; sid:200036800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaavier.vasecevvvsoir.ssmkdz.top"; classtype:attempted-recon; sid:200036801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaavier.vasecevvvsoir.vppvl.top"; classtype:attempted-recon; sid:200036802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.5378887.xyz"; classtype:attempted-recon; sid:200036803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.6887453.xyz"; classtype:attempted-recon; sid:200036804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.dlsefg.top"; classtype:attempted-recon; sid:200036805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.fodxlh.top"; classtype:attempted-recon; sid:200036806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.ivupqh.top"; classtype:attempted-recon; sid:200036807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.kuaiweichongwu13.shop"; classtype:attempted-recon; sid:200036808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.pdmvfc.top"; classtype:attempted-recon; sid:200036809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaeaeier.vacaasveoir.wtkiwf.top"; classtype:attempted-recon; sid:200036810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.3838833.xyz"; classtype:attempted-recon; sid:200036811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.5378887.xyz"; classtype:attempted-recon; sid:200036812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.gzovnq.shop"; classtype:attempted-recon; sid:200036813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.homhcy.top"; classtype:attempted-recon; sid:200036814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.lxbnlm.top"; classtype:attempted-recon; sid:200036815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.pdmvfc.top"; classtype:attempted-recon; sid:200036816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.ssmkdz.top"; classtype:attempted-recon; sid:200036817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.txvcqg.top"; classtype:attempted-recon; sid:200036818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viscvaevier.vasvavsoir.wwepwc.top"; classtype:attempted-recon; sid:200036819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccaaeier.vaccacaeoi.2m5f9l3.tokyo"; classtype:attempted-recon; sid:200036820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccaaeier.vaccacaeoi.iehamba.bar"; classtype:attempted-recon; sid:200036821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccaaeier.vaccacaeoi.yllcyy.za.com"; classtype:attempted-recon; sid:200036822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccaaeier.vaccacaeoi.zachul.cyou"; classtype:attempted-recon; sid:200036823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccavier.vaevcaeoi.eowzeh.za.com"; classtype:attempted-recon; sid:200036824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccavier.vaevcaeoi.momhdk.za.com"; classtype:attempted-recon; sid:200036825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccavier.vaevcaeoi.opulwar.bar"; classtype:attempted-recon; sid:200036826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseccavier.vaevcaeoi.tkhotm.cyou"; classtype:attempted-recon; sid:200036827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseeseosieecarci.vcssecsieoasoceneaseocieusoccesoesoc.dekl.co"; classtype:attempted-recon; sid:200036828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseiocai.vscsaeiisoc.qxkahc.top"; classtype:attempted-recon; sid:200036829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseioscai.vscsaieeicso.stjjjj.top"; classtype:attempted-recon; sid:200036830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseocai.vscsaeisoc.mgjuxa.top"; classtype:attempted-recon; sid:200036831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseoscai.vscsaeeicso.qdzxsq.top"; classtype:attempted-recon; sid:200036832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseoscai.vscsaeeicso.stjjjj.top"; classtype:attempted-recon; sid:200036833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visescai.vscsaeeiso.mojnlk.top"; classtype:attempted-recon; sid:200036834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visescai.vscsaeeiso.qxkahc.top"; classtype:attempted-recon; sid:200036835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viseseoieoccai.vsscessoaceeuiosscoc.gnpais.top"; classtype:attempted-recon; sid:200036836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visevcsaeier.vaccacveoi.cfloap.za.com"; classtype:attempted-recon; sid:200036837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visevcsaeier.vaccacveoi.fldztj.id"; classtype:attempted-recon; sid:200036838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visevcsaeier.vaccacveoi.gjveops.bar"; classtype:attempted-recon; sid:200036839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visevcsvier.vasvcveoi.hmxwtb.cyou"; classtype:attempted-recon; sid:200036840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visionaportale.com"; classtype:attempted-recon; sid:200036841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visioncenterss.blogspot.com"; classtype:attempted-recon; sid:200036842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissaeavecececcsvrcrasii.iviiorsiaerveisaiccivnsiovreri.gyaexz.top"; classtype:attempted-recon; sid:200036843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissaeivececescevrcrasii.iviiorsiveoeaisccvsiinorveri.s1niu.icu"; classtype:attempted-recon; sid:200036844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissveasececvcccarsri.viiisvioraiaercvissiioirnveri.fshxqm.top"; classtype:attempted-recon; sid:200036845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissveesececvccasrir.viisivaiorcicevsiisornvieri.owekid.top"; classtype:attempted-recon; sid:200036846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissveieececsvcecrarsi.iviisiorviaeoccisvsioirnveri.jxavqz.top"; classtype:attempted-recon; sid:200036847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissveieececsvcecrarsi.iviisiorviaeoccisvsioirnveri.usyxh3.icu"; classtype:attempted-recon; sid:200036848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissveieececsvcecrarsi.iviisiorviaeoccisvsioirnveri.yqpqaw.top"; classtype:attempted-recon; sid:200036849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissvesvececcacsir.rvisiviaciorviseiorisnverii.rtvsct.top"; classtype:attempted-recon; sid:200036850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vissvvesie.vvssceoi.nmlubc.top"; classtype:attempted-recon; sid:200036851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvaaeeesccvccrasoria.viiessvaciraoccinivrsiiori.djkvdy.top"; classtype:attempted-recon; sid:200036852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvaaeeesccvccrasoria.viiessvaciraoccinivrsiiori.iqokre.top"; classtype:attempted-recon; sid:200036853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvaeesevccascri.orvaisvieascccivsoioinrrii.jxlqcu.shop"; classtype:attempted-recon; sid:200036854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvaeesevccascri.orvaisvieascccivsoioinrrii.ojvntr.top"; classtype:attempted-recon; sid:200036855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvaieeescveccrasoria.viiessvaciococvinsiroiri.bsvdfk.top"; classtype:attempted-recon; sid:200036856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvaieeescveccrasoria.viiessvaciococvinsiroiri.ipbmbm.shop"; classtype:attempted-recon; sid:200036857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvaiesevcceacrsior.avisievsacciovosiinorrii.70x8m.icu"; classtype:attempted-recon; sid:200036858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveaeaverrei.vivacrvecoisec.1p2igt.icu"; classtype:attempted-recon; sid:200036859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveaeaverrei.vivacrvecoisec.gzj8007.xyz"; classtype:attempted-recon; sid:200036860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveascecvccarsi.viisvioraaercvssiiornveri.slx8h.icu"; classtype:attempted-recon; sid:200036861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveiscecvcearsi.viisvioraceovssiornveri.cwadib.top"; classtype:attempted-recon; sid:200036862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveseavsrrei.vivaervecsisec.acucbs.top"; classtype:attempted-recon; sid:200036863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveseavsrrei.vivaervecsisec.d24mu.icu"; classtype:attempted-recon; sid:200036864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveseavsrrei.vivaervecsisec.dd7ixy.shop"; classtype:attempted-recon; sid:200036865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveseavsrrei.vivaervecsisec.kxmmvb.top"; classtype:attempted-recon; sid:200036866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visveseavsrrei.vivaervecsisec.zbjyiw.top"; classtype:attempted-recon; sid:200036867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvesvceccasir.visivaciorvseiorsnveri.string97.xyz"; classtype:attempted-recon; sid:200036868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvesvceccasir.visivaciorvseiorsnveri.xubnkg.top"; classtype:attempted-recon; sid:200036869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.037768888861.xyz"; classtype:attempted-recon; sid:200036870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.284nxw.icu"; classtype:attempted-recon; sid:200036871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.33hf19.icu"; classtype:attempted-recon; sid:200036872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.473glv.icu"; classtype:attempted-recon; sid:200036873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.4k2dci.icu"; classtype:attempted-recon; sid:200036874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.687cem.icu"; classtype:attempted-recon; sid:200036875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.69bn6b.icu"; classtype:attempted-recon; sid:200036876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.6c7bza.icu"; classtype:attempted-recon; sid:200036877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.6pw2wd.icu"; classtype:attempted-recon; sid:200036878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.6rtqht.icu"; classtype:attempted-recon; sid:200036879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.6t1vk7.icu"; classtype:attempted-recon; sid:200036880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.7a4s96.icu"; classtype:attempted-recon; sid:200036881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.82casa.icu"; classtype:attempted-recon; sid:200036882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.9d24dh.icu"; classtype:attempted-recon; sid:200036883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.9pw3lv.icu"; classtype:attempted-recon; sid:200036884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.9zv0ny.icu"; classtype:attempted-recon; sid:200036885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.aale2a.icu"; classtype:attempted-recon; sid:200036886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.aayldm.top"; classtype:attempted-recon; sid:200036887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.adldni.top"; classtype:attempted-recon; sid:200036888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.afqzgx.top"; classtype:attempted-recon; sid:200036889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ajxdpg.top"; classtype:attempted-recon; sid:200036890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ansklx.top"; classtype:attempted-recon; sid:200036891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ao0dkn.icu"; classtype:attempted-recon; sid:200036892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.aogild.top"; classtype:attempted-recon; sid:200036893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.bucyvo.top"; classtype:attempted-recon; sid:200036894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.bwxsxf.top"; classtype:attempted-recon; sid:200036895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.cgogay.top"; classtype:attempted-recon; sid:200036896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ctdwug.top"; classtype:attempted-recon; sid:200036897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.cwpgoh.top"; classtype:attempted-recon; sid:200036898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.d5u49w.icu"; classtype:attempted-recon; sid:200036899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.dbezzz.top"; classtype:attempted-recon; sid:200036900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.dbhlbm.top"; classtype:attempted-recon; sid:200036901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.dqbdkl.top"; classtype:attempted-recon; sid:200036902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.drkild.icu"; classtype:attempted-recon; sid:200036903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.e7ie6j.icu"; classtype:attempted-recon; sid:200036904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.eahbrm.top"; classtype:attempted-recon; sid:200036905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.erkdnv.top"; classtype:attempted-recon; sid:200036906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.fn0aqh.icu"; classtype:attempted-recon; sid:200036907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.hblfhq.top"; classtype:attempted-recon; sid:200036908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.hefhjq.icu"; classtype:attempted-recon; sid:200036909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.hli3b0.icu"; classtype:attempted-recon; sid:200036910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.hlsyku.icu"; classtype:attempted-recon; sid:200036911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.hmziti.top"; classtype:attempted-recon; sid:200036912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.idenyq.top"; classtype:attempted-recon; sid:200036913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.inkblog.ink"; classtype:attempted-recon; sid:200036914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.j3tu3m.icu"; classtype:attempted-recon; sid:200036915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.j77o38.icu"; classtype:attempted-recon; sid:200036916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.jehe99.icu"; classtype:attempted-recon; sid:200036917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.juls8q.icu"; classtype:attempted-recon; sid:200036918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.k3ma2x.icu"; classtype:attempted-recon; sid:200036919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.k9pn0d.icu"; classtype:attempted-recon; sid:200036920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ka83cb.icu"; classtype:attempted-recon; sid:200036921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.kb5b6d.icu"; classtype:attempted-recon; sid:200036922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.kgfkdv.top"; classtype:attempted-recon; sid:200036923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.kvrhdp.top"; classtype:attempted-recon; sid:200036924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.lcazit.top"; classtype:attempted-recon; sid:200036925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.lfyacu.icu"; classtype:attempted-recon; sid:200036926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ljmuov.top"; classtype:attempted-recon; sid:200036927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ll64vg.icu"; classtype:attempted-recon; sid:200036928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.llufip.top"; classtype:attempted-recon; sid:200036929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.lmheln.top"; classtype:attempted-recon; sid:200036930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.lwgayp.top"; classtype:attempted-recon; sid:200036931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.lylxce.top"; classtype:attempted-recon; sid:200036932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.mcltim.top"; classtype:attempted-recon; sid:200036933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.mfx741.icu"; classtype:attempted-recon; sid:200036934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.mgjpjr.top"; classtype:attempted-recon; sid:200036935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.mjdnpt.top"; classtype:attempted-recon; sid:200036936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.nqveqi.top"; classtype:attempted-recon; sid:200036937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.nrhpkc.icu"; classtype:attempted-recon; sid:200036938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.nu57wl.icu"; classtype:attempted-recon; sid:200036939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.nv9dtw.icu"; classtype:attempted-recon; sid:200036940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ojyzcd.top"; classtype:attempted-recon; sid:200036941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.okbpku.icu"; classtype:attempted-recon; sid:200036942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.oppxsj.top"; classtype:attempted-recon; sid:200036943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.or1glf.icu"; classtype:attempted-recon; sid:200036944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.pe14pc.icu"; classtype:attempted-recon; sid:200036945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.psdexq.top"; classtype:attempted-recon; sid:200036946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.psdoni.top"; classtype:attempted-recon; sid:200036947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.pujapd.top"; classtype:attempted-recon; sid:200036948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.pzgoea.top"; classtype:attempted-recon; sid:200036949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.q0s2sm.icu"; classtype:attempted-recon; sid:200036950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.qeaogd.top"; classtype:attempted-recon; sid:200036951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.qnqwcs.icu"; classtype:attempted-recon; sid:200036952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.qpchzg.top"; classtype:attempted-recon; sid:200036953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.qqjjzi.top"; classtype:attempted-recon; sid:200036954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.qvgavp.top"; classtype:attempted-recon; sid:200036955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.rmgomo.top"; classtype:attempted-recon; sid:200036956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.rsxojx.top"; classtype:attempted-recon; sid:200036957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.sawjbk.top"; classtype:attempted-recon; sid:200036958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.srcwhi.top"; classtype:attempted-recon; sid:200036959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.srwwap.top"; classtype:attempted-recon; sid:200036960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.sthtuh.top"; classtype:attempted-recon; sid:200036961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.syeuaw.top"; classtype:attempted-recon; sid:200036962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.tazsl1.icu"; classtype:attempted-recon; sid:200036963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.tbnilj.top"; classtype:attempted-recon; sid:200036964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.tl86n6.icu"; classtype:attempted-recon; sid:200036965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.to5fb9.icu"; classtype:attempted-recon; sid:200036966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.u0c8sn.icu"; classtype:attempted-recon; sid:200036967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.uixah3.icu"; classtype:attempted-recon; sid:200036968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ukesvp.icu"; classtype:attempted-recon; sid:200036969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ukrtxd.top"; classtype:attempted-recon; sid:200036970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.upahh5.icu"; classtype:attempted-recon; sid:200036971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.uxdgpy.top"; classtype:attempted-recon; sid:200036972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.vdpgwm.top"; classtype:attempted-recon; sid:200036973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.vqeyuo.top"; classtype:attempted-recon; sid:200036974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.vspjok.icu"; classtype:attempted-recon; sid:200036975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.vvkdlh.top"; classtype:attempted-recon; sid:200036976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.vxcrlo.top"; classtype:attempted-recon; sid:200036977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.werbdt.top"; classtype:attempted-recon; sid:200036978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.wfirhj.top"; classtype:attempted-recon; sid:200036979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.whnjwr.top"; classtype:attempted-recon; sid:200036980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.witojr.top"; classtype:attempted-recon; sid:200036981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.wmygyx.top"; classtype:attempted-recon; sid:200036982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.wpzqxg.top"; classtype:attempted-recon; sid:200036983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.wxpckc.icu"; classtype:attempted-recon; sid:200036984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.xd1bpn.icu"; classtype:attempted-recon; sid:200036985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.xeygaj.top"; classtype:attempted-recon; sid:200036986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.xgysxo.top"; classtype:attempted-recon; sid:200036987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.xydvkg.top"; classtype:attempted-recon; sid:200036988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.xyuhnm.top"; classtype:attempted-recon; sid:200036989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.xztftf.top"; classtype:attempted-recon; sid:200036990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ymifv0.icu"; classtype:attempted-recon; sid:200036991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.yqasjy.icu"; classtype:attempted-recon; sid:200036992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.yuxvpc.top"; classtype:attempted-recon; sid:200036993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.yvjdgy.top"; classtype:attempted-recon; sid:200036994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.yybtfl.top"; classtype:attempted-recon; sid:200036995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.zhsntm.top"; classtype:attempted-recon; sid:200036996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.zhwpnq.top"; classtype:attempted-recon; sid:200036997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.zovh96.icu"; classtype:attempted-recon; sid:200036998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.zoyqhl.top"; classtype:attempted-recon; sid:200036999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.037768888861.xyz"; classtype:attempted-recon; sid:200037000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.284nxw.icu"; classtype:attempted-recon; sid:200037001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.33hf19.icu"; classtype:attempted-recon; sid:200037002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.473glv.icu"; classtype:attempted-recon; sid:200037003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.4k2dci.icu"; classtype:attempted-recon; sid:200037004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.687cem.icu"; classtype:attempted-recon; sid:200037005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.69bn6b.icu"; classtype:attempted-recon; sid:200037006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.6c7bza.icu"; classtype:attempted-recon; sid:200037007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.6pw2wd.icu"; classtype:attempted-recon; sid:200037008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.6rtqht.icu"; classtype:attempted-recon; sid:200037009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.6t1vk7.icu"; classtype:attempted-recon; sid:200037010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.7a4s96.icu"; classtype:attempted-recon; sid:200037011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.82casa.icu"; classtype:attempted-recon; sid:200037012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.9d24dh.icu"; classtype:attempted-recon; sid:200037013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.9pw3lv.icu"; classtype:attempted-recon; sid:200037014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.9zv0ny.icu"; classtype:attempted-recon; sid:200037015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.aale2a.icu"; classtype:attempted-recon; sid:200037016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.aayldm.top"; classtype:attempted-recon; sid:200037017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.adldni.top"; classtype:attempted-recon; sid:200037018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.afqzgx.top"; classtype:attempted-recon; sid:200037019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ajxdpg.top"; classtype:attempted-recon; sid:200037020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ansklx.top"; classtype:attempted-recon; sid:200037021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ao0dkn.icu"; classtype:attempted-recon; sid:200037022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.aogild.top"; classtype:attempted-recon; sid:200037023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.bucyvo.top"; classtype:attempted-recon; sid:200037024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.bwxsxf.top"; classtype:attempted-recon; sid:200037025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.bxsxvy.top"; classtype:attempted-recon; sid:200037026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.cmudlt.top"; classtype:attempted-recon; sid:200037027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ctdwug.top"; classtype:attempted-recon; sid:200037028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.cwpgoh.top"; classtype:attempted-recon; sid:200037029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.d5u49w.icu"; classtype:attempted-recon; sid:200037030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.dbezzz.top"; classtype:attempted-recon; sid:200037031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.dbhlbm.top"; classtype:attempted-recon; sid:200037032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.dqbdkl.top"; classtype:attempted-recon; sid:200037033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.drkild.icu"; classtype:attempted-recon; sid:200037034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.e7ie6j.icu"; classtype:attempted-recon; sid:200037035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.eahbrm.top"; classtype:attempted-recon; sid:200037036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.erkdnv.top"; classtype:attempted-recon; sid:200037037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.fn0aqh.icu"; classtype:attempted-recon; sid:200037038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.hblfhq.top"; classtype:attempted-recon; sid:200037039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.hefhjq.icu"; classtype:attempted-recon; sid:200037040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.hli3b0.icu"; classtype:attempted-recon; sid:200037041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.hlsyku.icu"; classtype:attempted-recon; sid:200037042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.idenyq.top"; classtype:attempted-recon; sid:200037043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.inkblog.ink"; classtype:attempted-recon; sid:200037044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.j3tu3m.icu"; classtype:attempted-recon; sid:200037045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.j77o38.icu"; classtype:attempted-recon; sid:200037046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.jehe99.icu"; classtype:attempted-recon; sid:200037047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.juls8q.icu"; classtype:attempted-recon; sid:200037048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.k3ma2x.icu"; classtype:attempted-recon; sid:200037049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.k9pn0d.icu"; classtype:attempted-recon; sid:200037050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ka83cb.icu"; classtype:attempted-recon; sid:200037051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.kb5b6d.icu"; classtype:attempted-recon; sid:200037052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.kgfkdv.top"; classtype:attempted-recon; sid:200037053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.krjqpe.top"; classtype:attempted-recon; sid:200037054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.kvrhdp.top"; classtype:attempted-recon; sid:200037055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.lcazit.top"; classtype:attempted-recon; sid:200037056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.lfyacu.icu"; classtype:attempted-recon; sid:200037057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ljmuov.top"; classtype:attempted-recon; sid:200037058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ll64vg.icu"; classtype:attempted-recon; sid:200037059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.llufip.top"; classtype:attempted-recon; sid:200037060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.lmheln.top"; classtype:attempted-recon; sid:200037061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.lylxce.top"; classtype:attempted-recon; sid:200037062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.mcltim.top"; classtype:attempted-recon; sid:200037063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.mfx741.icu"; classtype:attempted-recon; sid:200037064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.mgjpjr.top"; classtype:attempted-recon; sid:200037065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.mjdnpt.top"; classtype:attempted-recon; sid:200037066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.nllyoh.top"; classtype:attempted-recon; sid:200037067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.nqveqi.top"; classtype:attempted-recon; sid:200037068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.nrhpkc.icu"; classtype:attempted-recon; sid:200037069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.nu57wl.icu"; classtype:attempted-recon; sid:200037070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.nv9dtw.icu"; classtype:attempted-recon; sid:200037071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ojyzcd.top"; classtype:attempted-recon; sid:200037072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.okbpku.icu"; classtype:attempted-recon; sid:200037073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.or1glf.icu"; classtype:attempted-recon; sid:200037074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.pe14pc.icu"; classtype:attempted-recon; sid:200037075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.psdexq.top"; classtype:attempted-recon; sid:200037076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.psdoni.top"; classtype:attempted-recon; sid:200037077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.pujapd.top"; classtype:attempted-recon; sid:200037078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.pzgoea.top"; classtype:attempted-recon; sid:200037079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.q0s2sm.icu"; classtype:attempted-recon; sid:200037080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.qclqjo.top"; classtype:attempted-recon; sid:200037081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.qnqwcs.icu"; classtype:attempted-recon; sid:200037082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.qpchzg.top"; classtype:attempted-recon; sid:200037083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.qqjjzi.top"; classtype:attempted-recon; sid:200037084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.rbyycn.top"; classtype:attempted-recon; sid:200037085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.rmgomo.top"; classtype:attempted-recon; sid:200037086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.rsxojx.top"; classtype:attempted-recon; sid:200037087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.sawjbk.top"; classtype:attempted-recon; sid:200037088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.slnb02.icu"; classtype:attempted-recon; sid:200037089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.srcwhi.top"; classtype:attempted-recon; sid:200037090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.sthtuh.top"; classtype:attempted-recon; sid:200037091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.syeuaw.top"; classtype:attempted-recon; sid:200037092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.tazsl1.icu"; classtype:attempted-recon; sid:200037093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.tbnilj.top"; classtype:attempted-recon; sid:200037094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.tl86n6.icu"; classtype:attempted-recon; sid:200037095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.to5fb9.icu"; classtype:attempted-recon; sid:200037096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.u0c8sn.icu"; classtype:attempted-recon; sid:200037097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.uixah3.icu"; classtype:attempted-recon; sid:200037098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ukesvp.icu"; classtype:attempted-recon; sid:200037099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ukrtxd.top"; classtype:attempted-recon; sid:200037100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.upahh5.icu"; classtype:attempted-recon; sid:200037101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.uxdgpy.top"; classtype:attempted-recon; sid:200037102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.vdpgwm.top"; classtype:attempted-recon; sid:200037103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.vqeyuo.top"; classtype:attempted-recon; sid:200037104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.vvkdlh.top"; classtype:attempted-recon; sid:200037105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.vxcrlo.top"; classtype:attempted-recon; sid:200037106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.werbdt.top"; classtype:attempted-recon; sid:200037107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.wfirhj.top"; classtype:attempted-recon; sid:200037108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.whnjwr.top"; classtype:attempted-recon; sid:200037109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.witojr.top"; classtype:attempted-recon; sid:200037110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.wmygyx.top"; classtype:attempted-recon; sid:200037111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.wpzqxg.top"; classtype:attempted-recon; sid:200037112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.wsojbg.icu"; classtype:attempted-recon; sid:200037113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.wxpckc.icu"; classtype:attempted-recon; sid:200037114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.xd1bpn.icu"; classtype:attempted-recon; sid:200037115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.xeygaj.top"; classtype:attempted-recon; sid:200037116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.xgysxo.top"; classtype:attempted-recon; sid:200037117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.xydvkg.top"; classtype:attempted-recon; sid:200037118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.xyuhnm.top"; classtype:attempted-recon; sid:200037119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.xztftf.top"; classtype:attempted-recon; sid:200037120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ymifv0.icu"; classtype:attempted-recon; sid:200037121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.yqasjy.icu"; classtype:attempted-recon; sid:200037122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.yuxvpc.top"; classtype:attempted-recon; sid:200037123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.yvjdgy.top"; classtype:attempted-recon; sid:200037124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.yybtfl.top"; classtype:attempted-recon; sid:200037125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.zhsntm.top"; classtype:attempted-recon; sid:200037126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.zovh96.icu"; classtype:attempted-recon; sid:200037127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.zoyqhl.top"; classtype:attempted-recon; sid:200037128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.037768888861.xyz"; classtype:attempted-recon; sid:200037129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.131452.site"; classtype:attempted-recon; sid:200037130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.284nxw.icu"; classtype:attempted-recon; sid:200037131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.33hf19.icu"; classtype:attempted-recon; sid:200037132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.473glv.icu"; classtype:attempted-recon; sid:200037133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.4k2dci.icu"; classtype:attempted-recon; sid:200037134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.687cem.icu"; classtype:attempted-recon; sid:200037135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.69bn6b.icu"; classtype:attempted-recon; sid:200037136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.6c7bza.icu"; classtype:attempted-recon; sid:200037137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.6pw2wd.icu"; classtype:attempted-recon; sid:200037138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.6rtqht.icu"; classtype:attempted-recon; sid:200037139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.6t1vk7.icu"; classtype:attempted-recon; sid:200037140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.7a4s96.icu"; classtype:attempted-recon; sid:200037141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.82casa.icu"; classtype:attempted-recon; sid:200037142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.9d24dh.icu"; classtype:attempted-recon; sid:200037143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.9pw3lv.icu"; classtype:attempted-recon; sid:200037144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.9zv0ny.icu"; classtype:attempted-recon; sid:200037145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.aale2a.icu"; classtype:attempted-recon; sid:200037146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.aayldm.top"; classtype:attempted-recon; sid:200037147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.adldni.top"; classtype:attempted-recon; sid:200037148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.afqzgx.top"; classtype:attempted-recon; sid:200037149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ajxdpg.top"; classtype:attempted-recon; sid:200037150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ansklx.top"; classtype:attempted-recon; sid:200037151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ao0dkn.icu"; classtype:attempted-recon; sid:200037152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.aogild.top"; classtype:attempted-recon; sid:200037153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.bucyvo.top"; classtype:attempted-recon; sid:200037154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.bwxsxf.top"; classtype:attempted-recon; sid:200037155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.bxsxvy.top"; classtype:attempted-recon; sid:200037156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.cgogay.top"; classtype:attempted-recon; sid:200037157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.cmudlt.top"; classtype:attempted-recon; sid:200037158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ctdwug.top"; classtype:attempted-recon; sid:200037159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.cwpgoh.top"; classtype:attempted-recon; sid:200037160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.d5u49w.icu"; classtype:attempted-recon; sid:200037161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.dbezzz.top"; classtype:attempted-recon; sid:200037162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.dqbdkl.top"; classtype:attempted-recon; sid:200037163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.drkild.icu"; classtype:attempted-recon; sid:200037164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.e7ie6j.icu"; classtype:attempted-recon; sid:200037165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.eahbrm.top"; classtype:attempted-recon; sid:200037166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.enioab.top"; classtype:attempted-recon; sid:200037167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.erkdnv.top"; classtype:attempted-recon; sid:200037168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.fn0aqh.icu"; classtype:attempted-recon; sid:200037169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.hefhjq.icu"; classtype:attempted-recon; sid:200037170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.hli3b0.icu"; classtype:attempted-recon; sid:200037171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.hlsyku.icu"; classtype:attempted-recon; sid:200037172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.hmziti.top"; classtype:attempted-recon; sid:200037173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.idenyq.top"; classtype:attempted-recon; sid:200037174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.inkblog.ink"; classtype:attempted-recon; sid:200037175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.j3tu3m.icu"; classtype:attempted-recon; sid:200037176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.j77o38.icu"; classtype:attempted-recon; sid:200037177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.jehe99.icu"; classtype:attempted-recon; sid:200037178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.juls8q.icu"; classtype:attempted-recon; sid:200037179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.k3ma2x.icu"; classtype:attempted-recon; sid:200037180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.k9pn0d.icu"; classtype:attempted-recon; sid:200037181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ka83cb.icu"; classtype:attempted-recon; sid:200037182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.kb5b6d.icu"; classtype:attempted-recon; sid:200037183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.kgfkdv.top"; classtype:attempted-recon; sid:200037184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.krjqpe.top"; classtype:attempted-recon; sid:200037185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.kvrhdp.top"; classtype:attempted-recon; sid:200037186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.lcazit.top"; classtype:attempted-recon; sid:200037187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.lfyacu.icu"; classtype:attempted-recon; sid:200037188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ljmuov.top"; classtype:attempted-recon; sid:200037189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ll64vg.icu"; classtype:attempted-recon; sid:200037190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.llufip.top"; classtype:attempted-recon; sid:200037191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.lmheln.top"; classtype:attempted-recon; sid:200037192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.lwgayp.top"; classtype:attempted-recon; sid:200037193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.mcltim.top"; classtype:attempted-recon; sid:200037194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.mfx741.icu"; classtype:attempted-recon; sid:200037195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.mgjpjr.top"; classtype:attempted-recon; sid:200037196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.mjdnpt.top"; classtype:attempted-recon; sid:200037197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.nllyoh.top"; classtype:attempted-recon; sid:200037198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.nqveqi.top"; classtype:attempted-recon; sid:200037199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.nrhpkc.icu"; classtype:attempted-recon; sid:200037200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.nu57wl.icu"; classtype:attempted-recon; sid:200037201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.nv9dtw.icu"; classtype:attempted-recon; sid:200037202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ojyzcd.top"; classtype:attempted-recon; sid:200037203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.okbpku.icu"; classtype:attempted-recon; sid:200037204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.oppxsj.top"; classtype:attempted-recon; sid:200037205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.or1glf.icu"; classtype:attempted-recon; sid:200037206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.pe14pc.icu"; classtype:attempted-recon; sid:200037207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.psdexq.top"; classtype:attempted-recon; sid:200037208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.psdoni.top"; classtype:attempted-recon; sid:200037209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.pujapd.top"; classtype:attempted-recon; sid:200037210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.pzgoea.top"; classtype:attempted-recon; sid:200037211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.q0s2sm.icu"; classtype:attempted-recon; sid:200037212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.qclqjo.top"; classtype:attempted-recon; sid:200037213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.qeaogd.top"; classtype:attempted-recon; sid:200037214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.qnqwcs.icu"; classtype:attempted-recon; sid:200037215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.qpchzg.top"; classtype:attempted-recon; sid:200037216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.qqjjzi.top"; classtype:attempted-recon; sid:200037217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.qvgavp.top"; classtype:attempted-recon; sid:200037218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.rbyycn.top"; classtype:attempted-recon; sid:200037219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.rmgomo.top"; classtype:attempted-recon; sid:200037220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.rsxojx.top"; classtype:attempted-recon; sid:200037221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.sawjbk.top"; classtype:attempted-recon; sid:200037222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.slnb02.icu"; classtype:attempted-recon; sid:200037223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.srcwhi.top"; classtype:attempted-recon; sid:200037224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.srwwap.top"; classtype:attempted-recon; sid:200037225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.sthtuh.top"; classtype:attempted-recon; sid:200037226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.syeuaw.top"; classtype:attempted-recon; sid:200037227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.tazsl1.icu"; classtype:attempted-recon; sid:200037228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.tbnilj.top"; classtype:attempted-recon; sid:200037229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.tl86n6.icu"; classtype:attempted-recon; sid:200037230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.to5fb9.icu"; classtype:attempted-recon; sid:200037231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.u0c8sn.icu"; classtype:attempted-recon; sid:200037232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.uixah3.icu"; classtype:attempted-recon; sid:200037233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ukesvp.icu"; classtype:attempted-recon; sid:200037234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ukrtxd.top"; classtype:attempted-recon; sid:200037235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.upahh5.icu"; classtype:attempted-recon; sid:200037236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.uxdgpy.top"; classtype:attempted-recon; sid:200037237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.uxvqzp.top"; classtype:attempted-recon; sid:200037238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.vdpgwm.top"; classtype:attempted-recon; sid:200037239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.vqeyuo.top"; classtype:attempted-recon; sid:200037240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.vspjok.icu"; classtype:attempted-recon; sid:200037241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.vvkdlh.top"; classtype:attempted-recon; sid:200037242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.vxcrlo.top"; classtype:attempted-recon; sid:200037243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.werbdt.top"; classtype:attempted-recon; sid:200037244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.wfirhj.top"; classtype:attempted-recon; sid:200037245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.whnjwr.top"; classtype:attempted-recon; sid:200037246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.witojr.top"; classtype:attempted-recon; sid:200037247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.wpzqxg.top"; classtype:attempted-recon; sid:200037248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.wsojbg.icu"; classtype:attempted-recon; sid:200037249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.wxpckc.icu"; classtype:attempted-recon; sid:200037250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.xd1bpn.icu"; classtype:attempted-recon; sid:200037251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.xeygaj.top"; classtype:attempted-recon; sid:200037252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.xgysxo.top"; classtype:attempted-recon; sid:200037253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.xydvkg.top"; classtype:attempted-recon; sid:200037254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.xyuhnm.top"; classtype:attempted-recon; sid:200037255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.xztftf.top"; classtype:attempted-recon; sid:200037256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ymifv0.icu"; classtype:attempted-recon; sid:200037257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.yqasjy.icu"; classtype:attempted-recon; sid:200037258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.yuxvpc.top"; classtype:attempted-recon; sid:200037259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.yvjdgy.top"; classtype:attempted-recon; sid:200037260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.yybtfl.top"; classtype:attempted-recon; sid:200037261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.zhsntm.top"; classtype:attempted-recon; sid:200037262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.zhwpnq.top"; classtype:attempted-recon; sid:200037263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.zovh96.icu"; classtype:attempted-recon; sid:200037264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.zoyqhl.top"; classtype:attempted-recon; sid:200037265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.037768888861.xyz"; classtype:attempted-recon; sid:200037266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.284nxw.icu"; classtype:attempted-recon; sid:200037267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.33hf19.icu"; classtype:attempted-recon; sid:200037268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.473glv.icu"; classtype:attempted-recon; sid:200037269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.4k2dci.icu"; classtype:attempted-recon; sid:200037270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.687cem.icu"; classtype:attempted-recon; sid:200037271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.69bn6b.icu"; classtype:attempted-recon; sid:200037272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.6c7bza.icu"; classtype:attempted-recon; sid:200037273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.6pw2wd.icu"; classtype:attempted-recon; sid:200037274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.6rtqht.icu"; classtype:attempted-recon; sid:200037275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.6t1vk7.icu"; classtype:attempted-recon; sid:200037276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.7a4s96.icu"; classtype:attempted-recon; sid:200037277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.82casa.icu"; classtype:attempted-recon; sid:200037278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.9d24dh.icu"; classtype:attempted-recon; sid:200037279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.9pw3lv.icu"; classtype:attempted-recon; sid:200037280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.9zv0ny.icu"; classtype:attempted-recon; sid:200037281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.aale2a.icu"; classtype:attempted-recon; sid:200037282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.aayldm.top"; classtype:attempted-recon; sid:200037283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.adldni.top"; classtype:attempted-recon; sid:200037284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.afqzgx.top"; classtype:attempted-recon; sid:200037285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ajxdpg.top"; classtype:attempted-recon; sid:200037286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ansklx.top"; classtype:attempted-recon; sid:200037287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ao0dkn.icu"; classtype:attempted-recon; sid:200037288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.aogild.top"; classtype:attempted-recon; sid:200037289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.bucyvo.top"; classtype:attempted-recon; sid:200037290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.bwxsxf.top"; classtype:attempted-recon; sid:200037291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.cgogay.top"; classtype:attempted-recon; sid:200037292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.cmudlt.top"; classtype:attempted-recon; sid:200037293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ctdwug.top"; classtype:attempted-recon; sid:200037294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.cwpgoh.top"; classtype:attempted-recon; sid:200037295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.d5u49w.icu"; classtype:attempted-recon; sid:200037296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.dbezzz.top"; classtype:attempted-recon; sid:200037297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.dbhlbm.top"; classtype:attempted-recon; sid:200037298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.dqbdkl.top"; classtype:attempted-recon; sid:200037299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.drkild.icu"; classtype:attempted-recon; sid:200037300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.e7ie6j.icu"; classtype:attempted-recon; sid:200037301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.eahbrm.top"; classtype:attempted-recon; sid:200037302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.enioab.top"; classtype:attempted-recon; sid:200037303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.erkdnv.top"; classtype:attempted-recon; sid:200037304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.fn0aqh.icu"; classtype:attempted-recon; sid:200037305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.hblfhq.top"; classtype:attempted-recon; sid:200037306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.hefhjq.icu"; classtype:attempted-recon; sid:200037307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.hli3b0.icu"; classtype:attempted-recon; sid:200037308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.hlsyku.icu"; classtype:attempted-recon; sid:200037309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.hmziti.top"; classtype:attempted-recon; sid:200037310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.idenyq.top"; classtype:attempted-recon; sid:200037311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.inkblog.ink"; classtype:attempted-recon; sid:200037312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.j3tu3m.icu"; classtype:attempted-recon; sid:200037313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.j77o38.icu"; classtype:attempted-recon; sid:200037314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.jehe99.icu"; classtype:attempted-recon; sid:200037315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.juls8q.icu"; classtype:attempted-recon; sid:200037316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.k3ma2x.icu"; classtype:attempted-recon; sid:200037317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.k9pn0d.icu"; classtype:attempted-recon; sid:200037318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ka83cb.icu"; classtype:attempted-recon; sid:200037319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.kb5b6d.icu"; classtype:attempted-recon; sid:200037320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.kgfkdv.top"; classtype:attempted-recon; sid:200037321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.krjqpe.top"; classtype:attempted-recon; sid:200037322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.kvrhdp.top"; classtype:attempted-recon; sid:200037323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.lcazit.top"; classtype:attempted-recon; sid:200037324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.lfyacu.icu"; classtype:attempted-recon; sid:200037325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ljmuov.top"; classtype:attempted-recon; sid:200037326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ll64vg.icu"; classtype:attempted-recon; sid:200037327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.llufip.top"; classtype:attempted-recon; sid:200037328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.lmheln.top"; classtype:attempted-recon; sid:200037329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.lwgayp.top"; classtype:attempted-recon; sid:200037330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.lylxce.top"; classtype:attempted-recon; sid:200037331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.mcltim.top"; classtype:attempted-recon; sid:200037332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.mfx741.icu"; classtype:attempted-recon; sid:200037333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.mgjpjr.top"; classtype:attempted-recon; sid:200037334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.mjdnpt.top"; classtype:attempted-recon; sid:200037335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.nllyoh.top"; classtype:attempted-recon; sid:200037336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.nqveqi.top"; classtype:attempted-recon; sid:200037337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.nrhpkc.icu"; classtype:attempted-recon; sid:200037338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.nu57wl.icu"; classtype:attempted-recon; sid:200037339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.nv9dtw.icu"; classtype:attempted-recon; sid:200037340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ojyzcd.top"; classtype:attempted-recon; sid:200037341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.okbpku.icu"; classtype:attempted-recon; sid:200037342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.oppxsj.top"; classtype:attempted-recon; sid:200037343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.or1glf.icu"; classtype:attempted-recon; sid:200037344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.pe14pc.icu"; classtype:attempted-recon; sid:200037345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.psdexq.top"; classtype:attempted-recon; sid:200037346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.psdoni.top"; classtype:attempted-recon; sid:200037347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.pujapd.top"; classtype:attempted-recon; sid:200037348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.pzgoea.top"; classtype:attempted-recon; sid:200037349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.q0s2sm.icu"; classtype:attempted-recon; sid:200037350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.qclqjo.top"; classtype:attempted-recon; sid:200037351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.qeaogd.top"; classtype:attempted-recon; sid:200037352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.qnqwcs.icu"; classtype:attempted-recon; sid:200037353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.qpchzg.top"; classtype:attempted-recon; sid:200037354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.qqjjzi.top"; classtype:attempted-recon; sid:200037355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.qvgavp.top"; classtype:attempted-recon; sid:200037356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.rbyycn.top"; classtype:attempted-recon; sid:200037357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.rmgomo.top"; classtype:attempted-recon; sid:200037358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.rsxojx.top"; classtype:attempted-recon; sid:200037359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.sawjbk.top"; classtype:attempted-recon; sid:200037360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.srcwhi.top"; classtype:attempted-recon; sid:200037361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.srwwap.top"; classtype:attempted-recon; sid:200037362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.sthtuh.top"; classtype:attempted-recon; sid:200037363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.syeuaw.top"; classtype:attempted-recon; sid:200037364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.tazsl1.icu"; classtype:attempted-recon; sid:200037365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.tbnilj.top"; classtype:attempted-recon; sid:200037366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.tl86n6.icu"; classtype:attempted-recon; sid:200037367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.to5fb9.icu"; classtype:attempted-recon; sid:200037368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.u0c8sn.icu"; classtype:attempted-recon; sid:200037369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.uixah3.icu"; classtype:attempted-recon; sid:200037370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ukesvp.icu"; classtype:attempted-recon; sid:200037371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ukrtxd.top"; classtype:attempted-recon; sid:200037372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.upahh5.icu"; classtype:attempted-recon; sid:200037373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.uxdgpy.top"; classtype:attempted-recon; sid:200037374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.uxvqzp.top"; classtype:attempted-recon; sid:200037375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.vdpgwm.top"; classtype:attempted-recon; sid:200037376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.vqeyuo.top"; classtype:attempted-recon; sid:200037377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.vspjok.icu"; classtype:attempted-recon; sid:200037378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.vvkdlh.top"; classtype:attempted-recon; sid:200037379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.vxcrlo.top"; classtype:attempted-recon; sid:200037380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.werbdt.top"; classtype:attempted-recon; sid:200037381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.wfirhj.top"; classtype:attempted-recon; sid:200037382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.whnjwr.top"; classtype:attempted-recon; sid:200037383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.witojr.top"; classtype:attempted-recon; sid:200037384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.wmygyx.top"; classtype:attempted-recon; sid:200037385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.wpzqxg.top"; classtype:attempted-recon; sid:200037386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.wsojbg.icu"; classtype:attempted-recon; sid:200037387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.wxpckc.icu"; classtype:attempted-recon; sid:200037388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.xd1bpn.icu"; classtype:attempted-recon; sid:200037389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.xeygaj.top"; classtype:attempted-recon; sid:200037390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.xgysxo.top"; classtype:attempted-recon; sid:200037391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.xyuhnm.top"; classtype:attempted-recon; sid:200037392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.xztftf.top"; classtype:attempted-recon; sid:200037393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ymifv0.icu"; classtype:attempted-recon; sid:200037394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.yqasjy.icu"; classtype:attempted-recon; sid:200037395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.yuxvpc.top"; classtype:attempted-recon; sid:200037396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.yvjdgy.top"; classtype:attempted-recon; sid:200037397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.yybtfl.top"; classtype:attempted-recon; sid:200037398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.zhsntm.top"; classtype:attempted-recon; sid:200037399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.zhwpnq.top"; classtype:attempted-recon; sid:200037400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.zovh96.icu"; classtype:attempted-recon; sid:200037401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.zoyqhl.top"; classtype:attempted-recon; sid:200037402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.037768888861.xyz"; classtype:attempted-recon; sid:200037403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.284nxw.icu"; classtype:attempted-recon; sid:200037404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.33hf19.icu"; classtype:attempted-recon; sid:200037405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.473glv.icu"; classtype:attempted-recon; sid:200037406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.4k2dci.icu"; classtype:attempted-recon; sid:200037407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.687cem.icu"; classtype:attempted-recon; sid:200037408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.69bn6b.icu"; classtype:attempted-recon; sid:200037409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.6c7bza.icu"; classtype:attempted-recon; sid:200037410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.6pw2wd.icu"; classtype:attempted-recon; sid:200037411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.6rtqht.icu"; classtype:attempted-recon; sid:200037412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.6t1vk7.icu"; classtype:attempted-recon; sid:200037413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.7a4s96.icu"; classtype:attempted-recon; sid:200037414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.82casa.icu"; classtype:attempted-recon; sid:200037415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.9d24dh.icu"; classtype:attempted-recon; sid:200037416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.9pw3lv.icu"; classtype:attempted-recon; sid:200037417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.9zv0ny.icu"; classtype:attempted-recon; sid:200037418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.aale2a.icu"; classtype:attempted-recon; sid:200037419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.aayldm.top"; classtype:attempted-recon; sid:200037420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.adldni.top"; classtype:attempted-recon; sid:200037421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.afqzgx.top"; classtype:attempted-recon; sid:200037422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ajxdpg.top"; classtype:attempted-recon; sid:200037423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ansklx.top"; classtype:attempted-recon; sid:200037424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ao0dkn.icu"; classtype:attempted-recon; sid:200037425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.aogild.top"; classtype:attempted-recon; sid:200037426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.bucyvo.top"; classtype:attempted-recon; sid:200037427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.bwxsxf.top"; classtype:attempted-recon; sid:200037428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.cgogay.top"; classtype:attempted-recon; sid:200037429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.cmudlt.top"; classtype:attempted-recon; sid:200037430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ctdwug.top"; classtype:attempted-recon; sid:200037431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.cwpgoh.top"; classtype:attempted-recon; sid:200037432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.d5u49w.icu"; classtype:attempted-recon; sid:200037433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.dbezzz.top"; classtype:attempted-recon; sid:200037434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.dbhlbm.top"; classtype:attempted-recon; sid:200037435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.dqbdkl.top"; classtype:attempted-recon; sid:200037436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.drkild.icu"; classtype:attempted-recon; sid:200037437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.e7ie6j.icu"; classtype:attempted-recon; sid:200037438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.eahbrm.top"; classtype:attempted-recon; sid:200037439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.enioab.top"; classtype:attempted-recon; sid:200037440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.erkdnv.top"; classtype:attempted-recon; sid:200037441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.fn0aqh.icu"; classtype:attempted-recon; sid:200037442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.hblfhq.top"; classtype:attempted-recon; sid:200037443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.hefhjq.icu"; classtype:attempted-recon; sid:200037444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.hli3b0.icu"; classtype:attempted-recon; sid:200037445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.hlsyku.icu"; classtype:attempted-recon; sid:200037446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.idenyq.top"; classtype:attempted-recon; sid:200037447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.inkblog.ink"; classtype:attempted-recon; sid:200037448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.j3tu3m.icu"; classtype:attempted-recon; sid:200037449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.j77o38.icu"; classtype:attempted-recon; sid:200037450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.jehe99.icu"; classtype:attempted-recon; sid:200037451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.juls8q.icu"; classtype:attempted-recon; sid:200037452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.k3ma2x.icu"; classtype:attempted-recon; sid:200037453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.k9pn0d.icu"; classtype:attempted-recon; sid:200037454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ka83cb.icu"; classtype:attempted-recon; sid:200037455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.kb5b6d.icu"; classtype:attempted-recon; sid:200037456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.kgfkdv.top"; classtype:attempted-recon; sid:200037457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.krjqpe.top"; classtype:attempted-recon; sid:200037458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.kvrhdp.top"; classtype:attempted-recon; sid:200037459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.lcazit.top"; classtype:attempted-recon; sid:200037460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.lfyacu.icu"; classtype:attempted-recon; sid:200037461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ljmuov.top"; classtype:attempted-recon; sid:200037462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ll64vg.icu"; classtype:attempted-recon; sid:200037463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.llufip.top"; classtype:attempted-recon; sid:200037464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.lmheln.top"; classtype:attempted-recon; sid:200037465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.lwgayp.top"; classtype:attempted-recon; sid:200037466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.lylxce.top"; classtype:attempted-recon; sid:200037467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.mfx741.icu"; classtype:attempted-recon; sid:200037468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.mgjpjr.top"; classtype:attempted-recon; sid:200037469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.mjdnpt.top"; classtype:attempted-recon; sid:200037470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.nllyoh.top"; classtype:attempted-recon; sid:200037471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.nqveqi.top"; classtype:attempted-recon; sid:200037472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.nrhpkc.icu"; classtype:attempted-recon; sid:200037473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.nu57wl.icu"; classtype:attempted-recon; sid:200037474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.nv9dtw.icu"; classtype:attempted-recon; sid:200037475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ojyzcd.top"; classtype:attempted-recon; sid:200037476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.okbpku.icu"; classtype:attempted-recon; sid:200037477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.oppxsj.top"; classtype:attempted-recon; sid:200037478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.or1glf.icu"; classtype:attempted-recon; sid:200037479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.pe14pc.icu"; classtype:attempted-recon; sid:200037480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.psdexq.top"; classtype:attempted-recon; sid:200037481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.pujapd.top"; classtype:attempted-recon; sid:200037482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.pzgoea.top"; classtype:attempted-recon; sid:200037483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.q0s2sm.icu"; classtype:attempted-recon; sid:200037484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.qclqjo.top"; classtype:attempted-recon; sid:200037485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.qeaogd.top"; classtype:attempted-recon; sid:200037486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.qnqwcs.icu"; classtype:attempted-recon; sid:200037487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.qpchzg.top"; classtype:attempted-recon; sid:200037488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.qqjjzi.top"; classtype:attempted-recon; sid:200037489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.qvgavp.top"; classtype:attempted-recon; sid:200037490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.rbyycn.top"; classtype:attempted-recon; sid:200037491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.rmgomo.top"; classtype:attempted-recon; sid:200037492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.rsxojx.top"; classtype:attempted-recon; sid:200037493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.sawjbk.top"; classtype:attempted-recon; sid:200037494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.slnb02.icu"; classtype:attempted-recon; sid:200037495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.srcwhi.top"; classtype:attempted-recon; sid:200037496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.srwwap.top"; classtype:attempted-recon; sid:200037497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.sthtuh.top"; classtype:attempted-recon; sid:200037498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.syeuaw.top"; classtype:attempted-recon; sid:200037499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.tbnilj.top"; classtype:attempted-recon; sid:200037500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.tl86n6.icu"; classtype:attempted-recon; sid:200037501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.to5fb9.icu"; classtype:attempted-recon; sid:200037502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.u0c8sn.icu"; classtype:attempted-recon; sid:200037503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.uixah3.icu"; classtype:attempted-recon; sid:200037504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ukesvp.icu"; classtype:attempted-recon; sid:200037505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ukrtxd.top"; classtype:attempted-recon; sid:200037506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.upahh5.icu"; classtype:attempted-recon; sid:200037507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.uxdgpy.top"; classtype:attempted-recon; sid:200037508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.uxvqzp.top"; classtype:attempted-recon; sid:200037509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.vdpgwm.top"; classtype:attempted-recon; sid:200037510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.vqeyuo.top"; classtype:attempted-recon; sid:200037511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.vvkdlh.top"; classtype:attempted-recon; sid:200037512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.vxcrlo.top"; classtype:attempted-recon; sid:200037513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.werbdt.top"; classtype:attempted-recon; sid:200037514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.wfirhj.top"; classtype:attempted-recon; sid:200037515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.whnjwr.top"; classtype:attempted-recon; sid:200037516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.witojr.top"; classtype:attempted-recon; sid:200037517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.wmygyx.top"; classtype:attempted-recon; sid:200037518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.wpzqxg.top"; classtype:attempted-recon; sid:200037519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.wsojbg.icu"; classtype:attempted-recon; sid:200037520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.xd1bpn.icu"; classtype:attempted-recon; sid:200037521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.xeygaj.top"; classtype:attempted-recon; sid:200037522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.xgysxo.top"; classtype:attempted-recon; sid:200037523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.xyuhnm.top"; classtype:attempted-recon; sid:200037524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ymifv0.icu"; classtype:attempted-recon; sid:200037525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.yqasjy.icu"; classtype:attempted-recon; sid:200037526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.yuxvpc.top"; classtype:attempted-recon; sid:200037527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.yvjdgy.top"; classtype:attempted-recon; sid:200037528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.yybtfl.top"; classtype:attempted-recon; sid:200037529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.zhsntm.top"; classtype:attempted-recon; sid:200037530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.zhwpnq.top"; classtype:attempted-recon; sid:200037531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.zovh96.icu"; classtype:attempted-recon; sid:200037532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.zoyqhl.top"; classtype:attempted-recon; sid:200037533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.037768888861.xyz"; classtype:attempted-recon; sid:200037534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.284nxw.icu"; classtype:attempted-recon; sid:200037535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.33hf19.icu"; classtype:attempted-recon; sid:200037536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.473glv.icu"; classtype:attempted-recon; sid:200037537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.4k2dci.icu"; classtype:attempted-recon; sid:200037538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.687cem.icu"; classtype:attempted-recon; sid:200037539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.69bn6b.icu"; classtype:attempted-recon; sid:200037540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.6c7bza.icu"; classtype:attempted-recon; sid:200037541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.6pw2wd.icu"; classtype:attempted-recon; sid:200037542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.6rtqht.icu"; classtype:attempted-recon; sid:200037543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.6t1vk7.icu"; classtype:attempted-recon; sid:200037544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.7a4s96.icu"; classtype:attempted-recon; sid:200037545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.82casa.icu"; classtype:attempted-recon; sid:200037546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.9d24dh.icu"; classtype:attempted-recon; sid:200037547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.9pw3lv.icu"; classtype:attempted-recon; sid:200037548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.9zv0ny.icu"; classtype:attempted-recon; sid:200037549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.aale2a.icu"; classtype:attempted-recon; sid:200037550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.aayldm.top"; classtype:attempted-recon; sid:200037551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.adldni.top"; classtype:attempted-recon; sid:200037552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.afqzgx.top"; classtype:attempted-recon; sid:200037553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ajxdpg.top"; classtype:attempted-recon; sid:200037554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ansklx.top"; classtype:attempted-recon; sid:200037555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ao0dkn.icu"; classtype:attempted-recon; sid:200037556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.aogild.top"; classtype:attempted-recon; sid:200037557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.bucyvo.top"; classtype:attempted-recon; sid:200037558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.bwxsxf.top"; classtype:attempted-recon; sid:200037559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.bxsxvy.top"; classtype:attempted-recon; sid:200037560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.cgogay.top"; classtype:attempted-recon; sid:200037561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.cmudlt.top"; classtype:attempted-recon; sid:200037562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ctdwug.top"; classtype:attempted-recon; sid:200037563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.cwpgoh.top"; classtype:attempted-recon; sid:200037564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.d5u49w.icu"; classtype:attempted-recon; sid:200037565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.dbhlbm.top"; classtype:attempted-recon; sid:200037566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.dqbdkl.top"; classtype:attempted-recon; sid:200037567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.drkild.icu"; classtype:attempted-recon; sid:200037568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.e7ie6j.icu"; classtype:attempted-recon; sid:200037569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.eahbrm.top"; classtype:attempted-recon; sid:200037570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.enioab.top"; classtype:attempted-recon; sid:200037571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.erkdnv.top"; classtype:attempted-recon; sid:200037572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.fn0aqh.icu"; classtype:attempted-recon; sid:200037573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.hblfhq.top"; classtype:attempted-recon; sid:200037574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.hefhjq.icu"; classtype:attempted-recon; sid:200037575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.hli3b0.icu"; classtype:attempted-recon; sid:200037576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.hlsyku.icu"; classtype:attempted-recon; sid:200037577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.hmziti.top"; classtype:attempted-recon; sid:200037578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.idenyq.top"; classtype:attempted-recon; sid:200037579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.inkblog.ink"; classtype:attempted-recon; sid:200037580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.j3tu3m.icu"; classtype:attempted-recon; sid:200037581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.j77o38.icu"; classtype:attempted-recon; sid:200037582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.jehe99.icu"; classtype:attempted-recon; sid:200037583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.juls8q.icu"; classtype:attempted-recon; sid:200037584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.k3ma2x.icu"; classtype:attempted-recon; sid:200037585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.k9pn0d.icu"; classtype:attempted-recon; sid:200037586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ka83cb.icu"; classtype:attempted-recon; sid:200037587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.kb5b6d.icu"; classtype:attempted-recon; sid:200037588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.kgfkdv.top"; classtype:attempted-recon; sid:200037589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.krjqpe.top"; classtype:attempted-recon; sid:200037590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.kvrhdp.top"; classtype:attempted-recon; sid:200037591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.lcazit.top"; classtype:attempted-recon; sid:200037592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.lfyacu.icu"; classtype:attempted-recon; sid:200037593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ljmuov.top"; classtype:attempted-recon; sid:200037594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ll64vg.icu"; classtype:attempted-recon; sid:200037595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.llufip.top"; classtype:attempted-recon; sid:200037596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.lmheln.top"; classtype:attempted-recon; sid:200037597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.lwgayp.top"; classtype:attempted-recon; sid:200037598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.lylxce.top"; classtype:attempted-recon; sid:200037599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.mcltim.top"; classtype:attempted-recon; sid:200037600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.mfx741.icu"; classtype:attempted-recon; sid:200037601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.mgjpjr.top"; classtype:attempted-recon; sid:200037602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.mjdnpt.top"; classtype:attempted-recon; sid:200037603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.nllyoh.top"; classtype:attempted-recon; sid:200037604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.nqveqi.top"; classtype:attempted-recon; sid:200037605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.nrhpkc.icu"; classtype:attempted-recon; sid:200037606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.nu57wl.icu"; classtype:attempted-recon; sid:200037607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.nv9dtw.icu"; classtype:attempted-recon; sid:200037608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ojyzcd.top"; classtype:attempted-recon; sid:200037609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.okbpku.icu"; classtype:attempted-recon; sid:200037610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.oppxsj.top"; classtype:attempted-recon; sid:200037611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.or1glf.icu"; classtype:attempted-recon; sid:200037612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.pe14pc.icu"; classtype:attempted-recon; sid:200037613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.psdexq.top"; classtype:attempted-recon; sid:200037614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.psdoni.top"; classtype:attempted-recon; sid:200037615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.pujapd.top"; classtype:attempted-recon; sid:200037616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.pzgoea.top"; classtype:attempted-recon; sid:200037617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.q0s2sm.icu"; classtype:attempted-recon; sid:200037618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.qclqjo.top"; classtype:attempted-recon; sid:200037619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.qeaogd.top"; classtype:attempted-recon; sid:200037620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.qnqwcs.icu"; classtype:attempted-recon; sid:200037621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.qpchzg.top"; classtype:attempted-recon; sid:200037622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.qqjjzi.top"; classtype:attempted-recon; sid:200037623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.rbyycn.top"; classtype:attempted-recon; sid:200037624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.rsxojx.top"; classtype:attempted-recon; sid:200037625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.sawjbk.top"; classtype:attempted-recon; sid:200037626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.slnb02.icu"; classtype:attempted-recon; sid:200037627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.srcwhi.top"; classtype:attempted-recon; sid:200037628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.srwwap.top"; classtype:attempted-recon; sid:200037629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.sthtuh.top"; classtype:attempted-recon; sid:200037630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.syeuaw.top"; classtype:attempted-recon; sid:200037631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.tazsl1.icu"; classtype:attempted-recon; sid:200037632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.tbnilj.top"; classtype:attempted-recon; sid:200037633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.tl86n6.icu"; classtype:attempted-recon; sid:200037634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.to5fb9.icu"; classtype:attempted-recon; sid:200037635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.u0c8sn.icu"; classtype:attempted-recon; sid:200037636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.uixah3.icu"; classtype:attempted-recon; sid:200037637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ukesvp.icu"; classtype:attempted-recon; sid:200037638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ukrtxd.top"; classtype:attempted-recon; sid:200037639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.upahh5.icu"; classtype:attempted-recon; sid:200037640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.uxdgpy.top"; classtype:attempted-recon; sid:200037641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.vads.fun"; classtype:attempted-recon; sid:200037642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.vdpgwm.top"; classtype:attempted-recon; sid:200037643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.vqeyuo.top"; classtype:attempted-recon; sid:200037644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.vvkdlh.top"; classtype:attempted-recon; sid:200037645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.vxcrlo.top"; classtype:attempted-recon; sid:200037646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.werbdt.top"; classtype:attempted-recon; sid:200037647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.wfirhj.top"; classtype:attempted-recon; sid:200037648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.whnjwr.top"; classtype:attempted-recon; sid:200037649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.witojr.top"; classtype:attempted-recon; sid:200037650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.wmygyx.top"; classtype:attempted-recon; sid:200037651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.wpzqxg.top"; classtype:attempted-recon; sid:200037652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.wsojbg.icu"; classtype:attempted-recon; sid:200037653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.xd1bpn.icu"; classtype:attempted-recon; sid:200037654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.xeygaj.top"; classtype:attempted-recon; sid:200037655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.xgysxo.top"; classtype:attempted-recon; sid:200037656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.xyuhnm.top"; classtype:attempted-recon; sid:200037657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.xztftf.top"; classtype:attempted-recon; sid:200037658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ymifv0.icu"; classtype:attempted-recon; sid:200037659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.yqasjy.icu"; classtype:attempted-recon; sid:200037660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.yuxvpc.top"; classtype:attempted-recon; sid:200037661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.yvjdgy.top"; classtype:attempted-recon; sid:200037662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.zhsntm.top"; classtype:attempted-recon; sid:200037663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.zhwpnq.top"; classtype:attempted-recon; sid:200037664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.zoyqhl.top"; classtype:attempted-recon; sid:200037665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.037768888861.xyz"; classtype:attempted-recon; sid:200037666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.284nxw.icu"; classtype:attempted-recon; sid:200037667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.33hf19.icu"; classtype:attempted-recon; sid:200037668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.473glv.icu"; classtype:attempted-recon; sid:200037669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.4k2dci.icu"; classtype:attempted-recon; sid:200037670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.687cem.icu"; classtype:attempted-recon; sid:200037671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.69bn6b.icu"; classtype:attempted-recon; sid:200037672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.6c7bza.icu"; classtype:attempted-recon; sid:200037673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.6pw2wd.icu"; classtype:attempted-recon; sid:200037674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.6rtqht.icu"; classtype:attempted-recon; sid:200037675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.6t1vk7.icu"; classtype:attempted-recon; sid:200037676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.7a4s96.icu"; classtype:attempted-recon; sid:200037677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.82casa.icu"; classtype:attempted-recon; sid:200037678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.9d24dh.icu"; classtype:attempted-recon; sid:200037679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.9pw3lv.icu"; classtype:attempted-recon; sid:200037680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.9zv0ny.icu"; classtype:attempted-recon; sid:200037681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.aale2a.icu"; classtype:attempted-recon; sid:200037682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.aayldm.top"; classtype:attempted-recon; sid:200037683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.adldni.top"; classtype:attempted-recon; sid:200037684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.afqzgx.top"; classtype:attempted-recon; sid:200037685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ajxdpg.top"; classtype:attempted-recon; sid:200037686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ansklx.top"; classtype:attempted-recon; sid:200037687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ao0dkn.icu"; classtype:attempted-recon; sid:200037688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.aogild.top"; classtype:attempted-recon; sid:200037689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.bucyvo.top"; classtype:attempted-recon; sid:200037690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.bwxsxf.top"; classtype:attempted-recon; sid:200037691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.bxsxvy.top"; classtype:attempted-recon; sid:200037692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.cgogay.top"; classtype:attempted-recon; sid:200037693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.cmudlt.top"; classtype:attempted-recon; sid:200037694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ctdwug.top"; classtype:attempted-recon; sid:200037695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.cwpgoh.top"; classtype:attempted-recon; sid:200037696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.d5u49w.icu"; classtype:attempted-recon; sid:200037697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.dbezzz.top"; classtype:attempted-recon; sid:200037698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.dbhlbm.top"; classtype:attempted-recon; sid:200037699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.dqbdkl.top"; classtype:attempted-recon; sid:200037700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.drkild.icu"; classtype:attempted-recon; sid:200037701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.e7ie6j.icu"; classtype:attempted-recon; sid:200037702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.enioab.top"; classtype:attempted-recon; sid:200037703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.erkdnv.top"; classtype:attempted-recon; sid:200037704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.fn0aqh.icu"; classtype:attempted-recon; sid:200037705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.hblfhq.top"; classtype:attempted-recon; sid:200037706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.hefhjq.icu"; classtype:attempted-recon; sid:200037707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.hli3b0.icu"; classtype:attempted-recon; sid:200037708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.hlsyku.icu"; classtype:attempted-recon; sid:200037709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.idenyq.top"; classtype:attempted-recon; sid:200037710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.inkblog.ink"; classtype:attempted-recon; sid:200037711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.j3tu3m.icu"; classtype:attempted-recon; sid:200037712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.j77o38.icu"; classtype:attempted-recon; sid:200037713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.jehe99.icu"; classtype:attempted-recon; sid:200037714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.juls8q.icu"; classtype:attempted-recon; sid:200037715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.k3ma2x.icu"; classtype:attempted-recon; sid:200037716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.k9pn0d.icu"; classtype:attempted-recon; sid:200037717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ka83cb.icu"; classtype:attempted-recon; sid:200037718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.kb5b6d.icu"; classtype:attempted-recon; sid:200037719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.kgfkdv.top"; classtype:attempted-recon; sid:200037720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.krjqpe.top"; classtype:attempted-recon; sid:200037721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.kvrhdp.top"; classtype:attempted-recon; sid:200037722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.lcazit.top"; classtype:attempted-recon; sid:200037723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.lfyacu.icu"; classtype:attempted-recon; sid:200037724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ljmuov.top"; classtype:attempted-recon; sid:200037725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ll64vg.icu"; classtype:attempted-recon; sid:200037726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.llufip.top"; classtype:attempted-recon; sid:200037727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.lmheln.top"; classtype:attempted-recon; sid:200037728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.lwgayp.top"; classtype:attempted-recon; sid:200037729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.lylxce.top"; classtype:attempted-recon; sid:200037730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.mcltim.top"; classtype:attempted-recon; sid:200037731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.mfx741.icu"; classtype:attempted-recon; sid:200037732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.mgjpjr.top"; classtype:attempted-recon; sid:200037733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.mjdnpt.top"; classtype:attempted-recon; sid:200037734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.nllyoh.top"; classtype:attempted-recon; sid:200037735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.nqveqi.top"; classtype:attempted-recon; sid:200037736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.nrhpkc.icu"; classtype:attempted-recon; sid:200037737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.nu57wl.icu"; classtype:attempted-recon; sid:200037738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.nv9dtw.icu"; classtype:attempted-recon; sid:200037739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ojyzcd.top"; classtype:attempted-recon; sid:200037740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.okbpku.icu"; classtype:attempted-recon; sid:200037741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.oppxsj.top"; classtype:attempted-recon; sid:200037742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.or1glf.icu"; classtype:attempted-recon; sid:200037743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.pe14pc.icu"; classtype:attempted-recon; sid:200037744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.psdexq.top"; classtype:attempted-recon; sid:200037745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.psdoni.top"; classtype:attempted-recon; sid:200037746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.pujapd.top"; classtype:attempted-recon; sid:200037747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.pzgoea.top"; classtype:attempted-recon; sid:200037748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.q0s2sm.icu"; classtype:attempted-recon; sid:200037749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.qclqjo.top"; classtype:attempted-recon; sid:200037750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.qeaogd.top"; classtype:attempted-recon; sid:200037751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.qnqwcs.icu"; classtype:attempted-recon; sid:200037752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.qpchzg.top"; classtype:attempted-recon; sid:200037753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.qqjjzi.top"; classtype:attempted-recon; sid:200037754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.qvgavp.top"; classtype:attempted-recon; sid:200037755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.rmgomo.top"; classtype:attempted-recon; sid:200037756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.rsxojx.top"; classtype:attempted-recon; sid:200037757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.sawjbk.top"; classtype:attempted-recon; sid:200037758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.slnb02.icu"; classtype:attempted-recon; sid:200037759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.srcwhi.top"; classtype:attempted-recon; sid:200037760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.srwwap.top"; classtype:attempted-recon; sid:200037761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.sthtuh.top"; classtype:attempted-recon; sid:200037762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.syeuaw.top"; classtype:attempted-recon; sid:200037763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.tazsl1.icu"; classtype:attempted-recon; sid:200037764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.tbnilj.top"; classtype:attempted-recon; sid:200037765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.tl86n6.icu"; classtype:attempted-recon; sid:200037766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.to5fb9.icu"; classtype:attempted-recon; sid:200037767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.u0c8sn.icu"; classtype:attempted-recon; sid:200037768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.uixah3.icu"; classtype:attempted-recon; sid:200037769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ukrtxd.top"; classtype:attempted-recon; sid:200037770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.upahh5.icu"; classtype:attempted-recon; sid:200037771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.uxdgpy.top"; classtype:attempted-recon; sid:200037772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.uxvqzp.top"; classtype:attempted-recon; sid:200037773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.vdpgwm.top"; classtype:attempted-recon; sid:200037774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.vqeyuo.top"; classtype:attempted-recon; sid:200037775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.vspjok.icu"; classtype:attempted-recon; sid:200037776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.vvkdlh.top"; classtype:attempted-recon; sid:200037777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.vxcrlo.top"; classtype:attempted-recon; sid:200037778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.werbdt.top"; classtype:attempted-recon; sid:200037779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.wfirhj.top"; classtype:attempted-recon; sid:200037780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.whnjwr.top"; classtype:attempted-recon; sid:200037781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.witojr.top"; classtype:attempted-recon; sid:200037782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.wmygyx.top"; classtype:attempted-recon; sid:200037783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.wpzqxg.top"; classtype:attempted-recon; sid:200037784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.wsojbg.icu"; classtype:attempted-recon; sid:200037785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.wxpckc.icu"; classtype:attempted-recon; sid:200037786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.xd1bpn.icu"; classtype:attempted-recon; sid:200037787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.xeygaj.top"; classtype:attempted-recon; sid:200037788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.xgysxo.top"; classtype:attempted-recon; sid:200037789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.xydvkg.top"; classtype:attempted-recon; sid:200037790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.xyuhnm.top"; classtype:attempted-recon; sid:200037791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.xztftf.top"; classtype:attempted-recon; sid:200037792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.ymifv0.icu"; classtype:attempted-recon; sid:200037793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.yqasjy.icu"; classtype:attempted-recon; sid:200037794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.yuxvpc.top"; classtype:attempted-recon; sid:200037795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.yvjdgy.top"; classtype:attempted-recon; sid:200037796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.yybtfl.top"; classtype:attempted-recon; sid:200037797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.zhsntm.top"; classtype:attempted-recon; sid:200037798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.zhwpnq.top"; classtype:attempted-recon; sid:200037799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvccasevi.vivevceevnavsa.zovh96.icu"; classtype:attempted-recon; sid:200037800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.037768888861.xyz"; classtype:attempted-recon; sid:200037801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.284nxw.icu"; classtype:attempted-recon; sid:200037802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.33hf19.icu"; classtype:attempted-recon; sid:200037803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.473glv.icu"; classtype:attempted-recon; sid:200037804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.4k2dci.icu"; classtype:attempted-recon; sid:200037805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.687cem.icu"; classtype:attempted-recon; sid:200037806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.69bn6b.icu"; classtype:attempted-recon; sid:200037807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.6c7bza.icu"; classtype:attempted-recon; sid:200037808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.6pw2wd.icu"; classtype:attempted-recon; sid:200037809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.6rtqht.icu"; classtype:attempted-recon; sid:200037810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.6t1vk7.icu"; classtype:attempted-recon; sid:200037811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.7a4s96.icu"; classtype:attempted-recon; sid:200037812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.82casa.icu"; classtype:attempted-recon; sid:200037813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.9d24dh.icu"; classtype:attempted-recon; sid:200037814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.9pw3lv.icu"; classtype:attempted-recon; sid:200037815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.9zv0ny.icu"; classtype:attempted-recon; sid:200037816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.aale2a.icu"; classtype:attempted-recon; sid:200037817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.aayldm.top"; classtype:attempted-recon; sid:200037818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.adldni.top"; classtype:attempted-recon; sid:200037819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.afqzgx.top"; classtype:attempted-recon; sid:200037820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ajxdpg.top"; classtype:attempted-recon; sid:200037821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ansklx.top"; classtype:attempted-recon; sid:200037822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ao0dkn.icu"; classtype:attempted-recon; sid:200037823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.aogild.top"; classtype:attempted-recon; sid:200037824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.bucyvo.top"; classtype:attempted-recon; sid:200037825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.bwxsxf.top"; classtype:attempted-recon; sid:200037826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.bxsxvy.top"; classtype:attempted-recon; sid:200037827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.cairaoke.tech"; classtype:attempted-recon; sid:200037828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.cgogay.top"; classtype:attempted-recon; sid:200037829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.cmudlt.top"; classtype:attempted-recon; sid:200037830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ctdwug.top"; classtype:attempted-recon; sid:200037831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.cwpgoh.top"; classtype:attempted-recon; sid:200037832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.d5u49w.icu"; classtype:attempted-recon; sid:200037833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.dbezzz.top"; classtype:attempted-recon; sid:200037834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.dbhlbm.top"; classtype:attempted-recon; sid:200037835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.dqbdkl.top"; classtype:attempted-recon; sid:200037836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.drkild.icu"; classtype:attempted-recon; sid:200037837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.e7ie6j.icu"; classtype:attempted-recon; sid:200037838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.eahbrm.top"; classtype:attempted-recon; sid:200037839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.enioab.top"; classtype:attempted-recon; sid:200037840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.erkdnv.top"; classtype:attempted-recon; sid:200037841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.fn0aqh.icu"; classtype:attempted-recon; sid:200037842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.hblfhq.top"; classtype:attempted-recon; sid:200037843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.hefhjq.icu"; classtype:attempted-recon; sid:200037844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.hli3b0.icu"; classtype:attempted-recon; sid:200037845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.hlsyku.icu"; classtype:attempted-recon; sid:200037846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.hmziti.top"; classtype:attempted-recon; sid:200037847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.idenyq.top"; classtype:attempted-recon; sid:200037848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.inkblog.ink"; classtype:attempted-recon; sid:200037849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.j3tu3m.icu"; classtype:attempted-recon; sid:200037850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.j77o38.icu"; classtype:attempted-recon; sid:200037851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.jehe99.icu"; classtype:attempted-recon; sid:200037852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.juls8q.icu"; classtype:attempted-recon; sid:200037853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.k3ma2x.icu"; classtype:attempted-recon; sid:200037854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.k9pn0d.icu"; classtype:attempted-recon; sid:200037855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ka83cb.icu"; classtype:attempted-recon; sid:200037856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.kgfkdv.top"; classtype:attempted-recon; sid:200037857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.krjqpe.top"; classtype:attempted-recon; sid:200037858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.kvrhdp.top"; classtype:attempted-recon; sid:200037859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.lcazit.top"; classtype:attempted-recon; sid:200037860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.lfyacu.icu"; classtype:attempted-recon; sid:200037861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ljmuov.top"; classtype:attempted-recon; sid:200037862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ll64vg.icu"; classtype:attempted-recon; sid:200037863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.llufip.top"; classtype:attempted-recon; sid:200037864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.lmheln.top"; classtype:attempted-recon; sid:200037865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.lwgayp.top"; classtype:attempted-recon; sid:200037866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.lylxce.top"; classtype:attempted-recon; sid:200037867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.mcltim.top"; classtype:attempted-recon; sid:200037868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.mfx741.icu"; classtype:attempted-recon; sid:200037869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.nllyoh.top"; classtype:attempted-recon; sid:200037870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.nqveqi.top"; classtype:attempted-recon; sid:200037871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.nrhpkc.icu"; classtype:attempted-recon; sid:200037872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.nu57wl.icu"; classtype:attempted-recon; sid:200037873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.nv9dtw.icu"; classtype:attempted-recon; sid:200037874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ojyzcd.top"; classtype:attempted-recon; sid:200037875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.okbpku.icu"; classtype:attempted-recon; sid:200037876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.oppxsj.top"; classtype:attempted-recon; sid:200037877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.pe14pc.icu"; classtype:attempted-recon; sid:200037878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.psdexq.top"; classtype:attempted-recon; sid:200037879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.psdoni.top"; classtype:attempted-recon; sid:200037880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.pujapd.top"; classtype:attempted-recon; sid:200037881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.pzgoea.top"; classtype:attempted-recon; sid:200037882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.qnqwcs.icu"; classtype:attempted-recon; sid:200037883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.qpchzg.top"; classtype:attempted-recon; sid:200037884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.qqjjzi.top"; classtype:attempted-recon; sid:200037885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.qvgavp.top"; classtype:attempted-recon; sid:200037886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.rbyycn.top"; classtype:attempted-recon; sid:200037887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.rmgomo.top"; classtype:attempted-recon; sid:200037888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.rsxojx.top"; classtype:attempted-recon; sid:200037889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.sawjbk.top"; classtype:attempted-recon; sid:200037890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.slnb02.icu"; classtype:attempted-recon; sid:200037891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.srcwhi.top"; classtype:attempted-recon; sid:200037892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.srwwap.top"; classtype:attempted-recon; sid:200037893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.sthtuh.top"; classtype:attempted-recon; sid:200037894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.tazsl1.icu"; classtype:attempted-recon; sid:200037895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.tbnilj.top"; classtype:attempted-recon; sid:200037896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.tl86n6.icu"; classtype:attempted-recon; sid:200037897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.u0c8sn.icu"; classtype:attempted-recon; sid:200037898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ukesvp.icu"; classtype:attempted-recon; sid:200037899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ukrtxd.top"; classtype:attempted-recon; sid:200037900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.upahh5.icu"; classtype:attempted-recon; sid:200037901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.uxdgpy.top"; classtype:attempted-recon; sid:200037902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.uxvqzp.top"; classtype:attempted-recon; sid:200037903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.vdpgwm.top"; classtype:attempted-recon; sid:200037904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.vqeyuo.top"; classtype:attempted-recon; sid:200037905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.vspjok.icu"; classtype:attempted-recon; sid:200037906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.vvkdlh.top"; classtype:attempted-recon; sid:200037907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.vxcrlo.top"; classtype:attempted-recon; sid:200037908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.werbdt.top"; classtype:attempted-recon; sid:200037909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.wfirhj.top"; classtype:attempted-recon; sid:200037910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.whnjwr.top"; classtype:attempted-recon; sid:200037911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.witojr.top"; classtype:attempted-recon; sid:200037912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.wmygyx.top"; classtype:attempted-recon; sid:200037913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.wpzqxg.top"; classtype:attempted-recon; sid:200037914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.wsojbg.icu"; classtype:attempted-recon; sid:200037915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.wxpckc.icu"; classtype:attempted-recon; sid:200037916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.xd1bpn.icu"; classtype:attempted-recon; sid:200037917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.xeygaj.top"; classtype:attempted-recon; sid:200037918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.xgysxo.top"; classtype:attempted-recon; sid:200037919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.xydvkg.top"; classtype:attempted-recon; sid:200037920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.xyuhnm.top"; classtype:attempted-recon; sid:200037921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.xztftf.top"; classtype:attempted-recon; sid:200037922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ymifv0.icu"; classtype:attempted-recon; sid:200037923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.yqasjy.icu"; classtype:attempted-recon; sid:200037924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.yvjdgy.top"; classtype:attempted-recon; sid:200037925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.yybtfl.top"; classtype:attempted-recon; sid:200037926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.zhsntm.top"; classtype:attempted-recon; sid:200037927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.zhwpnq.top"; classtype:attempted-recon; sid:200037928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.zovh96.icu"; classtype:attempted-recon; sid:200037929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.zoyqhl.top"; classtype:attempted-recon; sid:200037930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.037768888861.xyz"; classtype:attempted-recon; sid:200037931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.284nxw.icu"; classtype:attempted-recon; sid:200037932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.33hf19.icu"; classtype:attempted-recon; sid:200037933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.473glv.icu"; classtype:attempted-recon; sid:200037934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.4k2dci.icu"; classtype:attempted-recon; sid:200037935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.687cem.icu"; classtype:attempted-recon; sid:200037936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.69bn6b.icu"; classtype:attempted-recon; sid:200037937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.6c7bza.icu"; classtype:attempted-recon; sid:200037938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.6pw2wd.icu"; classtype:attempted-recon; sid:200037939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.6rtqht.icu"; classtype:attempted-recon; sid:200037940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.6t1vk7.icu"; classtype:attempted-recon; sid:200037941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.7a4s96.icu"; classtype:attempted-recon; sid:200037942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.82casa.icu"; classtype:attempted-recon; sid:200037943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.9d24dh.icu"; classtype:attempted-recon; sid:200037944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.9pw3lv.icu"; classtype:attempted-recon; sid:200037945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.9zv0ny.icu"; classtype:attempted-recon; sid:200037946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.aale2a.icu"; classtype:attempted-recon; sid:200037947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.aayldm.top"; classtype:attempted-recon; sid:200037948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.adldni.top"; classtype:attempted-recon; sid:200037949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.afqzgx.top"; classtype:attempted-recon; sid:200037950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ajxdpg.top"; classtype:attempted-recon; sid:200037951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ansklx.top"; classtype:attempted-recon; sid:200037952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ao0dkn.icu"; classtype:attempted-recon; sid:200037953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.aogild.top"; classtype:attempted-recon; sid:200037954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.bucyvo.top"; classtype:attempted-recon; sid:200037955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.bwxsxf.top"; classtype:attempted-recon; sid:200037956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.bxsxvy.top"; classtype:attempted-recon; sid:200037957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.cgogay.top"; classtype:attempted-recon; sid:200037958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.cmudlt.top"; classtype:attempted-recon; sid:200037959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ctdwug.top"; classtype:attempted-recon; sid:200037960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.cwpgoh.top"; classtype:attempted-recon; sid:200037961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.d5u49w.icu"; classtype:attempted-recon; sid:200037962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.dbezzz.top"; classtype:attempted-recon; sid:200037963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.dbhlbm.top"; classtype:attempted-recon; sid:200037964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.drkild.icu"; classtype:attempted-recon; sid:200037965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.e7ie6j.icu"; classtype:attempted-recon; sid:200037966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.eahbrm.top"; classtype:attempted-recon; sid:200037967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.enioab.top"; classtype:attempted-recon; sid:200037968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.erkdnv.top"; classtype:attempted-recon; sid:200037969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.fn0aqh.icu"; classtype:attempted-recon; sid:200037970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.hblfhq.top"; classtype:attempted-recon; sid:200037971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.hefhjq.icu"; classtype:attempted-recon; sid:200037972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.herbertweb.site"; classtype:attempted-recon; sid:200037973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.hli3b0.icu"; classtype:attempted-recon; sid:200037974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.hlsyku.icu"; classtype:attempted-recon; sid:200037975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.hmziti.top"; classtype:attempted-recon; sid:200037976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.inkblog.ink"; classtype:attempted-recon; sid:200037977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.j3tu3m.icu"; classtype:attempted-recon; sid:200037978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.j77o38.icu"; classtype:attempted-recon; sid:200037979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.jehe99.icu"; classtype:attempted-recon; sid:200037980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.juls8q.icu"; classtype:attempted-recon; sid:200037981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.k3ma2x.icu"; classtype:attempted-recon; sid:200037982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.k9pn0d.icu"; classtype:attempted-recon; sid:200037983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ka83cb.icu"; classtype:attempted-recon; sid:200037984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.kb5b6d.icu"; classtype:attempted-recon; sid:200037985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.kgfkdv.top"; classtype:attempted-recon; sid:200037986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.krjqpe.top"; classtype:attempted-recon; sid:200037987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.lcazit.top"; classtype:attempted-recon; sid:200037988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.lfyacu.icu"; classtype:attempted-recon; sid:200037989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ljmuov.top"; classtype:attempted-recon; sid:200037990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ll64vg.icu"; classtype:attempted-recon; sid:200037991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.llufip.top"; classtype:attempted-recon; sid:200037992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.lmheln.top"; classtype:attempted-recon; sid:200037993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.lwgayp.top"; classtype:attempted-recon; sid:200037994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.lylxce.top"; classtype:attempted-recon; sid:200037995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.mcltim.top"; classtype:attempted-recon; sid:200037996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.mfx741.icu"; classtype:attempted-recon; sid:200037997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.mgjpjr.top"; classtype:attempted-recon; sid:200037998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.mjdnpt.top"; classtype:attempted-recon; sid:200037999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.nllyoh.top"; classtype:attempted-recon; sid:200038000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.nqveqi.top"; classtype:attempted-recon; sid:200038001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.nrhpkc.icu"; classtype:attempted-recon; sid:200038002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.nu57wl.icu"; classtype:attempted-recon; sid:200038003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.nv9dtw.icu"; classtype:attempted-recon; sid:200038004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ojyzcd.top"; classtype:attempted-recon; sid:200038005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.okbpku.icu"; classtype:attempted-recon; sid:200038006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.oppxsj.top"; classtype:attempted-recon; sid:200038007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.or1glf.icu"; classtype:attempted-recon; sid:200038008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.pe14pc.icu"; classtype:attempted-recon; sid:200038009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.psdexq.top"; classtype:attempted-recon; sid:200038010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.psdoni.top"; classtype:attempted-recon; sid:200038011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.pujapd.top"; classtype:attempted-recon; sid:200038012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.pzgoea.top"; classtype:attempted-recon; sid:200038013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.q0s2sm.icu"; classtype:attempted-recon; sid:200038014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.qeaogd.top"; classtype:attempted-recon; sid:200038015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.qnqwcs.icu"; classtype:attempted-recon; sid:200038016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.qpchzg.top"; classtype:attempted-recon; sid:200038017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.qqjjzi.top"; classtype:attempted-recon; sid:200038018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.qvgavp.top"; classtype:attempted-recon; sid:200038019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.rbyycn.top"; classtype:attempted-recon; sid:200038020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.rsxojx.top"; classtype:attempted-recon; sid:200038021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.sawjbk.top"; classtype:attempted-recon; sid:200038022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.slnb02.icu"; classtype:attempted-recon; sid:200038023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.srcwhi.top"; classtype:attempted-recon; sid:200038024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.srwwap.top"; classtype:attempted-recon; sid:200038025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.sthtuh.top"; classtype:attempted-recon; sid:200038026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.syeuaw.top"; classtype:attempted-recon; sid:200038027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.tazsl1.icu"; classtype:attempted-recon; sid:200038028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.tbnilj.top"; classtype:attempted-recon; sid:200038029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.tl86n6.icu"; classtype:attempted-recon; sid:200038030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.to5fb9.icu"; classtype:attempted-recon; sid:200038031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.uixah3.icu"; classtype:attempted-recon; sid:200038032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ukesvp.icu"; classtype:attempted-recon; sid:200038033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ukrtxd.top"; classtype:attempted-recon; sid:200038034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.upahh5.icu"; classtype:attempted-recon; sid:200038035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.uxdgpy.top"; classtype:attempted-recon; sid:200038036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.uxvqzp.top"; classtype:attempted-recon; sid:200038037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.vqeyuo.top"; classtype:attempted-recon; sid:200038038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.vvkdlh.top"; classtype:attempted-recon; sid:200038039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.werbdt.top"; classtype:attempted-recon; sid:200038040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.wfirhj.top"; classtype:attempted-recon; sid:200038041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.whnjwr.top"; classtype:attempted-recon; sid:200038042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.witojr.top"; classtype:attempted-recon; sid:200038043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.wmygyx.top"; classtype:attempted-recon; sid:200038044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.wpzqxg.top"; classtype:attempted-recon; sid:200038045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.wsojbg.icu"; classtype:attempted-recon; sid:200038046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.wxpckc.icu"; classtype:attempted-recon; sid:200038047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.xd1bpn.icu"; classtype:attempted-recon; sid:200038048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.xeygaj.top"; classtype:attempted-recon; sid:200038049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.xgysxo.top"; classtype:attempted-recon; sid:200038050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.xydvkg.top"; classtype:attempted-recon; sid:200038051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.xztftf.top"; classtype:attempted-recon; sid:200038052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ymifv0.icu"; classtype:attempted-recon; sid:200038053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.yqasjy.icu"; classtype:attempted-recon; sid:200038054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.yuxvpc.top"; classtype:attempted-recon; sid:200038055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.yvjdgy.top"; classtype:attempted-recon; sid:200038056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.zhsntm.top"; classtype:attempted-recon; sid:200038057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.zhwpnq.top"; classtype:attempted-recon; sid:200038058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.zovh96.icu"; classtype:attempted-recon; sid:200038059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.zoyqhl.top"; classtype:attempted-recon; sid:200038060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.037768888861.xyz"; classtype:attempted-recon; sid:200038061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.284nxw.icu"; classtype:attempted-recon; sid:200038062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.33hf19.icu"; classtype:attempted-recon; sid:200038063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.473glv.icu"; classtype:attempted-recon; sid:200038064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.4k2dci.icu"; classtype:attempted-recon; sid:200038065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.687cem.icu"; classtype:attempted-recon; sid:200038066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.69bn6b.icu"; classtype:attempted-recon; sid:200038067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.6c7bza.icu"; classtype:attempted-recon; sid:200038068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.6pw2wd.icu"; classtype:attempted-recon; sid:200038069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.6rtqht.icu"; classtype:attempted-recon; sid:200038070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.6t1vk7.icu"; classtype:attempted-recon; sid:200038071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.7a4s96.icu"; classtype:attempted-recon; sid:200038072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.82casa.icu"; classtype:attempted-recon; sid:200038073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.9d24dh.icu"; classtype:attempted-recon; sid:200038074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.9pw3lv.icu"; classtype:attempted-recon; sid:200038075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.9zv0ny.icu"; classtype:attempted-recon; sid:200038076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.aale2a.icu"; classtype:attempted-recon; sid:200038077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.aayldm.top"; classtype:attempted-recon; sid:200038078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.adldni.top"; classtype:attempted-recon; sid:200038079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.afqzgx.top"; classtype:attempted-recon; sid:200038080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ajxdpg.top"; classtype:attempted-recon; sid:200038081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ansklx.top"; classtype:attempted-recon; sid:200038082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ao0dkn.icu"; classtype:attempted-recon; sid:200038083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.aogild.top"; classtype:attempted-recon; sid:200038084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.bwxsxf.top"; classtype:attempted-recon; sid:200038085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.bxsxvy.top"; classtype:attempted-recon; sid:200038086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.cmudlt.top"; classtype:attempted-recon; sid:200038087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ctdwug.top"; classtype:attempted-recon; sid:200038088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.cwpgoh.top"; classtype:attempted-recon; sid:200038089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.d5u49w.icu"; classtype:attempted-recon; sid:200038090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.dbhlbm.top"; classtype:attempted-recon; sid:200038091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.drkild.icu"; classtype:attempted-recon; sid:200038092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.e7ie6j.icu"; classtype:attempted-recon; sid:200038093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.enioab.top"; classtype:attempted-recon; sid:200038094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.erkdnv.top"; classtype:attempted-recon; sid:200038095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.fn0aqh.icu"; classtype:attempted-recon; sid:200038096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.hblfhq.top"; classtype:attempted-recon; sid:200038097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.hefhjq.icu"; classtype:attempted-recon; sid:200038098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.hli3b0.icu"; classtype:attempted-recon; sid:200038099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.hlsyku.icu"; classtype:attempted-recon; sid:200038100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.hmziti.top"; classtype:attempted-recon; sid:200038101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.inkblog.ink"; classtype:attempted-recon; sid:200038102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.j3tu3m.icu"; classtype:attempted-recon; sid:200038103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.j77o38.icu"; classtype:attempted-recon; sid:200038104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.jehe99.icu"; classtype:attempted-recon; sid:200038105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.juls8q.icu"; classtype:attempted-recon; sid:200038106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.k3ma2x.icu"; classtype:attempted-recon; sid:200038107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.k9pn0d.icu"; classtype:attempted-recon; sid:200038108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ka83cb.icu"; classtype:attempted-recon; sid:200038109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.kb5b6d.icu"; classtype:attempted-recon; sid:200038110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.kgfkdv.top"; classtype:attempted-recon; sid:200038111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.krjqpe.top"; classtype:attempted-recon; sid:200038112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.kvrhdp.top"; classtype:attempted-recon; sid:200038113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.lfyacu.icu"; classtype:attempted-recon; sid:200038114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ljmuov.top"; classtype:attempted-recon; sid:200038115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ll64vg.icu"; classtype:attempted-recon; sid:200038116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.llufip.top"; classtype:attempted-recon; sid:200038117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.lwgayp.top"; classtype:attempted-recon; sid:200038118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.lylxce.top"; classtype:attempted-recon; sid:200038119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.mcltim.top"; classtype:attempted-recon; sid:200038120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.mfx741.icu"; classtype:attempted-recon; sid:200038121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.mgjpjr.top"; classtype:attempted-recon; sid:200038122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.mjdnpt.top"; classtype:attempted-recon; sid:200038123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.nllyoh.top"; classtype:attempted-recon; sid:200038124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.nqveqi.top"; classtype:attempted-recon; sid:200038125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.nrhpkc.icu"; classtype:attempted-recon; sid:200038126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.nu57wl.icu"; classtype:attempted-recon; sid:200038127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.nv9dtw.icu"; classtype:attempted-recon; sid:200038128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ojyzcd.top"; classtype:attempted-recon; sid:200038129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.okbpku.icu"; classtype:attempted-recon; sid:200038130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.oppxsj.top"; classtype:attempted-recon; sid:200038131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.or1glf.icu"; classtype:attempted-recon; sid:200038132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.pe14pc.icu"; classtype:attempted-recon; sid:200038133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.psdexq.top"; classtype:attempted-recon; sid:200038134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.psdoni.top"; classtype:attempted-recon; sid:200038135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.q0s2sm.icu"; classtype:attempted-recon; sid:200038136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.qclqjo.top"; classtype:attempted-recon; sid:200038137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.qeaogd.top"; classtype:attempted-recon; sid:200038138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.qnqwcs.icu"; classtype:attempted-recon; sid:200038139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.qpchzg.top"; classtype:attempted-recon; sid:200038140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.qqjjzi.top"; classtype:attempted-recon; sid:200038141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.rbyycn.top"; classtype:attempted-recon; sid:200038142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.rmgomo.top"; classtype:attempted-recon; sid:200038143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.rsxojx.top"; classtype:attempted-recon; sid:200038144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.slnb02.icu"; classtype:attempted-recon; sid:200038145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.srcwhi.top"; classtype:attempted-recon; sid:200038146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.srwwap.top"; classtype:attempted-recon; sid:200038147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.sthtuh.top"; classtype:attempted-recon; sid:200038148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.syeuaw.top"; classtype:attempted-recon; sid:200038149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.tazsl1.icu"; classtype:attempted-recon; sid:200038150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.tbnilj.top"; classtype:attempted-recon; sid:200038151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.tl86n6.icu"; classtype:attempted-recon; sid:200038152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.to5fb9.icu"; classtype:attempted-recon; sid:200038153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.u0c8sn.icu"; classtype:attempted-recon; sid:200038154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.uixah3.icu"; classtype:attempted-recon; sid:200038155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ukesvp.icu"; classtype:attempted-recon; sid:200038156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ukrtxd.top"; classtype:attempted-recon; sid:200038157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.upahh5.icu"; classtype:attempted-recon; sid:200038158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.uxdgpy.top"; classtype:attempted-recon; sid:200038159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.uxvqzp.top"; classtype:attempted-recon; sid:200038160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.vdpgwm.top"; classtype:attempted-recon; sid:200038161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.vqeyuo.top"; classtype:attempted-recon; sid:200038162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.vspjok.icu"; classtype:attempted-recon; sid:200038163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.vvkdlh.top"; classtype:attempted-recon; sid:200038164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.vxcrlo.top"; classtype:attempted-recon; sid:200038165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.werbdt.top"; classtype:attempted-recon; sid:200038166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.wfirhj.top"; classtype:attempted-recon; sid:200038167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.whnjwr.top"; classtype:attempted-recon; sid:200038168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.witojr.top"; classtype:attempted-recon; sid:200038169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.wmygyx.top"; classtype:attempted-recon; sid:200038170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.wpzqxg.top"; classtype:attempted-recon; sid:200038171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.wsojbg.icu"; classtype:attempted-recon; sid:200038172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.wxpckc.icu"; classtype:attempted-recon; sid:200038173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.xd1bpn.icu"; classtype:attempted-recon; sid:200038174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.xgysxo.top"; classtype:attempted-recon; sid:200038175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.xydvkg.top"; classtype:attempted-recon; sid:200038176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.xyuhnm.top"; classtype:attempted-recon; sid:200038177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.xztftf.top"; classtype:attempted-recon; sid:200038178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ymifv0.icu"; classtype:attempted-recon; sid:200038179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.yqasjy.icu"; classtype:attempted-recon; sid:200038180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.yuxvpc.top"; classtype:attempted-recon; sid:200038181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.yvjdgy.top"; classtype:attempted-recon; sid:200038182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.zhwpnq.top"; classtype:attempted-recon; sid:200038183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.zovh96.icu"; classtype:attempted-recon; sid:200038184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.zoyqhl.top"; classtype:attempted-recon; sid:200038185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.037768888861.xyz"; classtype:attempted-recon; sid:200038186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.284nxw.icu"; classtype:attempted-recon; sid:200038187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.33hf19.icu"; classtype:attempted-recon; sid:200038188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.473glv.icu"; classtype:attempted-recon; sid:200038189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.4k2dci.icu"; classtype:attempted-recon; sid:200038190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.687cem.icu"; classtype:attempted-recon; sid:200038191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.69bn6b.icu"; classtype:attempted-recon; sid:200038192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.6c7bza.icu"; classtype:attempted-recon; sid:200038193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.6pw2wd.icu"; classtype:attempted-recon; sid:200038194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.6rtqht.icu"; classtype:attempted-recon; sid:200038195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.6t1vk7.icu"; classtype:attempted-recon; sid:200038196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.7a4s96.icu"; classtype:attempted-recon; sid:200038197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.82casa.icu"; classtype:attempted-recon; sid:200038198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.9d24dh.icu"; classtype:attempted-recon; sid:200038199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.9pw3lv.icu"; classtype:attempted-recon; sid:200038200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.9zv0ny.icu"; classtype:attempted-recon; sid:200038201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.aale2a.icu"; classtype:attempted-recon; sid:200038202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.aayldm.top"; classtype:attempted-recon; sid:200038203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.adldni.top"; classtype:attempted-recon; sid:200038204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.afqzgx.top"; classtype:attempted-recon; sid:200038205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ajxdpg.top"; classtype:attempted-recon; sid:200038206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ansklx.top"; classtype:attempted-recon; sid:200038207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ao0dkn.icu"; classtype:attempted-recon; sid:200038208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.aogild.top"; classtype:attempted-recon; sid:200038209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.bucyvo.top"; classtype:attempted-recon; sid:200038210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.bwxsxf.top"; classtype:attempted-recon; sid:200038211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.bxsxvy.top"; classtype:attempted-recon; sid:200038212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.cgogay.top"; classtype:attempted-recon; sid:200038213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.cmudlt.top"; classtype:attempted-recon; sid:200038214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ctdwug.top"; classtype:attempted-recon; sid:200038215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.cwpgoh.top"; classtype:attempted-recon; sid:200038216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.d5u49w.icu"; classtype:attempted-recon; sid:200038217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.dbezzz.top"; classtype:attempted-recon; sid:200038218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.dbhlbm.top"; classtype:attempted-recon; sid:200038219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.dqbdkl.top"; classtype:attempted-recon; sid:200038220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.drkild.icu"; classtype:attempted-recon; sid:200038221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.e7ie6j.icu"; classtype:attempted-recon; sid:200038222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.eahbrm.top"; classtype:attempted-recon; sid:200038223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.enioab.top"; classtype:attempted-recon; sid:200038224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.erkdnv.top"; classtype:attempted-recon; sid:200038225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.fn0aqh.icu"; classtype:attempted-recon; sid:200038226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.hblfhq.top"; classtype:attempted-recon; sid:200038227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.hefhjq.icu"; classtype:attempted-recon; sid:200038228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.hli3b0.icu"; classtype:attempted-recon; sid:200038229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.hlsyku.icu"; classtype:attempted-recon; sid:200038230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.hmziti.top"; classtype:attempted-recon; sid:200038231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.inkblog.ink"; classtype:attempted-recon; sid:200038232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.j3tu3m.icu"; classtype:attempted-recon; sid:200038233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.j77o38.icu"; classtype:attempted-recon; sid:200038234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.jehe99.icu"; classtype:attempted-recon; sid:200038235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.juls8q.icu"; classtype:attempted-recon; sid:200038236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.k3ma2x.icu"; classtype:attempted-recon; sid:200038237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.k9pn0d.icu"; classtype:attempted-recon; sid:200038238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ka83cb.icu"; classtype:attempted-recon; sid:200038239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.kb5b6d.icu"; classtype:attempted-recon; sid:200038240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.kgfkdv.top"; classtype:attempted-recon; sid:200038241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.krjqpe.top"; classtype:attempted-recon; sid:200038242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.lcazit.top"; classtype:attempted-recon; sid:200038243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.lfyacu.icu"; classtype:attempted-recon; sid:200038244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ljmuov.top"; classtype:attempted-recon; sid:200038245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ll64vg.icu"; classtype:attempted-recon; sid:200038246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.llufip.top"; classtype:attempted-recon; sid:200038247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.lmheln.top"; classtype:attempted-recon; sid:200038248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.lwgayp.top"; classtype:attempted-recon; sid:200038249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.lylxce.top"; classtype:attempted-recon; sid:200038250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.mcltim.top"; classtype:attempted-recon; sid:200038251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.mfx741.icu"; classtype:attempted-recon; sid:200038252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.nllyoh.top"; classtype:attempted-recon; sid:200038253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.nqveqi.top"; classtype:attempted-recon; sid:200038254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.nrhpkc.icu"; classtype:attempted-recon; sid:200038255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.nu57wl.icu"; classtype:attempted-recon; sid:200038256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.nv9dtw.icu"; classtype:attempted-recon; sid:200038257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.oads.fun"; classtype:attempted-recon; sid:200038258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ojyzcd.top"; classtype:attempted-recon; sid:200038259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.okbpku.icu"; classtype:attempted-recon; sid:200038260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.oppxsj.top"; classtype:attempted-recon; sid:200038261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.or1glf.icu"; classtype:attempted-recon; sid:200038262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.pe14pc.icu"; classtype:attempted-recon; sid:200038263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.psdexq.top"; classtype:attempted-recon; sid:200038264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.psdoni.top"; classtype:attempted-recon; sid:200038265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.pujapd.top"; classtype:attempted-recon; sid:200038266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.pzgoea.top"; classtype:attempted-recon; sid:200038267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.q0s2sm.icu"; classtype:attempted-recon; sid:200038268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.qclqjo.top"; classtype:attempted-recon; sid:200038269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.qeaogd.top"; classtype:attempted-recon; sid:200038270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.qnqwcs.icu"; classtype:attempted-recon; sid:200038271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.qpchzg.top"; classtype:attempted-recon; sid:200038272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.qqjjzi.top"; classtype:attempted-recon; sid:200038273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.qvgavp.top"; classtype:attempted-recon; sid:200038274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.rbyycn.top"; classtype:attempted-recon; sid:200038275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.rmgomo.top"; classtype:attempted-recon; sid:200038276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.sawjbk.top"; classtype:attempted-recon; sid:200038277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.slnb02.icu"; classtype:attempted-recon; sid:200038278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.srcwhi.top"; classtype:attempted-recon; sid:200038279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.srwwap.top"; classtype:attempted-recon; sid:200038280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.sthtuh.top"; classtype:attempted-recon; sid:200038281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.syeuaw.top"; classtype:attempted-recon; sid:200038282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.tazsl1.icu"; classtype:attempted-recon; sid:200038283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.tbnilj.top"; classtype:attempted-recon; sid:200038284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.tl86n6.icu"; classtype:attempted-recon; sid:200038285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.to5fb9.icu"; classtype:attempted-recon; sid:200038286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.u0c8sn.icu"; classtype:attempted-recon; sid:200038287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.uixah3.icu"; classtype:attempted-recon; sid:200038288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ukesvp.icu"; classtype:attempted-recon; sid:200038289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ukrtxd.top"; classtype:attempted-recon; sid:200038290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.upahh5.icu"; classtype:attempted-recon; sid:200038291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.uxdgpy.top"; classtype:attempted-recon; sid:200038292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.uxvqzp.top"; classtype:attempted-recon; sid:200038293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.vqeyuo.top"; classtype:attempted-recon; sid:200038294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.vspjok.icu"; classtype:attempted-recon; sid:200038295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.vvkdlh.top"; classtype:attempted-recon; sid:200038296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.vxcrlo.top"; classtype:attempted-recon; sid:200038297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.werbdt.top"; classtype:attempted-recon; sid:200038298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.wfirhj.top"; classtype:attempted-recon; sid:200038299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.whnjwr.top"; classtype:attempted-recon; sid:200038300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.witojr.top"; classtype:attempted-recon; sid:200038301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.wmygyx.top"; classtype:attempted-recon; sid:200038302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.wpzqxg.top"; classtype:attempted-recon; sid:200038303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.wsojbg.icu"; classtype:attempted-recon; sid:200038304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.wxpckc.icu"; classtype:attempted-recon; sid:200038305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.xd1bpn.icu"; classtype:attempted-recon; sid:200038306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.xeygaj.top"; classtype:attempted-recon; sid:200038307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.xgysxo.top"; classtype:attempted-recon; sid:200038308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.xydvkg.top"; classtype:attempted-recon; sid:200038309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.xyuhnm.top"; classtype:attempted-recon; sid:200038310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.xztftf.top"; classtype:attempted-recon; sid:200038311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.yqasjy.icu"; classtype:attempted-recon; sid:200038312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.yuxvpc.top"; classtype:attempted-recon; sid:200038313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.yvjdgy.top"; classtype:attempted-recon; sid:200038314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.yybtfl.top"; classtype:attempted-recon; sid:200038315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.zhwpnq.top"; classtype:attempted-recon; sid:200038316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.zovh96.icu"; classtype:attempted-recon; sid:200038317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.zoyqhl.top"; classtype:attempted-recon; sid:200038318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.037768888861.xyz"; classtype:attempted-recon; sid:200038319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.284nxw.icu"; classtype:attempted-recon; sid:200038320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.33hf19.icu"; classtype:attempted-recon; sid:200038321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.473glv.icu"; classtype:attempted-recon; sid:200038322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.4k2dci.icu"; classtype:attempted-recon; sid:200038323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.687cem.icu"; classtype:attempted-recon; sid:200038324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.69bn6b.icu"; classtype:attempted-recon; sid:200038325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.6c7bza.icu"; classtype:attempted-recon; sid:200038326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.6pw2wd.icu"; classtype:attempted-recon; sid:200038327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.6rtqht.icu"; classtype:attempted-recon; sid:200038328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.6t1vk7.icu"; classtype:attempted-recon; sid:200038329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.7a4s96.icu"; classtype:attempted-recon; sid:200038330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.82casa.icu"; classtype:attempted-recon; sid:200038331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.9d24dh.icu"; classtype:attempted-recon; sid:200038332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.9pw3lv.icu"; classtype:attempted-recon; sid:200038333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.9zv0ny.icu"; classtype:attempted-recon; sid:200038334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.aale2a.icu"; classtype:attempted-recon; sid:200038335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.aayldm.top"; classtype:attempted-recon; sid:200038336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.adldni.top"; classtype:attempted-recon; sid:200038337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.afqzgx.top"; classtype:attempted-recon; sid:200038338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ajxdpg.top"; classtype:attempted-recon; sid:200038339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ansklx.top"; classtype:attempted-recon; sid:200038340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ao0dkn.icu"; classtype:attempted-recon; sid:200038341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.aogild.top"; classtype:attempted-recon; sid:200038342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.bucyvo.top"; classtype:attempted-recon; sid:200038343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.bwxsxf.top"; classtype:attempted-recon; sid:200038344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.bxsxvy.top"; classtype:attempted-recon; sid:200038345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.cmudlt.top"; classtype:attempted-recon; sid:200038346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ctdwug.top"; classtype:attempted-recon; sid:200038347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.cwpgoh.top"; classtype:attempted-recon; sid:200038348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.d5u49w.icu"; classtype:attempted-recon; sid:200038349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.dbezzz.top"; classtype:attempted-recon; sid:200038350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.dbhlbm.top"; classtype:attempted-recon; sid:200038351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.dqbdkl.top"; classtype:attempted-recon; sid:200038352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.drkild.icu"; classtype:attempted-recon; sid:200038353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.e7ie6j.icu"; classtype:attempted-recon; sid:200038354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.eahbrm.top"; classtype:attempted-recon; sid:200038355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.enioab.top"; classtype:attempted-recon; sid:200038356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.erkdnv.top"; classtype:attempted-recon; sid:200038357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.fanyedong.site"; classtype:attempted-recon; sid:200038358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.fn0aqh.icu"; classtype:attempted-recon; sid:200038359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.hblfhq.top"; classtype:attempted-recon; sid:200038360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.hefhjq.icu"; classtype:attempted-recon; sid:200038361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.hli3b0.icu"; classtype:attempted-recon; sid:200038362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.hlsyku.icu"; classtype:attempted-recon; sid:200038363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.hmziti.top"; classtype:attempted-recon; sid:200038364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.inkblog.ink"; classtype:attempted-recon; sid:200038365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.j3tu3m.icu"; classtype:attempted-recon; sid:200038366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.j77o38.icu"; classtype:attempted-recon; sid:200038367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.jehe99.icu"; classtype:attempted-recon; sid:200038368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.juls8q.icu"; classtype:attempted-recon; sid:200038369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.k3ma2x.icu"; classtype:attempted-recon; sid:200038370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.k9pn0d.icu"; classtype:attempted-recon; sid:200038371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ka83cb.icu"; classtype:attempted-recon; sid:200038372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.kb5b6d.icu"; classtype:attempted-recon; sid:200038373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.kgfkdv.top"; classtype:attempted-recon; sid:200038374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.krjqpe.top"; classtype:attempted-recon; sid:200038375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.kvrhdp.top"; classtype:attempted-recon; sid:200038376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.lcazit.top"; classtype:attempted-recon; sid:200038377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.lfyacu.icu"; classtype:attempted-recon; sid:200038378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ljmuov.top"; classtype:attempted-recon; sid:200038379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ll64vg.icu"; classtype:attempted-recon; sid:200038380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.llufip.top"; classtype:attempted-recon; sid:200038381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.lmheln.top"; classtype:attempted-recon; sid:200038382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.lwgayp.top"; classtype:attempted-recon; sid:200038383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.lylxce.top"; classtype:attempted-recon; sid:200038384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.mcltim.top"; classtype:attempted-recon; sid:200038385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.mfx741.icu"; classtype:attempted-recon; sid:200038386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.mgjpjr.top"; classtype:attempted-recon; sid:200038387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.mjdnpt.top"; classtype:attempted-recon; sid:200038388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.nllyoh.top"; classtype:attempted-recon; sid:200038389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.nqveqi.top"; classtype:attempted-recon; sid:200038390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.nrhpkc.icu"; classtype:attempted-recon; sid:200038391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.nu57wl.icu"; classtype:attempted-recon; sid:200038392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.nv9dtw.icu"; classtype:attempted-recon; sid:200038393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.oads.fun"; classtype:attempted-recon; sid:200038394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ojyzcd.top"; classtype:attempted-recon; sid:200038395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.okbpku.icu"; classtype:attempted-recon; sid:200038396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.oppxsj.top"; classtype:attempted-recon; sid:200038397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.or1glf.icu"; classtype:attempted-recon; sid:200038398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.pe14pc.icu"; classtype:attempted-recon; sid:200038399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.psdexq.top"; classtype:attempted-recon; sid:200038400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.psdoni.top"; classtype:attempted-recon; sid:200038401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.pujapd.top"; classtype:attempted-recon; sid:200038402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.pzgoea.top"; classtype:attempted-recon; sid:200038403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.q0s2sm.icu"; classtype:attempted-recon; sid:200038404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.qclqjo.top"; classtype:attempted-recon; sid:200038405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.qnqwcs.icu"; classtype:attempted-recon; sid:200038406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.qpchzg.top"; classtype:attempted-recon; sid:200038407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.qqjjzi.top"; classtype:attempted-recon; sid:200038408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.qvgavp.top"; classtype:attempted-recon; sid:200038409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.rbyycn.top"; classtype:attempted-recon; sid:200038410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.rmgomo.top"; classtype:attempted-recon; sid:200038411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.rsxojx.top"; classtype:attempted-recon; sid:200038412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.sawjbk.top"; classtype:attempted-recon; sid:200038413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.slnb02.icu"; classtype:attempted-recon; sid:200038414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.srcwhi.top"; classtype:attempted-recon; sid:200038415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.srwwap.top"; classtype:attempted-recon; sid:200038416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.sthtuh.top"; classtype:attempted-recon; sid:200038417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.syeuaw.top"; classtype:attempted-recon; sid:200038418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.tazsl1.icu"; classtype:attempted-recon; sid:200038419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.tbnilj.top"; classtype:attempted-recon; sid:200038420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.tl86n6.icu"; classtype:attempted-recon; sid:200038421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.to5fb9.icu"; classtype:attempted-recon; sid:200038422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.u0c8sn.icu"; classtype:attempted-recon; sid:200038423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.uixah3.icu"; classtype:attempted-recon; sid:200038424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ukesvp.icu"; classtype:attempted-recon; sid:200038425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ukrtxd.top"; classtype:attempted-recon; sid:200038426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.upahh5.icu"; classtype:attempted-recon; sid:200038427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.uxdgpy.top"; classtype:attempted-recon; sid:200038428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.uxvqzp.top"; classtype:attempted-recon; sid:200038429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.vdpgwm.top"; classtype:attempted-recon; sid:200038430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.vqeyuo.top"; classtype:attempted-recon; sid:200038431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.vspjok.icu"; classtype:attempted-recon; sid:200038432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.vvkdlh.top"; classtype:attempted-recon; sid:200038433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.werbdt.top"; classtype:attempted-recon; sid:200038434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.wfirhj.top"; classtype:attempted-recon; sid:200038435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.whnjwr.top"; classtype:attempted-recon; sid:200038436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.witojr.top"; classtype:attempted-recon; sid:200038437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.wmygyx.top"; classtype:attempted-recon; sid:200038438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.wpzqxg.top"; classtype:attempted-recon; sid:200038439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.wsojbg.icu"; classtype:attempted-recon; sid:200038440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.wxpckc.icu"; classtype:attempted-recon; sid:200038441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.xd1bpn.icu"; classtype:attempted-recon; sid:200038442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.xeygaj.top"; classtype:attempted-recon; sid:200038443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.xydvkg.top"; classtype:attempted-recon; sid:200038444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.xyuhnm.top"; classtype:attempted-recon; sid:200038445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.xztftf.top"; classtype:attempted-recon; sid:200038446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ymifv0.icu"; classtype:attempted-recon; sid:200038447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.yqasjy.icu"; classtype:attempted-recon; sid:200038448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.yuxvpc.top"; classtype:attempted-recon; sid:200038449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.yvjdgy.top"; classtype:attempted-recon; sid:200038450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.yybtfl.top"; classtype:attempted-recon; sid:200038451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.zhsntm.top"; classtype:attempted-recon; sid:200038452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.zovh96.icu"; classtype:attempted-recon; sid:200038453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.zoyqhl.top"; classtype:attempted-recon; sid:200038454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vital1.webcindario.com"; classtype:attempted-recon; sid:200038455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vitalgroup.info"; classtype:attempted-recon; sid:200038456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaaeesccvcrasoia.viessvacraoccnivrsiori.swixid.top"; classtype:attempted-recon; sid:200038457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivacaces.visceacaie.oauiro.za.com"; classtype:attempted-recon; sid:200038458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivacaces.visceacaie.wynkjx.id"; classtype:attempted-recon; sid:200038459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaeesvccasri.ovaisveascccvsoionrri.1235439.xyz"; classtype:attempted-recon; sid:200038460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaeesvccasri.ovaisveascccvsoionrri.ouswzc.top"; classtype:attempted-recon; sid:200038461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaeesvccasri.ovaisveascccvsoionrri.yfnvfr.top"; classtype:attempted-recon; sid:200038462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaescvcasi.visvaraccivsior.g68bo10s.bar"; classtype:attempted-recon; sid:200038463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaescvcasi.visvaraccivsior.mu1iskm5.bar"; classtype:attempted-recon; sid:200038464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaieescvecrasoia.viessvacococvnsirori.edziyc.top"; classtype:attempted-recon; sid:200038465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaieescvecrasoia.viessvacococvnsirori.ezqrhd.top"; classtype:attempted-recon; sid:200038466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaiesvccearsio.avisevsaccovosinorri.eqmmzs.top"; classtype:attempted-recon; sid:200038467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivaiesvccearsio.avisevsaccovosinorri.mxmspo.top"; classtype:attempted-recon; sid:200038468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivasevccasir.voiasvaecsvscioornri.zxj4029.xyz"; classtype:attempted-recon; sid:200038469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.2021071.top"; classtype:attempted-recon; sid:200038470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.22567.cn"; classtype:attempted-recon; sid:200038471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.87567.cn"; classtype:attempted-recon; sid:200038472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.ahahh04.shop"; classtype:attempted-recon; sid:200038473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.alister.ltd"; classtype:attempted-recon; sid:200038474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.cjehdm.top"; classtype:attempted-recon; sid:200038475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.clllbx.top"; classtype:attempted-recon; sid:200038476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.ebwptg.top"; classtype:attempted-recon; sid:200038477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.fcwh886.top"; classtype:attempted-recon; sid:200038478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.francis.ltd"; classtype:attempted-recon; sid:200038479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.fzosfk.top"; classtype:attempted-recon; sid:200038480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.gafuwd.top"; classtype:attempted-recon; sid:200038481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.glmbfd.top"; classtype:attempted-recon; sid:200038482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.hncwbn.top"; classtype:attempted-recon; sid:200038483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.ipexqv.top"; classtype:attempted-recon; sid:200038484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.jimdyd.top"; classtype:attempted-recon; sid:200038485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.jjglsw.top"; classtype:attempted-recon; sid:200038486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.lcloud.group"; classtype:attempted-recon; sid:200038487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.leigh.ltd"; classtype:attempted-recon; sid:200038488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.leonard.ltd"; classtype:attempted-recon; sid:200038489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.lhixak.top"; classtype:attempted-recon; sid:200038490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.lhzfkh.top"; classtype:attempted-recon; sid:200038491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.limassol.group"; classtype:attempted-recon; sid:200038492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.loskh.top"; classtype:attempted-recon; sid:200038493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.mkma07.shop"; classtype:attempted-recon; sid:200038494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.mnvhdje.icu"; classtype:attempted-recon; sid:200038495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.njrksy.top"; classtype:attempted-recon; sid:200038496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.norfolk.ltd"; classtype:attempted-recon; sid:200038497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.npxfcv.top"; classtype:attempted-recon; sid:200038498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.nsuuieds.icu"; classtype:attempted-recon; sid:200038499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.nvjdhuei.icu"; classtype:attempted-recon; sid:200038500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.oamprk.top"; classtype:attempted-recon; sid:200038501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.owens.ltd"; classtype:attempted-recon; sid:200038502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.ptywgv.top"; classtype:attempted-recon; sid:200038503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.qzvxui.top"; classtype:attempted-recon; sid:200038504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.reynolds.ltd"; classtype:attempted-recon; sid:200038505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.riley.ltd"; classtype:attempted-recon; sid:200038506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.robertson.ltd"; classtype:attempted-recon; sid:200038507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.rowan.ltd"; classtype:attempted-recon; sid:200038508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.shjpxn.top"; classtype:attempted-recon; sid:200038509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.sinclair.ltd"; classtype:attempted-recon; sid:200038510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.sqmim.top"; classtype:attempted-recon; sid:200038511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.tvrimx.top"; classtype:attempted-recon; sid:200038512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.tvxkmp.top"; classtype:attempted-recon; sid:200038513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.vjlile.top"; classtype:attempted-recon; sid:200038514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.vnxgwb.top"; classtype:attempted-recon; sid:200038515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.vordmh.top"; classtype:attempted-recon; sid:200038516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.wcloud.group"; classtype:attempted-recon; sid:200038517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.xdaupp.top"; classtype:attempted-recon; sid:200038518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.xhgmfb.top"; classtype:attempted-recon; sid:200038519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.xniqmj.top"; classtype:attempted-recon; sid:200038520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.xulhaq.top"; classtype:attempted-recon; sid:200038521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.zbvvpg.top"; classtype:attempted-recon; sid:200038522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.zeyeds.ltd"; classtype:attempted-recon; sid:200038523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.zkzkd04.shop"; classtype:attempted-recon; sid:200038524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.zqjkvx.top"; classtype:attempted-recon; sid:200038525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavaesevai.sa.zrxpv.top"; classtype:attempted-recon; sid:200038526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.2021071.top"; classtype:attempted-recon; sid:200038527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.22567.cn"; classtype:attempted-recon; sid:200038528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.31567.cn"; classtype:attempted-recon; sid:200038529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.53567.cn"; classtype:attempted-recon; sid:200038530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.85567.cn"; classtype:attempted-recon; sid:200038531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.ahahh04.shop"; classtype:attempted-recon; sid:200038532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.alister.ltd"; classtype:attempted-recon; sid:200038533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.cjehdm.top"; classtype:attempted-recon; sid:200038534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.clllbx.top"; classtype:attempted-recon; sid:200038535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.ebwptg.top"; classtype:attempted-recon; sid:200038536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.fcwh886.top"; classtype:attempted-recon; sid:200038537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.francis.ltd"; classtype:attempted-recon; sid:200038538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.fzosfk.top"; classtype:attempted-recon; sid:200038539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.gafuwd.top"; classtype:attempted-recon; sid:200038540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.gcloud.group"; classtype:attempted-recon; sid:200038541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.ggnxmf.top"; classtype:attempted-recon; sid:200038542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.glmbfd.top"; classtype:attempted-recon; sid:200038543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.hncwbn.top"; classtype:attempted-recon; sid:200038544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.ipexqv.top"; classtype:attempted-recon; sid:200038545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.jimdyd.top"; classtype:attempted-recon; sid:200038546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.jjglsw.top"; classtype:attempted-recon; sid:200038547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.leigh.ltd"; classtype:attempted-recon; sid:200038548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.leonard.ltd"; classtype:attempted-recon; sid:200038549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.lhixak.top"; classtype:attempted-recon; sid:200038550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.lhzfkh.top"; classtype:attempted-recon; sid:200038551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.limassol.group"; classtype:attempted-recon; sid:200038552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.loskh.top"; classtype:attempted-recon; sid:200038553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.mosjide.icu"; classtype:attempted-recon; sid:200038554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.ncloud.group"; classtype:attempted-recon; sid:200038555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.nicosia.group"; classtype:attempted-recon; sid:200038556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.njrksy.top"; classtype:attempted-recon; sid:200038557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.norfolk.ltd"; classtype:attempted-recon; sid:200038558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.npxfcv.top"; classtype:attempted-recon; sid:200038559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.nsuuieds.icu"; classtype:attempted-recon; sid:200038560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200038561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.oamprk.top"; classtype:attempted-recon; sid:200038562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.owens.ltd"; classtype:attempted-recon; sid:200038563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.promotion.show"; classtype:attempted-recon; sid:200038564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.ptywgv.top"; classtype:attempted-recon; sid:200038565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.qzvxui.top"; classtype:attempted-recon; sid:200038566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.reynolds.ltd"; classtype:attempted-recon; sid:200038567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.riley.ltd"; classtype:attempted-recon; sid:200038568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.robertson.ltd"; classtype:attempted-recon; sid:200038569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.rowan.ltd"; classtype:attempted-recon; sid:200038570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.shjpxn.top"; classtype:attempted-recon; sid:200038571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.sinclair.ltd"; classtype:attempted-recon; sid:200038572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.sqmim.top"; classtype:attempted-recon; sid:200038573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.tubatue.icu"; classtype:attempted-recon; sid:200038574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.tvrimx.top"; classtype:attempted-recon; sid:200038575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.tvxkmp.top"; classtype:attempted-recon; sid:200038576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.vjlile.top"; classtype:attempted-recon; sid:200038577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.vnxgwb.top"; classtype:attempted-recon; sid:200038578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.vordmh.top"; classtype:attempted-recon; sid:200038579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.xdaupp.top"; classtype:attempted-recon; sid:200038580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.xhgmfb.top"; classtype:attempted-recon; sid:200038581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.xniqmj.top"; classtype:attempted-recon; sid:200038582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.xulhaq.top"; classtype:attempted-recon; sid:200038583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.zbvvpg.top"; classtype:attempted-recon; sid:200038584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.zeyeds.ltd"; classtype:attempted-recon; sid:200038585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.zkzkd04.shop"; classtype:attempted-recon; sid:200038586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.zqjkvx.top"; classtype:attempted-recon; sid:200038587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveaecsevai.saaa.zrxpv.top"; classtype:attempted-recon; sid:200038588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.2021071.top"; classtype:attempted-recon; sid:200038589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.87567.cn"; classtype:attempted-recon; sid:200038590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.acloud.group"; classtype:attempted-recon; sid:200038591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.alister.ltd"; classtype:attempted-recon; sid:200038592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.cjehdm.top"; classtype:attempted-recon; sid:200038593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.clllbx.top"; classtype:attempted-recon; sid:200038594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.dwbjs.top"; classtype:attempted-recon; sid:200038595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.ebwptg.top"; classtype:attempted-recon; sid:200038596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.fcwh886.top"; classtype:attempted-recon; sid:200038597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.francis.ltd"; classtype:attempted-recon; sid:200038598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.fzosfk.top"; classtype:attempted-recon; sid:200038599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.gafuwd.top"; classtype:attempted-recon; sid:200038600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.glmbfd.top"; classtype:attempted-recon; sid:200038601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.hncwbn.top"; classtype:attempted-recon; sid:200038602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.ipexqv.top"; classtype:attempted-recon; sid:200038603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.jimdyd.top"; classtype:attempted-recon; sid:200038604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.jjglsw.top"; classtype:attempted-recon; sid:200038605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.lcloud.group"; classtype:attempted-recon; sid:200038606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.leigh.ltd"; classtype:attempted-recon; sid:200038607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.leonard.ltd"; classtype:attempted-recon; sid:200038608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.lhixak.top"; classtype:attempted-recon; sid:200038609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.lhzfkh.top"; classtype:attempted-recon; sid:200038610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.limassol.group"; classtype:attempted-recon; sid:200038611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.loskh.top"; classtype:attempted-recon; sid:200038612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.mnvhdje.icu"; classtype:attempted-recon; sid:200038613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.ncloud.group"; classtype:attempted-recon; sid:200038614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.njrksy.top"; classtype:attempted-recon; sid:200038615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.norfolk.ltd"; classtype:attempted-recon; sid:200038616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.npxfcv.top"; classtype:attempted-recon; sid:200038617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.nvjdhuei.icu"; classtype:attempted-recon; sid:200038618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.oamprk.top"; classtype:attempted-recon; sid:200038619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.owens.ltd"; classtype:attempted-recon; sid:200038620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.ptywgv.top"; classtype:attempted-recon; sid:200038621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.qslbjc.top"; classtype:attempted-recon; sid:200038622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.qzvxui.top"; classtype:attempted-recon; sid:200038623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.reynolds.ltd"; classtype:attempted-recon; sid:200038624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.riley.ltd"; classtype:attempted-recon; sid:200038625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.robertson.ltd"; classtype:attempted-recon; sid:200038626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.rowan.ltd"; classtype:attempted-recon; sid:200038627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.shjpxn.top"; classtype:attempted-recon; sid:200038628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.sinclair.ltd"; classtype:attempted-recon; sid:200038629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.sqmim.top"; classtype:attempted-recon; sid:200038630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.tvrimx.top"; classtype:attempted-recon; sid:200038631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.tvxkmp.top"; classtype:attempted-recon; sid:200038632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.vjlile.top"; classtype:attempted-recon; sid:200038633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.vnxgwb.top"; classtype:attempted-recon; sid:200038634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.vordmh.top"; classtype:attempted-recon; sid:200038635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.xdaupp.top"; classtype:attempted-recon; sid:200038636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.xhgmfb.top"; classtype:attempted-recon; sid:200038637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.xniqmj.top"; classtype:attempted-recon; sid:200038638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.xulhaq.top"; classtype:attempted-recon; sid:200038639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.zbvvpg.top"; classtype:attempted-recon; sid:200038640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.zeyeds.ltd"; classtype:attempted-recon; sid:200038641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.zkzkd04.shop"; classtype:attempted-recon; sid:200038642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.zqjkvx.top"; classtype:attempted-recon; sid:200038643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcaveescvai.saa.zrxpv.top"; classtype:attempted-recon; sid:200038644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.2021071.top"; classtype:attempted-recon; sid:200038645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.31567.cn"; classtype:attempted-recon; sid:200038646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.87567.cn"; classtype:attempted-recon; sid:200038647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.alister.ltd"; classtype:attempted-recon; sid:200038648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.cjehdm.top"; classtype:attempted-recon; sid:200038649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.clllbx.top"; classtype:attempted-recon; sid:200038650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.dcloud.group"; classtype:attempted-recon; sid:200038651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.ebwptg.top"; classtype:attempted-recon; sid:200038652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.fcwh886.top"; classtype:attempted-recon; sid:200038653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.francis.ltd"; classtype:attempted-recon; sid:200038654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.fzosfk.top"; classtype:attempted-recon; sid:200038655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.gafuwd.top"; classtype:attempted-recon; sid:200038656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.glmbfd.top"; classtype:attempted-recon; sid:200038657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.hcloud.group"; classtype:attempted-recon; sid:200038658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.hncwbn.top"; classtype:attempted-recon; sid:200038659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.ipexqv.top"; classtype:attempted-recon; sid:200038660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.jimdyd.top"; classtype:attempted-recon; sid:200038661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.jjglsw.top"; classtype:attempted-recon; sid:200038662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.leigh.ltd"; classtype:attempted-recon; sid:200038663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.leonard.ltd"; classtype:attempted-recon; sid:200038664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.lhixak.top"; classtype:attempted-recon; sid:200038665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.lhzfkh.top"; classtype:attempted-recon; sid:200038666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.limassol.group"; classtype:attempted-recon; sid:200038667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.loskh.top"; classtype:attempted-recon; sid:200038668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.mnvhdje.icu"; classtype:attempted-recon; sid:200038669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.njrksy.top"; classtype:attempted-recon; sid:200038670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.norfolk.ltd"; classtype:attempted-recon; sid:200038671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.npxfcv.top"; classtype:attempted-recon; sid:200038672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.nvjdhuei.icu"; classtype:attempted-recon; sid:200038673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.oamprk.top"; classtype:attempted-recon; sid:200038674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.owens.ltd"; classtype:attempted-recon; sid:200038675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.promotion.show"; classtype:attempted-recon; sid:200038676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.ptywgv.top"; classtype:attempted-recon; sid:200038677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.qzvxui.top"; classtype:attempted-recon; sid:200038678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.reynolds.ltd"; classtype:attempted-recon; sid:200038679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.riley.ltd"; classtype:attempted-recon; sid:200038680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.robertson.ltd"; classtype:attempted-recon; sid:200038681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.rowan.ltd"; classtype:attempted-recon; sid:200038682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.shjpxn.top"; classtype:attempted-recon; sid:200038683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.sinclair.ltd"; classtype:attempted-recon; sid:200038684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.sqmim.top"; classtype:attempted-recon; sid:200038685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.tubatue.icu"; classtype:attempted-recon; sid:200038686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.tvrimx.top"; classtype:attempted-recon; sid:200038687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.tvxkmp.top"; classtype:attempted-recon; sid:200038688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.vjlile.top"; classtype:attempted-recon; sid:200038689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.vnxgwb.top"; classtype:attempted-recon; sid:200038690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.vordmh.top"; classtype:attempted-recon; sid:200038691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.xdaupp.top"; classtype:attempted-recon; sid:200038692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.xhgmfb.top"; classtype:attempted-recon; sid:200038693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.xniqmj.top"; classtype:attempted-recon; sid:200038694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.xulhaq.top"; classtype:attempted-recon; sid:200038695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.zbvvpg.top"; classtype:attempted-recon; sid:200038696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.zeyeds.ltd"; classtype:attempted-recon; sid:200038697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.zkzkd04.shop"; classtype:attempted-recon; sid:200038698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.zqjkvx.top"; classtype:attempted-recon; sid:200038699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcavesvai.s.zrxpv.top"; classtype:attempted-recon; sid:200038700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaaes.visvecevvasaier.fodxlh.top"; classtype:attempted-recon; sid:200038701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaaes.visvecevvasaier.hxsyjk.top"; classtype:attempted-recon; sid:200038702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaaes.visvecevvasaier.likduf.icu"; classtype:attempted-recon; sid:200038703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaees.viasveeaaaser.5378887.xyz"; classtype:attempted-recon; sid:200038704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaees.viasveeaaaser.7788513.xyz"; classtype:attempted-recon; sid:200038705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaees.viasveeaaaser.bcjgin.top"; classtype:attempted-recon; sid:200038706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaees.viasveeaaaser.ebltts.top"; classtype:attempted-recon; sid:200038707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaees.viasveeaaaser.txvcqg.top"; classtype:attempted-recon; sid:200038708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.2124458.xyz"; classtype:attempted-recon; sid:200038709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.6887453.xyz"; classtype:attempted-recon; sid:200038710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.dlsefg.top"; classtype:attempted-recon; sid:200038711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.ebltts.top"; classtype:attempted-recon; sid:200038712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.hzwrnd.top"; classtype:attempted-recon; sid:200038713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.ivupqh.top"; classtype:attempted-recon; sid:200038714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.mddqbt.top"; classtype:attempted-recon; sid:200038715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaaes.visveecevvaser.txcmjq.top"; classtype:attempted-recon; sid:200038716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaeaes.visvcaasaier.2124458.xyz"; classtype:attempted-recon; sid:200038717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaeaes.visvcaasaier.dlsefg.top"; classtype:attempted-recon; sid:200038718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaeaes.visvcaasaier.ebltts.top"; classtype:attempted-recon; sid:200038719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaeaes.visvcaasaier.homhcy.top"; classtype:attempted-recon; sid:200038720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaeaes.visvcaasaier.ssmkdz.top"; classtype:attempted-recon; sid:200038721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaeaes.visvcaasaier.vppvl.top"; classtype:attempted-recon; sid:200038722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaeaes.visvcaasaier.wtkiwf.top"; classtype:attempted-recon; sid:200038723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaees.visveaaaser.dlsefg.top"; classtype:attempted-recon; sid:200038724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaees.visveaaaser.homhcy.top"; classtype:attempted-recon; sid:200038725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaees.visveaaaser.hrxuhv.top"; classtype:attempted-recon; sid:200038726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaees.visveaaaser.pdmvfc.top"; classtype:attempted-recon; sid:200038727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivccaees.visveaaaser.rbbojh.top"; classtype:attempted-recon; sid:200038728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.2021071.top"; classtype:attempted-recon; sid:200038729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.22567.cn"; classtype:attempted-recon; sid:200038730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.31567.cn"; classtype:attempted-recon; sid:200038731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.53567.cn"; classtype:attempted-recon; sid:200038732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.alister.ltd"; classtype:attempted-recon; sid:200038733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.bmhkg09.shop"; classtype:attempted-recon; sid:200038734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.ccloud.group"; classtype:attempted-recon; sid:200038735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.cjehdm.top"; classtype:attempted-recon; sid:200038736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.clllbx.top"; classtype:attempted-recon; sid:200038737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.ebwptg.top"; classtype:attempted-recon; sid:200038738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.fcwh886.top"; classtype:attempted-recon; sid:200038739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.francis.ltd"; classtype:attempted-recon; sid:200038740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.fzosfk.top"; classtype:attempted-recon; sid:200038741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.gafuwd.top"; classtype:attempted-recon; sid:200038742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.glmbfd.top"; classtype:attempted-recon; sid:200038743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.hcloud.group"; classtype:attempted-recon; sid:200038744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.hncwbn.top"; classtype:attempted-recon; sid:200038745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.ipexqv.top"; classtype:attempted-recon; sid:200038746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.jimdyd.top"; classtype:attempted-recon; sid:200038747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.jjglsw.top"; classtype:attempted-recon; sid:200038748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.lcloud.group"; classtype:attempted-recon; sid:200038749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.leigh.ltd"; classtype:attempted-recon; sid:200038750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.leonard.ltd"; classtype:attempted-recon; sid:200038751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.lhixak.top"; classtype:attempted-recon; sid:200038752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.lhzfkh.top"; classtype:attempted-recon; sid:200038753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.limassol.group"; classtype:attempted-recon; sid:200038754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.loskh.top"; classtype:attempted-recon; sid:200038755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.mkma07.shop"; classtype:attempted-recon; sid:200038756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.mnvhdje.icu"; classtype:attempted-recon; sid:200038757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.njrksy.top"; classtype:attempted-recon; sid:200038758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.norfolk.ltd"; classtype:attempted-recon; sid:200038759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.npxfcv.top"; classtype:attempted-recon; sid:200038760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200038761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.oamprk.top"; classtype:attempted-recon; sid:200038762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.owens.ltd"; classtype:attempted-recon; sid:200038763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.ptywgv.top"; classtype:attempted-recon; sid:200038764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.qzvxui.top"; classtype:attempted-recon; sid:200038765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.reynolds.ltd"; classtype:attempted-recon; sid:200038766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.riley.ltd"; classtype:attempted-recon; sid:200038767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.robertson.ltd"; classtype:attempted-recon; sid:200038768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.rowan.ltd"; classtype:attempted-recon; sid:200038769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.shjpxn.top"; classtype:attempted-recon; sid:200038770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.sinclair.ltd"; classtype:attempted-recon; sid:200038771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.sqmim.top"; classtype:attempted-recon; sid:200038772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.tvrimx.top"; classtype:attempted-recon; sid:200038773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.tvxkmp.top"; classtype:attempted-recon; sid:200038774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.vjlile.top"; classtype:attempted-recon; sid:200038775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.vnxgwb.top"; classtype:attempted-recon; sid:200038776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.vordmh.top"; classtype:attempted-recon; sid:200038777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.wcloud.group"; classtype:attempted-recon; sid:200038778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.xdaupp.top"; classtype:attempted-recon; sid:200038779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.xhgmfb.top"; classtype:attempted-recon; sid:200038780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.xniqmj.top"; classtype:attempted-recon; sid:200038781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.xulhaq.top"; classtype:attempted-recon; sid:200038782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.zbvvpg.top"; classtype:attempted-recon; sid:200038783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200038784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.zhzhh06.shop"; classtype:attempted-recon; sid:200038785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.zqjkvx.top"; classtype:attempted-recon; sid:200038786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevacreasecvai.saoaa.zrxpv.top"; classtype:attempted-recon; sid:200038787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.2021071.top"; classtype:attempted-recon; sid:200038788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.87567.cn"; classtype:attempted-recon; sid:200038789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.alister.ltd"; classtype:attempted-recon; sid:200038790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.ccloud.group"; classtype:attempted-recon; sid:200038791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.cjehdm.top"; classtype:attempted-recon; sid:200038792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.clllbx.top"; classtype:attempted-recon; sid:200038793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.dcloud.group"; classtype:attempted-recon; sid:200038794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.ebwptg.top"; classtype:attempted-recon; sid:200038795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.fcwh886.top"; classtype:attempted-recon; sid:200038796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.francis.ltd"; classtype:attempted-recon; sid:200038797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.fzosfk.top"; classtype:attempted-recon; sid:200038798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.gafuwd.top"; classtype:attempted-recon; sid:200038799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.gcloud.group"; classtype:attempted-recon; sid:200038800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.ggnxmf.top"; classtype:attempted-recon; sid:200038801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.glmbfd.top"; classtype:attempted-recon; sid:200038802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.hafner.group"; classtype:attempted-recon; sid:200038803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.hncwbn.top"; classtype:attempted-recon; sid:200038804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.ipexqv.top"; classtype:attempted-recon; sid:200038805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.jimdyd.top"; classtype:attempted-recon; sid:200038806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.jjglsw.top"; classtype:attempted-recon; sid:200038807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.leigh.ltd"; classtype:attempted-recon; sid:200038808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.leonard.ltd"; classtype:attempted-recon; sid:200038809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.lhixak.top"; classtype:attempted-recon; sid:200038810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.lhzfkh.top"; classtype:attempted-recon; sid:200038811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.limassol.group"; classtype:attempted-recon; sid:200038812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.loskh.top"; classtype:attempted-recon; sid:200038813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.mkma07.shop"; classtype:attempted-recon; sid:200038814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.njrksy.top"; classtype:attempted-recon; sid:200038815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.norfolk.ltd"; classtype:attempted-recon; sid:200038816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.npxfcv.top"; classtype:attempted-recon; sid:200038817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200038818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.oamprk.top"; classtype:attempted-recon; sid:200038819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.owens.ltd"; classtype:attempted-recon; sid:200038820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.promotion.show"; classtype:attempted-recon; sid:200038821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.ptywgv.top"; classtype:attempted-recon; sid:200038822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.qslbjc.top"; classtype:attempted-recon; sid:200038823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.qzvxui.top"; classtype:attempted-recon; sid:200038824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.reynolds.ltd"; classtype:attempted-recon; sid:200038825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.riley.ltd"; classtype:attempted-recon; sid:200038826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.robertson.ltd"; classtype:attempted-recon; sid:200038827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.rowan.ltd"; classtype:attempted-recon; sid:200038828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.shjpxn.top"; classtype:attempted-recon; sid:200038829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.sinclair.ltd"; classtype:attempted-recon; sid:200038830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.smartlife.plus"; classtype:attempted-recon; sid:200038831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.sqmim.top"; classtype:attempted-recon; sid:200038832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.tvrimx.top"; classtype:attempted-recon; sid:200038833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.tvxkmp.top"; classtype:attempted-recon; sid:200038834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.vjlile.top"; classtype:attempted-recon; sid:200038835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.vnxgwb.top"; classtype:attempted-recon; sid:200038836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.vordmh.top"; classtype:attempted-recon; sid:200038837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.xdaupp.top"; classtype:attempted-recon; sid:200038838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.xhgmfb.top"; classtype:attempted-recon; sid:200038839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.xniqmj.top"; classtype:attempted-recon; sid:200038840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.xulhaq.top"; classtype:attempted-recon; sid:200038841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.zbvvpg.top"; classtype:attempted-recon; sid:200038842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.zeyeds.ltd"; classtype:attempted-recon; sid:200038843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.zhzhh06.shop"; classtype:attempted-recon; sid:200038844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.zqjkvx.top"; classtype:attempted-recon; sid:200038845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaevecrsavaci.soaa.zrxpv.top"; classtype:attempted-recon; sid:200038846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.2021071.top"; classtype:attempted-recon; sid:200038847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.31567.cn"; classtype:attempted-recon; sid:200038848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.53567.cn"; classtype:attempted-recon; sid:200038849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.85567.cn"; classtype:attempted-recon; sid:200038850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.alister.ltd"; classtype:attempted-recon; sid:200038851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.bcloud.group"; classtype:attempted-recon; sid:200038852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.cjehdm.top"; classtype:attempted-recon; sid:200038853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.clllbx.top"; classtype:attempted-recon; sid:200038854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.ebwptg.top"; classtype:attempted-recon; sid:200038855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.fcwh886.top"; classtype:attempted-recon; sid:200038856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.francis.ltd"; classtype:attempted-recon; sid:200038857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.fzosfk.top"; classtype:attempted-recon; sid:200038858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.gafuwd.top"; classtype:attempted-recon; sid:200038859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.gcloud.group"; classtype:attempted-recon; sid:200038860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.glmbfd.top"; classtype:attempted-recon; sid:200038861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.hncwbn.top"; classtype:attempted-recon; sid:200038862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.ipexqv.top"; classtype:attempted-recon; sid:200038863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.jimdyd.top"; classtype:attempted-recon; sid:200038864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.jjglsw.top"; classtype:attempted-recon; sid:200038865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.lcloud.group"; classtype:attempted-recon; sid:200038866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.leigh.ltd"; classtype:attempted-recon; sid:200038867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.leonard.ltd"; classtype:attempted-recon; sid:200038868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.lhixak.top"; classtype:attempted-recon; sid:200038869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.lhzfkh.top"; classtype:attempted-recon; sid:200038870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.limassol.group"; classtype:attempted-recon; sid:200038871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.loskh.top"; classtype:attempted-recon; sid:200038872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.mkma07.shop"; classtype:attempted-recon; sid:200038873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.mnvhdje.icu"; classtype:attempted-recon; sid:200038874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.njrksy.top"; classtype:attempted-recon; sid:200038875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.norfolk.ltd"; classtype:attempted-recon; sid:200038876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.npxfcv.top"; classtype:attempted-recon; sid:200038877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.nvjdhuei.icu"; classtype:attempted-recon; sid:200038878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.oamprk.top"; classtype:attempted-recon; sid:200038879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.ocloud.group"; classtype:attempted-recon; sid:200038880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.owens.ltd"; classtype:attempted-recon; sid:200038881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.ptywgv.top"; classtype:attempted-recon; sid:200038882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.qzvxui.top"; classtype:attempted-recon; sid:200038883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.reynolds.ltd"; classtype:attempted-recon; sid:200038884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.riley.ltd"; classtype:attempted-recon; sid:200038885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.robertson.ltd"; classtype:attempted-recon; sid:200038886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.rowan.ltd"; classtype:attempted-recon; sid:200038887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.shjpxn.top"; classtype:attempted-recon; sid:200038888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.sinclair.ltd"; classtype:attempted-recon; sid:200038889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.smartlife.plus"; classtype:attempted-recon; sid:200038890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.sqmim.top"; classtype:attempted-recon; sid:200038891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.tvrimx.top"; classtype:attempted-recon; sid:200038892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.tvxkmp.top"; classtype:attempted-recon; sid:200038893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.vjlile.top"; classtype:attempted-recon; sid:200038894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.vnxgwb.top"; classtype:attempted-recon; sid:200038895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.vordmh.top"; classtype:attempted-recon; sid:200038896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.xdaupp.top"; classtype:attempted-recon; sid:200038897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.xhgmfb.top"; classtype:attempted-recon; sid:200038898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.xniqmj.top"; classtype:attempted-recon; sid:200038899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.xulhaq.top"; classtype:attempted-recon; sid:200038900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.ycloud.group"; classtype:attempted-recon; sid:200038901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.zbvvpg.top"; classtype:attempted-recon; sid:200038902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.zeyedada.xyz"; classtype:attempted-recon; sid:200038903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.zeyeds.ltd"; classtype:attempted-recon; sid:200038904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.zkzkd04.shop"; classtype:attempted-recon; sid:200038905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.zqjkvx.top"; classtype:attempted-recon; sid:200038906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceavareasecvai.sao.zrxpv.top"; classtype:attempted-recon; sid:200038907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.2021071.top"; classtype:attempted-recon; sid:200038908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.31567.cn"; classtype:attempted-recon; sid:200038909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.acloud.group"; classtype:attempted-recon; sid:200038910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.alister.ltd"; classtype:attempted-recon; sid:200038911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.cjehdm.top"; classtype:attempted-recon; sid:200038912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.clllbx.top"; classtype:attempted-recon; sid:200038913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.ebwptg.top"; classtype:attempted-recon; sid:200038914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.fcwh886.top"; classtype:attempted-recon; sid:200038915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.francis.ltd"; classtype:attempted-recon; sid:200038916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.fzosfk.top"; classtype:attempted-recon; sid:200038917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.gafuwd.top"; classtype:attempted-recon; sid:200038918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.glmbfd.top"; classtype:attempted-recon; sid:200038919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.gzmvuo.top"; classtype:attempted-recon; sid:200038920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.hncwbn.top"; classtype:attempted-recon; sid:200038921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.ipexqv.top"; classtype:attempted-recon; sid:200038922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.jimdyd.top"; classtype:attempted-recon; sid:200038923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.jjglsw.top"; classtype:attempted-recon; sid:200038924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.leigh.ltd"; classtype:attempted-recon; sid:200038925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.leonard.ltd"; classtype:attempted-recon; sid:200038926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.lhixak.top"; classtype:attempted-recon; sid:200038927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.lhzfkh.top"; classtype:attempted-recon; sid:200038928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.limassol.group"; classtype:attempted-recon; sid:200038929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.loskh.top"; classtype:attempted-recon; sid:200038930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.mosjide.icu"; classtype:attempted-recon; sid:200038931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.ncloud.group"; classtype:attempted-recon; sid:200038932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.nicosia.group"; classtype:attempted-recon; sid:200038933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.njrksy.top"; classtype:attempted-recon; sid:200038934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.norfolk.ltd"; classtype:attempted-recon; sid:200038935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.npxfcv.top"; classtype:attempted-recon; sid:200038936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.nvjdhuei.icu"; classtype:attempted-recon; sid:200038937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.oamprk.top"; classtype:attempted-recon; sid:200038938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.owens.ltd"; classtype:attempted-recon; sid:200038939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.ptywgv.top"; classtype:attempted-recon; sid:200038940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.qzvxui.top"; classtype:attempted-recon; sid:200038941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.reynolds.ltd"; classtype:attempted-recon; sid:200038942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.riley.ltd"; classtype:attempted-recon; sid:200038943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.robertson.ltd"; classtype:attempted-recon; sid:200038944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.rowan.ltd"; classtype:attempted-recon; sid:200038945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.scloud.group"; classtype:attempted-recon; sid:200038946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.shjpxn.top"; classtype:attempted-recon; sid:200038947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.sinclair.ltd"; classtype:attempted-recon; sid:200038948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.sqmim.top"; classtype:attempted-recon; sid:200038949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.tvrimx.top"; classtype:attempted-recon; sid:200038950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.tvxkmp.top"; classtype:attempted-recon; sid:200038951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.vjlile.top"; classtype:attempted-recon; sid:200038952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.vnxgwb.top"; classtype:attempted-recon; sid:200038953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.vordmh.top"; classtype:attempted-recon; sid:200038954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.xdaupp.top"; classtype:attempted-recon; sid:200038955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.xhgmfb.top"; classtype:attempted-recon; sid:200038956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.xniqmj.top"; classtype:attempted-recon; sid:200038957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.xulhaq.top"; classtype:attempted-recon; sid:200038958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.zbvvpg.top"; classtype:attempted-recon; sid:200038959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.zeyeds.ltd"; classtype:attempted-recon; sid:200038960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.zkzkd04.shop"; classtype:attempted-recon; sid:200038961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.zqjkvx.top"; classtype:attempted-recon; sid:200038962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivceaversavaci.so.zrxpv.top"; classtype:attempted-recon; sid:200038963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.axbhie.za.com"; classtype:attempted-recon; sid:200038964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.epmgtc.za.com"; classtype:attempted-recon; sid:200038965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.flydpf.za.com"; classtype:attempted-recon; sid:200038966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.gbxbjo.za.com"; classtype:attempted-recon; sid:200038967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.mgfxpv.za.com"; classtype:attempted-recon; sid:200038968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.oaimcs.za.com"; classtype:attempted-recon; sid:200038969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.ojabvb.za.com"; classtype:attempted-recon; sid:200038970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.peqrlu.za.com"; classtype:attempted-recon; sid:200038971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.pfkndl.za.com"; classtype:attempted-recon; sid:200038972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.pfxtar.za.com"; classtype:attempted-recon; sid:200038973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.pruuwp.za.com"; classtype:attempted-recon; sid:200038974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.qbkymz.za.com"; classtype:attempted-recon; sid:200038975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.qigckf.za.com"; classtype:attempted-recon; sid:200038976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.qsgdnx.za.com"; classtype:attempted-recon; sid:200038977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.qyoqyz.za.com"; classtype:attempted-recon; sid:200038978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.qytbke.za.com"; classtype:attempted-recon; sid:200038979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.trzfav.za.com"; classtype:attempted-recon; sid:200038980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.uhdxmb.za.com"; classtype:attempted-recon; sid:200038981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.vhwplz.za.com"; classtype:attempted-recon; sid:200038982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.vucabx.za.com"; classtype:attempted-recon; sid:200038983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.vusnur.za.com"; classtype:attempted-recon; sid:200038984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.wssjge.za.com"; classtype:attempted-recon; sid:200038985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.yjnkya.za.com"; classtype:attempted-recon; sid:200038986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.zhafla.za.com"; classtype:attempted-recon; sid:200038987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcseecei.viveaaevesi.zktobi.za.com"; classtype:attempted-recon; sid:200038988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.cpclxs.za.com"; classtype:attempted-recon; sid:200038989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.difkhu.za.com"; classtype:attempted-recon; sid:200038990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.epmgtc.za.com"; classtype:attempted-recon; sid:200038991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.fjdayb.za.com"; classtype:attempted-recon; sid:200038992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.gbwdln.za.com"; classtype:attempted-recon; sid:200038993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.ifpdph.za.com"; classtype:attempted-recon; sid:200038994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.jygknw.za.com"; classtype:attempted-recon; sid:200038995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.kzdaec.za.com"; classtype:attempted-recon; sid:200038996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.lcuqbc.za.com"; classtype:attempted-recon; sid:200038997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.mgfxpv.za.com"; classtype:attempted-recon; sid:200038998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.nsrsyf.za.com"; classtype:attempted-recon; sid:200038999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.nyapck.za.com"; classtype:attempted-recon; sid:200039000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.oaimcs.za.com"; classtype:attempted-recon; sid:200039001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.pddjuu.za.com"; classtype:attempted-recon; sid:200039002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.peqrlu.za.com"; classtype:attempted-recon; sid:200039003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.qsgdnx.za.com"; classtype:attempted-recon; sid:200039004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.sbonjn.za.com"; classtype:attempted-recon; sid:200039005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.uhdxmb.za.com"; classtype:attempted-recon; sid:200039006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.vixxvg.za.com"; classtype:attempted-recon; sid:200039007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.vnsscq.za.com"; classtype:attempted-recon; sid:200039008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.vunivt.za.com"; classtype:attempted-recon; sid:200039009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.vusnur.za.com"; classtype:attempted-recon; sid:200039010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.wffxjj.za.com"; classtype:attempted-recon; sid:200039011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.wylftw.za.com"; classtype:attempted-recon; sid:200039012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.yjnkya.za.com"; classtype:attempted-recon; sid:200039013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.yyciai.za.com"; classtype:attempted-recon; sid:200039014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.zktobi.za.com"; classtype:attempted-recon; sid:200039015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsevei.vivesavesi.zrmusc.za.com"; classtype:attempted-recon; sid:200039016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.cnzlue.za.com"; classtype:attempted-recon; sid:200039017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.difkhu.za.com"; classtype:attempted-recon; sid:200039018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.dnjggs.za.com"; classtype:attempted-recon; sid:200039019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.dzniib.za.com"; classtype:attempted-recon; sid:200039020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.fmmfcz.za.com"; classtype:attempted-recon; sid:200039021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.fthjtm.za.com"; classtype:attempted-recon; sid:200039022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200039023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.ifpdph.za.com"; classtype:attempted-recon; sid:200039024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.jpxnnz.za.com"; classtype:attempted-recon; sid:200039025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.lcuqbc.za.com"; classtype:attempted-recon; sid:200039026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.nkgnxu.za.com"; classtype:attempted-recon; sid:200039027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.nskxef.za.com"; classtype:attempted-recon; sid:200039028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200039029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.oaimcs.za.com"; classtype:attempted-recon; sid:200039030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.ojabvb.za.com"; classtype:attempted-recon; sid:200039031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.pddjuu.za.com"; classtype:attempted-recon; sid:200039032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.qbkymz.za.com"; classtype:attempted-recon; sid:200039033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.qigckf.za.com"; classtype:attempted-recon; sid:200039034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.qsgdnx.za.com"; classtype:attempted-recon; sid:200039035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.qytbke.za.com"; classtype:attempted-recon; sid:200039036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.rsxmth.za.com"; classtype:attempted-recon; sid:200039037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.ryogde.za.com"; classtype:attempted-recon; sid:200039038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.sbonjn.za.com"; classtype:attempted-recon; sid:200039039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.sewril.za.com"; classtype:attempted-recon; sid:200039040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.tfdebx.za.com"; classtype:attempted-recon; sid:200039041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.vunivt.za.com"; classtype:attempted-recon; sid:200039042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.vusnur.za.com"; classtype:attempted-recon; sid:200039043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.wssjge.za.com"; classtype:attempted-recon; sid:200039044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.yjnkya.za.com"; classtype:attempted-recon; sid:200039045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.ylvgii.za.com"; classtype:attempted-recon; sid:200039046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.yyciai.za.com"; classtype:attempted-recon; sid:200039047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.zenagx.za.com"; classtype:attempted-recon; sid:200039048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.ziqmtw.za.com"; classtype:attempted-recon; sid:200039049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.zrmusc.za.com"; classtype:attempted-recon; sid:200039050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsieecei.viveiaaevesi.zudxug.za.com"; classtype:attempted-recon; sid:200039051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.apoljj.za.com"; classtype:attempted-recon; sid:200039052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.difkhu.za.com"; classtype:attempted-recon; sid:200039053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.frghvs.za.com"; classtype:attempted-recon; sid:200039054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.gbxbjo.za.com"; classtype:attempted-recon; sid:200039055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.lqonrt.za.com"; classtype:attempted-recon; sid:200039056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.mgfxpv.za.com"; classtype:attempted-recon; sid:200039057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200039058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.nyapck.za.com"; classtype:attempted-recon; sid:200039059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.obnjjr.za.com"; classtype:attempted-recon; sid:200039060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.ojabvb.za.com"; classtype:attempted-recon; sid:200039061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.peqrlu.za.com"; classtype:attempted-recon; sid:200039062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.pfxtar.za.com"; classtype:attempted-recon; sid:200039063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.prfshi.za.com"; classtype:attempted-recon; sid:200039064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.pxwxmw.za.com"; classtype:attempted-recon; sid:200039065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.rouqjs.za.com"; classtype:attempted-recon; sid:200039066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.stghfe.za.com"; classtype:attempted-recon; sid:200039067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.taqabm.za.com"; classtype:attempted-recon; sid:200039068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.tfdebx.za.com"; classtype:attempted-recon; sid:200039069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.vixxvg.za.com"; classtype:attempted-recon; sid:200039070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.vusnur.za.com"; classtype:attempted-recon; sid:200039071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.wffxjj.za.com"; classtype:attempted-recon; sid:200039072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.wssjge.za.com"; classtype:attempted-recon; sid:200039073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.xioxfp.za.com"; classtype:attempted-recon; sid:200039074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.yjnkya.za.com"; classtype:attempted-recon; sid:200039075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.ymixml.za.com"; classtype:attempted-recon; sid:200039076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.yoltyz.za.com"; classtype:attempted-recon; sid:200039077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.yyciai.za.com"; classtype:attempted-recon; sid:200039078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.zhafla.za.com"; classtype:attempted-recon; sid:200039079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.ziqmtw.za.com"; classtype:attempted-recon; sid:200039080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.zlppsf.za.com"; classtype:attempted-recon; sid:200039081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsievei.vivesiavesi.zrmusc.za.com"; classtype:attempted-recon; sid:200039082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.apoljj.za.com"; classtype:attempted-recon; sid:200039083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.axbhie.za.com"; classtype:attempted-recon; sid:200039084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.cbargn.za.com"; classtype:attempted-recon; sid:200039085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.cpclxs.za.com"; classtype:attempted-recon; sid:200039086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.dnjggs.za.com"; classtype:attempted-recon; sid:200039087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.fflglh.za.com"; classtype:attempted-recon; sid:200039088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.fjdayb.za.com"; classtype:attempted-recon; sid:200039089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200039090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.jzemci.za.com"; classtype:attempted-recon; sid:200039091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.lqonrt.za.com"; classtype:attempted-recon; sid:200039092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.mgfxpv.za.com"; classtype:attempted-recon; sid:200039093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.nkgnxu.za.com"; classtype:attempted-recon; sid:200039094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.nqawww.za.com"; classtype:attempted-recon; sid:200039095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200039096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.ojabvb.za.com"; classtype:attempted-recon; sid:200039097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.pddjuu.za.com"; classtype:attempted-recon; sid:200039098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.peqrlu.za.com"; classtype:attempted-recon; sid:200039099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.pruuwp.za.com"; classtype:attempted-recon; sid:200039100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.pxwxmw.za.com"; classtype:attempted-recon; sid:200039101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.qytbke.za.com"; classtype:attempted-recon; sid:200039102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.ryogde.za.com"; classtype:attempted-recon; sid:200039103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.sbonjn.za.com"; classtype:attempted-recon; sid:200039104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.sewril.za.com"; classtype:attempted-recon; sid:200039105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.stghfe.za.com"; classtype:attempted-recon; sid:200039106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.sznube.za.com"; classtype:attempted-recon; sid:200039107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.trzfav.za.com"; classtype:attempted-recon; sid:200039108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.uktqmo.za.com"; classtype:attempted-recon; sid:200039109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.ygrkwy.za.com"; classtype:attempted-recon; sid:200039110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.yoltyz.za.com"; classtype:attempted-recon; sid:200039111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.yyciai.za.com"; classtype:attempted-recon; sid:200039112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.zenagx.za.com"; classtype:attempted-recon; sid:200039113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.zhafla.za.com"; classtype:attempted-recon; sid:200039114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.ziqmtw.za.com"; classtype:attempted-recon; sid:200039115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.ziuzyk.za.com"; classtype:attempted-recon; sid:200039116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.zrmusc.za.com"; classtype:attempted-recon; sid:200039117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesecei.vcirveeaaevesi.zudxug.za.com"; classtype:attempted-recon; sid:200039118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.cnzlue.za.com"; classtype:attempted-recon; sid:200039119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.dyjnbb.za.com"; classtype:attempted-recon; sid:200039120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200039121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.jzemci.za.com"; classtype:attempted-recon; sid:200039122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.kzdaec.za.com"; classtype:attempted-recon; sid:200039123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.lqonrt.za.com"; classtype:attempted-recon; sid:200039124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.lvuojw.za.com"; classtype:attempted-recon; sid:200039125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.lymdeg.za.com"; classtype:attempted-recon; sid:200039126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.nqawww.za.com"; classtype:attempted-recon; sid:200039127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.nsrsyf.za.com"; classtype:attempted-recon; sid:200039128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.nyapck.za.com"; classtype:attempted-recon; sid:200039129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.ojabvb.za.com"; classtype:attempted-recon; sid:200039130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.peqrlu.za.com"; classtype:attempted-recon; sid:200039131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.phskmc.za.com"; classtype:attempted-recon; sid:200039132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.prfshi.za.com"; classtype:attempted-recon; sid:200039133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.pruuwp.za.com"; classtype:attempted-recon; sid:200039134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.qbkymz.za.com"; classtype:attempted-recon; sid:200039135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.qigckf.za.com"; classtype:attempted-recon; sid:200039136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.qytbke.za.com"; classtype:attempted-recon; sid:200039137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.sewril.za.com"; classtype:attempted-recon; sid:200039138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.uhdxmb.za.com"; classtype:attempted-recon; sid:200039139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.vjyswj.za.com"; classtype:attempted-recon; sid:200039140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.vmmoue.za.com"; classtype:attempted-recon; sid:200039141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.vnsscq.za.com"; classtype:attempted-recon; sid:200039142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.wffxjj.za.com"; classtype:attempted-recon; sid:200039143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.xmigxe.za.com"; classtype:attempted-recon; sid:200039144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.yjnkya.za.com"; classtype:attempted-recon; sid:200039145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.ylvgii.za.com"; classtype:attempted-recon; sid:200039146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.yoltyz.za.com"; classtype:attempted-recon; sid:200039147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.yyciai.za.com"; classtype:attempted-recon; sid:200039148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.zenagx.za.com"; classtype:attempted-recon; sid:200039149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreesvei.vicvreesavesi.zhafla.za.com"; classtype:attempted-recon; sid:200039150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.exxnjv.top"; classtype:attempted-recon; sid:200039151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.fbgnzp.top"; classtype:attempted-recon; sid:200039152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.fshxqm.top"; classtype:attempted-recon; sid:200039153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.iktggq.top"; classtype:attempted-recon; sid:200039154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.klvjnr.top"; classtype:attempted-recon; sid:200039155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.lwxxqk.top"; classtype:attempted-recon; sid:200039156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.mdaxpz.top"; classtype:attempted-recon; sid:200039157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.mzrkkc.top"; classtype:attempted-recon; sid:200039158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.nbhlvc.top"; classtype:attempted-recon; sid:200039159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.nyzjio.top"; classtype:attempted-recon; sid:200039160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.ojvntr.top"; classtype:attempted-recon; sid:200039161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.oycpxz.top"; classtype:attempted-recon; sid:200039162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.pysitg.top"; classtype:attempted-recon; sid:200039163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.qwudnh.top"; classtype:attempted-recon; sid:200039164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreisevei.vcirveesiavesi.frhyqg.top"; classtype:attempted-recon; sid:200039165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreisevei.vcirveesiavesi.fshxqm.top"; classtype:attempted-recon; sid:200039166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreisevei.vcirveesiavesi.gyaexz.top"; classtype:attempted-recon; sid:200039167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreisevei.vcirveesiavesi.iktggq.top"; classtype:attempted-recon; sid:200039168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreisevei.vcirveesiavesi.lrtzrp.top"; classtype:attempted-recon; sid:200039169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreisevei.vcirveesiavesi.poaixv.top"; classtype:attempted-recon; sid:200039170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsreisevei.vcirveesiavesi.rjfbqi.top"; classtype:attempted-recon; sid:200039171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.fgmlde.top"; classtype:attempted-recon; sid:200039172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.fynqxp.top"; classtype:attempted-recon; sid:200039173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.ghqphy.top"; classtype:attempted-recon; sid:200039174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.iuruyp.top"; classtype:attempted-recon; sid:200039175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.kvtvic.top"; classtype:attempted-recon; sid:200039176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.laeyhc.top"; classtype:attempted-recon; sid:200039177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.ljsifw.top"; classtype:attempted-recon; sid:200039178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.lrtzrp.top"; classtype:attempted-recon; sid:200039179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.mhnved.top"; classtype:attempted-recon; sid:200039180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.pwnccs.top"; classtype:attempted-recon; sid:200039181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.qnomqo.top"; classtype:attempted-recon; sid:200039182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.rataxm.top"; classtype:attempted-recon; sid:200039183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcsseceecei.viveaaesi.rchahv.top"; classtype:attempted-recon; sid:200039184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.fprrlq.top"; classtype:attempted-recon; sid:200039185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.ghdbbh.top"; classtype:attempted-recon; sid:200039186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.gtfvze.top"; classtype:attempted-recon; sid:200039187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.gyaexz.top"; classtype:attempted-recon; sid:200039188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.iktggq.top"; classtype:attempted-recon; sid:200039189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.lrtzrp.top"; classtype:attempted-recon; sid:200039190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.mzrkkc.top"; classtype:attempted-recon; sid:200039191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.njhpgs.top"; classtype:attempted-recon; sid:200039192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.nmbqjh.top"; classtype:attempted-recon; sid:200039193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.owqbbi.top"; classtype:attempted-recon; sid:200039194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.poaixv.top"; classtype:attempted-recon; sid:200039195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecevei.vivesavi.qjtfvg.top"; classtype:attempted-recon; sid:200039196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.fiwzrb.top"; classtype:attempted-recon; sid:200039197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.gjrbgg.top"; classtype:attempted-recon; sid:200039198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.hgpqys.top"; classtype:attempted-recon; sid:200039199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.irllcd.top"; classtype:attempted-recon; sid:200039200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.kvtvic.top"; classtype:attempted-recon; sid:200039201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.lhewuf.top"; classtype:attempted-recon; sid:200039202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.ltineb.top"; classtype:attempted-recon; sid:200039203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.mdaxpz.top"; classtype:attempted-recon; sid:200039204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.mmcqln.top"; classtype:attempted-recon; sid:200039205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.njhpgs.top"; classtype:attempted-recon; sid:200039206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.owqbbi.top"; classtype:attempted-recon; sid:200039207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.qjtfvg.top"; classtype:attempted-recon; sid:200039208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecieecei.viveievesi.rkafro.top"; classtype:attempted-recon; sid:200039209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.exxnjv.top"; classtype:attempted-recon; sid:200039210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.fshxqm.top"; classtype:attempted-recon; sid:200039211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.guxqvw.top"; classtype:attempted-recon; sid:200039212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.kxcepn.top"; classtype:attempted-recon; sid:200039213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.laeyhc.top"; classtype:attempted-recon; sid:200039214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.lhewuf.top"; classtype:attempted-recon; sid:200039215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.mgandi.top"; classtype:attempted-recon; sid:200039216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.nmbqjh.top"; classtype:attempted-recon; sid:200039217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.ntlhha.top"; classtype:attempted-recon; sid:200039218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.oycpxz.top"; classtype:attempted-recon; sid:200039219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecievei.vivesiesi.pyseum.top"; classtype:attempted-recon; sid:200039220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.abzcr.icu"; classtype:attempted-recon; sid:200039221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.ajvrm.icu"; classtype:attempted-recon; sid:200039222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.badkfs.icu"; classtype:attempted-recon; sid:200039223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.balaet.icu"; classtype:attempted-recon; sid:200039224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.benefitted.icu"; classtype:attempted-recon; sid:200039225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.bjexfe.top"; classtype:attempted-recon; sid:200039226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.bporry.top"; classtype:attempted-recon; sid:200039227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.bspybm.top"; classtype:attempted-recon; sid:200039228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.bzfdtw.top"; classtype:attempted-recon; sid:200039229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.ccvjar.top"; classtype:attempted-recon; sid:200039230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.cntxao.top"; classtype:attempted-recon; sid:200039231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.digitize.ltd"; classtype:attempted-recon; sid:200039232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.dtyweh.top"; classtype:attempted-recon; sid:200039233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.ehngpw.top"; classtype:attempted-recon; sid:200039234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.fvqetn.top"; classtype:attempted-recon; sid:200039235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.htixjser.icu"; classtype:attempted-recon; sid:200039236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.kpblio.top"; classtype:attempted-recon; sid:200039237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.msiesya.icu"; classtype:attempted-recon; sid:200039238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.quvhdd.top"; classtype:attempted-recon; sid:200039239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.rsfcmb.icu"; classtype:attempted-recon; sid:200039240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.vfchrz.top"; classtype:attempted-recon; sid:200039241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.wbziul.top"; classtype:attempted-recon; sid:200039242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.wgipfc.top"; classtype:attempted-recon; sid:200039243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.xlrppx.top"; classtype:attempted-recon; sid:200039244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.yanwen.cc"; classtype:attempted-recon; sid:200039245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.yhitbg.top"; classtype:attempted-recon; sid:200039246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.ymwfnw.top"; classtype:attempted-recon; sid:200039247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesecei.vcieeaaevesi.znegsr.top"; classtype:attempted-recon; sid:200039248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.abzcr.icu"; classtype:attempted-recon; sid:200039249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.ajvrm.icu"; classtype:attempted-recon; sid:200039250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.bporry.top"; classtype:attempted-recon; sid:200039251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.bzfdtw.top"; classtype:attempted-recon; sid:200039252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.dhwynj.top"; classtype:attempted-recon; sid:200039253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.eucvbc.top"; classtype:attempted-recon; sid:200039254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.fvqetn.top"; classtype:attempted-recon; sid:200039255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.hfoesk.top"; classtype:attempted-recon; sid:200039256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.mavbpi.top"; classtype:attempted-recon; sid:200039257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.msiesya.icu"; classtype:attempted-recon; sid:200039258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.pkilix.top"; classtype:attempted-recon; sid:200039259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.pvhngq.top"; classtype:attempted-recon; sid:200039260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.qskgtg.top"; classtype:attempted-recon; sid:200039261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.runjin004.icu"; classtype:attempted-recon; sid:200039262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.shaot.icu"; classtype:attempted-recon; sid:200039263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.ssrpsl.top"; classtype:attempted-recon; sid:200039264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.upuphone.ltd"; classtype:attempted-recon; sid:200039265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.wbziul.top"; classtype:attempted-recon; sid:200039266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.wingfh.top"; classtype:attempted-recon; sid:200039267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.xlrppx.top"; classtype:attempted-recon; sid:200039268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.yavkol.top"; classtype:attempted-recon; sid:200039269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.zblgxm.top"; classtype:attempted-recon; sid:200039270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreesvei.vicvesavesi.zjsyd.icu"; classtype:attempted-recon; sid:200039271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.abzcr.icu"; classtype:attempted-recon; sid:200039272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.bdbbvv.top"; classtype:attempted-recon; sid:200039273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.benefitted.icu"; classtype:attempted-recon; sid:200039274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.bzfdtw.top"; classtype:attempted-recon; sid:200039275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.ccvjar.top"; classtype:attempted-recon; sid:200039276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.cipqzd.top"; classtype:attempted-recon; sid:200039277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.ckhnlk.top"; classtype:attempted-recon; sid:200039278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.digitize.ltd"; classtype:attempted-recon; sid:200039279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.dpqshv.top"; classtype:attempted-recon; sid:200039280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.ehxsyt.top"; classtype:attempted-recon; sid:200039281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.fgcew.icu"; classtype:attempted-recon; sid:200039282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.hfoesk.top"; classtype:attempted-recon; sid:200039283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.htixjser.icu"; classtype:attempted-recon; sid:200039284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.mkpiab.top"; classtype:attempted-recon; sid:200039285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.msiesya.icu"; classtype:attempted-recon; sid:200039286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.pkilix.top"; classtype:attempted-recon; sid:200039287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.quvhdd.top"; classtype:attempted-recon; sid:200039288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.runjin004.icu"; classtype:attempted-recon; sid:200039289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.sctgkq.top"; classtype:attempted-recon; sid:200039290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.sejmqk.top"; classtype:attempted-recon; sid:200039291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.ttxupv.top"; classtype:attempted-recon; sid:200039292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.upuphone.group"; classtype:attempted-recon; sid:200039293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.wbvazy.top"; classtype:attempted-recon; sid:200039294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.wgipfc.top"; classtype:attempted-recon; sid:200039295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.xaeuyf.top"; classtype:attempted-recon; sid:200039296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.xqpwkk.top"; classtype:attempted-recon; sid:200039297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.xudixq.top"; classtype:attempted-recon; sid:200039298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.yhitbg.top"; classtype:attempted-recon; sid:200039299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.ymwfnw.top"; classtype:attempted-recon; sid:200039300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreiseecei.cveveiaaevesi.zliboyp.icu"; classtype:attempted-recon; sid:200039301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.abzcr.icu"; classtype:attempted-recon; sid:200039302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.ajvrm.icu"; classtype:attempted-recon; sid:200039303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.balaet.icu"; classtype:attempted-recon; sid:200039304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.bjexfe.top"; classtype:attempted-recon; sid:200039305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.bporry.top"; classtype:attempted-recon; sid:200039306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.ckhnlk.top"; classtype:attempted-recon; sid:200039307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.cwadib.top"; classtype:attempted-recon; sid:200039308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.cyqggi.top"; classtype:attempted-recon; sid:200039309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.dlnxzo.top"; classtype:attempted-recon; sid:200039310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.dtyweh.top"; classtype:attempted-recon; sid:200039311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.hfoesk.top"; classtype:attempted-recon; sid:200039312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.mqiwux.top"; classtype:attempted-recon; sid:200039313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.nxxdqw.top"; classtype:attempted-recon; sid:200039314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.rsfcmb.icu"; classtype:attempted-recon; sid:200039315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.tvdoqx.top"; classtype:attempted-recon; sid:200039316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.upuphone.group"; classtype:attempted-recon; sid:200039317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.vfchrz.top"; classtype:attempted-recon; sid:200039318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.wgipfc.top"; classtype:attempted-recon; sid:200039319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.wxnyfl.top"; classtype:attempted-recon; sid:200039320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.xudixq.top"; classtype:attempted-recon; sid:200039321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.xxdjik.top"; classtype:attempted-recon; sid:200039322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.yavkol.top"; classtype:attempted-recon; sid:200039323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcssecreisevei.vcieesiavesi.zblgxm.top"; classtype:attempted-recon; sid:200039324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.2124458.xyz"; classtype:attempted-recon; sid:200039325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.2355587.xyz"; classtype:attempted-recon; sid:200039326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.5378887.xyz"; classtype:attempted-recon; sid:200039327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.6887453.xyz"; classtype:attempted-recon; sid:200039328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.bcjgin.top"; classtype:attempted-recon; sid:200039329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.likduf.icu"; classtype:attempted-recon; sid:200039330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.pukrre.top"; classtype:attempted-recon; sid:200039331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.rbbojh.top"; classtype:attempted-recon; sid:200039332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaaes.visvecevvaseier.uxhejc.top"; classtype:attempted-recon; sid:200039333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.2124458.xyz"; classtype:attempted-recon; sid:200039334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.ebltts.top"; classtype:attempted-recon; sid:200039335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.fodxlh.top"; classtype:attempted-recon; sid:200039336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.ftrdog.top"; classtype:attempted-recon; sid:200039337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.gbiuss.top"; classtype:attempted-recon; sid:200039338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.hxsyjk.top"; classtype:attempted-recon; sid:200039339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.hzwrnd.top"; classtype:attempted-recon; sid:200039340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.ivupqh.top"; classtype:attempted-recon; sid:200039341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.pdmvfc.top"; classtype:attempted-recon; sid:200039342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.ssmkdz.top"; classtype:attempted-recon; sid:200039343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaaes.visvsecevveser.uxhejc.top"; classtype:attempted-recon; sid:200039344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.2124458.xyz"; classtype:attempted-recon; sid:200039345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.5378887.xyz"; classtype:attempted-recon; sid:200039346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.7788513.xyz"; classtype:attempted-recon; sid:200039347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.bcjgin.top"; classtype:attempted-recon; sid:200039348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.homhcy.top"; classtype:attempted-recon; sid:200039349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.hzwrnd.top"; classtype:attempted-recon; sid:200039350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.pdmvfc.top"; classtype:attempted-recon; sid:200039351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.ssmkdz.top"; classtype:attempted-recon; sid:200039352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.tbimuo.top"; classtype:attempted-recon; sid:200039353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.txvcqg.top"; classtype:attempted-recon; sid:200039354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaeaes.visvcaaseier.uxhejc.top"; classtype:attempted-recon; sid:200039355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaees.visvsaaeser.3838833.xyz"; classtype:attempted-recon; sid:200039356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaees.visvsaaeser.fodxlh.top"; classtype:attempted-recon; sid:200039357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaees.visvsaaeser.hzwrnd.top"; classtype:attempted-recon; sid:200039358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaees.visvsaaeser.pdmvfc.top"; classtype:attempted-recon; sid:200039359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaees.visvsaaeser.txvcqg.top"; classtype:attempted-recon; sid:200039360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaees.visvsaaeser.vppvl.top"; classtype:attempted-recon; sid:200039361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivcvaees.visvsaaeser.wtkiwf.top"; classtype:attempted-recon; sid:200039362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveaaverei.vivcrvcoie.1p2igt.icu"; classtype:attempted-recon; sid:200039363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveaaverei.vivcrvcoie.ayqtuj.top"; classtype:attempted-recon; sid:200039364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveaaverei.vivcrvcoie.d24mu.icu"; classtype:attempted-recon; sid:200039365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveaaverei.vivcrvcoie.fiwzrb.top"; classtype:attempted-recon; sid:200039366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveaaverei.vivcrvcoie.qcbeno.shop"; classtype:attempted-recon; sid:200039367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveaaverei.vivcrvcoie.xx66ss19.xyz"; classtype:attempted-recon; sid:200039368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.2021071.top"; classtype:attempted-recon; sid:200039369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.31567.cn"; classtype:attempted-recon; sid:200039370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.alister.ltd"; classtype:attempted-recon; sid:200039371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.bcloud.group"; classtype:attempted-recon; sid:200039372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.bmhkg09.shop"; classtype:attempted-recon; sid:200039373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.cjehdm.top"; classtype:attempted-recon; sid:200039374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.clllbx.top"; classtype:attempted-recon; sid:200039375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.dwbjs.top"; classtype:attempted-recon; sid:200039376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.ebwptg.top"; classtype:attempted-recon; sid:200039377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.fcwh886.top"; classtype:attempted-recon; sid:200039378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.francis.ltd"; classtype:attempted-recon; sid:200039379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.fzosfk.top"; classtype:attempted-recon; sid:200039380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.gafuwd.top"; classtype:attempted-recon; sid:200039381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.gcloud.group"; classtype:attempted-recon; sid:200039382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.ggnxmf.top"; classtype:attempted-recon; sid:200039383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.glmbfd.top"; classtype:attempted-recon; sid:200039384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.gzmvuo.top"; classtype:attempted-recon; sid:200039385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.hafner.group"; classtype:attempted-recon; sid:200039386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.hncwbn.top"; classtype:attempted-recon; sid:200039387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.icfpvc.top"; classtype:attempted-recon; sid:200039388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.ipexqv.top"; classtype:attempted-recon; sid:200039389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.jimdyd.top"; classtype:attempted-recon; sid:200039390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.jjglsw.top"; classtype:attempted-recon; sid:200039391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.lcloud.group"; classtype:attempted-recon; sid:200039392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.leigh.ltd"; classtype:attempted-recon; sid:200039393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.leonard.ltd"; classtype:attempted-recon; sid:200039394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.lhixak.top"; classtype:attempted-recon; sid:200039395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.lhzfkh.top"; classtype:attempted-recon; sid:200039396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.limassol.group"; classtype:attempted-recon; sid:200039397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.loskh.top"; classtype:attempted-recon; sid:200039398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.nicosia.group"; classtype:attempted-recon; sid:200039399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.njrksy.top"; classtype:attempted-recon; sid:200039400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.norfolk.ltd"; classtype:attempted-recon; sid:200039401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.npxfcv.top"; classtype:attempted-recon; sid:200039402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.nvjdhuei.icu"; classtype:attempted-recon; sid:200039403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.oamprk.top"; classtype:attempted-recon; sid:200039404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.owens.ltd"; classtype:attempted-recon; sid:200039405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.ptywgv.top"; classtype:attempted-recon; sid:200039406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.qslbjc.top"; classtype:attempted-recon; sid:200039407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.qzvxui.top"; classtype:attempted-recon; sid:200039408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.reynolds.ltd"; classtype:attempted-recon; sid:200039409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.riley.ltd"; classtype:attempted-recon; sid:200039410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.robertson.ltd"; classtype:attempted-recon; sid:200039411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.rowan.ltd"; classtype:attempted-recon; sid:200039412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.shjpxn.top"; classtype:attempted-recon; sid:200039413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.sinclair.ltd"; classtype:attempted-recon; sid:200039414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.sqmim.top"; classtype:attempted-recon; sid:200039415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.tubatue.icu"; classtype:attempted-recon; sid:200039416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.tvrimx.top"; classtype:attempted-recon; sid:200039417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.tvxkmp.top"; classtype:attempted-recon; sid:200039418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.vjlile.top"; classtype:attempted-recon; sid:200039419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.vnxgwb.top"; classtype:attempted-recon; sid:200039420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.vordmh.top"; classtype:attempted-recon; sid:200039421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.wcloud.group"; classtype:attempted-recon; sid:200039422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.xdaupp.top"; classtype:attempted-recon; sid:200039423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.xhgmfb.top"; classtype:attempted-recon; sid:200039424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.xniqmj.top"; classtype:attempted-recon; sid:200039425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.xulhaq.top"; classtype:attempted-recon; sid:200039426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.zbvvpg.top"; classtype:attempted-recon; sid:200039427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.zeyeds.ltd"; classtype:attempted-recon; sid:200039428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.zqjkvx.top"; classtype:attempted-recon; sid:200039429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevaarvasecvsi.eao.zrxpv.top"; classtype:attempted-recon; sid:200039430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.2021071.top"; classtype:attempted-recon; sid:200039431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.22567.cn"; classtype:attempted-recon; sid:200039432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.31567.cn"; classtype:attempted-recon; sid:200039433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.53567.cn"; classtype:attempted-recon; sid:200039434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.87567.cn"; classtype:attempted-recon; sid:200039435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.acloud.group"; classtype:attempted-recon; sid:200039436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.alister.ltd"; classtype:attempted-recon; sid:200039437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.bcloud.group"; classtype:attempted-recon; sid:200039438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.cjehdm.top"; classtype:attempted-recon; sid:200039439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.clllbx.top"; classtype:attempted-recon; sid:200039440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.ebwptg.top"; classtype:attempted-recon; sid:200039441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.erfghk03.shop"; classtype:attempted-recon; sid:200039442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.fcwh886.top"; classtype:attempted-recon; sid:200039443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.francis.ltd"; classtype:attempted-recon; sid:200039444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.fzosfk.top"; classtype:attempted-recon; sid:200039445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.gafuwd.top"; classtype:attempted-recon; sid:200039446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.glmbfd.top"; classtype:attempted-recon; sid:200039447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.hafner.group"; classtype:attempted-recon; sid:200039448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.hncwbn.top"; classtype:attempted-recon; sid:200039449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.ipexqv.top"; classtype:attempted-recon; sid:200039450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.jcloud.group"; classtype:attempted-recon; sid:200039451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.jimdyd.top"; classtype:attempted-recon; sid:200039452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.jjglsw.top"; classtype:attempted-recon; sid:200039453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.leigh.ltd"; classtype:attempted-recon; sid:200039454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.leonard.ltd"; classtype:attempted-recon; sid:200039455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.lhixak.top"; classtype:attempted-recon; sid:200039456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.lhzfkh.top"; classtype:attempted-recon; sid:200039457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.limassol.group"; classtype:attempted-recon; sid:200039458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.loskh.top"; classtype:attempted-recon; sid:200039459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.mkma07.shop"; classtype:attempted-recon; sid:200039460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.mortys.cn"; classtype:attempted-recon; sid:200039461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.njrksy.top"; classtype:attempted-recon; sid:200039462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.norfolk.ltd"; classtype:attempted-recon; sid:200039463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.npxfcv.top"; classtype:attempted-recon; sid:200039464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.nsuuieds.icu"; classtype:attempted-recon; sid:200039465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.nvjdhuei.icu"; classtype:attempted-recon; sid:200039466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.oamprk.top"; classtype:attempted-recon; sid:200039467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.ocloud.group"; classtype:attempted-recon; sid:200039468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.owens.ltd"; classtype:attempted-recon; sid:200039469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.ptywgv.top"; classtype:attempted-recon; sid:200039470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.qzvxui.top"; classtype:attempted-recon; sid:200039471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.reynolds.ltd"; classtype:attempted-recon; sid:200039472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.riley.ltd"; classtype:attempted-recon; sid:200039473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.robertson.ltd"; classtype:attempted-recon; sid:200039474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.rowan.ltd"; classtype:attempted-recon; sid:200039475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.shjpxn.top"; classtype:attempted-recon; sid:200039476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.sinclair.ltd"; classtype:attempted-recon; sid:200039477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.sqmim.top"; classtype:attempted-recon; sid:200039478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.tvrimx.top"; classtype:attempted-recon; sid:200039479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.tvxkmp.top"; classtype:attempted-recon; sid:200039480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.vjlile.top"; classtype:attempted-recon; sid:200039481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.vnxgwb.top"; classtype:attempted-recon; sid:200039482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.vordmh.top"; classtype:attempted-recon; sid:200039483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.xdaupp.top"; classtype:attempted-recon; sid:200039484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.xhgmfb.top"; classtype:attempted-recon; sid:200039485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.xniqmj.top"; classtype:attempted-recon; sid:200039486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.xulhaq.top"; classtype:attempted-recon; sid:200039487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.zbvvpg.top"; classtype:attempted-recon; sid:200039488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.zeyeds.ltd"; classtype:attempted-recon; sid:200039489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.zqjkvx.top"; classtype:attempted-recon; sid:200039490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveevavrsavsci.eo.zrxpv.top"; classtype:attempted-recon; sid:200039491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.2021071.top"; classtype:attempted-recon; sid:200039492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.31567.cn"; classtype:attempted-recon; sid:200039493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.85567.cn"; classtype:attempted-recon; sid:200039494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.87567.cn"; classtype:attempted-recon; sid:200039495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.alister.ltd"; classtype:attempted-recon; sid:200039496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.cjehdm.top"; classtype:attempted-recon; sid:200039497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.clllbx.top"; classtype:attempted-recon; sid:200039498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.dwbjs.top"; classtype:attempted-recon; sid:200039499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.ebwptg.top"; classtype:attempted-recon; sid:200039500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.fcloud.group"; classtype:attempted-recon; sid:200039501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.fcwh886.top"; classtype:attempted-recon; sid:200039502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.francis.ltd"; classtype:attempted-recon; sid:200039503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.fzosfk.top"; classtype:attempted-recon; sid:200039504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.gafuwd.top"; classtype:attempted-recon; sid:200039505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.ggnxmf.top"; classtype:attempted-recon; sid:200039506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.glmbfd.top"; classtype:attempted-recon; sid:200039507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.hcloud.group"; classtype:attempted-recon; sid:200039508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.hncwbn.top"; classtype:attempted-recon; sid:200039509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.ipexqv.top"; classtype:attempted-recon; sid:200039510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.jcloud.group"; classtype:attempted-recon; sid:200039511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.jimdyd.top"; classtype:attempted-recon; sid:200039512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.jjglsw.top"; classtype:attempted-recon; sid:200039513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.leigh.ltd"; classtype:attempted-recon; sid:200039514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.leonard.ltd"; classtype:attempted-recon; sid:200039515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.lhixak.top"; classtype:attempted-recon; sid:200039516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.lhzfkh.top"; classtype:attempted-recon; sid:200039517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.limassol.group"; classtype:attempted-recon; sid:200039518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.loskh.top"; classtype:attempted-recon; sid:200039519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.mnvhdje.icu"; classtype:attempted-recon; sid:200039520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.mortys.cn"; classtype:attempted-recon; sid:200039521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.njrksy.top"; classtype:attempted-recon; sid:200039522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.norfolk.ltd"; classtype:attempted-recon; sid:200039523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.npxfcv.top"; classtype:attempted-recon; sid:200039524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200039525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.oamprk.top"; classtype:attempted-recon; sid:200039526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.owens.ltd"; classtype:attempted-recon; sid:200039527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.ptywgv.top"; classtype:attempted-recon; sid:200039528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.qzvxui.top"; classtype:attempted-recon; sid:200039529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.reynolds.ltd"; classtype:attempted-recon; sid:200039530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.riley.ltd"; classtype:attempted-recon; sid:200039531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.robertson.ltd"; classtype:attempted-recon; sid:200039532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.rowan.ltd"; classtype:attempted-recon; sid:200039533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.scloud.group"; classtype:attempted-recon; sid:200039534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.shjpxn.top"; classtype:attempted-recon; sid:200039535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.sinclair.ltd"; classtype:attempted-recon; sid:200039536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.sqmim.top"; classtype:attempted-recon; sid:200039537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.tvrimx.top"; classtype:attempted-recon; sid:200039538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.tvxkmp.top"; classtype:attempted-recon; sid:200039539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.vjlile.top"; classtype:attempted-recon; sid:200039540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.vnxgwb.top"; classtype:attempted-recon; sid:200039541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.vordmh.top"; classtype:attempted-recon; sid:200039542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.xdaupp.top"; classtype:attempted-recon; sid:200039543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.xhgmfb.top"; classtype:attempted-recon; sid:200039544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.xniqmj.top"; classtype:attempted-recon; sid:200039545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.xulhaq.top"; classtype:attempted-recon; sid:200039546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.zbvvpg.top"; classtype:attempted-recon; sid:200039547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200039548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.zqjkvx.top"; classtype:attempted-recon; sid:200039549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveaacrvasecvsi.eaoaa.zrxpv.top"; classtype:attempted-recon; sid:200039550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.2021071.top"; classtype:attempted-recon; sid:200039551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.22567.cn"; classtype:attempted-recon; sid:200039552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.31567.cn"; classtype:attempted-recon; sid:200039553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.85567.cn"; classtype:attempted-recon; sid:200039554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.87567.cn"; classtype:attempted-recon; sid:200039555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.ahiftgl.top"; classtype:attempted-recon; sid:200039556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.alister.ltd"; classtype:attempted-recon; sid:200039557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.bcloud.group"; classtype:attempted-recon; sid:200039558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.ccloud.group"; classtype:attempted-recon; sid:200039559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.cjehdm.top"; classtype:attempted-recon; sid:200039560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.clllbx.top"; classtype:attempted-recon; sid:200039561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.dwbjs.top"; classtype:attempted-recon; sid:200039562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.ebwptg.top"; classtype:attempted-recon; sid:200039563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.fcwh886.top"; classtype:attempted-recon; sid:200039564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.francis.ltd"; classtype:attempted-recon; sid:200039565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.fzosfk.top"; classtype:attempted-recon; sid:200039566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.gafuwd.top"; classtype:attempted-recon; sid:200039567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.glmbfd.top"; classtype:attempted-recon; sid:200039568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.hncwbn.top"; classtype:attempted-recon; sid:200039569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.icfpvc.top"; classtype:attempted-recon; sid:200039570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.ipexqv.top"; classtype:attempted-recon; sid:200039571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.jimdyd.top"; classtype:attempted-recon; sid:200039572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.jjglsw.top"; classtype:attempted-recon; sid:200039573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.lcloud.group"; classtype:attempted-recon; sid:200039574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.leigh.ltd"; classtype:attempted-recon; sid:200039575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.leonard.ltd"; classtype:attempted-recon; sid:200039576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.lhixak.top"; classtype:attempted-recon; sid:200039577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.lhzfkh.top"; classtype:attempted-recon; sid:200039578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.limassol.group"; classtype:attempted-recon; sid:200039579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.loskh.top"; classtype:attempted-recon; sid:200039580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.mkma07.shop"; classtype:attempted-recon; sid:200039581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.nicosia.group"; classtype:attempted-recon; sid:200039582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.njrksy.top"; classtype:attempted-recon; sid:200039583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.norfolk.ltd"; classtype:attempted-recon; sid:200039584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.npxfcv.top"; classtype:attempted-recon; sid:200039585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200039586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.oamprk.top"; classtype:attempted-recon; sid:200039587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.owens.ltd"; classtype:attempted-recon; sid:200039588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.ptywgv.top"; classtype:attempted-recon; sid:200039589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.qslbjc.top"; classtype:attempted-recon; sid:200039590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.qzvxui.top"; classtype:attempted-recon; sid:200039591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.reynolds.ltd"; classtype:attempted-recon; sid:200039592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.riley.ltd"; classtype:attempted-recon; sid:200039593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.robertson.ltd"; classtype:attempted-recon; sid:200039594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.rowan.ltd"; classtype:attempted-recon; sid:200039595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.shjpxn.top"; classtype:attempted-recon; sid:200039596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.sinclair.ltd"; classtype:attempted-recon; sid:200039597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.sqmim.top"; classtype:attempted-recon; sid:200039598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.tvrimx.top"; classtype:attempted-recon; sid:200039599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.tvxkmp.top"; classtype:attempted-recon; sid:200039600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.vjlile.top"; classtype:attempted-recon; sid:200039601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.vnxgwb.top"; classtype:attempted-recon; sid:200039602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.vordmh.top"; classtype:attempted-recon; sid:200039603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.xdaupp.top"; classtype:attempted-recon; sid:200039604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.xhgmfb.top"; classtype:attempted-recon; sid:200039605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.xniqmj.top"; classtype:attempted-recon; sid:200039606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.xulhaq.top"; classtype:attempted-recon; sid:200039607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.ycloud.group"; classtype:attempted-recon; sid:200039608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.zbvvpg.top"; classtype:attempted-recon; sid:200039609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200039610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.zqjkvx.top"; classtype:attempted-recon; sid:200039611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viveeveavcrsavsci.eoaa.zrxpv.top"; classtype:attempted-recon; sid:200039612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivesavsrei.vivervcsie.zxj6008.xyz"; classtype:attempted-recon; sid:200039613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivesvcasi.visvaccvsior.cvqubj.bar"; classtype:attempted-recon; sid:200039614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.2021071.top"; classtype:attempted-recon; sid:200039615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.22567.cn"; classtype:attempted-recon; sid:200039616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.31567.cn"; classtype:attempted-recon; sid:200039617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.53567.cn"; classtype:attempted-recon; sid:200039618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.85567.cn"; classtype:attempted-recon; sid:200039619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.87567.cn"; classtype:attempted-recon; sid:200039620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.ahahh04.shop"; classtype:attempted-recon; sid:200039621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.alister.ltd"; classtype:attempted-recon; sid:200039622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.bcloud.group"; classtype:attempted-recon; sid:200039623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.cjehdm.top"; classtype:attempted-recon; sid:200039624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.clllbx.top"; classtype:attempted-recon; sid:200039625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.dcloud.group"; classtype:attempted-recon; sid:200039626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.dwbjs.top"; classtype:attempted-recon; sid:200039627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.ebwptg.top"; classtype:attempted-recon; sid:200039628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.erfghk03.shop"; classtype:attempted-recon; sid:200039629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.fcwh886.top"; classtype:attempted-recon; sid:200039630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.francis.ltd"; classtype:attempted-recon; sid:200039631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.fzosfk.top"; classtype:attempted-recon; sid:200039632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.gafuwd.top"; classtype:attempted-recon; sid:200039633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.gcloud.group"; classtype:attempted-recon; sid:200039634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.ggnxmf.top"; classtype:attempted-recon; sid:200039635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.glmbfd.top"; classtype:attempted-recon; sid:200039636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.hafner.group"; classtype:attempted-recon; sid:200039637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.hncwbn.top"; classtype:attempted-recon; sid:200039638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.ipexqv.top"; classtype:attempted-recon; sid:200039639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.jimdyd.top"; classtype:attempted-recon; sid:200039640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.jjglsw.top"; classtype:attempted-recon; sid:200039641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.leigh.ltd"; classtype:attempted-recon; sid:200039642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.leonard.ltd"; classtype:attempted-recon; sid:200039643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.lhixak.top"; classtype:attempted-recon; sid:200039644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.lhzfkh.top"; classtype:attempted-recon; sid:200039645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.limassol.group"; classtype:attempted-recon; sid:200039646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.loskh.top"; classtype:attempted-recon; sid:200039647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.mkma07.shop"; classtype:attempted-recon; sid:200039648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.mnvhdje.icu"; classtype:attempted-recon; sid:200039649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.njrksy.top"; classtype:attempted-recon; sid:200039650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.norfolk.ltd"; classtype:attempted-recon; sid:200039651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.npxfcv.top"; classtype:attempted-recon; sid:200039652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.nvjdhuei.icu"; classtype:attempted-recon; sid:200039653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.oamprk.top"; classtype:attempted-recon; sid:200039654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.owens.ltd"; classtype:attempted-recon; sid:200039655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.promotion.show"; classtype:attempted-recon; sid:200039656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.ptywgv.top"; classtype:attempted-recon; sid:200039657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.qzvxui.top"; classtype:attempted-recon; sid:200039658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.reynolds.ltd"; classtype:attempted-recon; sid:200039659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.riley.ltd"; classtype:attempted-recon; sid:200039660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.robertson.ltd"; classtype:attempted-recon; sid:200039661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.rowan.ltd"; classtype:attempted-recon; sid:200039662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.shjpxn.top"; classtype:attempted-recon; sid:200039663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.sinclair.ltd"; classtype:attempted-recon; sid:200039664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.smartlife.plus"; classtype:attempted-recon; sid:200039665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.sqmim.top"; classtype:attempted-recon; sid:200039666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.tvrimx.top"; classtype:attempted-recon; sid:200039667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.tvxkmp.top"; classtype:attempted-recon; sid:200039668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.vjlile.top"; classtype:attempted-recon; sid:200039669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.vnxgwb.top"; classtype:attempted-recon; sid:200039670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.vordmh.top"; classtype:attempted-recon; sid:200039671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.xdaupp.top"; classtype:attempted-recon; sid:200039672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.xhgmfb.top"; classtype:attempted-recon; sid:200039673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.xniqmj.top"; classtype:attempted-recon; sid:200039674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.xulhaq.top"; classtype:attempted-recon; sid:200039675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.zbvvpg.top"; classtype:attempted-recon; sid:200039676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.zeyeds.ltd"; classtype:attempted-recon; sid:200039677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.zqjkvx.top"; classtype:attempted-recon; sid:200039678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaavsevsi.ea.zrxpv.top"; classtype:attempted-recon; sid:200039679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.037768888861.xyz"; classtype:attempted-recon; sid:200039680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.284nxw.icu"; classtype:attempted-recon; sid:200039681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.33hf19.icu"; classtype:attempted-recon; sid:200039682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.473glv.icu"; classtype:attempted-recon; sid:200039683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.4k2dci.icu"; classtype:attempted-recon; sid:200039684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.687cem.icu"; classtype:attempted-recon; sid:200039685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.69bn6b.icu"; classtype:attempted-recon; sid:200039686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.6c7bza.icu"; classtype:attempted-recon; sid:200039687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.6pw2wd.icu"; classtype:attempted-recon; sid:200039688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.6rtqht.icu"; classtype:attempted-recon; sid:200039689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.6t1vk7.icu"; classtype:attempted-recon; sid:200039690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.7a4s96.icu"; classtype:attempted-recon; sid:200039691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.82casa.icu"; classtype:attempted-recon; sid:200039692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.9d24dh.icu"; classtype:attempted-recon; sid:200039693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.9pw3lv.icu"; classtype:attempted-recon; sid:200039694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.9zv0ny.icu"; classtype:attempted-recon; sid:200039695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.aale2a.icu"; classtype:attempted-recon; sid:200039696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.aayldm.top"; classtype:attempted-recon; sid:200039697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.afqzgx.top"; classtype:attempted-recon; sid:200039698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ajxdpg.top"; classtype:attempted-recon; sid:200039699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ansklx.top"; classtype:attempted-recon; sid:200039700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ao0dkn.icu"; classtype:attempted-recon; sid:200039701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.aogild.top"; classtype:attempted-recon; sid:200039702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.bucyvo.top"; classtype:attempted-recon; sid:200039703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.bwxsxf.top"; classtype:attempted-recon; sid:200039704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.bxsxvy.top"; classtype:attempted-recon; sid:200039705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.cgogay.top"; classtype:attempted-recon; sid:200039706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.cmudlt.top"; classtype:attempted-recon; sid:200039707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.cwpgoh.top"; classtype:attempted-recon; sid:200039708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.d5u49w.icu"; classtype:attempted-recon; sid:200039709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.dbezzz.top"; classtype:attempted-recon; sid:200039710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.dbhlbm.top"; classtype:attempted-recon; sid:200039711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.dqbdkl.top"; classtype:attempted-recon; sid:200039712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.drkild.icu"; classtype:attempted-recon; sid:200039713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.e7ie6j.icu"; classtype:attempted-recon; sid:200039714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.eahbrm.top"; classtype:attempted-recon; sid:200039715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.enioab.top"; classtype:attempted-recon; sid:200039716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.erkdnv.top"; classtype:attempted-recon; sid:200039717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.fn0aqh.icu"; classtype:attempted-recon; sid:200039718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.hblfhq.top"; classtype:attempted-recon; sid:200039719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.hefhjq.icu"; classtype:attempted-recon; sid:200039720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.hli3b0.icu"; classtype:attempted-recon; sid:200039721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.hlsyku.icu"; classtype:attempted-recon; sid:200039722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.hmziti.top"; classtype:attempted-recon; sid:200039723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.idenyq.top"; classtype:attempted-recon; sid:200039724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.inkblog.ink"; classtype:attempted-recon; sid:200039725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.j3tu3m.icu"; classtype:attempted-recon; sid:200039726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.j77o38.icu"; classtype:attempted-recon; sid:200039727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.jehe99.icu"; classtype:attempted-recon; sid:200039728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.juls8q.icu"; classtype:attempted-recon; sid:200039729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.k3ma2x.icu"; classtype:attempted-recon; sid:200039730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.k9pn0d.icu"; classtype:attempted-recon; sid:200039731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ka83cb.icu"; classtype:attempted-recon; sid:200039732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.kb5b6d.icu"; classtype:attempted-recon; sid:200039733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.kgfkdv.top"; classtype:attempted-recon; sid:200039734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.krjqpe.top"; classtype:attempted-recon; sid:200039735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.kvrhdp.top"; classtype:attempted-recon; sid:200039736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.lcazit.top"; classtype:attempted-recon; sid:200039737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.lfyacu.icu"; classtype:attempted-recon; sid:200039738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ljmuov.top"; classtype:attempted-recon; sid:200039739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ll64vg.icu"; classtype:attempted-recon; sid:200039740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.llufip.top"; classtype:attempted-recon; sid:200039741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.lmheln.top"; classtype:attempted-recon; sid:200039742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.lwgayp.top"; classtype:attempted-recon; sid:200039743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.lylxce.top"; classtype:attempted-recon; sid:200039744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.mfx741.icu"; classtype:attempted-recon; sid:200039745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.mgjpjr.top"; classtype:attempted-recon; sid:200039746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.mjdnpt.top"; classtype:attempted-recon; sid:200039747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.nllyoh.top"; classtype:attempted-recon; sid:200039748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.nqveqi.top"; classtype:attempted-recon; sid:200039749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.nrhpkc.icu"; classtype:attempted-recon; sid:200039750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.nu57wl.icu"; classtype:attempted-recon; sid:200039751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.nv9dtw.icu"; classtype:attempted-recon; sid:200039752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.okbpku.icu"; classtype:attempted-recon; sid:200039753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.oppxsj.top"; classtype:attempted-recon; sid:200039754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.or1glf.icu"; classtype:attempted-recon; sid:200039755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.pe14pc.icu"; classtype:attempted-recon; sid:200039756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.psdexq.top"; classtype:attempted-recon; sid:200039757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.psdoni.top"; classtype:attempted-recon; sid:200039758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.pzgoea.top"; classtype:attempted-recon; sid:200039759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.q0s2sm.icu"; classtype:attempted-recon; sid:200039760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.qclqjo.top"; classtype:attempted-recon; sid:200039761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.qnqwcs.icu"; classtype:attempted-recon; sid:200039762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.qpchzg.top"; classtype:attempted-recon; sid:200039763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.qqjjzi.top"; classtype:attempted-recon; sid:200039764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.qvgavp.top"; classtype:attempted-recon; sid:200039765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.rbyycn.top"; classtype:attempted-recon; sid:200039766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.rmgomo.top"; classtype:attempted-recon; sid:200039767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.rsxojx.top"; classtype:attempted-recon; sid:200039768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.sawjbk.top"; classtype:attempted-recon; sid:200039769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.slnb02.icu"; classtype:attempted-recon; sid:200039770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.srwwap.top"; classtype:attempted-recon; sid:200039771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.sthtuh.top"; classtype:attempted-recon; sid:200039772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.syeuaw.top"; classtype:attempted-recon; sid:200039773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.tl86n6.icu"; classtype:attempted-recon; sid:200039774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.to5fb9.icu"; classtype:attempted-recon; sid:200039775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.u0c8sn.icu"; classtype:attempted-recon; sid:200039776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.uixah3.icu"; classtype:attempted-recon; sid:200039777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ukesvp.icu"; classtype:attempted-recon; sid:200039778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ukrtxd.top"; classtype:attempted-recon; sid:200039779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.upahh5.icu"; classtype:attempted-recon; sid:200039780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.uxdgpy.top"; classtype:attempted-recon; sid:200039781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.vdpgwm.top"; classtype:attempted-recon; sid:200039782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.vqeyuo.top"; classtype:attempted-recon; sid:200039783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.vspjok.icu"; classtype:attempted-recon; sid:200039784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.vvkdlh.top"; classtype:attempted-recon; sid:200039785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.vxcrlo.top"; classtype:attempted-recon; sid:200039786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.werbdt.top"; classtype:attempted-recon; sid:200039787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.wfirhj.top"; classtype:attempted-recon; sid:200039788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.witojr.top"; classtype:attempted-recon; sid:200039789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.wmygyx.top"; classtype:attempted-recon; sid:200039790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.wpzqxg.top"; classtype:attempted-recon; sid:200039791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.wsojbg.icu"; classtype:attempted-recon; sid:200039792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.wxpckc.icu"; classtype:attempted-recon; sid:200039793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.xd1bpn.icu"; classtype:attempted-recon; sid:200039794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.xeygaj.top"; classtype:attempted-recon; sid:200039795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.xgysxo.top"; classtype:attempted-recon; sid:200039796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.xydvkg.top"; classtype:attempted-recon; sid:200039797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.xyuhnm.top"; classtype:attempted-recon; sid:200039798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.xztftf.top"; classtype:attempted-recon; sid:200039799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ymifv0.icu"; classtype:attempted-recon; sid:200039800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.yuxvpc.top"; classtype:attempted-recon; sid:200039801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.yvjdgy.top"; classtype:attempted-recon; sid:200039802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.yybtfl.top"; classtype:attempted-recon; sid:200039803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.zhsntm.top"; classtype:attempted-recon; sid:200039804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.zhwpnq.top"; classtype:attempted-recon; sid:200039805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.zovh96.icu"; classtype:attempted-recon; sid:200039806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.zoyqhl.top"; classtype:attempted-recon; sid:200039807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.037768888861.xyz"; classtype:attempted-recon; sid:200039808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.284nxw.icu"; classtype:attempted-recon; sid:200039809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.33hf19.icu"; classtype:attempted-recon; sid:200039810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.473glv.icu"; classtype:attempted-recon; sid:200039811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.4k2dci.icu"; classtype:attempted-recon; sid:200039812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.687cem.icu"; classtype:attempted-recon; sid:200039813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.69bn6b.icu"; classtype:attempted-recon; sid:200039814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.6c7bza.icu"; classtype:attempted-recon; sid:200039815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.6pw2wd.icu"; classtype:attempted-recon; sid:200039816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.6rtqht.icu"; classtype:attempted-recon; sid:200039817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.6t1vk7.icu"; classtype:attempted-recon; sid:200039818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.7a4s96.icu"; classtype:attempted-recon; sid:200039819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.82casa.icu"; classtype:attempted-recon; sid:200039820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.9d24dh.icu"; classtype:attempted-recon; sid:200039821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.9pw3lv.icu"; classtype:attempted-recon; sid:200039822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.9zv0ny.icu"; classtype:attempted-recon; sid:200039823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.aale2a.icu"; classtype:attempted-recon; sid:200039824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.aayldm.top"; classtype:attempted-recon; sid:200039825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.adldni.top"; classtype:attempted-recon; sid:200039826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.afqzgx.top"; classtype:attempted-recon; sid:200039827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ajxdpg.top"; classtype:attempted-recon; sid:200039828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ansklx.top"; classtype:attempted-recon; sid:200039829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ao0dkn.icu"; classtype:attempted-recon; sid:200039830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.aogild.top"; classtype:attempted-recon; sid:200039831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.bucyvo.top"; classtype:attempted-recon; sid:200039832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.bwxsxf.top"; classtype:attempted-recon; sid:200039833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.bxsxvy.top"; classtype:attempted-recon; sid:200039834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.cairaoke.tech"; classtype:attempted-recon; sid:200039835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.cmudlt.top"; classtype:attempted-recon; sid:200039836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.cwpgoh.top"; classtype:attempted-recon; sid:200039837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.d5u49w.icu"; classtype:attempted-recon; sid:200039838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.dbezzz.top"; classtype:attempted-recon; sid:200039839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.dbhlbm.top"; classtype:attempted-recon; sid:200039840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.dqbdkl.top"; classtype:attempted-recon; sid:200039841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.drkild.icu"; classtype:attempted-recon; sid:200039842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.e7ie6j.icu"; classtype:attempted-recon; sid:200039843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.eahbrm.top"; classtype:attempted-recon; sid:200039844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.erkdnv.top"; classtype:attempted-recon; sid:200039845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.fn0aqh.icu"; classtype:attempted-recon; sid:200039846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.hblfhq.top"; classtype:attempted-recon; sid:200039847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.hefhjq.icu"; classtype:attempted-recon; sid:200039848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.hli3b0.icu"; classtype:attempted-recon; sid:200039849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.hlsyku.icu"; classtype:attempted-recon; sid:200039850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.hmziti.top"; classtype:attempted-recon; sid:200039851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.idenyq.top"; classtype:attempted-recon; sid:200039852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.inkblog.ink"; classtype:attempted-recon; sid:200039853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.j3tu3m.icu"; classtype:attempted-recon; sid:200039854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.j77o38.icu"; classtype:attempted-recon; sid:200039855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.jehe99.icu"; classtype:attempted-recon; sid:200039856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.juls8q.icu"; classtype:attempted-recon; sid:200039857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.k3ma2x.icu"; classtype:attempted-recon; sid:200039858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.k9pn0d.icu"; classtype:attempted-recon; sid:200039859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ka83cb.icu"; classtype:attempted-recon; sid:200039860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.kb5b6d.icu"; classtype:attempted-recon; sid:200039861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.kgfkdv.top"; classtype:attempted-recon; sid:200039862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.kvrhdp.top"; classtype:attempted-recon; sid:200039863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.lfyacu.icu"; classtype:attempted-recon; sid:200039864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ljmuov.top"; classtype:attempted-recon; sid:200039865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ll64vg.icu"; classtype:attempted-recon; sid:200039866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.llufip.top"; classtype:attempted-recon; sid:200039867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.lmheln.top"; classtype:attempted-recon; sid:200039868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.lwgayp.top"; classtype:attempted-recon; sid:200039869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.lylxce.top"; classtype:attempted-recon; sid:200039870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.mcltim.top"; classtype:attempted-recon; sid:200039871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.mfx741.icu"; classtype:attempted-recon; sid:200039872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.mgjpjr.top"; classtype:attempted-recon; sid:200039873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.mjdnpt.top"; classtype:attempted-recon; sid:200039874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.nllyoh.top"; classtype:attempted-recon; sid:200039875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.nqveqi.top"; classtype:attempted-recon; sid:200039876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.nrhpkc.icu"; classtype:attempted-recon; sid:200039877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.nu57wl.icu"; classtype:attempted-recon; sid:200039878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.nv9dtw.icu"; classtype:attempted-recon; sid:200039879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ojyzcd.top"; classtype:attempted-recon; sid:200039880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.okbpku.icu"; classtype:attempted-recon; sid:200039881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.oppxsj.top"; classtype:attempted-recon; sid:200039882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.or1glf.icu"; classtype:attempted-recon; sid:200039883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.pe14pc.icu"; classtype:attempted-recon; sid:200039884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.psdoni.top"; classtype:attempted-recon; sid:200039885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.pujapd.top"; classtype:attempted-recon; sid:200039886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.pzgoea.top"; classtype:attempted-recon; sid:200039887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.q0s2sm.icu"; classtype:attempted-recon; sid:200039888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.qclqjo.top"; classtype:attempted-recon; sid:200039889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.qeaogd.top"; classtype:attempted-recon; sid:200039890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.qnqwcs.icu"; classtype:attempted-recon; sid:200039891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.qpchzg.top"; classtype:attempted-recon; sid:200039892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.qqjjzi.top"; classtype:attempted-recon; sid:200039893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.qvgavp.top"; classtype:attempted-recon; sid:200039894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.rbyycn.top"; classtype:attempted-recon; sid:200039895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.rmgomo.top"; classtype:attempted-recon; sid:200039896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.rsxojx.top"; classtype:attempted-recon; sid:200039897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.sawjbk.top"; classtype:attempted-recon; sid:200039898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.slnb02.icu"; classtype:attempted-recon; sid:200039899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.srcwhi.top"; classtype:attempted-recon; sid:200039900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.sthtuh.top"; classtype:attempted-recon; sid:200039901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.syeuaw.top"; classtype:attempted-recon; sid:200039902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.tazsl1.icu"; classtype:attempted-recon; sid:200039903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.tbnilj.top"; classtype:attempted-recon; sid:200039904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.to5fb9.icu"; classtype:attempted-recon; sid:200039905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.u0c8sn.icu"; classtype:attempted-recon; sid:200039906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.uixah3.icu"; classtype:attempted-recon; sid:200039907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ukesvp.icu"; classtype:attempted-recon; sid:200039908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ukrtxd.top"; classtype:attempted-recon; sid:200039909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.upahh5.icu"; classtype:attempted-recon; sid:200039910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.uxdgpy.top"; classtype:attempted-recon; sid:200039911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.vdpgwm.top"; classtype:attempted-recon; sid:200039912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.vqeyuo.top"; classtype:attempted-recon; sid:200039913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.vspjok.icu"; classtype:attempted-recon; sid:200039914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.vvkdlh.top"; classtype:attempted-recon; sid:200039915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.vxcrlo.top"; classtype:attempted-recon; sid:200039916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.werbdt.top"; classtype:attempted-recon; sid:200039917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.wfirhj.top"; classtype:attempted-recon; sid:200039918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.whnjwr.top"; classtype:attempted-recon; sid:200039919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.witojr.top"; classtype:attempted-recon; sid:200039920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.wmygyx.top"; classtype:attempted-recon; sid:200039921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.wpzqxg.top"; classtype:attempted-recon; sid:200039922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.wsojbg.icu"; classtype:attempted-recon; sid:200039923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.wxpckc.icu"; classtype:attempted-recon; sid:200039924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.xd1bpn.icu"; classtype:attempted-recon; sid:200039925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.xeygaj.top"; classtype:attempted-recon; sid:200039926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.xydvkg.top"; classtype:attempted-recon; sid:200039927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.xyuhnm.top"; classtype:attempted-recon; sid:200039928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.xztftf.top"; classtype:attempted-recon; sid:200039929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ymifv0.icu"; classtype:attempted-recon; sid:200039930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.yqasjy.icu"; classtype:attempted-recon; sid:200039931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.yvjdgy.top"; classtype:attempted-recon; sid:200039932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.yybtfl.top"; classtype:attempted-recon; sid:200039933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.zhsntm.top"; classtype:attempted-recon; sid:200039934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.zhwpnq.top"; classtype:attempted-recon; sid:200039935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevacvncvsa.vivesvcvrenvci.zoyqhl.top"; classtype:attempted-recon; sid:200039936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.2021071.top"; classtype:attempted-recon; sid:200039937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.22567.cn"; classtype:attempted-recon; sid:200039938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.31567.cn"; classtype:attempted-recon; sid:200039939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.85567.cn"; classtype:attempted-recon; sid:200039940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.acloud.group"; classtype:attempted-recon; sid:200039941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.alister.ltd"; classtype:attempted-recon; sid:200039942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.cjehdm.top"; classtype:attempted-recon; sid:200039943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.clllbx.top"; classtype:attempted-recon; sid:200039944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.ebwptg.top"; classtype:attempted-recon; sid:200039945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.erfghk03.shop"; classtype:attempted-recon; sid:200039946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.fcwh886.top"; classtype:attempted-recon; sid:200039947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.francis.ltd"; classtype:attempted-recon; sid:200039948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.fzosfk.top"; classtype:attempted-recon; sid:200039949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.gafuwd.top"; classtype:attempted-recon; sid:200039950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.glmbfd.top"; classtype:attempted-recon; sid:200039951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.gzfkmo.top"; classtype:attempted-recon; sid:200039952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.gzmvuo.top"; classtype:attempted-recon; sid:200039953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.hncwbn.top"; classtype:attempted-recon; sid:200039954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.icfpvc.top"; classtype:attempted-recon; sid:200039955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.ipexqv.top"; classtype:attempted-recon; sid:200039956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.jimdyd.top"; classtype:attempted-recon; sid:200039957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.jjglsw.top"; classtype:attempted-recon; sid:200039958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.leigh.ltd"; classtype:attempted-recon; sid:200039959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.leonard.ltd"; classtype:attempted-recon; sid:200039960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.lhixak.top"; classtype:attempted-recon; sid:200039961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.lhzfkh.top"; classtype:attempted-recon; sid:200039962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.limassol.group"; classtype:attempted-recon; sid:200039963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.loskh.top"; classtype:attempted-recon; sid:200039964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.mkma07.shop"; classtype:attempted-recon; sid:200039965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.mnvhdje.icu"; classtype:attempted-recon; sid:200039966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.mortys.cn"; classtype:attempted-recon; sid:200039967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.mosjide.icu"; classtype:attempted-recon; sid:200039968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.njrksy.top"; classtype:attempted-recon; sid:200039969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.norfolk.ltd"; classtype:attempted-recon; sid:200039970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.npxfcv.top"; classtype:attempted-recon; sid:200039971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.nsuuieds.icu"; classtype:attempted-recon; sid:200039972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200039973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.oamprk.top"; classtype:attempted-recon; sid:200039974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.owens.ltd"; classtype:attempted-recon; sid:200039975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.pcloud.group"; classtype:attempted-recon; sid:200039976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.ptywgv.top"; classtype:attempted-recon; sid:200039977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.qslbjc.top"; classtype:attempted-recon; sid:200039978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.qzvxui.top"; classtype:attempted-recon; sid:200039979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.reynolds.ltd"; classtype:attempted-recon; sid:200039980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.riley.ltd"; classtype:attempted-recon; sid:200039981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.robertson.ltd"; classtype:attempted-recon; sid:200039982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.rowan.ltd"; classtype:attempted-recon; sid:200039983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.shjpxn.top"; classtype:attempted-recon; sid:200039984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.sinclair.ltd"; classtype:attempted-recon; sid:200039985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.sqmim.top"; classtype:attempted-recon; sid:200039986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.tvrimx.top"; classtype:attempted-recon; sid:200039987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.tvxkmp.top"; classtype:attempted-recon; sid:200039988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.vjlile.top"; classtype:attempted-recon; sid:200039989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.vnxgwb.top"; classtype:attempted-recon; sid:200039990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.vordmh.top"; classtype:attempted-recon; sid:200039991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.xdaupp.top"; classtype:attempted-recon; sid:200039992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.xhgmfb.top"; classtype:attempted-recon; sid:200039993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.xniqmj.top"; classtype:attempted-recon; sid:200039994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.xulhaq.top"; classtype:attempted-recon; sid:200039995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.ycloud.group"; classtype:attempted-recon; sid:200039996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.zbvvpg.top"; classtype:attempted-recon; sid:200039997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.zeyedada.xyz"; classtype:attempted-recon; sid:200039998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.zeyeds.ltd"; classtype:attempted-recon; sid:200039999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.zqjkvx.top"; classtype:attempted-recon; sid:200040000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaeavcsevsi.eaaa.zrxpv.top"; classtype:attempted-recon; sid:200040001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.2021071.top"; classtype:attempted-recon; sid:200040002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.31567.cn"; classtype:attempted-recon; sid:200040003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.53567.cn"; classtype:attempted-recon; sid:200040004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.85567.cn"; classtype:attempted-recon; sid:200040005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.87567.cn"; classtype:attempted-recon; sid:200040006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.alister.ltd"; classtype:attempted-recon; sid:200040007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.cjehdm.top"; classtype:attempted-recon; sid:200040008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.clllbx.top"; classtype:attempted-recon; sid:200040009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.ebwptg.top"; classtype:attempted-recon; sid:200040010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.fcwh886.top"; classtype:attempted-recon; sid:200040011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.francis.ltd"; classtype:attempted-recon; sid:200040012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.fzosfk.top"; classtype:attempted-recon; sid:200040013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.gafuwd.top"; classtype:attempted-recon; sid:200040014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.gcloud.group"; classtype:attempted-recon; sid:200040015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.ggnxmf.top"; classtype:attempted-recon; sid:200040016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.glmbfd.top"; classtype:attempted-recon; sid:200040017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.hncwbn.top"; classtype:attempted-recon; sid:200040018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.icfpvc.top"; classtype:attempted-recon; sid:200040019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.ipexqv.top"; classtype:attempted-recon; sid:200040020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.jimdyd.top"; classtype:attempted-recon; sid:200040021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.jjglsw.top"; classtype:attempted-recon; sid:200040022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.leigh.ltd"; classtype:attempted-recon; sid:200040023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.leonard.ltd"; classtype:attempted-recon; sid:200040024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.lhixak.top"; classtype:attempted-recon; sid:200040025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.lhzfkh.top"; classtype:attempted-recon; sid:200040026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.limassol.group"; classtype:attempted-recon; sid:200040027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.loskh.top"; classtype:attempted-recon; sid:200040028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.mkma07.shop"; classtype:attempted-recon; sid:200040029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.mnvhdje.icu"; classtype:attempted-recon; sid:200040030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.nicosia.group"; classtype:attempted-recon; sid:200040031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.njrksy.top"; classtype:attempted-recon; sid:200040032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.norfolk.ltd"; classtype:attempted-recon; sid:200040033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.npxfcv.top"; classtype:attempted-recon; sid:200040034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200040035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.oamprk.top"; classtype:attempted-recon; sid:200040036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.ocloud.group"; classtype:attempted-recon; sid:200040037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.owens.ltd"; classtype:attempted-recon; sid:200040038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.ptywgv.top"; classtype:attempted-recon; sid:200040039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.qzvxui.top"; classtype:attempted-recon; sid:200040040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.reynolds.ltd"; classtype:attempted-recon; sid:200040041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.riley.ltd"; classtype:attempted-recon; sid:200040042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.robertson.ltd"; classtype:attempted-recon; sid:200040043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.rowan.ltd"; classtype:attempted-recon; sid:200040044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.shjpxn.top"; classtype:attempted-recon; sid:200040045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.sinclair.ltd"; classtype:attempted-recon; sid:200040046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.sqmim.top"; classtype:attempted-recon; sid:200040047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.tubatue.icu"; classtype:attempted-recon; sid:200040048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.tvrimx.top"; classtype:attempted-recon; sid:200040049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.tvxkmp.top"; classtype:attempted-recon; sid:200040050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.vjlile.top"; classtype:attempted-recon; sid:200040051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.vnxgwb.top"; classtype:attempted-recon; sid:200040052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.vordmh.top"; classtype:attempted-recon; sid:200040053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.xdaupp.top"; classtype:attempted-recon; sid:200040054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.xhgmfb.top"; classtype:attempted-recon; sid:200040055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.xniqmj.top"; classtype:attempted-recon; sid:200040056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.xulhaq.top"; classtype:attempted-recon; sid:200040057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.zbvvpg.top"; classtype:attempted-recon; sid:200040058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.zeyeds.ltd"; classtype:attempted-recon; sid:200040059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.zqjkvx.top"; classtype:attempted-recon; sid:200040060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevaevscvsi.eaa.zrxpv.top"; classtype:attempted-recon; sid:200040061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.2021071.top"; classtype:attempted-recon; sid:200040062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.ahahh04.shop"; classtype:attempted-recon; sid:200040063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.ahiftgl.top"; classtype:attempted-recon; sid:200040064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.alister.ltd"; classtype:attempted-recon; sid:200040065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.ccloud.group"; classtype:attempted-recon; sid:200040066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.cjehdm.top"; classtype:attempted-recon; sid:200040067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.clllbx.top"; classtype:attempted-recon; sid:200040068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.dwbjs.top"; classtype:attempted-recon; sid:200040069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.ebwptg.top"; classtype:attempted-recon; sid:200040070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.fcwh886.top"; classtype:attempted-recon; sid:200040071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.francis.ltd"; classtype:attempted-recon; sid:200040072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.fzosfk.top"; classtype:attempted-recon; sid:200040073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.gafuwd.top"; classtype:attempted-recon; sid:200040074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.glmbfd.top"; classtype:attempted-recon; sid:200040075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.gzfkmo.top"; classtype:attempted-recon; sid:200040076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.gzmvuo.top"; classtype:attempted-recon; sid:200040077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.hncwbn.top"; classtype:attempted-recon; sid:200040078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.ipexqv.top"; classtype:attempted-recon; sid:200040079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.jimdyd.top"; classtype:attempted-recon; sid:200040080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.jjglsw.top"; classtype:attempted-recon; sid:200040081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.ksiudje.icu"; classtype:attempted-recon; sid:200040082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.leigh.ltd"; classtype:attempted-recon; sid:200040083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.leonard.ltd"; classtype:attempted-recon; sid:200040084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.lhixak.top"; classtype:attempted-recon; sid:200040085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.lhzfkh.top"; classtype:attempted-recon; sid:200040086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.limassol.group"; classtype:attempted-recon; sid:200040087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.loskh.top"; classtype:attempted-recon; sid:200040088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.mkma07.shop"; classtype:attempted-recon; sid:200040089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.mnvhdje.icu"; classtype:attempted-recon; sid:200040090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.njrksy.top"; classtype:attempted-recon; sid:200040091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.norfolk.ltd"; classtype:attempted-recon; sid:200040092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.npxfcv.top"; classtype:attempted-recon; sid:200040093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.nvjdhuei.icu"; classtype:attempted-recon; sid:200040094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.oamprk.top"; classtype:attempted-recon; sid:200040095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.owens.ltd"; classtype:attempted-recon; sid:200040096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.ptywgv.top"; classtype:attempted-recon; sid:200040097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.qzvxui.top"; classtype:attempted-recon; sid:200040098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.reynolds.ltd"; classtype:attempted-recon; sid:200040099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.riley.ltd"; classtype:attempted-recon; sid:200040100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.robertson.ltd"; classtype:attempted-recon; sid:200040101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.rowan.ltd"; classtype:attempted-recon; sid:200040102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.shjpxn.top"; classtype:attempted-recon; sid:200040103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.sinclair.ltd"; classtype:attempted-recon; sid:200040104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.sqmim.top"; classtype:attempted-recon; sid:200040105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.tvrimx.top"; classtype:attempted-recon; sid:200040106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.tvxkmp.top"; classtype:attempted-recon; sid:200040107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.vjlile.top"; classtype:attempted-recon; sid:200040108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.vnxgwb.top"; classtype:attempted-recon; sid:200040109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.vordmh.top"; classtype:attempted-recon; sid:200040110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.xdaupp.top"; classtype:attempted-recon; sid:200040111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.xhgmfb.top"; classtype:attempted-recon; sid:200040112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.xniqmj.top"; classtype:attempted-recon; sid:200040113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.xulhaq.top"; classtype:attempted-recon; sid:200040114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.zbvvpg.top"; classtype:attempted-recon; sid:200040115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.zeyeds.ltd"; classtype:attempted-recon; sid:200040116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.zhzhh06.shop"; classtype:attempted-recon; sid:200040117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.zkzkd04.shop"; classtype:attempted-recon; sid:200040118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.zqjkvx.top"; classtype:attempted-recon; sid:200040119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevavsvsi.e.zrxpv.top"; classtype:attempted-recon; sid:200040120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.037768888861.xyz"; classtype:attempted-recon; sid:200040121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.284nxw.icu"; classtype:attempted-recon; sid:200040122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.33hf19.icu"; classtype:attempted-recon; sid:200040123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.473glv.icu"; classtype:attempted-recon; sid:200040124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.4k2dci.icu"; classtype:attempted-recon; sid:200040125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.687cem.icu"; classtype:attempted-recon; sid:200040126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.69bn6b.icu"; classtype:attempted-recon; sid:200040127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.6c7bza.icu"; classtype:attempted-recon; sid:200040128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.6pw2wd.icu"; classtype:attempted-recon; sid:200040129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.6rtqht.icu"; classtype:attempted-recon; sid:200040130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.6t1vk7.icu"; classtype:attempted-recon; sid:200040131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.7a4s96.icu"; classtype:attempted-recon; sid:200040132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.82casa.icu"; classtype:attempted-recon; sid:200040133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.9d24dh.icu"; classtype:attempted-recon; sid:200040134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.9pw3lv.icu"; classtype:attempted-recon; sid:200040135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.9zv0ny.icu"; classtype:attempted-recon; sid:200040136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.aale2a.icu"; classtype:attempted-recon; sid:200040137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.aayldm.top"; classtype:attempted-recon; sid:200040138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.adldni.top"; classtype:attempted-recon; sid:200040139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.afqzgx.top"; classtype:attempted-recon; sid:200040140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ajxdpg.top"; classtype:attempted-recon; sid:200040141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ansklx.top"; classtype:attempted-recon; sid:200040142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ao0dkn.icu"; classtype:attempted-recon; sid:200040143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.aogild.top"; classtype:attempted-recon; sid:200040144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.bucyvo.top"; classtype:attempted-recon; sid:200040145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.bwxsxf.top"; classtype:attempted-recon; sid:200040146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.bxsxvy.top"; classtype:attempted-recon; sid:200040147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.cgogay.top"; classtype:attempted-recon; sid:200040148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.cmudlt.top"; classtype:attempted-recon; sid:200040149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ctdwug.top"; classtype:attempted-recon; sid:200040150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.cwpgoh.top"; classtype:attempted-recon; sid:200040151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.d5u49w.icu"; classtype:attempted-recon; sid:200040152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.dbezzz.top"; classtype:attempted-recon; sid:200040153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.dbhlbm.top"; classtype:attempted-recon; sid:200040154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.dqbdkl.top"; classtype:attempted-recon; sid:200040155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.drkild.icu"; classtype:attempted-recon; sid:200040156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.e7ie6j.icu"; classtype:attempted-recon; sid:200040157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.eahbrm.top"; classtype:attempted-recon; sid:200040158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.enioab.top"; classtype:attempted-recon; sid:200040159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.erkdnv.top"; classtype:attempted-recon; sid:200040160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.fn0aqh.icu"; classtype:attempted-recon; sid:200040161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.hblfhq.top"; classtype:attempted-recon; sid:200040162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.hefhjq.icu"; classtype:attempted-recon; sid:200040163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.hli3b0.icu"; classtype:attempted-recon; sid:200040164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.hlsyku.icu"; classtype:attempted-recon; sid:200040165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.hmziti.top"; classtype:attempted-recon; sid:200040166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.idenyq.top"; classtype:attempted-recon; sid:200040167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.inkblog.ink"; classtype:attempted-recon; sid:200040168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.j3tu3m.icu"; classtype:attempted-recon; sid:200040169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.j77o38.icu"; classtype:attempted-recon; sid:200040170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.jehe99.icu"; classtype:attempted-recon; sid:200040171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.juls8q.icu"; classtype:attempted-recon; sid:200040172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.k3ma2x.icu"; classtype:attempted-recon; sid:200040173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.k9pn0d.icu"; classtype:attempted-recon; sid:200040174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ka83cb.icu"; classtype:attempted-recon; sid:200040175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.kb5b6d.icu"; classtype:attempted-recon; sid:200040176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.kgfkdv.top"; classtype:attempted-recon; sid:200040177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.krjqpe.top"; classtype:attempted-recon; sid:200040178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.kvrhdp.top"; classtype:attempted-recon; sid:200040179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.lcazit.top"; classtype:attempted-recon; sid:200040180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.lfyacu.icu"; classtype:attempted-recon; sid:200040181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ljmuov.top"; classtype:attempted-recon; sid:200040182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ll64vg.icu"; classtype:attempted-recon; sid:200040183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.llufip.top"; classtype:attempted-recon; sid:200040184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.lmheln.top"; classtype:attempted-recon; sid:200040185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.lwgayp.top"; classtype:attempted-recon; sid:200040186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.lylxce.top"; classtype:attempted-recon; sid:200040187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.mcltim.top"; classtype:attempted-recon; sid:200040188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.mfx741.icu"; classtype:attempted-recon; sid:200040189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.mgjpjr.top"; classtype:attempted-recon; sid:200040190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.mjdnpt.top"; classtype:attempted-recon; sid:200040191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.nllyoh.top"; classtype:attempted-recon; sid:200040192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.nqveqi.top"; classtype:attempted-recon; sid:200040193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.nrhpkc.icu"; classtype:attempted-recon; sid:200040194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.nu57wl.icu"; classtype:attempted-recon; sid:200040195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.nv9dtw.icu"; classtype:attempted-recon; sid:200040196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.okbpku.icu"; classtype:attempted-recon; sid:200040197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.oppxsj.top"; classtype:attempted-recon; sid:200040198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.or1glf.icu"; classtype:attempted-recon; sid:200040199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.pe14pc.icu"; classtype:attempted-recon; sid:200040200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.psdexq.top"; classtype:attempted-recon; sid:200040201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.psdoni.top"; classtype:attempted-recon; sid:200040202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.pujapd.top"; classtype:attempted-recon; sid:200040203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.q0s2sm.icu"; classtype:attempted-recon; sid:200040204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.qclqjo.top"; classtype:attempted-recon; sid:200040205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.qeaogd.top"; classtype:attempted-recon; sid:200040206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.qnqwcs.icu"; classtype:attempted-recon; sid:200040207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.qpchzg.top"; classtype:attempted-recon; sid:200040208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.qvgavp.top"; classtype:attempted-recon; sid:200040209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.rbyycn.top"; classtype:attempted-recon; sid:200040210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.rmgomo.top"; classtype:attempted-recon; sid:200040211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.rsxojx.top"; classtype:attempted-recon; sid:200040212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.sawjbk.top"; classtype:attempted-recon; sid:200040213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.srcwhi.top"; classtype:attempted-recon; sid:200040214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.srwwap.top"; classtype:attempted-recon; sid:200040215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.sthtuh.top"; classtype:attempted-recon; sid:200040216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.syeuaw.top"; classtype:attempted-recon; sid:200040217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.tazsl1.icu"; classtype:attempted-recon; sid:200040218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.tbnilj.top"; classtype:attempted-recon; sid:200040219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.tl86n6.icu"; classtype:attempted-recon; sid:200040220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.to5fb9.icu"; classtype:attempted-recon; sid:200040221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.u0c8sn.icu"; classtype:attempted-recon; sid:200040222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.uixah3.icu"; classtype:attempted-recon; sid:200040223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ukesvp.icu"; classtype:attempted-recon; sid:200040224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ukrtxd.top"; classtype:attempted-recon; sid:200040225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.upahh5.icu"; classtype:attempted-recon; sid:200040226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.uxdgpy.top"; classtype:attempted-recon; sid:200040227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.uxvqzp.top"; classtype:attempted-recon; sid:200040228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.vdpgwm.top"; classtype:attempted-recon; sid:200040229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.vqeyuo.top"; classtype:attempted-recon; sid:200040230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.vspjok.icu"; classtype:attempted-recon; sid:200040231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.vvkdlh.top"; classtype:attempted-recon; sid:200040232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.vxcrlo.top"; classtype:attempted-recon; sid:200040233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.werbdt.top"; classtype:attempted-recon; sid:200040234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.wfirhj.top"; classtype:attempted-recon; sid:200040235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.whnjwr.top"; classtype:attempted-recon; sid:200040236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.witojr.top"; classtype:attempted-recon; sid:200040237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.wmygyx.top"; classtype:attempted-recon; sid:200040238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.wpzqxg.top"; classtype:attempted-recon; sid:200040239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.wsojbg.icu"; classtype:attempted-recon; sid:200040240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.wxpckc.icu"; classtype:attempted-recon; sid:200040241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.xd1bpn.icu"; classtype:attempted-recon; sid:200040242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.xeygaj.top"; classtype:attempted-recon; sid:200040243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.xgysxo.top"; classtype:attempted-recon; sid:200040244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.xydvkg.top"; classtype:attempted-recon; sid:200040245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.xyuhnm.top"; classtype:attempted-recon; sid:200040246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ymifv0.icu"; classtype:attempted-recon; sid:200040247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.yuxvpc.top"; classtype:attempted-recon; sid:200040248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.yvjdgy.top"; classtype:attempted-recon; sid:200040249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.yybtfl.top"; classtype:attempted-recon; sid:200040250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.zhsntm.top"; classtype:attempted-recon; sid:200040251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.zhwpnq.top"; classtype:attempted-recon; sid:200040252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.zoyqhl.top"; classtype:attempted-recon; sid:200040253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.037768888861.xyz"; classtype:attempted-recon; sid:200040254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.284nxw.icu"; classtype:attempted-recon; sid:200040255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.33hf19.icu"; classtype:attempted-recon; sid:200040256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.473glv.icu"; classtype:attempted-recon; sid:200040257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.4k2dci.icu"; classtype:attempted-recon; sid:200040258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.687cem.icu"; classtype:attempted-recon; sid:200040259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.69bn6b.icu"; classtype:attempted-recon; sid:200040260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.6c7bza.icu"; classtype:attempted-recon; sid:200040261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.6pw2wd.icu"; classtype:attempted-recon; sid:200040262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.6rtqht.icu"; classtype:attempted-recon; sid:200040263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.6t1vk7.icu"; classtype:attempted-recon; sid:200040264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.7a4s96.icu"; classtype:attempted-recon; sid:200040265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.82casa.icu"; classtype:attempted-recon; sid:200040266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.9d24dh.icu"; classtype:attempted-recon; sid:200040267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.9pw3lv.icu"; classtype:attempted-recon; sid:200040268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.9zv0ny.icu"; classtype:attempted-recon; sid:200040269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.aale2a.icu"; classtype:attempted-recon; sid:200040270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.adldni.top"; classtype:attempted-recon; sid:200040271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.afqzgx.top"; classtype:attempted-recon; sid:200040272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ajxdpg.top"; classtype:attempted-recon; sid:200040273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ansklx.top"; classtype:attempted-recon; sid:200040274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ao0dkn.icu"; classtype:attempted-recon; sid:200040275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.aogild.top"; classtype:attempted-recon; sid:200040276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.bucyvo.top"; classtype:attempted-recon; sid:200040277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.bwxsxf.top"; classtype:attempted-recon; sid:200040278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.bxsxvy.top"; classtype:attempted-recon; sid:200040279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.cgogay.top"; classtype:attempted-recon; sid:200040280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.cmudlt.top"; classtype:attempted-recon; sid:200040281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ctdwug.top"; classtype:attempted-recon; sid:200040282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.d5u49w.icu"; classtype:attempted-recon; sid:200040283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.dbhlbm.top"; classtype:attempted-recon; sid:200040284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.dqbdkl.top"; classtype:attempted-recon; sid:200040285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.drkild.icu"; classtype:attempted-recon; sid:200040286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.e7ie6j.icu"; classtype:attempted-recon; sid:200040287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.enioab.top"; classtype:attempted-recon; sid:200040288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.erkdnv.top"; classtype:attempted-recon; sid:200040289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.fn0aqh.icu"; classtype:attempted-recon; sid:200040290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.hblfhq.top"; classtype:attempted-recon; sid:200040291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.hefhjq.icu"; classtype:attempted-recon; sid:200040292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.hli3b0.icu"; classtype:attempted-recon; sid:200040293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.hlsyku.icu"; classtype:attempted-recon; sid:200040294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.idenyq.top"; classtype:attempted-recon; sid:200040295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.inkblog.ink"; classtype:attempted-recon; sid:200040296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.j3tu3m.icu"; classtype:attempted-recon; sid:200040297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.j77o38.icu"; classtype:attempted-recon; sid:200040298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.jehe99.icu"; classtype:attempted-recon; sid:200040299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.juls8q.icu"; classtype:attempted-recon; sid:200040300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.k3ma2x.icu"; classtype:attempted-recon; sid:200040301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.k9pn0d.icu"; classtype:attempted-recon; sid:200040302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ka83cb.icu"; classtype:attempted-recon; sid:200040303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.kb5b6d.icu"; classtype:attempted-recon; sid:200040304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.kgfkdv.top"; classtype:attempted-recon; sid:200040305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.krjqpe.top"; classtype:attempted-recon; sid:200040306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.kvrhdp.top"; classtype:attempted-recon; sid:200040307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.lcazit.top"; classtype:attempted-recon; sid:200040308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.lfyacu.icu"; classtype:attempted-recon; sid:200040309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ljmuov.top"; classtype:attempted-recon; sid:200040310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ll64vg.icu"; classtype:attempted-recon; sid:200040311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.llufip.top"; classtype:attempted-recon; sid:200040312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.lmheln.top"; classtype:attempted-recon; sid:200040313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.lwgayp.top"; classtype:attempted-recon; sid:200040314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.lylxce.top"; classtype:attempted-recon; sid:200040315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.mcltim.top"; classtype:attempted-recon; sid:200040316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.mfx741.icu"; classtype:attempted-recon; sid:200040317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.mgjpjr.top"; classtype:attempted-recon; sid:200040318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.mjdnpt.top"; classtype:attempted-recon; sid:200040319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.nllyoh.top"; classtype:attempted-recon; sid:200040320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.nrhpkc.icu"; classtype:attempted-recon; sid:200040321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.nu57wl.icu"; classtype:attempted-recon; sid:200040322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.nv9dtw.icu"; classtype:attempted-recon; sid:200040323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.okbpku.icu"; classtype:attempted-recon; sid:200040324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.oppxsj.top"; classtype:attempted-recon; sid:200040325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.or1glf.icu"; classtype:attempted-recon; sid:200040326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.pe14pc.icu"; classtype:attempted-recon; sid:200040327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.psdexq.top"; classtype:attempted-recon; sid:200040328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.psdoni.top"; classtype:attempted-recon; sid:200040329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.pujapd.top"; classtype:attempted-recon; sid:200040330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.pzgoea.top"; classtype:attempted-recon; sid:200040331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.qclqjo.top"; classtype:attempted-recon; sid:200040332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.qeaogd.top"; classtype:attempted-recon; sid:200040333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.qnqwcs.icu"; classtype:attempted-recon; sid:200040334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.qqjjzi.top"; classtype:attempted-recon; sid:200040335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.qvgavp.top"; classtype:attempted-recon; sid:200040336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.rbyycn.top"; classtype:attempted-recon; sid:200040337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.rmgomo.top"; classtype:attempted-recon; sid:200040338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.rsxojx.top"; classtype:attempted-recon; sid:200040339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.sawjbk.top"; classtype:attempted-recon; sid:200040340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.slnb02.icu"; classtype:attempted-recon; sid:200040341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.srcwhi.top"; classtype:attempted-recon; sid:200040342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.srwwap.top"; classtype:attempted-recon; sid:200040343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.sthtuh.top"; classtype:attempted-recon; sid:200040344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.syeuaw.top"; classtype:attempted-recon; sid:200040345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.tazsl1.icu"; classtype:attempted-recon; sid:200040346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.tbnilj.top"; classtype:attempted-recon; sid:200040347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.tl86n6.icu"; classtype:attempted-recon; sid:200040348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.to5fb9.icu"; classtype:attempted-recon; sid:200040349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.u0c8sn.icu"; classtype:attempted-recon; sid:200040350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.uixah3.icu"; classtype:attempted-recon; sid:200040351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ukesvp.icu"; classtype:attempted-recon; sid:200040352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ukrtxd.top"; classtype:attempted-recon; sid:200040353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.upahh5.icu"; classtype:attempted-recon; sid:200040354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.uxdgpy.top"; classtype:attempted-recon; sid:200040355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.uxvqzp.top"; classtype:attempted-recon; sid:200040356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.vdpgwm.top"; classtype:attempted-recon; sid:200040357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.vqeyuo.top"; classtype:attempted-recon; sid:200040358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.vspjok.icu"; classtype:attempted-recon; sid:200040359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.vvkdlh.top"; classtype:attempted-recon; sid:200040360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.vxcrlo.top"; classtype:attempted-recon; sid:200040361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.werbdt.top"; classtype:attempted-recon; sid:200040362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.wfirhj.top"; classtype:attempted-recon; sid:200040363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.whnjwr.top"; classtype:attempted-recon; sid:200040364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.witojr.top"; classtype:attempted-recon; sid:200040365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.wmygyx.top"; classtype:attempted-recon; sid:200040366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.wpzqxg.top"; classtype:attempted-recon; sid:200040367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.wsojbg.icu"; classtype:attempted-recon; sid:200040368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.wxpckc.icu"; classtype:attempted-recon; sid:200040369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.xd1bpn.icu"; classtype:attempted-recon; sid:200040370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.xeygaj.top"; classtype:attempted-recon; sid:200040371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.xydvkg.top"; classtype:attempted-recon; sid:200040372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.xyuhnm.top"; classtype:attempted-recon; sid:200040373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.xztftf.top"; classtype:attempted-recon; sid:200040374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.ymifv0.icu"; classtype:attempted-recon; sid:200040375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.yuxvpc.top"; classtype:attempted-recon; sid:200040376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.yvjdgy.top"; classtype:attempted-recon; sid:200040377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.yybtfl.top"; classtype:attempted-recon; sid:200040378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.zhsntm.top"; classtype:attempted-recon; sid:200040379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.zhwpnq.top"; classtype:attempted-recon; sid:200040380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.zovh96.icu"; classtype:attempted-recon; sid:200040381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivevcvnvsa.vivsvcvenvci.zoyqhl.top"; classtype:attempted-recon; sid:200040382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"viviscevceasi.visviracovsior.e4gnlcg8.bar"; classtype:attempted-recon; sid:200040383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivisvceasi.visvacovsior.bhsgjj.id"; classtype:attempted-recon; sid:200040384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivisvceasi.visvacovsior.lnjaaq.id"; classtype:attempted-recon; sid:200040385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivosaaeeei.viccrvcooier.1p2igt.icu"; classtype:attempted-recon; sid:200040386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivosaaeeei.viccrvcooier.d24mu.icu"; classtype:attempted-recon; sid:200040387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivosaaeeei.viccrvcooier.wndxgg.top"; classtype:attempted-recon; sid:200040388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivosaaseei.vicervcosier.ooqrml.top"; classtype:attempted-recon; sid:200040389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.axrcbx.top"; classtype:attempted-recon; sid:200040390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.azrsog.top"; classtype:attempted-recon; sid:200040391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.buavhf.top"; classtype:attempted-recon; sid:200040392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.cckrka.shop"; classtype:attempted-recon; sid:200040393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.fmttqq.top"; classtype:attempted-recon; sid:200040394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.geqnuq.top"; classtype:attempted-recon; sid:200040395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.isvuiy.top"; classtype:attempted-recon; sid:200040396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.jfcxph.top"; classtype:attempted-recon; sid:200040397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.jsmfgc.top"; classtype:attempted-recon; sid:200040398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.kbroxv.top"; classtype:attempted-recon; sid:200040399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.kvdxks.top"; classtype:attempted-recon; sid:200040400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.mdxbrn.top"; classtype:attempted-recon; sid:200040401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.mjfemh.shop"; classtype:attempted-recon; sid:200040402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.nnawmj.top"; classtype:attempted-recon; sid:200040403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.nofalw.top"; classtype:attempted-recon; sid:200040404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.oajqfn.top"; classtype:attempted-recon; sid:200040405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.onazqm.top"; classtype:attempted-recon; sid:200040406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.orcbvv.top"; classtype:attempted-recon; sid:200040407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.pgdfhw.top"; classtype:attempted-recon; sid:200040408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.pkwrdl.top"; classtype:attempted-recon; sid:200040409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.pmnaeh.top"; classtype:attempted-recon; sid:200040410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.qbcbta.top"; classtype:attempted-recon; sid:200040411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.rgqjka.top"; classtype:attempted-recon; sid:200040412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.sorjpe.top"; classtype:attempted-recon; sid:200040413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.svfocp.top"; classtype:attempted-recon; sid:200040414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.tppwpi.top"; classtype:attempted-recon; sid:200040415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.tvbcmo.top"; classtype:attempted-recon; sid:200040416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.uarmbh.top"; classtype:attempted-recon; sid:200040417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.uiedwv.top"; classtype:attempted-recon; sid:200040418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.ukohwk.top"; classtype:attempted-recon; sid:200040419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.vlunrr.top"; classtype:attempted-recon; sid:200040420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.wezouj.top"; classtype:attempted-recon; sid:200040421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.wiqlcn.top"; classtype:attempted-recon; sid:200040422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.xewfoa.top"; classtype:attempted-recon; sid:200040423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.xwdvad.top"; classtype:attempted-recon; sid:200040424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.yxpfzh.top"; classtype:attempted-recon; sid:200040425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.zqawii.top"; classtype:attempted-recon; sid:200040426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsocieesesia.c.zvzqtl.top"; classtype:attempted-recon; sid:200040427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.axrcbx.top"; classtype:attempted-recon; sid:200040428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.azrsog.top"; classtype:attempted-recon; sid:200040429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.buavhf.top"; classtype:attempted-recon; sid:200040430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.geqnuq.top"; classtype:attempted-recon; sid:200040431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.isvuiy.top"; classtype:attempted-recon; sid:200040432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.jfcxph.top"; classtype:attempted-recon; sid:200040433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.jsmfgc.top"; classtype:attempted-recon; sid:200040434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.kbroxv.top"; classtype:attempted-recon; sid:200040435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.kvdxks.top"; classtype:attempted-recon; sid:200040436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.mdxbrn.top"; classtype:attempted-recon; sid:200040437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.nnawmj.top"; classtype:attempted-recon; sid:200040438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.nofalw.top"; classtype:attempted-recon; sid:200040439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.oajqfn.top"; classtype:attempted-recon; sid:200040440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.obekup.shop"; classtype:attempted-recon; sid:200040441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.onazqm.top"; classtype:attempted-recon; sid:200040442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.orcbvv.top"; classtype:attempted-recon; sid:200040443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.pgdfhw.top"; classtype:attempted-recon; sid:200040444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.pkwrdl.top"; classtype:attempted-recon; sid:200040445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.pmnaeh.top"; classtype:attempted-recon; sid:200040446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.qbcbta.top"; classtype:attempted-recon; sid:200040447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.rgqjka.top"; classtype:attempted-recon; sid:200040448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.sorjpe.top"; classtype:attempted-recon; sid:200040449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.svfocp.top"; classtype:attempted-recon; sid:200040450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.sxmerd.shop"; classtype:attempted-recon; sid:200040451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.tppwpi.top"; classtype:attempted-recon; sid:200040452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.tvbcmo.top"; classtype:attempted-recon; sid:200040453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.uarmbh.top"; classtype:attempted-recon; sid:200040454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.uiedwv.top"; classtype:attempted-recon; sid:200040455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.ukohwk.top"; classtype:attempted-recon; sid:200040456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.vlunrr.top"; classtype:attempted-recon; sid:200040457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.vnbmwi.shop"; classtype:attempted-recon; sid:200040458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.wezouj.top"; classtype:attempted-recon; sid:200040459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.wiqlcn.top"; classtype:attempted-recon; sid:200040460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.xewfoa.top"; classtype:attempted-recon; sid:200040461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.xwdvad.top"; classtype:attempted-recon; sid:200040462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.zqawii.top"; classtype:attempted-recon; sid:200040463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacsoiesesia.o.zvzqtl.top"; classtype:attempted-recon; sid:200040464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.axrcbx.top"; classtype:attempted-recon; sid:200040465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.azrsog.top"; classtype:attempted-recon; sid:200040466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.buavhf.top"; classtype:attempted-recon; sid:200040467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.geqnuq.top"; classtype:attempted-recon; sid:200040468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.isvuiy.top"; classtype:attempted-recon; sid:200040469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.jfcxph.top"; classtype:attempted-recon; sid:200040470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200040471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.kbroxv.top"; classtype:attempted-recon; sid:200040472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.kvdxks.top"; classtype:attempted-recon; sid:200040473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200040474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.nnawmj.top"; classtype:attempted-recon; sid:200040475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.nofalw.top"; classtype:attempted-recon; sid:200040476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.oajqfn.top"; classtype:attempted-recon; sid:200040477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.orcbvv.top"; classtype:attempted-recon; sid:200040478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.peshlh.shop"; classtype:attempted-recon; sid:200040479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200040480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200040481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200040482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.qbcbta.top"; classtype:attempted-recon; sid:200040483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.rgqjka.top"; classtype:attempted-recon; sid:200040484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.sorjpe.top"; classtype:attempted-recon; sid:200040485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.svfocp.top"; classtype:attempted-recon; sid:200040486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.sxmerd.shop"; classtype:attempted-recon; sid:200040487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.tppwpi.top"; classtype:attempted-recon; sid:200040488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200040489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.uarmbh.top"; classtype:attempted-recon; sid:200040490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.uiedwv.top"; classtype:attempted-recon; sid:200040491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.ukohwk.top"; classtype:attempted-recon; sid:200040492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.vlunrr.top"; classtype:attempted-recon; sid:200040493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.wezouj.top"; classtype:attempted-recon; sid:200040494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200040495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.xewfoa.top"; classtype:attempted-recon; sid:200040496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.xwdvad.top"; classtype:attempted-recon; sid:200040497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.zqawii.top"; classtype:attempted-recon; sid:200040498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoceieesesia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200040499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.axrcbx.top"; classtype:attempted-recon; sid:200040500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.azrsog.top"; classtype:attempted-recon; sid:200040501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.buavhf.top"; classtype:attempted-recon; sid:200040502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.geqnuq.top"; classtype:attempted-recon; sid:200040503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.isvuiy.top"; classtype:attempted-recon; sid:200040504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.jfcxph.top"; classtype:attempted-recon; sid:200040505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.jsmfgc.top"; classtype:attempted-recon; sid:200040506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.kbroxv.top"; classtype:attempted-recon; sid:200040507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.kvdxks.top"; classtype:attempted-recon; sid:200040508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.mdxbrn.top"; classtype:attempted-recon; sid:200040509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.nnawmj.top"; classtype:attempted-recon; sid:200040510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.nofalw.top"; classtype:attempted-recon; sid:200040511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.oajqfn.top"; classtype:attempted-recon; sid:200040512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.obekup.shop"; classtype:attempted-recon; sid:200040513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.orcbvv.top"; classtype:attempted-recon; sid:200040514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.peshlh.shop"; classtype:attempted-recon; sid:200040515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.pgdfhw.top"; classtype:attempted-recon; sid:200040516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.pkwrdl.top"; classtype:attempted-recon; sid:200040517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.pmnaeh.top"; classtype:attempted-recon; sid:200040518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.qbcbta.top"; classtype:attempted-recon; sid:200040519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.rgqjka.top"; classtype:attempted-recon; sid:200040520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.sorjpe.top"; classtype:attempted-recon; sid:200040521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.svfocp.top"; classtype:attempted-recon; sid:200040522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.tppwpi.top"; classtype:attempted-recon; sid:200040523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.tvbcmo.top"; classtype:attempted-recon; sid:200040524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.uarmbh.top"; classtype:attempted-recon; sid:200040525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.uiedwv.top"; classtype:attempted-recon; sid:200040526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.ukohwk.top"; classtype:attempted-recon; sid:200040527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.vlunrr.top"; classtype:attempted-recon; sid:200040528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.wezouj.top"; classtype:attempted-recon; sid:200040529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.wiqlcn.top"; classtype:attempted-recon; sid:200040530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.xewfoa.top"; classtype:attempted-recon; sid:200040531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.xwdvad.top"; classtype:attempted-recon; sid:200040532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.zqawii.top"; classtype:attempted-recon; sid:200040533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsacvsoieesesia.oea.zvzqtl.top"; classtype:attempted-recon; sid:200040534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200040535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200040536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200040537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200040538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200040539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200040540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200040541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200040542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200040543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200040544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200040545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200040546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200040547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200040548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200040549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200040550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200040551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200040552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200040553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200040554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200040555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200040556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200040557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200040558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200040559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200040560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200040561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200040562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200040563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200040564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200040565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200040566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200040567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200040568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200040569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200040570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200040571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200040572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200040573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200040574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200040575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200040576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200040577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200040578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200040579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200040580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200040581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200040582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200040583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200040584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200040585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200040586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200040587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200040588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200040589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200040590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200040591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200040592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200040593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200040594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200040595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200040596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200040597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200040598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200040599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200040600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200040601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200040602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200040603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200040604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200040605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200040606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200040607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200040608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200040609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200040610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200040611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200040612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200040613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200040614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200040615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200040616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200040617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200040618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200040619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200040620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200040621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200040622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200040623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200040624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200040625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200040626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200040627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200040628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200040629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200040630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200040631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200040632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200040633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200040634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200040635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200040636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200040637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200040638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200040639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200040640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200040641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200040642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200040643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200040644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200040645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200040646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200040647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200040648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200040649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200040650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200040651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200040652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200040653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200040654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200040655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200040656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200040657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200040658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200040659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200040660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200040661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200040662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200040663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200040664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200040665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200040666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200040667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200040668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200040669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200040670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacceoissesia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200040671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200040672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200040673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200040674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200040675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200040676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200040677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200040678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200040679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200040680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200040681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200040682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200040683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200040684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200040685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200040686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200040687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200040688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200040689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200040690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200040691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200040692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200040693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200040694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200040695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200040696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200040697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200040698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200040699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200040700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200040701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200040702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200040703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200040704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200040705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200040706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200040707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200040708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200040709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200040710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200040711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200040712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200040713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200040714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200040715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200040716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200040717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200040718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200040719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200040720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200040721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200040722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200040723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200040724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200040725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200040726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200040727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200040728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200040729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200040730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200040731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200040732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200040733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200040734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200040735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200040736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200040737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200040738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200040739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200040740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200040741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200040742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200040743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200040744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200040745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200040746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200040747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200040748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200040749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200040750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200040751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200040752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200040753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200040754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200040755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200040756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200040757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200040758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200040759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200040760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200040761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200040762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200040763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200040764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200040765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200040766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200040767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200040768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200040769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200040770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200040771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200040772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200040773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200040774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200040775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200040776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200040777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200040778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200040779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200040780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200040781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200040782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200040783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200040784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200040785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200040786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200040787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200040788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200040789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200040790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200040791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200040792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200040793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200040794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200040795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200040796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200040797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200040798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200040799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200040800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200040801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200040802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200040803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200040804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200040805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200040806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200040807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccacsissesia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200040808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200040809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200040810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200040811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200040812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200040813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200040814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200040815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200040816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200040817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200040818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200040819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200040820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200040821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200040822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200040823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200040824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200040825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200040826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200040827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200040828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200040829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200040830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200040831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200040832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200040833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200040834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200040835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200040836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200040837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200040838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200040839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200040840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200040841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200040842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200040843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200040844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200040845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200040846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200040847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200040848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200040849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200040850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200040851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200040852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200040853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200040854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200040855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200040856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200040857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200040858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200040859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200040860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200040861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200040862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200040863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200040864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200040865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200040866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200040867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200040868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200040869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200040870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200040871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200040872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200040873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200040874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200040875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200040876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200040877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200040878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200040879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200040880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200040881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200040882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200040883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200040884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200040885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200040886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200040887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200040888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200040889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200040890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200040891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200040892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200040893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200040894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200040895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200040896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200040897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200040898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200040899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200040900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200040901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200040902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200040903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200040904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200040905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200040906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200040907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200040908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200040909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200040910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200040911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200040912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200040913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200040914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200040915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200040916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200040917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200040918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200040919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200040920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200040921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200040922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200040923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200040924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200040925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200040926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200040927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200040928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200040929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200040930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200040931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200040932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200040933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200040934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200040935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200040936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200040937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200040938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200040939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200040940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200040941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200040942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200040943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200040944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaecesesia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200040945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200040946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200040947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200040948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200040949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200040950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200040951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200040952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200040953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200040954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200040955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200040956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200040957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200040958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200040959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200040960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200040961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200040962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200040963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200040964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200040965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200040966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200040967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200040968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200040969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200040970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200040971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200040972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200040973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200040974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200040975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200040976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200040977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200040978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200040979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200040980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200040981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200040982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200040983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200040984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200040985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200040986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200040987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200040988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200040989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200040990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200040991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200040992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200040993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200040994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200040995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200040996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200040997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200040998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200040999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200041000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200041001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200041002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200041003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200041004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200041005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200041006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200041007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200041008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200041009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200041010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200041011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200041012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200041013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200041014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200041015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200041016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200041017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200041018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200041019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200041020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200041021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200041022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200041023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200041024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200041025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200041026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200041027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200041028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200041029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200041030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200041031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200041032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200041033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200041034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200041035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200041036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200041037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200041038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200041039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200041040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200041041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200041042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200041043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200041044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200041045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200041046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200041047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200041048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200041049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200041050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200041051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200041052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200041053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200041054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200041055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200041056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200041057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200041058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200041059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200041060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200041061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200041062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200041063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200041064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200041065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200041066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200041067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200041068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200041069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200041070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200041071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200041072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200041073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200041074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200041075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200041076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200041077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200041078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200041079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200041080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200041081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaesesia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200041082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200041083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200041084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200041085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200041086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200041087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200041088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200041089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200041090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200041091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200041092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200041093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200041094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200041095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200041096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200041097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.csndax.icu"; classtype:attempted-recon; sid:200041098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200041099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200041100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200041101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.erqer.icu"; classtype:attempted-recon; sid:200041102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200041103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200041104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200041105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200041106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200041107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200041108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200041109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200041110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200041111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200041112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200041113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200041114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200041115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200041116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200041117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200041118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200041119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200041120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200041121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200041122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200041123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200041124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200041125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200041126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200041127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200041128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200041129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200041130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lianges.icu"; classtype:attempted-recon; sid:200041131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200041132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200041133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.likijs.icu"; classtype:attempted-recon; sid:200041134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200041135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200041136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200041137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200041138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200041139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200041140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200041141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200041142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200041143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200041144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200041145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200041146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200041147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200041148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200041149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200041150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200041151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200041152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200041153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200041154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200041155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200041156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200041157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200041158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200041159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200041160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.maediof.icu"; classtype:attempted-recon; sid:200041161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200041162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200041163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200041164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200041165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200041166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200041167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200041168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200041169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200041170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.msodik.icu"; classtype:attempted-recon; sid:200041171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200041172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200041173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nanish.icu"; classtype:attempted-recon; sid:200041174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200041175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200041176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200041177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200041178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200041179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200041180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200041181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200041182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200041183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200041184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200041185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.paddki.icu"; classtype:attempted-recon; sid:200041186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200041187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200041188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200041189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200041190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200041191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.recordd.icu"; classtype:attempted-recon; sid:200041192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200041193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200041194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200041195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200041196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200041197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200041198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200041199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200041200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200041201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.trsas.icu"; classtype:attempted-recon; sid:200041202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200041203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200041204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.usideq.icu"; classtype:attempted-recon; sid:200041205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.v3454.icu"; classtype:attempted-recon; sid:200041206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200041207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.vardir.icu"; classtype:attempted-recon; sid:200041208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200041209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200041210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200041211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200041212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200041213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200041214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200041215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200041216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200041217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200041218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceoissesia.oeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200041219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200041220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200041221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200041222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200041223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200041224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200041225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200041226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200041227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200041228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200041229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200041230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200041231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200041232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200041233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200041234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200041235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200041236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200041237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200041238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200041239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200041240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200041241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200041242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200041243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200041244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200041245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200041246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200041247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200041248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200041249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200041250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200041251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200041252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200041253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200041254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200041255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200041256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200041257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200041258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200041259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200041260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200041261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200041262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200041263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200041264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200041265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200041266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200041267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200041268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200041269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200041270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200041271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200041272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200041273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200041274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200041275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200041276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200041277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200041278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200041279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200041280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200041281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200041282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200041283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200041284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200041285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200041286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200041287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200041288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200041289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200041290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200041291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200041292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200041293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200041294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200041295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200041296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200041297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200041298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200041299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200041300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200041301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200041302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200041303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200041304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200041305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200041306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200041307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200041308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200041309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200041310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200041311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200041312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200041313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200041314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200041315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200041316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200041317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200041318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200041319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200041320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200041321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200041322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200041323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200041324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200041325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200041326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200041327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200041328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200041329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200041330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200041331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200041332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200041333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200041334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200041335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200041336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200041337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200041338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200041339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200041340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200041341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200041342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200041343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200041344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200041345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200041346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200041347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200041348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200041349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200041350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200041351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200041352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200041353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200041354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200041355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccavceseoissesia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200041356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200041357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200041358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200041359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200041360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200041361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200041362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200041363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200041364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200041365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200041366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200041367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200041368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200041369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200041370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200041371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200041372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200041373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200041374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200041375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200041376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200041377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200041378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200041379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200041380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200041381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200041382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200041383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200041384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200041385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200041386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200041387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200041388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200041389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200041390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200041391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200041392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200041393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200041394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200041395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200041396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200041397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200041398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200041399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200041400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200041401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200041402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200041403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200041404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200041405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200041406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200041407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200041408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200041409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200041410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200041411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200041412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200041413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200041414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200041415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200041416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200041417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200041418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200041419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200041420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200041421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200041422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200041423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200041424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200041425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200041426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200041427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200041428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200041429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200041430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200041431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200041432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200041433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200041434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200041435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200041436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200041437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200041438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200041439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200041440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200041441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200041442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200041443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200041444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200041445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200041446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200041447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200041448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200041449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200041450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200041451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200041452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200041453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200041454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200041455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200041456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200041457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200041458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200041459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200041460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200041461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200041462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200041463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200041464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200041465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200041466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200041467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200041468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200041469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200041470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200041471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200041472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200041473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200041474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200041475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200041476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200041477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200041478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200041479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200041480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200041481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200041482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200041483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200041484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200041485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200041486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200041487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200041488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200041489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200041490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200041491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200041492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesesia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200041493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200041494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200041495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200041496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200041497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200041498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200041499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200041500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200041501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200041502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200041503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200041504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200041505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200041506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200041507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200041508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.csndax.icu"; classtype:attempted-recon; sid:200041509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200041510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200041511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200041512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.erqer.icu"; classtype:attempted-recon; sid:200041513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200041514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200041515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200041516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200041517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200041518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200041519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200041520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200041521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200041522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200041523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200041524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200041525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200041526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200041527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200041528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200041529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200041530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200041531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200041532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200041533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200041534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200041535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200041536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200041537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200041538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200041539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200041540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200041541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lianges.icu"; classtype:attempted-recon; sid:200041542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200041543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200041544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.likijs.icu"; classtype:attempted-recon; sid:200041545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200041546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200041547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200041548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200041549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200041550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200041551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200041552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200041553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200041554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200041555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200041556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200041557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200041558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200041559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200041560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200041561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200041562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200041563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200041564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200041565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200041566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200041567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200041568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200041569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200041570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200041571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.maediof.icu"; classtype:attempted-recon; sid:200041572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200041573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200041574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200041575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200041576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200041577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200041578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200041579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200041580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200041581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.msodik.icu"; classtype:attempted-recon; sid:200041582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200041583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200041584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nanish.icu"; classtype:attempted-recon; sid:200041585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200041586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200041587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200041588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200041589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200041590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200041591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200041592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200041593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200041594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200041595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200041596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.paddki.icu"; classtype:attempted-recon; sid:200041597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200041598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200041599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200041600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200041601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200041602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.recordd.icu"; classtype:attempted-recon; sid:200041603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200041604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200041605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200041606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200041607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200041608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200041609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200041610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200041611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200041612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.trsas.icu"; classtype:attempted-recon; sid:200041613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200041614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200041615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.usideq.icu"; classtype:attempted-recon; sid:200041616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.v3454.icu"; classtype:attempted-recon; sid:200041617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200041618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.vardir.icu"; classtype:attempted-recon; sid:200041619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200041620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200041621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200041622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200041623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200041624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200041625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200041626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200041627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200041628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200041629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavccaveesesia.aeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200041630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.axrcbx.top"; classtype:attempted-recon; sid:200041631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.azrsog.top"; classtype:attempted-recon; sid:200041632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.buavhf.top"; classtype:attempted-recon; sid:200041633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.geqnuq.top"; classtype:attempted-recon; sid:200041634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.isvuiy.top"; classtype:attempted-recon; sid:200041635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.jfcxph.top"; classtype:attempted-recon; sid:200041636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.jsmfgc.top"; classtype:attempted-recon; sid:200041637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.kbroxv.top"; classtype:attempted-recon; sid:200041638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.kvdxks.top"; classtype:attempted-recon; sid:200041639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.mdxbrn.top"; classtype:attempted-recon; sid:200041640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.nnawmj.top"; classtype:attempted-recon; sid:200041641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.nofalw.top"; classtype:attempted-recon; sid:200041642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.oajqfn.top"; classtype:attempted-recon; sid:200041643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.orcbvv.top"; classtype:attempted-recon; sid:200041644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.owbxts.top"; classtype:attempted-recon; sid:200041645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.pgdfhw.top"; classtype:attempted-recon; sid:200041646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.pkwrdl.top"; classtype:attempted-recon; sid:200041647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.pmnaeh.top"; classtype:attempted-recon; sid:200041648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.qbcbta.top"; classtype:attempted-recon; sid:200041649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.rgqjka.top"; classtype:attempted-recon; sid:200041650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.sorjpe.top"; classtype:attempted-recon; sid:200041651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.svfocp.top"; classtype:attempted-recon; sid:200041652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.tppwpi.top"; classtype:attempted-recon; sid:200041653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.tvbcmo.top"; classtype:attempted-recon; sid:200041654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.uarmbh.top"; classtype:attempted-recon; sid:200041655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.uiedwv.top"; classtype:attempted-recon; sid:200041656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.ukohwk.top"; classtype:attempted-recon; sid:200041657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.vlunrr.top"; classtype:attempted-recon; sid:200041658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.wezouj.top"; classtype:attempted-recon; sid:200041659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.wiqlcn.top"; classtype:attempted-recon; sid:200041660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.xewfoa.top"; classtype:attempted-recon; sid:200041661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.xwdvad.top"; classtype:attempted-recon; sid:200041662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.zqawii.top"; classtype:attempted-recon; sid:200041663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesceesia.c.zvzqtl.top"; classtype:attempted-recon; sid:200041664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.axrcbx.top"; classtype:attempted-recon; sid:200041665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.azrsog.top"; classtype:attempted-recon; sid:200041666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.buavhf.top"; classtype:attempted-recon; sid:200041667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.fmttqq.top"; classtype:attempted-recon; sid:200041668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.geqnuq.top"; classtype:attempted-recon; sid:200041669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.isvuiy.top"; classtype:attempted-recon; sid:200041670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.jfcxph.top"; classtype:attempted-recon; sid:200041671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.jsmfgc.top"; classtype:attempted-recon; sid:200041672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.kbroxv.top"; classtype:attempted-recon; sid:200041673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.kvdxks.top"; classtype:attempted-recon; sid:200041674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.mdxbrn.top"; classtype:attempted-recon; sid:200041675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.nnawmj.top"; classtype:attempted-recon; sid:200041676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.nofalw.top"; classtype:attempted-recon; sid:200041677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.oajqfn.top"; classtype:attempted-recon; sid:200041678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.orcbvv.top"; classtype:attempted-recon; sid:200041679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.pgdfhw.top"; classtype:attempted-recon; sid:200041680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.pkwrdl.top"; classtype:attempted-recon; sid:200041681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.pmnaeh.top"; classtype:attempted-recon; sid:200041682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.qbcbta.top"; classtype:attempted-recon; sid:200041683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.rgqjka.top"; classtype:attempted-recon; sid:200041684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.sorjpe.top"; classtype:attempted-recon; sid:200041685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.svfocp.top"; classtype:attempted-recon; sid:200041686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.tppwpi.top"; classtype:attempted-recon; sid:200041687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.tvbcmo.top"; classtype:attempted-recon; sid:200041688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.uarmbh.top"; classtype:attempted-recon; sid:200041689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.uiedwv.top"; classtype:attempted-recon; sid:200041690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.ukohwk.top"; classtype:attempted-recon; sid:200041691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.vlunrr.top"; classtype:attempted-recon; sid:200041692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.wezouj.top"; classtype:attempted-recon; sid:200041693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.wiqlcn.top"; classtype:attempted-recon; sid:200041694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.xewfoa.top"; classtype:attempted-recon; sid:200041695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.xuacoo.shop"; classtype:attempted-recon; sid:200041696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.xwdvad.top"; classtype:attempted-recon; sid:200041697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.zqawii.top"; classtype:attempted-recon; sid:200041698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavesesia.a.zvzqtl.top"; classtype:attempted-recon; sid:200041699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.axrcbx.top"; classtype:attempted-recon; sid:200041700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.azrsog.top"; classtype:attempted-recon; sid:200041701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.buavhf.top"; classtype:attempted-recon; sid:200041702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.geqnuq.top"; classtype:attempted-recon; sid:200041703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.isvuiy.top"; classtype:attempted-recon; sid:200041704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.jfcxph.top"; classtype:attempted-recon; sid:200041705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200041706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.kbroxv.top"; classtype:attempted-recon; sid:200041707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.kvdxks.top"; classtype:attempted-recon; sid:200041708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200041709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.mjfemh.shop"; classtype:attempted-recon; sid:200041710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.nnawmj.top"; classtype:attempted-recon; sid:200041711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.nofalw.top"; classtype:attempted-recon; sid:200041712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.oajqfn.top"; classtype:attempted-recon; sid:200041713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.orcbvv.top"; classtype:attempted-recon; sid:200041714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200041715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200041716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200041717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.qbcbta.top"; classtype:attempted-recon; sid:200041718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.rgqjka.top"; classtype:attempted-recon; sid:200041719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.sorjpe.top"; classtype:attempted-recon; sid:200041720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.svfocp.top"; classtype:attempted-recon; sid:200041721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.tppwpi.top"; classtype:attempted-recon; sid:200041722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200041723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.uarmbh.top"; classtype:attempted-recon; sid:200041724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.uiedwv.top"; classtype:attempted-recon; sid:200041725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.ukohwk.top"; classtype:attempted-recon; sid:200041726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.vlunrr.top"; classtype:attempted-recon; sid:200041727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.wezouj.top"; classtype:attempted-recon; sid:200041728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200041729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.xewfoa.top"; classtype:attempted-recon; sid:200041730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.xwdvad.top"; classtype:attempted-recon; sid:200041731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.zqawii.top"; classtype:attempted-recon; sid:200041732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavvesceeesia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200041733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.axrcbx.top"; classtype:attempted-recon; sid:200041734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.azrsog.top"; classtype:attempted-recon; sid:200041735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.buavhf.top"; classtype:attempted-recon; sid:200041736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.geqnuq.top"; classtype:attempted-recon; sid:200041737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.isvuiy.top"; classtype:attempted-recon; sid:200041738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.jfcxph.top"; classtype:attempted-recon; sid:200041739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.jsmfgc.top"; classtype:attempted-recon; sid:200041740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.kbroxv.top"; classtype:attempted-recon; sid:200041741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.kvdxks.top"; classtype:attempted-recon; sid:200041742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.mdxbrn.top"; classtype:attempted-recon; sid:200041743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.nnawmj.top"; classtype:attempted-recon; sid:200041744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.nofalw.top"; classtype:attempted-recon; sid:200041745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.oajqfn.top"; classtype:attempted-recon; sid:200041746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.orcbvv.top"; classtype:attempted-recon; sid:200041747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.pgdfhw.top"; classtype:attempted-recon; sid:200041748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.pkwrdl.top"; classtype:attempted-recon; sid:200041749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.pmnaeh.top"; classtype:attempted-recon; sid:200041750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.qbcbta.top"; classtype:attempted-recon; sid:200041751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.rgqjka.top"; classtype:attempted-recon; sid:200041752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.sorjpe.top"; classtype:attempted-recon; sid:200041753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.svfocp.top"; classtype:attempted-recon; sid:200041754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.tppwpi.top"; classtype:attempted-recon; sid:200041755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.tvbcmo.top"; classtype:attempted-recon; sid:200041756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.uarmbh.top"; classtype:attempted-recon; sid:200041757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.uiedwv.top"; classtype:attempted-recon; sid:200041758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.ukohwk.top"; classtype:attempted-recon; sid:200041759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.vlunrr.top"; classtype:attempted-recon; sid:200041760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.vnbmwi.shop"; classtype:attempted-recon; sid:200041761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.wezouj.top"; classtype:attempted-recon; sid:200041762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.wiqlcn.top"; classtype:attempted-recon; sid:200041763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.xewfoa.top"; classtype:attempted-recon; sid:200041764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.xuacoo.shop"; classtype:attempted-recon; sid:200041765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.xwdvad.top"; classtype:attempted-recon; sid:200041766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.yxpfzh.top"; classtype:attempted-recon; sid:200041767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.zqawii.top"; classtype:attempted-recon; sid:200041768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsavveseesia.aea.zvzqtl.top"; classtype:attempted-recon; sid:200041769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscaaaes.visvccanaie.dghwcz.za.com"; classtype:attempted-recon; sid:200041770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscaaaes.visvccanaie.pekfjn.cyou"; classtype:attempted-recon; sid:200041771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscaaes.visveanaie.mkymzye.bar"; classtype:attempted-recon; sid:200041772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.axbhie.za.com"; classtype:attempted-recon; sid:200041773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.cbargn.za.com"; classtype:attempted-recon; sid:200041774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.dyjnbb.za.com"; classtype:attempted-recon; sid:200041775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.epmgtc.za.com"; classtype:attempted-recon; sid:200041776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.fthjtm.za.com"; classtype:attempted-recon; sid:200041777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.fyyfxo.za.com"; classtype:attempted-recon; sid:200041778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200041779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.ifpdph.za.com"; classtype:attempted-recon; sid:200041780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.lklgbt.za.com"; classtype:attempted-recon; sid:200041781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.pfxtar.za.com"; classtype:attempted-recon; sid:200041782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.qyoqyz.za.com"; classtype:attempted-recon; sid:200041783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.qytbke.za.com"; classtype:attempted-recon; sid:200041784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.vixxvg.za.com"; classtype:attempted-recon; sid:200041785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.xioxfp.za.com"; classtype:attempted-recon; sid:200041786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.ygrkwy.za.com"; classtype:attempted-recon; sid:200041787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.ymixml.za.com"; classtype:attempted-recon; sid:200041788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsciveci.vivseiaveesi.yoltyz.za.com"; classtype:attempted-recon; sid:200041789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.fgmlde.top"; classtype:attempted-recon; sid:200041790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.fiwzrb.top"; classtype:attempted-recon; sid:200041791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.frhyqg.top"; classtype:attempted-recon; sid:200041792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.fshxqm.top"; classtype:attempted-recon; sid:200041793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.fzcftf.top"; classtype:attempted-recon; sid:200041794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.iktggq.top"; classtype:attempted-recon; sid:200041795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.jdjubw.top"; classtype:attempted-recon; sid:200041796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.jubsfg.top"; classtype:attempted-recon; sid:200041797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.ljsifw.top"; classtype:attempted-recon; sid:200041798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.nbhlvc.top"; classtype:attempted-recon; sid:200041799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.njhpgs.top"; classtype:attempted-recon; sid:200041800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.pwnccs.top"; classtype:attempted-recon; sid:200041801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.rataxm.top"; classtype:attempted-recon; sid:200041802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisveci.vcirveseiaveesi.rjfbqi.top"; classtype:attempted-recon; sid:200041803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.fiwzrb.top"; classtype:attempted-recon; sid:200041804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.frhyqg.top"; classtype:attempted-recon; sid:200041805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.fzcftf.top"; classtype:attempted-recon; sid:200041806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.ghdbbh.top"; classtype:attempted-recon; sid:200041807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.jxavqz.top"; classtype:attempted-recon; sid:200041808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.lsztbg.top"; classtype:attempted-recon; sid:200041809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.lwxxqk.top"; classtype:attempted-recon; sid:200041810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.ofburn.top"; classtype:attempted-recon; sid:200041811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.qjtfvg.top"; classtype:attempted-recon; sid:200041812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.rataxm.top"; classtype:attempted-recon; sid:200041813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.rchahv.top"; classtype:attempted-recon; sid:200041814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.rhirhw.top"; classtype:attempted-recon; sid:200041815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscreisvei.vicvrseesivesi.rjfbqi.top"; classtype:attempted-recon; sid:200041816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.aiinpw.za.com"; classtype:attempted-recon; sid:200041817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.apoljj.za.com"; classtype:attempted-recon; sid:200041818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.cnzlue.za.com"; classtype:attempted-recon; sid:200041819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.difkhu.za.com"; classtype:attempted-recon; sid:200041820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.dyjnbb.za.com"; classtype:attempted-recon; sid:200041821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.fjdayb.za.com"; classtype:attempted-recon; sid:200041822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.frghvs.za.com"; classtype:attempted-recon; sid:200041823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200041824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.jdjghn.za.com"; classtype:attempted-recon; sid:200041825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.jpxnnz.za.com"; classtype:attempted-recon; sid:200041826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.kzdaec.za.com"; classtype:attempted-recon; sid:200041827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.lcuqbc.za.com"; classtype:attempted-recon; sid:200041828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.lklgbt.za.com"; classtype:attempted-recon; sid:200041829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.lvuojw.za.com"; classtype:attempted-recon; sid:200041830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.mgfxpv.za.com"; classtype:attempted-recon; sid:200041831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.nkgnxu.za.com"; classtype:attempted-recon; sid:200041832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.nskxef.za.com"; classtype:attempted-recon; sid:200041833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200041834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.nyapck.za.com"; classtype:attempted-recon; sid:200041835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.ojabvb.za.com"; classtype:attempted-recon; sid:200041836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.peqrlu.za.com"; classtype:attempted-recon; sid:200041837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.phskmc.za.com"; classtype:attempted-recon; sid:200041838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.qbkymz.za.com"; classtype:attempted-recon; sid:200041839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.qigckf.za.com"; classtype:attempted-recon; sid:200041840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.qytbke.za.com"; classtype:attempted-recon; sid:200041841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.ryogde.za.com"; classtype:attempted-recon; sid:200041842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.sbonjn.za.com"; classtype:attempted-recon; sid:200041843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.sewril.za.com"; classtype:attempted-recon; sid:200041844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.uhdxmb.za.com"; classtype:attempted-recon; sid:200041845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.vixxvg.za.com"; classtype:attempted-recon; sid:200041846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.vnsscq.za.com"; classtype:attempted-recon; sid:200041847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.vunivt.za.com"; classtype:attempted-recon; sid:200041848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.wffxjj.za.com"; classtype:attempted-recon; sid:200041849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.wssjge.za.com"; classtype:attempted-recon; sid:200041850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevseci.vicvrseeaveesi.yjnkya.za.com"; classtype:attempted-recon; sid:200041851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.axbhie.za.com"; classtype:attempted-recon; sid:200041852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.difkhu.za.com"; classtype:attempted-recon; sid:200041853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.dzniib.za.com"; classtype:attempted-recon; sid:200041854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.flydpf.za.com"; classtype:attempted-recon; sid:200041855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.fmdodt.za.com"; classtype:attempted-recon; sid:200041856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.fmmfcz.za.com"; classtype:attempted-recon; sid:200041857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.hcnqqk.za.com"; classtype:attempted-recon; sid:200041858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.kzdaec.za.com"; classtype:attempted-recon; sid:200041859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.lcuqbc.za.com"; classtype:attempted-recon; sid:200041860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.nlutye.za.com"; classtype:attempted-recon; sid:200041861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.ntmdlo.za.com"; classtype:attempted-recon; sid:200041862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.nyapck.za.com"; classtype:attempted-recon; sid:200041863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.prfshi.za.com"; classtype:attempted-recon; sid:200041864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.qytbke.za.com"; classtype:attempted-recon; sid:200041865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.rouqjs.za.com"; classtype:attempted-recon; sid:200041866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.rsxmth.za.com"; classtype:attempted-recon; sid:200041867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.ryogde.za.com"; classtype:attempted-recon; sid:200041868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.sznube.za.com"; classtype:attempted-recon; sid:200041869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.trzfav.za.com"; classtype:attempted-recon; sid:200041870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.vmmoue.za.com"; classtype:attempted-recon; sid:200041871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.vnsscq.za.com"; classtype:attempted-recon; sid:200041872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.vtihba.za.com"; classtype:attempted-recon; sid:200041873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.vucabx.za.com"; classtype:attempted-recon; sid:200041874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.wssjge.za.com"; classtype:attempted-recon; sid:200041875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.wylftw.za.com"; classtype:attempted-recon; sid:200041876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.ygrkwy.za.com"; classtype:attempted-recon; sid:200041877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.ylvgii.za.com"; classtype:attempted-recon; sid:200041878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.ymixml.za.com"; classtype:attempted-recon; sid:200041879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.yoltyz.za.com"; classtype:attempted-recon; sid:200041880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.zenagx.za.com"; classtype:attempted-recon; sid:200041881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscrevsei.vivcsreesvesi.zudxug.za.com"; classtype:attempted-recon; sid:200041882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200041883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200041884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200041885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200041886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200041887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200041888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200041889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200041890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200041891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200041892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200041893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200041894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200041895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200041896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200041897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200041898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200041899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200041900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200041901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200041902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200041903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200041904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200041905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200041906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200041907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200041908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200041909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200041910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200041911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200041912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200041913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200041914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200041915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200041916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200041917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200041918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200041919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200041920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200041921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200041922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200041923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200041924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200041925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200041926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200041927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200041928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200041929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200041930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200041931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200041932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200041933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200041934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200041935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200041936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200041937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200041938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200041939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200041940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200041941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200041942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200041943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200041944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200041945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200041946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200041947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200041948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200041949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200041950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200041951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200041952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200041953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200041954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200041955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200041956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200041957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200041958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200041959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200041960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200041961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200041962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200041963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200041964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200041965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200041966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200041967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200041968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200041969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200041970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200041971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200041972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200041973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200041974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200041975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200041976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200041977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200041978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200041979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200041980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200041981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200041982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200041983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200041984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200041985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200041986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200041987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200041988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200041989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200041990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200041991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200041992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200041993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200041994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200041995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200041996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200041997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200041998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200041999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200042000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200042001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200042002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200042003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200042004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200042005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200042006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200042007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200042008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200042009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200042010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200042011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200042012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200042013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200042014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200042015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200042016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200042017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200042018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoceesesia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200042019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200042020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200042021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200042022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200042023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200042024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200042025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200042026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200042027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200042028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200042029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200042030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200042031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200042032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200042033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200042034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200042035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200042036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200042037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200042038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200042039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200042040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200042041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200042042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200042043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200042044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200042045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200042046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200042047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200042048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200042049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200042050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200042051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200042052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200042053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200042054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200042055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200042056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200042057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200042058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200042059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200042060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200042061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200042062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200042063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200042064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200042065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200042066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200042067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200042068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200042069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200042070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200042071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200042072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200042073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200042074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200042075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200042076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200042077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200042078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200042079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200042080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200042081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200042082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200042083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200042084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200042085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200042086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200042087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200042088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200042089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200042090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200042091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200042092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200042093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200042094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200042095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200042096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200042097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200042098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200042099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200042100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200042101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200042102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200042103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200042104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200042105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200042106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200042107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200042108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200042109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200042110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200042111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200042112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200042113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200042114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200042115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200042116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200042117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200042118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200042119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200042120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200042121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200042122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200042123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200042124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200042125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200042126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200042127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200042128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200042129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200042130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200042131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200042132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200042133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200042134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200042135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200042136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200042137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200042138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200042139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200042140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200042141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200042142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200042143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200042144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200042145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200042146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200042147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200042148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200042149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200042150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200042151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200042152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200042153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200042154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200042155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsccaoisesia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200042156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.abzcr.icu"; classtype:attempted-recon; sid:200042157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.ccvjar.top"; classtype:attempted-recon; sid:200042158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.coflya.top"; classtype:attempted-recon; sid:200042159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.cpgspk.top"; classtype:attempted-recon; sid:200042160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.dauexk.top"; classtype:attempted-recon; sid:200042161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.digitize.ltd"; classtype:attempted-recon; sid:200042162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.dlnxzo.top"; classtype:attempted-recon; sid:200042163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.fksiud.icu"; classtype:attempted-recon; sid:200042164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.hfoesk.top"; classtype:attempted-recon; sid:200042165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.jtuet.icu"; classtype:attempted-recon; sid:200042166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.kpblio.top"; classtype:attempted-recon; sid:200042167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.mavbpi.top"; classtype:attempted-recon; sid:200042168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.msiesya.icu"; classtype:attempted-recon; sid:200042169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.pkilix.top"; classtype:attempted-recon; sid:200042170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.rkobagr.icu"; classtype:attempted-recon; sid:200042171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.rsfcmb.icu"; classtype:attempted-recon; sid:200042172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.sejmqk.top"; classtype:attempted-recon; sid:200042173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.ubdjag.top"; classtype:attempted-recon; sid:200042174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.upuphone.group"; classtype:attempted-recon; sid:200042175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.urekwh.top"; classtype:attempted-recon; sid:200042176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.wdtsjr.top"; classtype:attempted-recon; sid:200042177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.wingfh.top"; classtype:attempted-recon; sid:200042178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.xudixq.top"; classtype:attempted-recon; sid:200042179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.xvtayq.top"; classtype:attempted-recon; sid:200042180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.yqzemo.top"; classtype:attempted-recon; sid:200042181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.ytvuml.top"; classtype:attempted-recon; sid:200042182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisveci.vcieseiaveesi.zblgxm.top"; classtype:attempted-recon; sid:200042183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.balaet.icu"; classtype:attempted-recon; sid:200042184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.cipqzd.top"; classtype:attempted-recon; sid:200042185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.cwadib.top"; classtype:attempted-recon; sid:200042186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.cyqggi.top"; classtype:attempted-recon; sid:200042187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.elhicw.top"; classtype:attempted-recon; sid:200042188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.fvhuee.icu"; classtype:attempted-recon; sid:200042189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.huaxiano.icu"; classtype:attempted-recon; sid:200042190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.jtuet.icu"; classtype:attempted-recon; sid:200042191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.lenorv.top"; classtype:attempted-recon; sid:200042192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.mkpiab.top"; classtype:attempted-recon; sid:200042193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.mqiwux.top"; classtype:attempted-recon; sid:200042194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.rkobagr.icu"; classtype:attempted-recon; sid:200042195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.runjin004.icu"; classtype:attempted-recon; sid:200042196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.upuphone.group"; classtype:attempted-recon; sid:200042197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.urekwh.top"; classtype:attempted-recon; sid:200042198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.wetot.icu"; classtype:attempted-recon; sid:200042199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.wetot.life"; classtype:attempted-recon; sid:200042200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.wxnyfl.top"; classtype:attempted-recon; sid:200042201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.xlrppx.top"; classtype:attempted-recon; sid:200042202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.yavkol.top"; classtype:attempted-recon; sid:200042203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecreisvei.vicveesivesi.yhitbg.top"; classtype:attempted-recon; sid:200042204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.badkfs.icu"; classtype:attempted-recon; sid:200042205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.balaet.icu"; classtype:attempted-recon; sid:200042206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.bdbbvv.top"; classtype:attempted-recon; sid:200042207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.bjexfe.top"; classtype:attempted-recon; sid:200042208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.cipqzd.top"; classtype:attempted-recon; sid:200042209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.coflya.top"; classtype:attempted-recon; sid:200042210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.digitize.ltd"; classtype:attempted-recon; sid:200042211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.exoysm.top"; classtype:attempted-recon; sid:200042212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.huaxiano.icu"; classtype:attempted-recon; sid:200042213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.hyfxgx.top"; classtype:attempted-recon; sid:200042214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.jdqomw.top"; classtype:attempted-recon; sid:200042215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.jtuet.icu"; classtype:attempted-recon; sid:200042216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.kpblio.top"; classtype:attempted-recon; sid:200042217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.pvhngq.top"; classtype:attempted-recon; sid:200042218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.ronipp.top"; classtype:attempted-recon; sid:200042219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.sctgkq.top"; classtype:attempted-recon; sid:200042220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.ssrpsl.top"; classtype:attempted-recon; sid:200042221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.upuphone.group"; classtype:attempted-recon; sid:200042222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.upuphone.ltd"; classtype:attempted-recon; sid:200042223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.urekwh.top"; classtype:attempted-recon; sid:200042224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.wbziul.top"; classtype:attempted-recon; sid:200042225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.wetot.icu"; classtype:attempted-recon; sid:200042226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.wetot.life"; classtype:attempted-recon; sid:200042227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.wgipfc.top"; classtype:attempted-recon; sid:200042228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.wxnyfl.top"; classtype:attempted-recon; sid:200042229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevseci.vicveeaveesi.xxdjik.top"; classtype:attempted-recon; sid:200042230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.02vk.top"; classtype:attempted-recon; sid:200042231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.bdbbvv.top"; classtype:attempted-recon; sid:200042232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.benefitted.icu"; classtype:attempted-recon; sid:200042233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.bjexfe.top"; classtype:attempted-recon; sid:200042234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.bspybm.top"; classtype:attempted-recon; sid:200042235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.ccvjar.top"; classtype:attempted-recon; sid:200042236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.cntxao.top"; classtype:attempted-recon; sid:200042237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.craycraft.top"; classtype:attempted-recon; sid:200042238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.dyugxj.top"; classtype:attempted-recon; sid:200042239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.evyqhg.top"; classtype:attempted-recon; sid:200042240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.fvhuee.icu"; classtype:attempted-recon; sid:200042241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.fvqetn.top"; classtype:attempted-recon; sid:200042242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.hfoesk.top"; classtype:attempted-recon; sid:200042243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.jdftpe.top"; classtype:attempted-recon; sid:200042244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.jdqomw.top"; classtype:attempted-recon; sid:200042245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.mqiwux.top"; classtype:attempted-recon; sid:200042246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.pkilix.top"; classtype:attempted-recon; sid:200042247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.ttxupv.top"; classtype:attempted-recon; sid:200042248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.tvdoqx.top"; classtype:attempted-recon; sid:200042249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.upuphone.ltd"; classtype:attempted-recon; sid:200042250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.wbziul.top"; classtype:attempted-recon; sid:200042251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.wehqxs.top"; classtype:attempted-recon; sid:200042252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.xlrppx.top"; classtype:attempted-recon; sid:200042253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.yavkol.top"; classtype:attempted-recon; sid:200042254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.ymwfnw.top"; classtype:attempted-recon; sid:200042255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.ytvuml.top"; classtype:attempted-recon; sid:200042256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscsecrevsei.vivcsesvesi.zliboyp.icu"; classtype:attempted-recon; sid:200042257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200042258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200042259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200042260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200042261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200042262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200042263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200042264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200042265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200042266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200042267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200042268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200042269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200042270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200042271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200042272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.csndax.icu"; classtype:attempted-recon; sid:200042273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200042274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200042275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200042276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.erqer.icu"; classtype:attempted-recon; sid:200042277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200042278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200042279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200042280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200042281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200042282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200042283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200042284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200042285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200042286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200042287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200042288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200042289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200042290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200042291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200042292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200042293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200042294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200042295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200042296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200042297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200042298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200042299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200042300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200042301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200042302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200042303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200042304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200042305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lianges.icu"; classtype:attempted-recon; sid:200042306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200042307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200042308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.likijs.icu"; classtype:attempted-recon; sid:200042309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200042310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200042311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200042312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200042313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200042314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200042315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200042316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200042317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200042318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200042319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200042320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200042321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200042322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200042323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200042324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200042325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200042326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200042327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200042328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200042329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200042330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200042331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200042332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200042333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200042334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200042335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.maediof.icu"; classtype:attempted-recon; sid:200042336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200042337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200042338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200042339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200042340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200042341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200042342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200042343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200042344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200042345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.msodik.icu"; classtype:attempted-recon; sid:200042346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200042347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200042348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nanish.icu"; classtype:attempted-recon; sid:200042349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200042350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200042351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200042352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200042353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200042354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200042355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200042356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200042357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200042358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200042359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200042360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.paddki.icu"; classtype:attempted-recon; sid:200042361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200042362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200042363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200042364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200042365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200042366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.recordd.icu"; classtype:attempted-recon; sid:200042367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200042368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200042369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200042370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200042371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200042372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200042373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200042374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200042375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200042376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.trsas.icu"; classtype:attempted-recon; sid:200042377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200042378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200042379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.usideq.icu"; classtype:attempted-recon; sid:200042380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.v3454.icu"; classtype:attempted-recon; sid:200042381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200042382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.vardir.icu"; classtype:attempted-recon; sid:200042383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200042384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200042385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200042386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200042387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200042388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200042389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200042390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200042391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200042392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200042393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeesesia.oeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200042394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200042395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200042396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200042397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200042398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200042399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200042400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200042401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200042402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200042403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200042404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200042405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200042406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200042407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200042408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200042409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200042410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200042411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200042412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200042413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200042414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200042415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200042416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200042417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200042418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200042419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200042420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200042421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200042422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200042423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200042424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200042425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200042426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200042427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200042428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200042429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200042430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200042431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200042432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200042433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200042434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200042435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200042436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200042437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200042438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200042439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200042440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200042441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200042442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200042443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200042444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200042445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200042446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200042447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200042448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200042449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200042450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200042451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200042452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200042453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200042454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200042455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200042456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200042457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200042458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200042459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200042460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200042461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200042462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200042463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200042464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200042465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200042466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200042467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200042468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200042469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200042470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200042471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200042472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200042473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200042474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200042475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200042476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200042477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200042478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200042479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200042480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200042481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200042482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200042483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200042484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200042485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200042486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200042487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200042488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200042489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200042490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200042491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200042492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200042493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200042494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200042495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200042496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200042497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200042498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200042499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200042500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200042501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200042502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200042503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200042504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200042505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200042506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200042507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200042508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200042509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200042510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200042511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200042512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200042513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200042514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200042515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200042516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200042517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200042518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200042519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200042520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200042521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200042522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200042523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200042524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200042525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200042526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200042527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200042528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200042529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200042530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivscvccasoeieesesia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200042531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.axrcbx.top"; classtype:attempted-recon; sid:200042532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.azrsog.top"; classtype:attempted-recon; sid:200042533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.buavhf.top"; classtype:attempted-recon; sid:200042534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.cckrka.shop"; classtype:attempted-recon; sid:200042535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.geqnuq.top"; classtype:attempted-recon; sid:200042536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.isvuiy.top"; classtype:attempted-recon; sid:200042537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.jfcxph.top"; classtype:attempted-recon; sid:200042538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.jsmfgc.top"; classtype:attempted-recon; sid:200042539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.kbroxv.top"; classtype:attempted-recon; sid:200042540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.kvdxks.top"; classtype:attempted-recon; sid:200042541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.mdxbrn.top"; classtype:attempted-recon; sid:200042542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.mjfemh.shop"; classtype:attempted-recon; sid:200042543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.nnawmj.top"; classtype:attempted-recon; sid:200042544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.nofalw.top"; classtype:attempted-recon; sid:200042545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.oajqfn.top"; classtype:attempted-recon; sid:200042546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.orcbvv.top"; classtype:attempted-recon; sid:200042547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.owbxts.top"; classtype:attempted-recon; sid:200042548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.pgdfhw.top"; classtype:attempted-recon; sid:200042549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.pkwrdl.top"; classtype:attempted-recon; sid:200042550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.pmnaeh.top"; classtype:attempted-recon; sid:200042551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.qbcbta.top"; classtype:attempted-recon; sid:200042552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.rgqjka.top"; classtype:attempted-recon; sid:200042553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.sorjpe.top"; classtype:attempted-recon; sid:200042554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.svfocp.top"; classtype:attempted-recon; sid:200042555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.tppwpi.top"; classtype:attempted-recon; sid:200042556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.tvbcmo.top"; classtype:attempted-recon; sid:200042557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.uarmbh.top"; classtype:attempted-recon; sid:200042558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.uiedwv.top"; classtype:attempted-recon; sid:200042559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.ukohwk.top"; classtype:attempted-recon; sid:200042560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.vlunrr.top"; classtype:attempted-recon; sid:200042561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.wezouj.top"; classtype:attempted-recon; sid:200042562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.wiqlcn.top"; classtype:attempted-recon; sid:200042563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.xewfoa.top"; classtype:attempted-recon; sid:200042564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.xuacoo.shop"; classtype:attempted-recon; sid:200042565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.xwdvad.top"; classtype:attempted-recon; sid:200042566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.zqawii.top"; classtype:attempted-recon; sid:200042567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavccseoissesia.c.zvzqtl.top"; classtype:attempted-recon; sid:200042568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.axrcbx.top"; classtype:attempted-recon; sid:200042569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.azrsog.top"; classtype:attempted-recon; sid:200042570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.buavhf.top"; classtype:attempted-recon; sid:200042571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.geqnuq.top"; classtype:attempted-recon; sid:200042572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.isvuiy.top"; classtype:attempted-recon; sid:200042573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.jfcxph.top"; classtype:attempted-recon; sid:200042574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.jsmfgc.top"; classtype:attempted-recon; sid:200042575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.kbroxv.top"; classtype:attempted-recon; sid:200042576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.kvdxks.top"; classtype:attempted-recon; sid:200042577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.mdxbrn.top"; classtype:attempted-recon; sid:200042578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.mjfemh.shop"; classtype:attempted-recon; sid:200042579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.nnawmj.top"; classtype:attempted-recon; sid:200042580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.nofalw.top"; classtype:attempted-recon; sid:200042581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.oajqfn.top"; classtype:attempted-recon; sid:200042582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.orcbvv.top"; classtype:attempted-recon; sid:200042583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.pgdfhw.top"; classtype:attempted-recon; sid:200042584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.pkwrdl.top"; classtype:attempted-recon; sid:200042585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.pmnaeh.top"; classtype:attempted-recon; sid:200042586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.qbcbta.top"; classtype:attempted-recon; sid:200042587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.rgqjka.top"; classtype:attempted-recon; sid:200042588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.sorjpe.top"; classtype:attempted-recon; sid:200042589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.svfocp.top"; classtype:attempted-recon; sid:200042590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.tppwpi.top"; classtype:attempted-recon; sid:200042591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.tvbcmo.top"; classtype:attempted-recon; sid:200042592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.uarmbh.top"; classtype:attempted-recon; sid:200042593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.uiedwv.top"; classtype:attempted-recon; sid:200042594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.ukohwk.top"; classtype:attempted-recon; sid:200042595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.vlunrr.top"; classtype:attempted-recon; sid:200042596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.wezouj.top"; classtype:attempted-recon; sid:200042597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.wiqlcn.top"; classtype:attempted-recon; sid:200042598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.xewfoa.top"; classtype:attempted-recon; sid:200042599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.zqawii.top"; classtype:attempted-recon; sid:200042600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavcsoissesia.o.zvzqtl.top"; classtype:attempted-recon; sid:200042601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.axrcbx.top"; classtype:attempted-recon; sid:200042602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.azrsog.top"; classtype:attempted-recon; sid:200042603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.buavhf.top"; classtype:attempted-recon; sid:200042604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.geqnuq.top"; classtype:attempted-recon; sid:200042605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.isvuiy.top"; classtype:attempted-recon; sid:200042606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.jfcxph.top"; classtype:attempted-recon; sid:200042607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.jsmfgc.top"; classtype:attempted-recon; sid:200042608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.kbroxv.top"; classtype:attempted-recon; sid:200042609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.kvdxks.top"; classtype:attempted-recon; sid:200042610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.mdxbrn.top"; classtype:attempted-recon; sid:200042611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.nnawmj.top"; classtype:attempted-recon; sid:200042612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.nofalw.top"; classtype:attempted-recon; sid:200042613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.oajqfn.top"; classtype:attempted-recon; sid:200042614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.orcbvv.top"; classtype:attempted-recon; sid:200042615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.owbxts.top"; classtype:attempted-recon; sid:200042616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.pgdfhw.top"; classtype:attempted-recon; sid:200042617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.pkwrdl.top"; classtype:attempted-recon; sid:200042618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.pmnaeh.top"; classtype:attempted-recon; sid:200042619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.qbcbta.top"; classtype:attempted-recon; sid:200042620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.rgqjka.top"; classtype:attempted-recon; sid:200042621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.sorjpe.top"; classtype:attempted-recon; sid:200042622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.svfocp.top"; classtype:attempted-recon; sid:200042623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.tppwpi.top"; classtype:attempted-recon; sid:200042624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.tvbcmo.top"; classtype:attempted-recon; sid:200042625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.uarmbh.top"; classtype:attempted-recon; sid:200042626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.uiedwv.top"; classtype:attempted-recon; sid:200042627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.ukohwk.top"; classtype:attempted-recon; sid:200042628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.vlunrr.top"; classtype:attempted-recon; sid:200042629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.wezouj.top"; classtype:attempted-recon; sid:200042630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.wiqlcn.top"; classtype:attempted-recon; sid:200042631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.xewfoa.top"; classtype:attempted-recon; sid:200042632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.xuacoo.shop"; classtype:attempted-recon; sid:200042633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.xwdvad.top"; classtype:attempted-recon; sid:200042634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.zqawii.top"; classtype:attempted-recon; sid:200042635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavecsesesia.c.zvzqtl.top"; classtype:attempted-recon; sid:200042636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.axrcbx.top"; classtype:attempted-recon; sid:200042637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.azrsog.top"; classtype:attempted-recon; sid:200042638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.buavhf.top"; classtype:attempted-recon; sid:200042639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.geqnuq.top"; classtype:attempted-recon; sid:200042640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.isvuiy.top"; classtype:attempted-recon; sid:200042641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.jfcxph.top"; classtype:attempted-recon; sid:200042642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.jsmfgc.top"; classtype:attempted-recon; sid:200042643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.kbroxv.top"; classtype:attempted-recon; sid:200042644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.kvdxks.top"; classtype:attempted-recon; sid:200042645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.mdxbrn.top"; classtype:attempted-recon; sid:200042646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.nnawmj.top"; classtype:attempted-recon; sid:200042647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.nofalw.top"; classtype:attempted-recon; sid:200042648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.oajqfn.top"; classtype:attempted-recon; sid:200042649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.onazqm.top"; classtype:attempted-recon; sid:200042650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.orcbvv.top"; classtype:attempted-recon; sid:200042651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.pgdfhw.top"; classtype:attempted-recon; sid:200042652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.pkwrdl.top"; classtype:attempted-recon; sid:200042653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.pmnaeh.top"; classtype:attempted-recon; sid:200042654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.qbcbta.top"; classtype:attempted-recon; sid:200042655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.rgqjka.top"; classtype:attempted-recon; sid:200042656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.sorjpe.top"; classtype:attempted-recon; sid:200042657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.svfocp.top"; classtype:attempted-recon; sid:200042658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.sxmerd.shop"; classtype:attempted-recon; sid:200042659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.tppwpi.top"; classtype:attempted-recon; sid:200042660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.tvbcmo.top"; classtype:attempted-recon; sid:200042661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.uarmbh.top"; classtype:attempted-recon; sid:200042662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.uiedwv.top"; classtype:attempted-recon; sid:200042663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.ukohwk.top"; classtype:attempted-recon; sid:200042664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.vlunrr.top"; classtype:attempted-recon; sid:200042665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.vnbmwi.shop"; classtype:attempted-recon; sid:200042666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.wezouj.top"; classtype:attempted-recon; sid:200042667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.wiqlcn.top"; classtype:attempted-recon; sid:200042668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.xewfoa.top"; classtype:attempted-recon; sid:200042669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.xwdvad.top"; classtype:attempted-recon; sid:200042670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.zqawii.top"; classtype:attempted-recon; sid:200042671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavessesia.a.zvzqtl.top"; classtype:attempted-recon; sid:200042672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.axrcbx.top"; classtype:attempted-recon; sid:200042673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.azrsog.top"; classtype:attempted-recon; sid:200042674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.buavhf.top"; classtype:attempted-recon; sid:200042675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.geqnuq.top"; classtype:attempted-recon; sid:200042676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.isvuiy.top"; classtype:attempted-recon; sid:200042677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.jfcxph.top"; classtype:attempted-recon; sid:200042678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200042679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.kbroxv.top"; classtype:attempted-recon; sid:200042680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.kvdxks.top"; classtype:attempted-recon; sid:200042681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200042682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.nnawmj.top"; classtype:attempted-recon; sid:200042683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.nofalw.top"; classtype:attempted-recon; sid:200042684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.oajqfn.top"; classtype:attempted-recon; sid:200042685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.obekup.shop"; classtype:attempted-recon; sid:200042686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.orcbvv.top"; classtype:attempted-recon; sid:200042687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200042688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200042689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200042690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.qbcbta.top"; classtype:attempted-recon; sid:200042691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.rgqjka.top"; classtype:attempted-recon; sid:200042692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.sorjpe.top"; classtype:attempted-recon; sid:200042693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.svfocp.top"; classtype:attempted-recon; sid:200042694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.tppwpi.top"; classtype:attempted-recon; sid:200042695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200042696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.uarmbh.top"; classtype:attempted-recon; sid:200042697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.uiedwv.top"; classtype:attempted-recon; sid:200042698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.ukohwk.top"; classtype:attempted-recon; sid:200042699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.vlunrr.top"; classtype:attempted-recon; sid:200042700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.wezouj.top"; classtype:attempted-recon; sid:200042701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200042702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.xewfoa.top"; classtype:attempted-recon; sid:200042703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.xwdvad.top"; classtype:attempted-recon; sid:200042704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.zqawii.top"; classtype:attempted-recon; sid:200042705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcceseoissesia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200042706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.axrcbx.top"; classtype:attempted-recon; sid:200042707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.azrsog.top"; classtype:attempted-recon; sid:200042708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.buavhf.top"; classtype:attempted-recon; sid:200042709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.geqnuq.top"; classtype:attempted-recon; sid:200042710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.isvuiy.top"; classtype:attempted-recon; sid:200042711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.jfcxph.top"; classtype:attempted-recon; sid:200042712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.jsmfgc.top"; classtype:attempted-recon; sid:200042713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.kbroxv.top"; classtype:attempted-recon; sid:200042714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.kvdxks.top"; classtype:attempted-recon; sid:200042715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.mdxbrn.top"; classtype:attempted-recon; sid:200042716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.nnawmj.top"; classtype:attempted-recon; sid:200042717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.nofalw.top"; classtype:attempted-recon; sid:200042718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.oajqfn.top"; classtype:attempted-recon; sid:200042719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.onazqm.top"; classtype:attempted-recon; sid:200042720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.orcbvv.top"; classtype:attempted-recon; sid:200042721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.owbxts.top"; classtype:attempted-recon; sid:200042722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.pgdfhw.top"; classtype:attempted-recon; sid:200042723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.pkwrdl.top"; classtype:attempted-recon; sid:200042724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.pmnaeh.top"; classtype:attempted-recon; sid:200042725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.qbcbta.top"; classtype:attempted-recon; sid:200042726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.rgqjka.top"; classtype:attempted-recon; sid:200042727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.sorjpe.top"; classtype:attempted-recon; sid:200042728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.svfocp.top"; classtype:attempted-recon; sid:200042729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.tppwpi.top"; classtype:attempted-recon; sid:200042730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.tvbcmo.top"; classtype:attempted-recon; sid:200042731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.uarmbh.top"; classtype:attempted-recon; sid:200042732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.uiedwv.top"; classtype:attempted-recon; sid:200042733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.ukohwk.top"; classtype:attempted-recon; sid:200042734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.vlunrr.top"; classtype:attempted-recon; sid:200042735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.vnbmwi.shop"; classtype:attempted-recon; sid:200042736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.wezouj.top"; classtype:attempted-recon; sid:200042737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.wiqlcn.top"; classtype:attempted-recon; sid:200042738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.xewfoa.top"; classtype:attempted-recon; sid:200042739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.xuacoo.shop"; classtype:attempted-recon; sid:200042740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.xwdvad.top"; classtype:attempted-recon; sid:200042741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.zqawii.top"; classtype:attempted-recon; sid:200042742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvcseoissesia.oea.zvzqtl.top"; classtype:attempted-recon; sid:200042743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.axrcbx.top"; classtype:attempted-recon; sid:200042744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.azrsog.top"; classtype:attempted-recon; sid:200042745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.buavhf.top"; classtype:attempted-recon; sid:200042746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.cckrka.shop"; classtype:attempted-recon; sid:200042747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.geqnuq.top"; classtype:attempted-recon; sid:200042748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.isvuiy.top"; classtype:attempted-recon; sid:200042749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.jfcxph.top"; classtype:attempted-recon; sid:200042750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200042751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.kbroxv.top"; classtype:attempted-recon; sid:200042752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.kvdxks.top"; classtype:attempted-recon; sid:200042753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200042754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.nnawmj.top"; classtype:attempted-recon; sid:200042755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.nofalw.top"; classtype:attempted-recon; sid:200042756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.oajqfn.top"; classtype:attempted-recon; sid:200042757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.orcbvv.top"; classtype:attempted-recon; sid:200042758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200042759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200042760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200042761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.qbcbta.top"; classtype:attempted-recon; sid:200042762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.rgqjka.top"; classtype:attempted-recon; sid:200042763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.sorjpe.top"; classtype:attempted-recon; sid:200042764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.svfocp.top"; classtype:attempted-recon; sid:200042765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.tppwpi.top"; classtype:attempted-recon; sid:200042766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200042767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.uarmbh.top"; classtype:attempted-recon; sid:200042768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.uiedwv.top"; classtype:attempted-recon; sid:200042769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.ukohwk.top"; classtype:attempted-recon; sid:200042770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.vlunrr.top"; classtype:attempted-recon; sid:200042771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.wezouj.top"; classtype:attempted-recon; sid:200042772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200042773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.xewfoa.top"; classtype:attempted-recon; sid:200042774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.xwdvad.top"; classtype:attempted-recon; sid:200042775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.zqawii.top"; classtype:attempted-recon; sid:200042776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvecesesesia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200042777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.axrcbx.top"; classtype:attempted-recon; sid:200042778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.azrsog.top"; classtype:attempted-recon; sid:200042779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.buavhf.top"; classtype:attempted-recon; sid:200042780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.geqnuq.top"; classtype:attempted-recon; sid:200042781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.isvuiy.top"; classtype:attempted-recon; sid:200042782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.jfcxph.top"; classtype:attempted-recon; sid:200042783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.jsmfgc.top"; classtype:attempted-recon; sid:200042784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.kbroxv.top"; classtype:attempted-recon; sid:200042785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.kvdxks.top"; classtype:attempted-recon; sid:200042786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.mdxbrn.top"; classtype:attempted-recon; sid:200042787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.mjfemh.shop"; classtype:attempted-recon; sid:200042788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.nnawmj.top"; classtype:attempted-recon; sid:200042789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.nofalw.top"; classtype:attempted-recon; sid:200042790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.oajqfn.top"; classtype:attempted-recon; sid:200042791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.obekup.shop"; classtype:attempted-recon; sid:200042792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.orcbvv.top"; classtype:attempted-recon; sid:200042793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.pgdfhw.top"; classtype:attempted-recon; sid:200042794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.pkwrdl.top"; classtype:attempted-recon; sid:200042795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.pmnaeh.top"; classtype:attempted-recon; sid:200042796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.qbcbta.top"; classtype:attempted-recon; sid:200042797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.rgqjka.top"; classtype:attempted-recon; sid:200042798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.sorjpe.top"; classtype:attempted-recon; sid:200042799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.svfocp.top"; classtype:attempted-recon; sid:200042800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.tppwpi.top"; classtype:attempted-recon; sid:200042801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.tvbcmo.top"; classtype:attempted-recon; sid:200042802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.uarmbh.top"; classtype:attempted-recon; sid:200042803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.uiedwv.top"; classtype:attempted-recon; sid:200042804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.ukohwk.top"; classtype:attempted-recon; sid:200042805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.vlunrr.top"; classtype:attempted-recon; sid:200042806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.vnbmwi.shop"; classtype:attempted-recon; sid:200042807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.wezouj.top"; classtype:attempted-recon; sid:200042808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.wiqlcn.top"; classtype:attempted-recon; sid:200042809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.xewfoa.top"; classtype:attempted-recon; sid:200042810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.xuacoo.shop"; classtype:attempted-recon; sid:200042811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.xwdvad.top"; classtype:attempted-recon; sid:200042812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.yxpfzh.top"; classtype:attempted-recon; sid:200042813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.zqawii.top"; classtype:attempted-recon; sid:200042814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivseavvesesesia.aea.zvzqtl.top"; classtype:attempted-recon; sid:200042815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsesa.vsicvsai.vnbxy.top"; classtype:attempted-recon; sid:200042816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsesesaccsaase.vsicsevcceaoosearescoooseaasi.mfwrsg.top"; classtype:attempted-recon; sid:200042817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsesesaccsaase.vsicsevcceaoosearescoooseaasi.rinlvb.top"; classtype:attempted-recon; sid:200042818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsesesaccsaase.vsicsevscaaiocearescooosecso.mfwrsg.top"; classtype:attempted-recon; sid:200042819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.2021071.top"; classtype:attempted-recon; sid:200042820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.31567.cn"; classtype:attempted-recon; sid:200042821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.acloud.group"; classtype:attempted-recon; sid:200042822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.alister.ltd"; classtype:attempted-recon; sid:200042823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.bmhkg09.shop"; classtype:attempted-recon; sid:200042824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.cjehdm.top"; classtype:attempted-recon; sid:200042825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.clllbx.top"; classtype:attempted-recon; sid:200042826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.dwbjs.top"; classtype:attempted-recon; sid:200042827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.ebwptg.top"; classtype:attempted-recon; sid:200042828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.erfghk03.shop"; classtype:attempted-recon; sid:200042829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.fcwh886.top"; classtype:attempted-recon; sid:200042830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.francis.ltd"; classtype:attempted-recon; sid:200042831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.fzosfk.top"; classtype:attempted-recon; sid:200042832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.gafuwd.top"; classtype:attempted-recon; sid:200042833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.glmbfd.top"; classtype:attempted-recon; sid:200042834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.hncwbn.top"; classtype:attempted-recon; sid:200042835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.icfpvc.top"; classtype:attempted-recon; sid:200042836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.ipexqv.top"; classtype:attempted-recon; sid:200042837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.jimdyd.top"; classtype:attempted-recon; sid:200042838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.jjglsw.top"; classtype:attempted-recon; sid:200042839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.leigh.ltd"; classtype:attempted-recon; sid:200042840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.leonard.ltd"; classtype:attempted-recon; sid:200042841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.lhixak.top"; classtype:attempted-recon; sid:200042842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.lhzfkh.top"; classtype:attempted-recon; sid:200042843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.limassol.group"; classtype:attempted-recon; sid:200042844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.loskh.top"; classtype:attempted-recon; sid:200042845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.mkma07.shop"; classtype:attempted-recon; sid:200042846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.njrksy.top"; classtype:attempted-recon; sid:200042847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.norfolk.ltd"; classtype:attempted-recon; sid:200042848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.npxfcv.top"; classtype:attempted-recon; sid:200042849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.nvjdhuei.icu"; classtype:attempted-recon; sid:200042850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.oamprk.top"; classtype:attempted-recon; sid:200042851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.owens.ltd"; classtype:attempted-recon; sid:200042852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.promotion.show"; classtype:attempted-recon; sid:200042853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.ptywgv.top"; classtype:attempted-recon; sid:200042854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.qzvxui.top"; classtype:attempted-recon; sid:200042855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.reynolds.ltd"; classtype:attempted-recon; sid:200042856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.riley.ltd"; classtype:attempted-recon; sid:200042857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.robertson.ltd"; classtype:attempted-recon; sid:200042858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.rowan.ltd"; classtype:attempted-recon; sid:200042859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.shjpxn.top"; classtype:attempted-recon; sid:200042860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.sinclair.ltd"; classtype:attempted-recon; sid:200042861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.sqmim.top"; classtype:attempted-recon; sid:200042862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.tvrimx.top"; classtype:attempted-recon; sid:200042863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.tvxkmp.top"; classtype:attempted-recon; sid:200042864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.vjlile.top"; classtype:attempted-recon; sid:200042865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.vnxgwb.top"; classtype:attempted-recon; sid:200042866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.vordmh.top"; classtype:attempted-recon; sid:200042867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.xdaupp.top"; classtype:attempted-recon; sid:200042868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.xhgmfb.top"; classtype:attempted-recon; sid:200042869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.xniqmj.top"; classtype:attempted-recon; sid:200042870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.xulhaq.top"; classtype:attempted-recon; sid:200042871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.zbvvpg.top"; classtype:attempted-recon; sid:200042872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.zeyeds.ltd"; classtype:attempted-recon; sid:200042873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.zqjkvx.top"; classtype:attempted-recon; sid:200042874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcarvaaecsei.aao.zrxpv.top"; classtype:attempted-recon; sid:200042875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.2021071.top"; classtype:attempted-recon; sid:200042876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.53567.cn"; classtype:attempted-recon; sid:200042877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.85567.cn"; classtype:attempted-recon; sid:200042878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.acloud.group"; classtype:attempted-recon; sid:200042879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.alister.ltd"; classtype:attempted-recon; sid:200042880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.ccloud.group"; classtype:attempted-recon; sid:200042881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.cjehdm.top"; classtype:attempted-recon; sid:200042882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.clllbx.top"; classtype:attempted-recon; sid:200042883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.dwbjs.top"; classtype:attempted-recon; sid:200042884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.ebwptg.top"; classtype:attempted-recon; sid:200042885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.fcwh886.top"; classtype:attempted-recon; sid:200042886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.francis.ltd"; classtype:attempted-recon; sid:200042887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.fzosfk.top"; classtype:attempted-recon; sid:200042888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.gafuwd.top"; classtype:attempted-recon; sid:200042889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.glmbfd.top"; classtype:attempted-recon; sid:200042890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.hncwbn.top"; classtype:attempted-recon; sid:200042891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.icfpvc.top"; classtype:attempted-recon; sid:200042892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.ipexqv.top"; classtype:attempted-recon; sid:200042893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.jimdyd.top"; classtype:attempted-recon; sid:200042894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.jjglsw.top"; classtype:attempted-recon; sid:200042895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.leigh.ltd"; classtype:attempted-recon; sid:200042896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.leonard.ltd"; classtype:attempted-recon; sid:200042897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.lhixak.top"; classtype:attempted-recon; sid:200042898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.lhzfkh.top"; classtype:attempted-recon; sid:200042899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.limassol.group"; classtype:attempted-recon; sid:200042900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.loskh.top"; classtype:attempted-recon; sid:200042901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.nicosia.group"; classtype:attempted-recon; sid:200042902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.njrksy.top"; classtype:attempted-recon; sid:200042903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.norfolk.ltd"; classtype:attempted-recon; sid:200042904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.npxfcv.top"; classtype:attempted-recon; sid:200042905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.nvjdhuei.icu"; classtype:attempted-recon; sid:200042906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.oamprk.top"; classtype:attempted-recon; sid:200042907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.owens.ltd"; classtype:attempted-recon; sid:200042908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.ptywgv.top"; classtype:attempted-recon; sid:200042909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.qzvxui.top"; classtype:attempted-recon; sid:200042910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.reynolds.ltd"; classtype:attempted-recon; sid:200042911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.riley.ltd"; classtype:attempted-recon; sid:200042912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.robertson.ltd"; classtype:attempted-recon; sid:200042913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.rowan.ltd"; classtype:attempted-recon; sid:200042914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.scloud.group"; classtype:attempted-recon; sid:200042915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.shjpxn.top"; classtype:attempted-recon; sid:200042916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.sinclair.ltd"; classtype:attempted-recon; sid:200042917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.sqmim.top"; classtype:attempted-recon; sid:200042918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.tvrimx.top"; classtype:attempted-recon; sid:200042919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.tvxkmp.top"; classtype:attempted-recon; sid:200042920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.vjlile.top"; classtype:attempted-recon; sid:200042921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.vnxgwb.top"; classtype:attempted-recon; sid:200042922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.vordmh.top"; classtype:attempted-recon; sid:200042923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.xdaupp.top"; classtype:attempted-recon; sid:200042924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.xhgmfb.top"; classtype:attempted-recon; sid:200042925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.xniqmj.top"; classtype:attempted-recon; sid:200042926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.xulhaq.top"; classtype:attempted-recon; sid:200042927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.ycloud.group"; classtype:attempted-recon; sid:200042928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.zbvvpg.top"; classtype:attempted-recon; sid:200042929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.zeyeds.ltd"; classtype:attempted-recon; sid:200042930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.zkzkd04.shop"; classtype:attempted-recon; sid:200042931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.zqjkvx.top"; classtype:attempted-recon; sid:200042932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevcvraaseci.ao.zrxpv.top"; classtype:attempted-recon; sid:200042933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.2021071.top"; classtype:attempted-recon; sid:200042934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.87567.cn"; classtype:attempted-recon; sid:200042935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.alister.ltd"; classtype:attempted-recon; sid:200042936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.ccloud.group"; classtype:attempted-recon; sid:200042937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.cjehdm.top"; classtype:attempted-recon; sid:200042938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.clllbx.top"; classtype:attempted-recon; sid:200042939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.ebwptg.top"; classtype:attempted-recon; sid:200042940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.fcwh886.top"; classtype:attempted-recon; sid:200042941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.francis.ltd"; classtype:attempted-recon; sid:200042942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.fzosfk.top"; classtype:attempted-recon; sid:200042943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.gafuwd.top"; classtype:attempted-recon; sid:200042944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.ggnxmf.top"; classtype:attempted-recon; sid:200042945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.glmbfd.top"; classtype:attempted-recon; sid:200042946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.hncwbn.top"; classtype:attempted-recon; sid:200042947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.ipexqv.top"; classtype:attempted-recon; sid:200042948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.jcloud.group"; classtype:attempted-recon; sid:200042949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.jimdyd.top"; classtype:attempted-recon; sid:200042950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.jjglsw.top"; classtype:attempted-recon; sid:200042951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.ksiudje.icu"; classtype:attempted-recon; sid:200042952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.leigh.ltd"; classtype:attempted-recon; sid:200042953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.leonard.ltd"; classtype:attempted-recon; sid:200042954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.lhixak.top"; classtype:attempted-recon; sid:200042955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.lhzfkh.top"; classtype:attempted-recon; sid:200042956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.limassol.group"; classtype:attempted-recon; sid:200042957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.loskh.top"; classtype:attempted-recon; sid:200042958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.mnvhdje.icu"; classtype:attempted-recon; sid:200042959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.njrksy.top"; classtype:attempted-recon; sid:200042960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.norfolk.ltd"; classtype:attempted-recon; sid:200042961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.npxfcv.top"; classtype:attempted-recon; sid:200042962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200042963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.oamprk.top"; classtype:attempted-recon; sid:200042964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.owens.ltd"; classtype:attempted-recon; sid:200042965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.promotion.show"; classtype:attempted-recon; sid:200042966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.ptywgv.top"; classtype:attempted-recon; sid:200042967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.qzvxui.top"; classtype:attempted-recon; sid:200042968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.reynolds.ltd"; classtype:attempted-recon; sid:200042969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.riley.ltd"; classtype:attempted-recon; sid:200042970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.robertson.ltd"; classtype:attempted-recon; sid:200042971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.rowan.ltd"; classtype:attempted-recon; sid:200042972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.shjpxn.top"; classtype:attempted-recon; sid:200042973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.sinclair.ltd"; classtype:attempted-recon; sid:200042974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.sqmim.top"; classtype:attempted-recon; sid:200042975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.tvrimx.top"; classtype:attempted-recon; sid:200042976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.tvxkmp.top"; classtype:attempted-recon; sid:200042977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.vjlile.top"; classtype:attempted-recon; sid:200042978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.vnxgwb.top"; classtype:attempted-recon; sid:200042979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.vordmh.top"; classtype:attempted-recon; sid:200042980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.xdaupp.top"; classtype:attempted-recon; sid:200042981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.xhgmfb.top"; classtype:attempted-recon; sid:200042982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.xniqmj.top"; classtype:attempted-recon; sid:200042983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.xulhaq.top"; classtype:attempted-recon; sid:200042984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.zbvvpg.top"; classtype:attempted-recon; sid:200042985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.zeyedada.xyz"; classtype:attempted-recon; sid:200042986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200042987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.zqjkvx.top"; classtype:attempted-recon; sid:200042988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecacrvaaecsei.aaoaa.zrxpv.top"; classtype:attempted-recon; sid:200042989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.2021071.top"; classtype:attempted-recon; sid:200042990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.31567.cn"; classtype:attempted-recon; sid:200042991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.53567.cn"; classtype:attempted-recon; sid:200042992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.85567.cn"; classtype:attempted-recon; sid:200042993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.87567.cn"; classtype:attempted-recon; sid:200042994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.alister.ltd"; classtype:attempted-recon; sid:200042995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.ccloud.group"; classtype:attempted-recon; sid:200042996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.cjehdm.top"; classtype:attempted-recon; sid:200042997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.clllbx.top"; classtype:attempted-recon; sid:200042998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.ebwptg.top"; classtype:attempted-recon; sid:200042999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.fcwh886.top"; classtype:attempted-recon; sid:200043000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.francis.ltd"; classtype:attempted-recon; sid:200043001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.fzosfk.top"; classtype:attempted-recon; sid:200043002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.gafuwd.top"; classtype:attempted-recon; sid:200043003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.gcloud.group"; classtype:attempted-recon; sid:200043004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.glmbfd.top"; classtype:attempted-recon; sid:200043005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.gzmvuo.top"; classtype:attempted-recon; sid:200043006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.hncwbn.top"; classtype:attempted-recon; sid:200043007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.ipexqv.top"; classtype:attempted-recon; sid:200043008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.jcloud.group"; classtype:attempted-recon; sid:200043009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.jimdyd.top"; classtype:attempted-recon; sid:200043010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.jjglsw.top"; classtype:attempted-recon; sid:200043011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.leigh.ltd"; classtype:attempted-recon; sid:200043012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.leonard.ltd"; classtype:attempted-recon; sid:200043013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.lhixak.top"; classtype:attempted-recon; sid:200043014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.lhzfkh.top"; classtype:attempted-recon; sid:200043015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.limassol.group"; classtype:attempted-recon; sid:200043016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.loskh.top"; classtype:attempted-recon; sid:200043017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.mkma07.shop"; classtype:attempted-recon; sid:200043018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.mortys.cn"; classtype:attempted-recon; sid:200043019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.njrksy.top"; classtype:attempted-recon; sid:200043020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.norfolk.ltd"; classtype:attempted-recon; sid:200043021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.npxfcv.top"; classtype:attempted-recon; sid:200043022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200043023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.oamprk.top"; classtype:attempted-recon; sid:200043024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.owens.ltd"; classtype:attempted-recon; sid:200043025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.ptywgv.top"; classtype:attempted-recon; sid:200043026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.qzvxui.top"; classtype:attempted-recon; sid:200043027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.reynolds.ltd"; classtype:attempted-recon; sid:200043028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.riley.ltd"; classtype:attempted-recon; sid:200043029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.robertson.ltd"; classtype:attempted-recon; sid:200043030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.rowan.ltd"; classtype:attempted-recon; sid:200043031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.shjpxn.top"; classtype:attempted-recon; sid:200043032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.sinclair.ltd"; classtype:attempted-recon; sid:200043033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.sqmim.top"; classtype:attempted-recon; sid:200043034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.tvrimx.top"; classtype:attempted-recon; sid:200043035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.tvxkmp.top"; classtype:attempted-recon; sid:200043036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.vjlile.top"; classtype:attempted-recon; sid:200043037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.vnxgwb.top"; classtype:attempted-recon; sid:200043038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.vordmh.top"; classtype:attempted-recon; sid:200043039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.wcloud.group"; classtype:attempted-recon; sid:200043040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.xdaupp.top"; classtype:attempted-recon; sid:200043041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.xhgmfb.top"; classtype:attempted-recon; sid:200043042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.xniqmj.top"; classtype:attempted-recon; sid:200043043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.xulhaq.top"; classtype:attempted-recon; sid:200043044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.zbvvpg.top"; classtype:attempted-recon; sid:200043045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.zeyeds.ltd"; classtype:attempted-recon; sid:200043046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.zqjkvx.top"; classtype:attempted-recon; sid:200043047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsevecvcraaseci.aoaa.zrxpv.top"; classtype:attempted-recon; sid:200043048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsiecaiecsn.viscaieaeeivsei.yetbrg.top"; classtype:attempted-recon; sid:200043049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsiecaieosn.visceieaeeivsei.cyrvcc.top"; classtype:attempted-recon; sid:200043050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsiecaieosn.visceieaeeivsei.tcpduc.top"; classtype:attempted-recon; sid:200043051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsiecaieosn.visceieaeeivsei.toamzo.top"; classtype:attempted-recon; sid:200043052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsiecioesn.visecaeeeivsei.cyrvcc.top"; classtype:attempted-recon; sid:200043053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsiecioesn.visecaeeeivsei.tcpduc.top"; classtype:attempted-recon; sid:200043054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsieiacesn.visacaieeivsei.cyrvcc.top"; classtype:attempted-recon; sid:200043055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.037768888861.xyz"; classtype:attempted-recon; sid:200043056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.284nxw.icu"; classtype:attempted-recon; sid:200043057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.33hf19.icu"; classtype:attempted-recon; sid:200043058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.473glv.icu"; classtype:attempted-recon; sid:200043059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.4k2dci.icu"; classtype:attempted-recon; sid:200043060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.687cem.icu"; classtype:attempted-recon; sid:200043061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.69bn6b.icu"; classtype:attempted-recon; sid:200043062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.6c7bza.icu"; classtype:attempted-recon; sid:200043063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.6pw2wd.icu"; classtype:attempted-recon; sid:200043064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.6rtqht.icu"; classtype:attempted-recon; sid:200043065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.6t1vk7.icu"; classtype:attempted-recon; sid:200043066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.7a4s96.icu"; classtype:attempted-recon; sid:200043067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.82casa.icu"; classtype:attempted-recon; sid:200043068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.9d24dh.icu"; classtype:attempted-recon; sid:200043069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.9pw3lv.icu"; classtype:attempted-recon; sid:200043070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.9zv0ny.icu"; classtype:attempted-recon; sid:200043071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.aale2a.icu"; classtype:attempted-recon; sid:200043072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.aayldm.top"; classtype:attempted-recon; sid:200043073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.adldni.top"; classtype:attempted-recon; sid:200043074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ajxdpg.top"; classtype:attempted-recon; sid:200043075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ansklx.top"; classtype:attempted-recon; sid:200043076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ao0dkn.icu"; classtype:attempted-recon; sid:200043077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.aogild.top"; classtype:attempted-recon; sid:200043078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.bucyvo.top"; classtype:attempted-recon; sid:200043079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.bwxsxf.top"; classtype:attempted-recon; sid:200043080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.bxsxvy.top"; classtype:attempted-recon; sid:200043081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.cgogay.top"; classtype:attempted-recon; sid:200043082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ctdwug.top"; classtype:attempted-recon; sid:200043083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.cwpgoh.top"; classtype:attempted-recon; sid:200043084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.d5u49w.icu"; classtype:attempted-recon; sid:200043085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.dbezzz.top"; classtype:attempted-recon; sid:200043086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.dbhlbm.top"; classtype:attempted-recon; sid:200043087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.dqbdkl.top"; classtype:attempted-recon; sid:200043088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.drkild.icu"; classtype:attempted-recon; sid:200043089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.e7ie6j.icu"; classtype:attempted-recon; sid:200043090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.enioab.top"; classtype:attempted-recon; sid:200043091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.erkdnv.top"; classtype:attempted-recon; sid:200043092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.fn0aqh.icu"; classtype:attempted-recon; sid:200043093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.hblfhq.top"; classtype:attempted-recon; sid:200043094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.hefhjq.icu"; classtype:attempted-recon; sid:200043095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.hli3b0.icu"; classtype:attempted-recon; sid:200043096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.hlsyku.icu"; classtype:attempted-recon; sid:200043097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.hmziti.top"; classtype:attempted-recon; sid:200043098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.idenyq.top"; classtype:attempted-recon; sid:200043099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.inkblog.ink"; classtype:attempted-recon; sid:200043100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.j3tu3m.icu"; classtype:attempted-recon; sid:200043101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.j77o38.icu"; classtype:attempted-recon; sid:200043102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.jehe99.icu"; classtype:attempted-recon; sid:200043103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.juls8q.icu"; classtype:attempted-recon; sid:200043104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.k3ma2x.icu"; classtype:attempted-recon; sid:200043105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.k9pn0d.icu"; classtype:attempted-recon; sid:200043106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ka83cb.icu"; classtype:attempted-recon; sid:200043107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.kb5b6d.icu"; classtype:attempted-recon; sid:200043108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.kgfkdv.top"; classtype:attempted-recon; sid:200043109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.krjqpe.top"; classtype:attempted-recon; sid:200043110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.kvrhdp.top"; classtype:attempted-recon; sid:200043111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.lfyacu.icu"; classtype:attempted-recon; sid:200043112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ll64vg.icu"; classtype:attempted-recon; sid:200043113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.llufip.top"; classtype:attempted-recon; sid:200043114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.lmheln.top"; classtype:attempted-recon; sid:200043115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.lwgayp.top"; classtype:attempted-recon; sid:200043116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.lylxce.top"; classtype:attempted-recon; sid:200043117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.mcltim.top"; classtype:attempted-recon; sid:200043118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.mfx741.icu"; classtype:attempted-recon; sid:200043119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.mgjpjr.top"; classtype:attempted-recon; sid:200043120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.mjdnpt.top"; classtype:attempted-recon; sid:200043121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.nllyoh.top"; classtype:attempted-recon; sid:200043122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.nqveqi.top"; classtype:attempted-recon; sid:200043123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.nrhpkc.icu"; classtype:attempted-recon; sid:200043124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.nu57wl.icu"; classtype:attempted-recon; sid:200043125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.nv9dtw.icu"; classtype:attempted-recon; sid:200043126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ojyzcd.top"; classtype:attempted-recon; sid:200043127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.okbpku.icu"; classtype:attempted-recon; sid:200043128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.or1glf.icu"; classtype:attempted-recon; sid:200043129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.pe14pc.icu"; classtype:attempted-recon; sid:200043130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.psdexq.top"; classtype:attempted-recon; sid:200043131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.psdoni.top"; classtype:attempted-recon; sid:200043132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.pujapd.top"; classtype:attempted-recon; sid:200043133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.pzgoea.top"; classtype:attempted-recon; sid:200043134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.q0s2sm.icu"; classtype:attempted-recon; sid:200043135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.qclqjo.top"; classtype:attempted-recon; sid:200043136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.qeaogd.top"; classtype:attempted-recon; sid:200043137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.qnqwcs.icu"; classtype:attempted-recon; sid:200043138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.qpchzg.top"; classtype:attempted-recon; sid:200043139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.qqjjzi.top"; classtype:attempted-recon; sid:200043140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.qvgavp.top"; classtype:attempted-recon; sid:200043141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.rbyycn.top"; classtype:attempted-recon; sid:200043142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.rmgomo.top"; classtype:attempted-recon; sid:200043143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.rsxojx.top"; classtype:attempted-recon; sid:200043144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.sawjbk.top"; classtype:attempted-recon; sid:200043145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.slnb02.icu"; classtype:attempted-recon; sid:200043146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.srcwhi.top"; classtype:attempted-recon; sid:200043147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.srwwap.top"; classtype:attempted-recon; sid:200043148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.sthtuh.top"; classtype:attempted-recon; sid:200043149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.syeuaw.top"; classtype:attempted-recon; sid:200043150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.tazsl1.icu"; classtype:attempted-recon; sid:200043151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.tbnilj.top"; classtype:attempted-recon; sid:200043152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.tl86n6.icu"; classtype:attempted-recon; sid:200043153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.to5fb9.icu"; classtype:attempted-recon; sid:200043154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.u0c8sn.icu"; classtype:attempted-recon; sid:200043155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.uixah3.icu"; classtype:attempted-recon; sid:200043156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ukesvp.icu"; classtype:attempted-recon; sid:200043157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ukrtxd.top"; classtype:attempted-recon; sid:200043158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.upahh5.icu"; classtype:attempted-recon; sid:200043159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.uxdgpy.top"; classtype:attempted-recon; sid:200043160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.uxvqzp.top"; classtype:attempted-recon; sid:200043161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.vdpgwm.top"; classtype:attempted-recon; sid:200043162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.vqeyuo.top"; classtype:attempted-recon; sid:200043163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.vspjok.icu"; classtype:attempted-recon; sid:200043164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.vvkdlh.top"; classtype:attempted-recon; sid:200043165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.vxcrlo.top"; classtype:attempted-recon; sid:200043166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.werbdt.top"; classtype:attempted-recon; sid:200043167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.wfirhj.top"; classtype:attempted-recon; sid:200043168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.whnjwr.top"; classtype:attempted-recon; sid:200043169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.witojr.top"; classtype:attempted-recon; sid:200043170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.wmygyx.top"; classtype:attempted-recon; sid:200043171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.wpzqxg.top"; classtype:attempted-recon; sid:200043172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.wsojbg.icu"; classtype:attempted-recon; sid:200043173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.wxpckc.icu"; classtype:attempted-recon; sid:200043174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.xd1bpn.icu"; classtype:attempted-recon; sid:200043175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.xgysxo.top"; classtype:attempted-recon; sid:200043176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.xydvkg.top"; classtype:attempted-recon; sid:200043177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.xyuhnm.top"; classtype:attempted-recon; sid:200043178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.xztftf.top"; classtype:attempted-recon; sid:200043179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ymifv0.icu"; classtype:attempted-recon; sid:200043180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.yqasjy.icu"; classtype:attempted-recon; sid:200043181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.yuxvpc.top"; classtype:attempted-recon; sid:200043182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.yvjdgy.top"; classtype:attempted-recon; sid:200043183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.yybtfl.top"; classtype:attempted-recon; sid:200043184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.zhsntm.top"; classtype:attempted-recon; sid:200043185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.zhwpnq.top"; classtype:attempted-recon; sid:200043186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.zovh96.icu"; classtype:attempted-recon; sid:200043187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcacsevi.vievevcrvnvsa.zoyqhl.top"; classtype:attempted-recon; sid:200043188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.037768888861.xyz"; classtype:attempted-recon; sid:200043189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.284nxw.icu"; classtype:attempted-recon; sid:200043190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.33hf19.icu"; classtype:attempted-recon; sid:200043191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.473glv.icu"; classtype:attempted-recon; sid:200043192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.4k2dci.icu"; classtype:attempted-recon; sid:200043193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.687cem.icu"; classtype:attempted-recon; sid:200043194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.69bn6b.icu"; classtype:attempted-recon; sid:200043195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.6c7bza.icu"; classtype:attempted-recon; sid:200043196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.6pw2wd.icu"; classtype:attempted-recon; sid:200043197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.6rtqht.icu"; classtype:attempted-recon; sid:200043198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.6t1vk7.icu"; classtype:attempted-recon; sid:200043199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.7a4s96.icu"; classtype:attempted-recon; sid:200043200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.82casa.icu"; classtype:attempted-recon; sid:200043201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.9d24dh.icu"; classtype:attempted-recon; sid:200043202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.9pw3lv.icu"; classtype:attempted-recon; sid:200043203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.9zv0ny.icu"; classtype:attempted-recon; sid:200043204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.aale2a.icu"; classtype:attempted-recon; sid:200043205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.aayldm.top"; classtype:attempted-recon; sid:200043206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.adldni.top"; classtype:attempted-recon; sid:200043207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.afqzgx.top"; classtype:attempted-recon; sid:200043208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ajxdpg.top"; classtype:attempted-recon; sid:200043209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ansklx.top"; classtype:attempted-recon; sid:200043210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ao0dkn.icu"; classtype:attempted-recon; sid:200043211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.aogild.top"; classtype:attempted-recon; sid:200043212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.bucyvo.top"; classtype:attempted-recon; sid:200043213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.bwxsxf.top"; classtype:attempted-recon; sid:200043214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.bxsxvy.top"; classtype:attempted-recon; sid:200043215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.cgogay.top"; classtype:attempted-recon; sid:200043216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.cmudlt.top"; classtype:attempted-recon; sid:200043217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ctdwug.top"; classtype:attempted-recon; sid:200043218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.cwpgoh.top"; classtype:attempted-recon; sid:200043219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.d5u49w.icu"; classtype:attempted-recon; sid:200043220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.dbezzz.top"; classtype:attempted-recon; sid:200043221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.dbhlbm.top"; classtype:attempted-recon; sid:200043222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.dqbdkl.top"; classtype:attempted-recon; sid:200043223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.drkild.icu"; classtype:attempted-recon; sid:200043224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.e7ie6j.icu"; classtype:attempted-recon; sid:200043225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.eahbrm.top"; classtype:attempted-recon; sid:200043226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.enioab.top"; classtype:attempted-recon; sid:200043227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.erkdnv.top"; classtype:attempted-recon; sid:200043228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.fn0aqh.icu"; classtype:attempted-recon; sid:200043229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.hblfhq.top"; classtype:attempted-recon; sid:200043230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.hefhjq.icu"; classtype:attempted-recon; sid:200043231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.hli3b0.icu"; classtype:attempted-recon; sid:200043232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.hlsyku.icu"; classtype:attempted-recon; sid:200043233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.hmziti.top"; classtype:attempted-recon; sid:200043234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.idenyq.top"; classtype:attempted-recon; sid:200043235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.inkblog.ink"; classtype:attempted-recon; sid:200043236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.j3tu3m.icu"; classtype:attempted-recon; sid:200043237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.j77o38.icu"; classtype:attempted-recon; sid:200043238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.jehe99.icu"; classtype:attempted-recon; sid:200043239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.juls8q.icu"; classtype:attempted-recon; sid:200043240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.k3ma2x.icu"; classtype:attempted-recon; sid:200043241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.k9pn0d.icu"; classtype:attempted-recon; sid:200043242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ka83cb.icu"; classtype:attempted-recon; sid:200043243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.kb5b6d.icu"; classtype:attempted-recon; sid:200043244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.kgfkdv.top"; classtype:attempted-recon; sid:200043245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.lfyacu.icu"; classtype:attempted-recon; sid:200043246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ljmuov.top"; classtype:attempted-recon; sid:200043247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ll64vg.icu"; classtype:attempted-recon; sid:200043248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.llufip.top"; classtype:attempted-recon; sid:200043249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.lmheln.top"; classtype:attempted-recon; sid:200043250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.lwgayp.top"; classtype:attempted-recon; sid:200043251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.lylxce.top"; classtype:attempted-recon; sid:200043252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.mcltim.top"; classtype:attempted-recon; sid:200043253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.mfx741.icu"; classtype:attempted-recon; sid:200043254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.mgjpjr.top"; classtype:attempted-recon; sid:200043255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.mjdnpt.top"; classtype:attempted-recon; sid:200043256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.nllyoh.top"; classtype:attempted-recon; sid:200043257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.nqveqi.top"; classtype:attempted-recon; sid:200043258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.nrhpkc.icu"; classtype:attempted-recon; sid:200043259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.nu57wl.icu"; classtype:attempted-recon; sid:200043260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.nv9dtw.icu"; classtype:attempted-recon; sid:200043261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ojyzcd.top"; classtype:attempted-recon; sid:200043262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.okbpku.icu"; classtype:attempted-recon; sid:200043263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.oppxsj.top"; classtype:attempted-recon; sid:200043264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.or1glf.icu"; classtype:attempted-recon; sid:200043265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.pe14pc.icu"; classtype:attempted-recon; sid:200043266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.psdexq.top"; classtype:attempted-recon; sid:200043267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.psdoni.top"; classtype:attempted-recon; sid:200043268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.pujapd.top"; classtype:attempted-recon; sid:200043269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.pzgoea.top"; classtype:attempted-recon; sid:200043270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.q0s2sm.icu"; classtype:attempted-recon; sid:200043271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.qclqjo.top"; classtype:attempted-recon; sid:200043272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.qeaogd.top"; classtype:attempted-recon; sid:200043273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.qpchzg.top"; classtype:attempted-recon; sid:200043274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.qqjjzi.top"; classtype:attempted-recon; sid:200043275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.qvgavp.top"; classtype:attempted-recon; sid:200043276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.rbyycn.top"; classtype:attempted-recon; sid:200043277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.rmgomo.top"; classtype:attempted-recon; sid:200043278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.rsxojx.top"; classtype:attempted-recon; sid:200043279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.sawjbk.top"; classtype:attempted-recon; sid:200043280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.slnb02.icu"; classtype:attempted-recon; sid:200043281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.srcwhi.top"; classtype:attempted-recon; sid:200043282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.srwwap.top"; classtype:attempted-recon; sid:200043283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.sthtuh.top"; classtype:attempted-recon; sid:200043284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.syeuaw.top"; classtype:attempted-recon; sid:200043285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.tazsl1.icu"; classtype:attempted-recon; sid:200043286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.tbnilj.top"; classtype:attempted-recon; sid:200043287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.tl86n6.icu"; classtype:attempted-recon; sid:200043288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.to5fb9.icu"; classtype:attempted-recon; sid:200043289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.u0c8sn.icu"; classtype:attempted-recon; sid:200043290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.uixah3.icu"; classtype:attempted-recon; sid:200043291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ukesvp.icu"; classtype:attempted-recon; sid:200043292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ukrtxd.top"; classtype:attempted-recon; sid:200043293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.upahh5.icu"; classtype:attempted-recon; sid:200043294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.uxdgpy.top"; classtype:attempted-recon; sid:200043295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.uxvqzp.top"; classtype:attempted-recon; sid:200043296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.vdpgwm.top"; classtype:attempted-recon; sid:200043297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.vqeyuo.top"; classtype:attempted-recon; sid:200043298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.vspjok.icu"; classtype:attempted-recon; sid:200043299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.vvkdlh.top"; classtype:attempted-recon; sid:200043300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.vxcrlo.top"; classtype:attempted-recon; sid:200043301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.werbdt.top"; classtype:attempted-recon; sid:200043302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.wfirhj.top"; classtype:attempted-recon; sid:200043303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.whnjwr.top"; classtype:attempted-recon; sid:200043304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.witojr.top"; classtype:attempted-recon; sid:200043305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.wmygyx.top"; classtype:attempted-recon; sid:200043306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.wpzqxg.top"; classtype:attempted-recon; sid:200043307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.wsojbg.icu"; classtype:attempted-recon; sid:200043308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.wxpckc.icu"; classtype:attempted-recon; sid:200043309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.xd1bpn.icu"; classtype:attempted-recon; sid:200043310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.xeygaj.top"; classtype:attempted-recon; sid:200043311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.xgysxo.top"; classtype:attempted-recon; sid:200043312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.xydvkg.top"; classtype:attempted-recon; sid:200043313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.xyuhnm.top"; classtype:attempted-recon; sid:200043314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.xztftf.top"; classtype:attempted-recon; sid:200043315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ymifv0.icu"; classtype:attempted-recon; sid:200043316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.yqasjy.icu"; classtype:attempted-recon; sid:200043317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.yvjdgy.top"; classtype:attempted-recon; sid:200043318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.yybtfl.top"; classtype:attempted-recon; sid:200043319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.zhsntm.top"; classtype:attempted-recon; sid:200043320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.zhwpnq.top"; classtype:attempted-recon; sid:200043321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.zovh96.icu"; classtype:attempted-recon; sid:200043322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.zoyqhl.top"; classtype:attempted-recon; sid:200043323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.037768888861.xyz"; classtype:attempted-recon; sid:200043324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.284nxw.icu"; classtype:attempted-recon; sid:200043325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.33hf19.icu"; classtype:attempted-recon; sid:200043326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.473glv.icu"; classtype:attempted-recon; sid:200043327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.4k2dci.icu"; classtype:attempted-recon; sid:200043328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.687cem.icu"; classtype:attempted-recon; sid:200043329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.69bn6b.icu"; classtype:attempted-recon; sid:200043330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.6c7bza.icu"; classtype:attempted-recon; sid:200043331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.6pw2wd.icu"; classtype:attempted-recon; sid:200043332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.6rtqht.icu"; classtype:attempted-recon; sid:200043333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.6t1vk7.icu"; classtype:attempted-recon; sid:200043334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.7a4s96.icu"; classtype:attempted-recon; sid:200043335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.82casa.icu"; classtype:attempted-recon; sid:200043336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.9d24dh.icu"; classtype:attempted-recon; sid:200043337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.9pw3lv.icu"; classtype:attempted-recon; sid:200043338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.9zv0ny.icu"; classtype:attempted-recon; sid:200043339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.aale2a.icu"; classtype:attempted-recon; sid:200043340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.aayldm.top"; classtype:attempted-recon; sid:200043341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.adldni.top"; classtype:attempted-recon; sid:200043342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.afqzgx.top"; classtype:attempted-recon; sid:200043343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ajxdpg.top"; classtype:attempted-recon; sid:200043344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ansklx.top"; classtype:attempted-recon; sid:200043345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ao0dkn.icu"; classtype:attempted-recon; sid:200043346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.bucyvo.top"; classtype:attempted-recon; sid:200043347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.bwxsxf.top"; classtype:attempted-recon; sid:200043348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.bxsxvy.top"; classtype:attempted-recon; sid:200043349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.cgogay.top"; classtype:attempted-recon; sid:200043350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.cmudlt.top"; classtype:attempted-recon; sid:200043351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ctdwug.top"; classtype:attempted-recon; sid:200043352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.cwpgoh.top"; classtype:attempted-recon; sid:200043353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.d5u49w.icu"; classtype:attempted-recon; sid:200043354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.dbezzz.top"; classtype:attempted-recon; sid:200043355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.dbhlbm.top"; classtype:attempted-recon; sid:200043356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.dqbdkl.top"; classtype:attempted-recon; sid:200043357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.drkild.icu"; classtype:attempted-recon; sid:200043358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.e7ie6j.icu"; classtype:attempted-recon; sid:200043359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.eahbrm.top"; classtype:attempted-recon; sid:200043360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.enioab.top"; classtype:attempted-recon; sid:200043361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.erkdnv.top"; classtype:attempted-recon; sid:200043362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.fn0aqh.icu"; classtype:attempted-recon; sid:200043363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.hblfhq.top"; classtype:attempted-recon; sid:200043364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.hefhjq.icu"; classtype:attempted-recon; sid:200043365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.hli3b0.icu"; classtype:attempted-recon; sid:200043366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.hlsyku.icu"; classtype:attempted-recon; sid:200043367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.hmziti.top"; classtype:attempted-recon; sid:200043368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.inkblog.ink"; classtype:attempted-recon; sid:200043369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.j3tu3m.icu"; classtype:attempted-recon; sid:200043370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.j77o38.icu"; classtype:attempted-recon; sid:200043371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.jehe99.icu"; classtype:attempted-recon; sid:200043372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.juls8q.icu"; classtype:attempted-recon; sid:200043373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.k3ma2x.icu"; classtype:attempted-recon; sid:200043374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.k9pn0d.icu"; classtype:attempted-recon; sid:200043375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ka83cb.icu"; classtype:attempted-recon; sid:200043376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.kb5b6d.icu"; classtype:attempted-recon; sid:200043377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.kgfkdv.top"; classtype:attempted-recon; sid:200043378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.krjqpe.top"; classtype:attempted-recon; sid:200043379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.kvrhdp.top"; classtype:attempted-recon; sid:200043380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.lcazit.top"; classtype:attempted-recon; sid:200043381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.lfyacu.icu"; classtype:attempted-recon; sid:200043382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ljmuov.top"; classtype:attempted-recon; sid:200043383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ll64vg.icu"; classtype:attempted-recon; sid:200043384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.llufip.top"; classtype:attempted-recon; sid:200043385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.lmheln.top"; classtype:attempted-recon; sid:200043386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.lwgayp.top"; classtype:attempted-recon; sid:200043387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.lylxce.top"; classtype:attempted-recon; sid:200043388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.mcltim.top"; classtype:attempted-recon; sid:200043389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.mfx741.icu"; classtype:attempted-recon; sid:200043390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.mgjpjr.top"; classtype:attempted-recon; sid:200043391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.mjdnpt.top"; classtype:attempted-recon; sid:200043392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.nllyoh.top"; classtype:attempted-recon; sid:200043393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.nqveqi.top"; classtype:attempted-recon; sid:200043394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.nrhpkc.icu"; classtype:attempted-recon; sid:200043395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.nu57wl.icu"; classtype:attempted-recon; sid:200043396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.nv9dtw.icu"; classtype:attempted-recon; sid:200043397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ojyzcd.top"; classtype:attempted-recon; sid:200043398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.okbpku.icu"; classtype:attempted-recon; sid:200043399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.or1glf.icu"; classtype:attempted-recon; sid:200043400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.pe14pc.icu"; classtype:attempted-recon; sid:200043401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.psdexq.top"; classtype:attempted-recon; sid:200043402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.psdoni.top"; classtype:attempted-recon; sid:200043403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.pujapd.top"; classtype:attempted-recon; sid:200043404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.pzgoea.top"; classtype:attempted-recon; sid:200043405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.q0s2sm.icu"; classtype:attempted-recon; sid:200043406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.qclqjo.top"; classtype:attempted-recon; sid:200043407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.qeaogd.top"; classtype:attempted-recon; sid:200043408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.qnqwcs.icu"; classtype:attempted-recon; sid:200043409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.qpchzg.top"; classtype:attempted-recon; sid:200043410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.qvgavp.top"; classtype:attempted-recon; sid:200043411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.rmgomo.top"; classtype:attempted-recon; sid:200043412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.rsxojx.top"; classtype:attempted-recon; sid:200043413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.sawjbk.top"; classtype:attempted-recon; sid:200043414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.slnb02.icu"; classtype:attempted-recon; sid:200043415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.srwwap.top"; classtype:attempted-recon; sid:200043416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.sthtuh.top"; classtype:attempted-recon; sid:200043417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.syeuaw.top"; classtype:attempted-recon; sid:200043418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.tbnilj.top"; classtype:attempted-recon; sid:200043419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.tl86n6.icu"; classtype:attempted-recon; sid:200043420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.to5fb9.icu"; classtype:attempted-recon; sid:200043421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.u0c8sn.icu"; classtype:attempted-recon; sid:200043422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.uixah3.icu"; classtype:attempted-recon; sid:200043423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ukesvp.icu"; classtype:attempted-recon; sid:200043424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ukrtxd.top"; classtype:attempted-recon; sid:200043425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.upahh5.icu"; classtype:attempted-recon; sid:200043426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.uxdgpy.top"; classtype:attempted-recon; sid:200043427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.uxvqzp.top"; classtype:attempted-recon; sid:200043428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.vdpgwm.top"; classtype:attempted-recon; sid:200043429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.vqeyuo.top"; classtype:attempted-recon; sid:200043430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.vspjok.icu"; classtype:attempted-recon; sid:200043431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.vvkdlh.top"; classtype:attempted-recon; sid:200043432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.vxcrlo.top"; classtype:attempted-recon; sid:200043433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.werbdt.top"; classtype:attempted-recon; sid:200043434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.wfirhj.top"; classtype:attempted-recon; sid:200043435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.whnjwr.top"; classtype:attempted-recon; sid:200043436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.witojr.top"; classtype:attempted-recon; sid:200043437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.wmygyx.top"; classtype:attempted-recon; sid:200043438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.wpzqxg.top"; classtype:attempted-recon; sid:200043439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.wsojbg.icu"; classtype:attempted-recon; sid:200043440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.wxpckc.icu"; classtype:attempted-recon; sid:200043441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.xd1bpn.icu"; classtype:attempted-recon; sid:200043442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.xeygaj.top"; classtype:attempted-recon; sid:200043443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.xgysxo.top"; classtype:attempted-recon; sid:200043444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.xydvkg.top"; classtype:attempted-recon; sid:200043445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.xyuhnm.top"; classtype:attempted-recon; sid:200043446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.xztftf.top"; classtype:attempted-recon; sid:200043447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.ymifv0.icu"; classtype:attempted-recon; sid:200043448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.yqasjy.icu"; classtype:attempted-recon; sid:200043449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.yuxvpc.top"; classtype:attempted-recon; sid:200043450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.yvjdgy.top"; classtype:attempted-recon; sid:200043451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.yybtfl.top"; classtype:attempted-recon; sid:200043452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.zhwpnq.top"; classtype:attempted-recon; sid:200043453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.zovh96.icu"; classtype:attempted-recon; sid:200043454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvcasevi.vivevcvnvsa.zoyqhl.top"; classtype:attempted-recon; sid:200043455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.037768888861.xyz"; classtype:attempted-recon; sid:200043456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.131452.site"; classtype:attempted-recon; sid:200043457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.284nxw.icu"; classtype:attempted-recon; sid:200043458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.473glv.icu"; classtype:attempted-recon; sid:200043459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.4k2dci.icu"; classtype:attempted-recon; sid:200043460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.687cem.icu"; classtype:attempted-recon; sid:200043461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.69bn6b.icu"; classtype:attempted-recon; sid:200043462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.6c7bza.icu"; classtype:attempted-recon; sid:200043463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.6pw2wd.icu"; classtype:attempted-recon; sid:200043464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.6rtqht.icu"; classtype:attempted-recon; sid:200043465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.6t1vk7.icu"; classtype:attempted-recon; sid:200043466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.7a4s96.icu"; classtype:attempted-recon; sid:200043467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.82casa.icu"; classtype:attempted-recon; sid:200043468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.9d24dh.icu"; classtype:attempted-recon; sid:200043469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.9pw3lv.icu"; classtype:attempted-recon; sid:200043470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.9zv0ny.icu"; classtype:attempted-recon; sid:200043471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.aale2a.icu"; classtype:attempted-recon; sid:200043472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.aayldm.top"; classtype:attempted-recon; sid:200043473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.adldni.top"; classtype:attempted-recon; sid:200043474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.afqzgx.top"; classtype:attempted-recon; sid:200043475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ansklx.top"; classtype:attempted-recon; sid:200043476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ao0dkn.icu"; classtype:attempted-recon; sid:200043477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.aogild.top"; classtype:attempted-recon; sid:200043478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.bucyvo.top"; classtype:attempted-recon; sid:200043479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.bwxsxf.top"; classtype:attempted-recon; sid:200043480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.bxsxvy.top"; classtype:attempted-recon; sid:200043481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.cgogay.top"; classtype:attempted-recon; sid:200043482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.cmudlt.top"; classtype:attempted-recon; sid:200043483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ctdwug.top"; classtype:attempted-recon; sid:200043484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.cwpgoh.top"; classtype:attempted-recon; sid:200043485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.d5u49w.icu"; classtype:attempted-recon; sid:200043486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.dbezzz.top"; classtype:attempted-recon; sid:200043487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.dbhlbm.top"; classtype:attempted-recon; sid:200043488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.dqbdkl.top"; classtype:attempted-recon; sid:200043489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.drkild.icu"; classtype:attempted-recon; sid:200043490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.e7ie6j.icu"; classtype:attempted-recon; sid:200043491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.eahbrm.top"; classtype:attempted-recon; sid:200043492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.enioab.top"; classtype:attempted-recon; sid:200043493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.erkdnv.top"; classtype:attempted-recon; sid:200043494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.fanyedong.site"; classtype:attempted-recon; sid:200043495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.fn0aqh.icu"; classtype:attempted-recon; sid:200043496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.hblfhq.top"; classtype:attempted-recon; sid:200043497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.hefhjq.icu"; classtype:attempted-recon; sid:200043498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.hli3b0.icu"; classtype:attempted-recon; sid:200043499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.hlsyku.icu"; classtype:attempted-recon; sid:200043500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.idenyq.top"; classtype:attempted-recon; sid:200043501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.j3tu3m.icu"; classtype:attempted-recon; sid:200043502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.j77o38.icu"; classtype:attempted-recon; sid:200043503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.jehe99.icu"; classtype:attempted-recon; sid:200043504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.juls8q.icu"; classtype:attempted-recon; sid:200043505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.k3ma2x.icu"; classtype:attempted-recon; sid:200043506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.k9pn0d.icu"; classtype:attempted-recon; sid:200043507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ka83cb.icu"; classtype:attempted-recon; sid:200043508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.kb5b6d.icu"; classtype:attempted-recon; sid:200043509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.kgfkdv.top"; classtype:attempted-recon; sid:200043510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.krjqpe.top"; classtype:attempted-recon; sid:200043511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.kvrhdp.top"; classtype:attempted-recon; sid:200043512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.lcazit.top"; classtype:attempted-recon; sid:200043513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.lfyacu.icu"; classtype:attempted-recon; sid:200043514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ljmuov.top"; classtype:attempted-recon; sid:200043515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ll64vg.icu"; classtype:attempted-recon; sid:200043516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.llufip.top"; classtype:attempted-recon; sid:200043517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.lmheln.top"; classtype:attempted-recon; sid:200043518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.lwgayp.top"; classtype:attempted-recon; sid:200043519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.lylxce.top"; classtype:attempted-recon; sid:200043520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.mcltim.top"; classtype:attempted-recon; sid:200043521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.mfx741.icu"; classtype:attempted-recon; sid:200043522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.mgjpjr.top"; classtype:attempted-recon; sid:200043523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.nllyoh.top"; classtype:attempted-recon; sid:200043524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.nqveqi.top"; classtype:attempted-recon; sid:200043525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.nrhpkc.icu"; classtype:attempted-recon; sid:200043526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.nu57wl.icu"; classtype:attempted-recon; sid:200043527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.nv9dtw.icu"; classtype:attempted-recon; sid:200043528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ojyzcd.top"; classtype:attempted-recon; sid:200043529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.okbpku.icu"; classtype:attempted-recon; sid:200043530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.oppxsj.top"; classtype:attempted-recon; sid:200043531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.or1glf.icu"; classtype:attempted-recon; sid:200043532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.pe14pc.icu"; classtype:attempted-recon; sid:200043533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.psdexq.top"; classtype:attempted-recon; sid:200043534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.psdoni.top"; classtype:attempted-recon; sid:200043535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.pujapd.top"; classtype:attempted-recon; sid:200043536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.pzgoea.top"; classtype:attempted-recon; sid:200043537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.q0s2sm.icu"; classtype:attempted-recon; sid:200043538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.qclqjo.top"; classtype:attempted-recon; sid:200043539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.qeaogd.top"; classtype:attempted-recon; sid:200043540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.qnqwcs.icu"; classtype:attempted-recon; sid:200043541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.qpchzg.top"; classtype:attempted-recon; sid:200043542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.qqjjzi.top"; classtype:attempted-recon; sid:200043543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.qvgavp.top"; classtype:attempted-recon; sid:200043544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.rmgomo.top"; classtype:attempted-recon; sid:200043545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.rsxojx.top"; classtype:attempted-recon; sid:200043546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.sawjbk.top"; classtype:attempted-recon; sid:200043547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.slnb02.icu"; classtype:attempted-recon; sid:200043548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.srcwhi.top"; classtype:attempted-recon; sid:200043549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.srwwap.top"; classtype:attempted-recon; sid:200043550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.sthtuh.top"; classtype:attempted-recon; sid:200043551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.syeuaw.top"; classtype:attempted-recon; sid:200043552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.tazsl1.icu"; classtype:attempted-recon; sid:200043553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.tbnilj.top"; classtype:attempted-recon; sid:200043554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.tl86n6.icu"; classtype:attempted-recon; sid:200043555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.to5fb9.icu"; classtype:attempted-recon; sid:200043556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.u0c8sn.icu"; classtype:attempted-recon; sid:200043557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.uixah3.icu"; classtype:attempted-recon; sid:200043558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ukesvp.icu"; classtype:attempted-recon; sid:200043559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.upahh5.icu"; classtype:attempted-recon; sid:200043560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.uxdgpy.top"; classtype:attempted-recon; sid:200043561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.uxvqzp.top"; classtype:attempted-recon; sid:200043562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.vads.fun"; classtype:attempted-recon; sid:200043563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.vdpgwm.top"; classtype:attempted-recon; sid:200043564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.vqeyuo.top"; classtype:attempted-recon; sid:200043565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.vspjok.icu"; classtype:attempted-recon; sid:200043566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.vvkdlh.top"; classtype:attempted-recon; sid:200043567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.vxcrlo.top"; classtype:attempted-recon; sid:200043568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.wfirhj.top"; classtype:attempted-recon; sid:200043569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.whnjwr.top"; classtype:attempted-recon; sid:200043570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.witojr.top"; classtype:attempted-recon; sid:200043571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.wmygyx.top"; classtype:attempted-recon; sid:200043572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.wpzqxg.top"; classtype:attempted-recon; sid:200043573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.wsojbg.icu"; classtype:attempted-recon; sid:200043574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.xd1bpn.icu"; classtype:attempted-recon; sid:200043575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.xeygaj.top"; classtype:attempted-recon; sid:200043576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.xgysxo.top"; classtype:attempted-recon; sid:200043577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.xydvkg.top"; classtype:attempted-recon; sid:200043578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.xyuhnm.top"; classtype:attempted-recon; sid:200043579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.xztftf.top"; classtype:attempted-recon; sid:200043580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ymifv0.icu"; classtype:attempted-recon; sid:200043581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.yqasjy.icu"; classtype:attempted-recon; sid:200043582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.yuxvpc.top"; classtype:attempted-recon; sid:200043583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.yvjdgy.top"; classtype:attempted-recon; sid:200043584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.yybtfl.top"; classtype:attempted-recon; sid:200043585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.zhsntm.top"; classtype:attempted-recon; sid:200043586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.zhwpnq.top"; classtype:attempted-recon; sid:200043587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.zoyqhl.top"; classtype:attempted-recon; sid:200043588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.037768888861.xyz"; classtype:attempted-recon; sid:200043589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.284nxw.icu"; classtype:attempted-recon; sid:200043590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.33hf19.icu"; classtype:attempted-recon; sid:200043591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.473glv.icu"; classtype:attempted-recon; sid:200043592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.4k2dci.icu"; classtype:attempted-recon; sid:200043593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.687cem.icu"; classtype:attempted-recon; sid:200043594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.69bn6b.icu"; classtype:attempted-recon; sid:200043595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.6c7bza.icu"; classtype:attempted-recon; sid:200043596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.6pw2wd.icu"; classtype:attempted-recon; sid:200043597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.6rtqht.icu"; classtype:attempted-recon; sid:200043598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.6t1vk7.icu"; classtype:attempted-recon; sid:200043599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.7a4s96.icu"; classtype:attempted-recon; sid:200043600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.82casa.icu"; classtype:attempted-recon; sid:200043601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.9d24dh.icu"; classtype:attempted-recon; sid:200043602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.9pw3lv.icu"; classtype:attempted-recon; sid:200043603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.9zv0ny.icu"; classtype:attempted-recon; sid:200043604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.aale2a.icu"; classtype:attempted-recon; sid:200043605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.aayldm.top"; classtype:attempted-recon; sid:200043606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.adldni.top"; classtype:attempted-recon; sid:200043607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.afqzgx.top"; classtype:attempted-recon; sid:200043608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ajxdpg.top"; classtype:attempted-recon; sid:200043609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ansklx.top"; classtype:attempted-recon; sid:200043610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ao0dkn.icu"; classtype:attempted-recon; sid:200043611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.bucyvo.top"; classtype:attempted-recon; sid:200043612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.bwxsxf.top"; classtype:attempted-recon; sid:200043613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.bxsxvy.top"; classtype:attempted-recon; sid:200043614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.cmudlt.top"; classtype:attempted-recon; sid:200043615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ctdwug.top"; classtype:attempted-recon; sid:200043616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.d5u49w.icu"; classtype:attempted-recon; sid:200043617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.dbhlbm.top"; classtype:attempted-recon; sid:200043618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.dqbdkl.top"; classtype:attempted-recon; sid:200043619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.drkild.icu"; classtype:attempted-recon; sid:200043620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.e7ie6j.icu"; classtype:attempted-recon; sid:200043621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.eahbrm.top"; classtype:attempted-recon; sid:200043622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.enioab.top"; classtype:attempted-recon; sid:200043623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.erkdnv.top"; classtype:attempted-recon; sid:200043624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.fn0aqh.icu"; classtype:attempted-recon; sid:200043625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.hblfhq.top"; classtype:attempted-recon; sid:200043626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.hefhjq.icu"; classtype:attempted-recon; sid:200043627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.hli3b0.icu"; classtype:attempted-recon; sid:200043628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.hlsyku.icu"; classtype:attempted-recon; sid:200043629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.hmziti.top"; classtype:attempted-recon; sid:200043630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.inkblog.ink"; classtype:attempted-recon; sid:200043631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.j3tu3m.icu"; classtype:attempted-recon; sid:200043632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.j77o38.icu"; classtype:attempted-recon; sid:200043633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.jehe99.icu"; classtype:attempted-recon; sid:200043634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.juls8q.icu"; classtype:attempted-recon; sid:200043635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.k3ma2x.icu"; classtype:attempted-recon; sid:200043636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.k9pn0d.icu"; classtype:attempted-recon; sid:200043637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ka83cb.icu"; classtype:attempted-recon; sid:200043638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.kb5b6d.icu"; classtype:attempted-recon; sid:200043639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.kgfkdv.top"; classtype:attempted-recon; sid:200043640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.krjqpe.top"; classtype:attempted-recon; sid:200043641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.kvrhdp.top"; classtype:attempted-recon; sid:200043642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.lcazit.top"; classtype:attempted-recon; sid:200043643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.lfyacu.icu"; classtype:attempted-recon; sid:200043644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ljmuov.top"; classtype:attempted-recon; sid:200043645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ll64vg.icu"; classtype:attempted-recon; sid:200043646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.llufip.top"; classtype:attempted-recon; sid:200043647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.lmheln.top"; classtype:attempted-recon; sid:200043648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.lwgayp.top"; classtype:attempted-recon; sid:200043649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.lylxce.top"; classtype:attempted-recon; sid:200043650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.mcltim.top"; classtype:attempted-recon; sid:200043651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.mfx741.icu"; classtype:attempted-recon; sid:200043652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.mgjpjr.top"; classtype:attempted-recon; sid:200043653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.mjdnpt.top"; classtype:attempted-recon; sid:200043654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.nllyoh.top"; classtype:attempted-recon; sid:200043655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.nqveqi.top"; classtype:attempted-recon; sid:200043656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.nrhpkc.icu"; classtype:attempted-recon; sid:200043657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.nu57wl.icu"; classtype:attempted-recon; sid:200043658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.nv9dtw.icu"; classtype:attempted-recon; sid:200043659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ojyzcd.top"; classtype:attempted-recon; sid:200043660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.okbpku.icu"; classtype:attempted-recon; sid:200043661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.or1glf.icu"; classtype:attempted-recon; sid:200043662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.pe14pc.icu"; classtype:attempted-recon; sid:200043663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.psdexq.top"; classtype:attempted-recon; sid:200043664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.psdoni.top"; classtype:attempted-recon; sid:200043665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.pujapd.top"; classtype:attempted-recon; sid:200043666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.pzgoea.top"; classtype:attempted-recon; sid:200043667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.q0s2sm.icu"; classtype:attempted-recon; sid:200043668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.qclqjo.top"; classtype:attempted-recon; sid:200043669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.qeaogd.top"; classtype:attempted-recon; sid:200043670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.qnqwcs.icu"; classtype:attempted-recon; sid:200043671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.qpchzg.top"; classtype:attempted-recon; sid:200043672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.qqjjzi.top"; classtype:attempted-recon; sid:200043673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.qvgavp.top"; classtype:attempted-recon; sid:200043674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.rbyycn.top"; classtype:attempted-recon; sid:200043675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.rmgomo.top"; classtype:attempted-recon; sid:200043676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.rsxojx.top"; classtype:attempted-recon; sid:200043677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.sawjbk.top"; classtype:attempted-recon; sid:200043678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.slnb02.icu"; classtype:attempted-recon; sid:200043679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.srcwhi.top"; classtype:attempted-recon; sid:200043680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.srwwap.top"; classtype:attempted-recon; sid:200043681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.sthtuh.top"; classtype:attempted-recon; sid:200043682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.tazsl1.icu"; classtype:attempted-recon; sid:200043683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.tbnilj.top"; classtype:attempted-recon; sid:200043684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.tl86n6.icu"; classtype:attempted-recon; sid:200043685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.to5fb9.icu"; classtype:attempted-recon; sid:200043686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.u0c8sn.icu"; classtype:attempted-recon; sid:200043687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.uixah3.icu"; classtype:attempted-recon; sid:200043688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ukesvp.icu"; classtype:attempted-recon; sid:200043689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ukrtxd.top"; classtype:attempted-recon; sid:200043690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.upahh5.icu"; classtype:attempted-recon; sid:200043691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.uxdgpy.top"; classtype:attempted-recon; sid:200043692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.uxvqzp.top"; classtype:attempted-recon; sid:200043693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.vdpgwm.top"; classtype:attempted-recon; sid:200043694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.vqeyuo.top"; classtype:attempted-recon; sid:200043695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.vspjok.icu"; classtype:attempted-recon; sid:200043696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.vvkdlh.top"; classtype:attempted-recon; sid:200043697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.vxcrlo.top"; classtype:attempted-recon; sid:200043698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.werbdt.top"; classtype:attempted-recon; sid:200043699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.wfirhj.top"; classtype:attempted-recon; sid:200043700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.whnjwr.top"; classtype:attempted-recon; sid:200043701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.witojr.top"; classtype:attempted-recon; sid:200043702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.wmygyx.top"; classtype:attempted-recon; sid:200043703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.wpzqxg.top"; classtype:attempted-recon; sid:200043704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.wsojbg.icu"; classtype:attempted-recon; sid:200043705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.wxpckc.icu"; classtype:attempted-recon; sid:200043706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.xd1bpn.icu"; classtype:attempted-recon; sid:200043707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.xeygaj.top"; classtype:attempted-recon; sid:200043708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.xgysxo.top"; classtype:attempted-recon; sid:200043709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.xydvkg.top"; classtype:attempted-recon; sid:200043710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.xyuhnm.top"; classtype:attempted-recon; sid:200043711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.xztftf.top"; classtype:attempted-recon; sid:200043712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ymifv0.icu"; classtype:attempted-recon; sid:200043713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.yqasjy.icu"; classtype:attempted-recon; sid:200043714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.yuxvpc.top"; classtype:attempted-recon; sid:200043715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.yybtfl.top"; classtype:attempted-recon; sid:200043716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.zhsntm.top"; classtype:attempted-recon; sid:200043717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.zhwpnq.top"; classtype:attempted-recon; sid:200043718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.zovh96.icu"; classtype:attempted-recon; sid:200043719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.zoyqhl.top"; classtype:attempted-recon; sid:200043720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.037768888861.xyz"; classtype:attempted-recon; sid:200043721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.131452.site"; classtype:attempted-recon; sid:200043722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.284nxw.icu"; classtype:attempted-recon; sid:200043723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.33hf19.icu"; classtype:attempted-recon; sid:200043724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.473glv.icu"; classtype:attempted-recon; sid:200043725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.4k2dci.icu"; classtype:attempted-recon; sid:200043726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.687cem.icu"; classtype:attempted-recon; sid:200043727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.69bn6b.icu"; classtype:attempted-recon; sid:200043728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.6c7bza.icu"; classtype:attempted-recon; sid:200043729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.6pw2wd.icu"; classtype:attempted-recon; sid:200043730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.6rtqht.icu"; classtype:attempted-recon; sid:200043731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.6t1vk7.icu"; classtype:attempted-recon; sid:200043732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.7a4s96.icu"; classtype:attempted-recon; sid:200043733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.82casa.icu"; classtype:attempted-recon; sid:200043734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.9d24dh.icu"; classtype:attempted-recon; sid:200043735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.9pw3lv.icu"; classtype:attempted-recon; sid:200043736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.9zv0ny.icu"; classtype:attempted-recon; sid:200043737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.aale2a.icu"; classtype:attempted-recon; sid:200043738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.aayldm.top"; classtype:attempted-recon; sid:200043739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.adldni.top"; classtype:attempted-recon; sid:200043740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.afqzgx.top"; classtype:attempted-recon; sid:200043741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ajxdpg.top"; classtype:attempted-recon; sid:200043742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ansklx.top"; classtype:attempted-recon; sid:200043743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ao0dkn.icu"; classtype:attempted-recon; sid:200043744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.aogild.top"; classtype:attempted-recon; sid:200043745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.bucyvo.top"; classtype:attempted-recon; sid:200043746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.bwxsxf.top"; classtype:attempted-recon; sid:200043747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.bxsxvy.top"; classtype:attempted-recon; sid:200043748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.cgogay.top"; classtype:attempted-recon; sid:200043749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.cmudlt.top"; classtype:attempted-recon; sid:200043750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ctdwug.top"; classtype:attempted-recon; sid:200043751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.cwpgoh.top"; classtype:attempted-recon; sid:200043752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.d5u49w.icu"; classtype:attempted-recon; sid:200043753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.dbezzz.top"; classtype:attempted-recon; sid:200043754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.dbhlbm.top"; classtype:attempted-recon; sid:200043755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.dqbdkl.top"; classtype:attempted-recon; sid:200043756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.drkild.icu"; classtype:attempted-recon; sid:200043757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.e7ie6j.icu"; classtype:attempted-recon; sid:200043758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.eahbrm.top"; classtype:attempted-recon; sid:200043759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.enioab.top"; classtype:attempted-recon; sid:200043760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.erkdnv.top"; classtype:attempted-recon; sid:200043761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.fn0aqh.icu"; classtype:attempted-recon; sid:200043762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.hblfhq.top"; classtype:attempted-recon; sid:200043763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.hefhjq.icu"; classtype:attempted-recon; sid:200043764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.hli3b0.icu"; classtype:attempted-recon; sid:200043765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.hlsyku.icu"; classtype:attempted-recon; sid:200043766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.hmziti.top"; classtype:attempted-recon; sid:200043767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.inkblog.ink"; classtype:attempted-recon; sid:200043768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.j3tu3m.icu"; classtype:attempted-recon; sid:200043769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.j77o38.icu"; classtype:attempted-recon; sid:200043770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.jehe99.icu"; classtype:attempted-recon; sid:200043771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.juls8q.icu"; classtype:attempted-recon; sid:200043772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.k3ma2x.icu"; classtype:attempted-recon; sid:200043773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.k9pn0d.icu"; classtype:attempted-recon; sid:200043774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ka83cb.icu"; classtype:attempted-recon; sid:200043775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.kb5b6d.icu"; classtype:attempted-recon; sid:200043776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.kgfkdv.top"; classtype:attempted-recon; sid:200043777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.krjqpe.top"; classtype:attempted-recon; sid:200043778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.lfyacu.icu"; classtype:attempted-recon; sid:200043779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ljmuov.top"; classtype:attempted-recon; sid:200043780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ll64vg.icu"; classtype:attempted-recon; sid:200043781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.llufip.top"; classtype:attempted-recon; sid:200043782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.lmheln.top"; classtype:attempted-recon; sid:200043783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.lylxce.top"; classtype:attempted-recon; sid:200043784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.mcltim.top"; classtype:attempted-recon; sid:200043785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.mfx741.icu"; classtype:attempted-recon; sid:200043786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.mgjpjr.top"; classtype:attempted-recon; sid:200043787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.mjdnpt.top"; classtype:attempted-recon; sid:200043788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.nllyoh.top"; classtype:attempted-recon; sid:200043789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.nqveqi.top"; classtype:attempted-recon; sid:200043790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.nrhpkc.icu"; classtype:attempted-recon; sid:200043791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.nu57wl.icu"; classtype:attempted-recon; sid:200043792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.nv9dtw.icu"; classtype:attempted-recon; sid:200043793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ojyzcd.top"; classtype:attempted-recon; sid:200043794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.okbpku.icu"; classtype:attempted-recon; sid:200043795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.oppxsj.top"; classtype:attempted-recon; sid:200043796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.or1glf.icu"; classtype:attempted-recon; sid:200043797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.pe14pc.icu"; classtype:attempted-recon; sid:200043798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.psdexq.top"; classtype:attempted-recon; sid:200043799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.psdoni.top"; classtype:attempted-recon; sid:200043800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.pujapd.top"; classtype:attempted-recon; sid:200043801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.pzgoea.top"; classtype:attempted-recon; sid:200043802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.q0s2sm.icu"; classtype:attempted-recon; sid:200043803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.qclqjo.top"; classtype:attempted-recon; sid:200043804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.qeaogd.top"; classtype:attempted-recon; sid:200043805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.qpchzg.top"; classtype:attempted-recon; sid:200043806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.qvgavp.top"; classtype:attempted-recon; sid:200043807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.rbyycn.top"; classtype:attempted-recon; sid:200043808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.rmgomo.top"; classtype:attempted-recon; sid:200043809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.sawjbk.top"; classtype:attempted-recon; sid:200043810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.slnb02.icu"; classtype:attempted-recon; sid:200043811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.srwwap.top"; classtype:attempted-recon; sid:200043812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.sthtuh.top"; classtype:attempted-recon; sid:200043813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.syeuaw.top"; classtype:attempted-recon; sid:200043814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.tazsl1.icu"; classtype:attempted-recon; sid:200043815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.tbnilj.top"; classtype:attempted-recon; sid:200043816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.tl86n6.icu"; classtype:attempted-recon; sid:200043817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.to5fb9.icu"; classtype:attempted-recon; sid:200043818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.u0c8sn.icu"; classtype:attempted-recon; sid:200043819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.uixah3.icu"; classtype:attempted-recon; sid:200043820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ukesvp.icu"; classtype:attempted-recon; sid:200043821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ukrtxd.top"; classtype:attempted-recon; sid:200043822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.upahh5.icu"; classtype:attempted-recon; sid:200043823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.uxdgpy.top"; classtype:attempted-recon; sid:200043824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.uxvqzp.top"; classtype:attempted-recon; sid:200043825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.vspjok.icu"; classtype:attempted-recon; sid:200043826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.vvkdlh.top"; classtype:attempted-recon; sid:200043827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.vxcrlo.top"; classtype:attempted-recon; sid:200043828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.werbdt.top"; classtype:attempted-recon; sid:200043829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.wfirhj.top"; classtype:attempted-recon; sid:200043830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.witojr.top"; classtype:attempted-recon; sid:200043831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.wmygyx.top"; classtype:attempted-recon; sid:200043832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.wpzqxg.top"; classtype:attempted-recon; sid:200043833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.wsojbg.icu"; classtype:attempted-recon; sid:200043834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.wxpckc.icu"; classtype:attempted-recon; sid:200043835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.xd1bpn.icu"; classtype:attempted-recon; sid:200043836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.xeygaj.top"; classtype:attempted-recon; sid:200043837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.xgysxo.top"; classtype:attempted-recon; sid:200043838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.xydvkg.top"; classtype:attempted-recon; sid:200043839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.xyuhnm.top"; classtype:attempted-recon; sid:200043840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.xztftf.top"; classtype:attempted-recon; sid:200043841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ymifv0.icu"; classtype:attempted-recon; sid:200043842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.yqasjy.icu"; classtype:attempted-recon; sid:200043843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.yuxvpc.top"; classtype:attempted-recon; sid:200043844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.yvjdgy.top"; classtype:attempted-recon; sid:200043845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.yybtfl.top"; classtype:attempted-recon; sid:200043846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.zhsntm.top"; classtype:attempted-recon; sid:200043847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.zhwpnq.top"; classtype:attempted-recon; sid:200043848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.zovh96.icu"; classtype:attempted-recon; sid:200043849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvacvecnvci.vievcaarsenvs.zoyqhl.top"; classtype:attempted-recon; sid:200043850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvavaes.visvccaneie.do4w0yy.tokyo"; classtype:attempted-recon; sid:200043851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvavaes.visvccaneie.ggtvze.za.com"; classtype:attempted-recon; sid:200043852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvavaes.visvccaneie.lkrmhnu.bar"; classtype:attempted-recon; sid:200043853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvavaes.visvccaneie.mxjjct.id"; classtype:attempted-recon; sid:200043854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvavaes.visvccaneie.vhiucjn.bar"; classtype:attempted-recon; sid:200043855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvavaes.visvccaneie.wcbvmw.cyou"; classtype:attempted-recon; sid:200043856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaves.visvsaneie.9e7qnvd.tokyo"; classtype:attempted-recon; sid:200043857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvaves.visvsaneie.frmgjnb.bar"; classtype:attempted-recon; sid:200043858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.2021071.top"; classtype:attempted-recon; sid:200043859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.85567.cn"; classtype:attempted-recon; sid:200043860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.alister.ltd"; classtype:attempted-recon; sid:200043861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.ccloud.group"; classtype:attempted-recon; sid:200043862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.cjehdm.top"; classtype:attempted-recon; sid:200043863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.clllbx.top"; classtype:attempted-recon; sid:200043864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.dwbjs.top"; classtype:attempted-recon; sid:200043865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.ebwptg.top"; classtype:attempted-recon; sid:200043866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.fcloud.group"; classtype:attempted-recon; sid:200043867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.fcwh886.top"; classtype:attempted-recon; sid:200043868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.francis.ltd"; classtype:attempted-recon; sid:200043869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.fzosfk.top"; classtype:attempted-recon; sid:200043870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.gafuwd.top"; classtype:attempted-recon; sid:200043871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.glmbfd.top"; classtype:attempted-recon; sid:200043872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.hncwbn.top"; classtype:attempted-recon; sid:200043873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.ipexqv.top"; classtype:attempted-recon; sid:200043874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.jcloud.group"; classtype:attempted-recon; sid:200043875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.jimdyd.top"; classtype:attempted-recon; sid:200043876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.jjglsw.top"; classtype:attempted-recon; sid:200043877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.leigh.ltd"; classtype:attempted-recon; sid:200043878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.leonard.ltd"; classtype:attempted-recon; sid:200043879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.lhixak.top"; classtype:attempted-recon; sid:200043880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.lhzfkh.top"; classtype:attempted-recon; sid:200043881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.limassol.group"; classtype:attempted-recon; sid:200043882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.loskh.top"; classtype:attempted-recon; sid:200043883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.mnvhdje.icu"; classtype:attempted-recon; sid:200043884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.njrksy.top"; classtype:attempted-recon; sid:200043885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.norfolk.ltd"; classtype:attempted-recon; sid:200043886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.npxfcv.top"; classtype:attempted-recon; sid:200043887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.nvjdhuei.icu"; classtype:attempted-recon; sid:200043888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.oamprk.top"; classtype:attempted-recon; sid:200043889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.ocloud.group"; classtype:attempted-recon; sid:200043890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.owens.ltd"; classtype:attempted-recon; sid:200043891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.pcloud.group"; classtype:attempted-recon; sid:200043892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.promotion.show"; classtype:attempted-recon; sid:200043893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.ptywgv.top"; classtype:attempted-recon; sid:200043894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.qzvxui.top"; classtype:attempted-recon; sid:200043895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.reynolds.ltd"; classtype:attempted-recon; sid:200043896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.riley.ltd"; classtype:attempted-recon; sid:200043897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.robertson.ltd"; classtype:attempted-recon; sid:200043898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.rowan.ltd"; classtype:attempted-recon; sid:200043899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.scloud.group"; classtype:attempted-recon; sid:200043900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.shjpxn.top"; classtype:attempted-recon; sid:200043901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.sinclair.ltd"; classtype:attempted-recon; sid:200043902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.sqmim.top"; classtype:attempted-recon; sid:200043903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.tvrimx.top"; classtype:attempted-recon; sid:200043904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.tvxkmp.top"; classtype:attempted-recon; sid:200043905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.vjlile.top"; classtype:attempted-recon; sid:200043906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.vnxgwb.top"; classtype:attempted-recon; sid:200043907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.vordmh.top"; classtype:attempted-recon; sid:200043908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.wcloud.group"; classtype:attempted-recon; sid:200043909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.xdaupp.top"; classtype:attempted-recon; sid:200043910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.xhgmfb.top"; classtype:attempted-recon; sid:200043911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.xniqmj.top"; classtype:attempted-recon; sid:200043912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.xulhaq.top"; classtype:attempted-recon; sid:200043913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.ycloud.group"; classtype:attempted-recon; sid:200043914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.zbvvpg.top"; classtype:attempted-recon; sid:200043915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.zeyeds.ltd"; classtype:attempted-recon; sid:200043916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.zqjkvx.top"; classtype:attempted-recon; sid:200043917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcavaesei.aa.zrxpv.top"; classtype:attempted-recon; sid:200043918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.2021071.top"; classtype:attempted-recon; sid:200043919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.22567.cn"; classtype:attempted-recon; sid:200043920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.alister.ltd"; classtype:attempted-recon; sid:200043921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.cjehdm.top"; classtype:attempted-recon; sid:200043922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.clllbx.top"; classtype:attempted-recon; sid:200043923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.ebwptg.top"; classtype:attempted-recon; sid:200043924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.erfghk03.shop"; classtype:attempted-recon; sid:200043925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.fcwh886.top"; classtype:attempted-recon; sid:200043926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.francis.ltd"; classtype:attempted-recon; sid:200043927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.fzosfk.top"; classtype:attempted-recon; sid:200043928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.gafuwd.top"; classtype:attempted-recon; sid:200043929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.ggnxmf.top"; classtype:attempted-recon; sid:200043930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.glmbfd.top"; classtype:attempted-recon; sid:200043931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.gzfkmo.top"; classtype:attempted-recon; sid:200043932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.hcloud.group"; classtype:attempted-recon; sid:200043933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.hncwbn.top"; classtype:attempted-recon; sid:200043934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.ipexqv.top"; classtype:attempted-recon; sid:200043935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.jimdyd.top"; classtype:attempted-recon; sid:200043936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.jjglsw.top"; classtype:attempted-recon; sid:200043937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.lcloud.group"; classtype:attempted-recon; sid:200043938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.leigh.ltd"; classtype:attempted-recon; sid:200043939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.leonard.ltd"; classtype:attempted-recon; sid:200043940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.lhixak.top"; classtype:attempted-recon; sid:200043941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.lhzfkh.top"; classtype:attempted-recon; sid:200043942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.limassol.group"; classtype:attempted-recon; sid:200043943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.loskh.top"; classtype:attempted-recon; sid:200043944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.mkma07.shop"; classtype:attempted-recon; sid:200043945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.ncbhdjei.icu"; classtype:attempted-recon; sid:200043946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.njrksy.top"; classtype:attempted-recon; sid:200043947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.norfolk.ltd"; classtype:attempted-recon; sid:200043948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.npxfcv.top"; classtype:attempted-recon; sid:200043949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200043950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.oamprk.top"; classtype:attempted-recon; sid:200043951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.owens.ltd"; classtype:attempted-recon; sid:200043952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.ptywgv.top"; classtype:attempted-recon; sid:200043953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.qzvxui.top"; classtype:attempted-recon; sid:200043954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.reynolds.ltd"; classtype:attempted-recon; sid:200043955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.riley.ltd"; classtype:attempted-recon; sid:200043956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.robertson.ltd"; classtype:attempted-recon; sid:200043957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.rowan.ltd"; classtype:attempted-recon; sid:200043958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.shjpxn.top"; classtype:attempted-recon; sid:200043959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.sinclair.ltd"; classtype:attempted-recon; sid:200043960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.smartlife.plus"; classtype:attempted-recon; sid:200043961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.sqmim.top"; classtype:attempted-recon; sid:200043962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.tvrimx.top"; classtype:attempted-recon; sid:200043963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.tvxkmp.top"; classtype:attempted-recon; sid:200043964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.vjlile.top"; classtype:attempted-recon; sid:200043965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.vnxgwb.top"; classtype:attempted-recon; sid:200043966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.vordmh.top"; classtype:attempted-recon; sid:200043967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.wcloud.group"; classtype:attempted-recon; sid:200043968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.xdaupp.top"; classtype:attempted-recon; sid:200043969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.xhgmfb.top"; classtype:attempted-recon; sid:200043970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.xniqmj.top"; classtype:attempted-recon; sid:200043971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.xulhaq.top"; classtype:attempted-recon; sid:200043972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.zbvvpg.top"; classtype:attempted-recon; sid:200043973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.zeyeds.ltd"; classtype:attempted-recon; sid:200043974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.zqjkvx.top"; classtype:attempted-recon; sid:200043975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvceavcaesei.aaaa.zrxpv.top"; classtype:attempted-recon; sid:200043976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcecasi.visvacirvsior.mdgjba.za.com"; classtype:attempted-recon; sid:200043977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.2021071.top"; classtype:attempted-recon; sid:200043978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.53567.cn"; classtype:attempted-recon; sid:200043979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.ahahh04.shop"; classtype:attempted-recon; sid:200043980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.alister.ltd"; classtype:attempted-recon; sid:200043981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.cjehdm.top"; classtype:attempted-recon; sid:200043982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.clllbx.top"; classtype:attempted-recon; sid:200043983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.ebwptg.top"; classtype:attempted-recon; sid:200043984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.fcwh886.top"; classtype:attempted-recon; sid:200043985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.francis.ltd"; classtype:attempted-recon; sid:200043986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.fzosfk.top"; classtype:attempted-recon; sid:200043987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.gafuwd.top"; classtype:attempted-recon; sid:200043988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.glmbfd.top"; classtype:attempted-recon; sid:200043989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.hncwbn.top"; classtype:attempted-recon; sid:200043990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.ipexqv.top"; classtype:attempted-recon; sid:200043991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.jimdyd.top"; classtype:attempted-recon; sid:200043992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.jjglsw.top"; classtype:attempted-recon; sid:200043993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.leigh.ltd"; classtype:attempted-recon; sid:200043994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.leonard.ltd"; classtype:attempted-recon; sid:200043995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.lhixak.top"; classtype:attempted-recon; sid:200043996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.lhzfkh.top"; classtype:attempted-recon; sid:200043997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.limassol.group"; classtype:attempted-recon; sid:200043998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.loskh.top"; classtype:attempted-recon; sid:200043999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.njrksy.top"; classtype:attempted-recon; sid:200044000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.norfolk.ltd"; classtype:attempted-recon; sid:200044001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.npxfcv.top"; classtype:attempted-recon; sid:200044002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.nvjdhuei.icu"; classtype:attempted-recon; sid:200044003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.oamprk.top"; classtype:attempted-recon; sid:200044004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.owens.ltd"; classtype:attempted-recon; sid:200044005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.ptywgv.top"; classtype:attempted-recon; sid:200044006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.qzvxui.top"; classtype:attempted-recon; sid:200044007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.reynolds.ltd"; classtype:attempted-recon; sid:200044008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.riley.ltd"; classtype:attempted-recon; sid:200044009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.robertson.ltd"; classtype:attempted-recon; sid:200044010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.rowan.ltd"; classtype:attempted-recon; sid:200044011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.shjpxn.top"; classtype:attempted-recon; sid:200044012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.sinclair.ltd"; classtype:attempted-recon; sid:200044013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.sqmim.top"; classtype:attempted-recon; sid:200044014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.tvrimx.top"; classtype:attempted-recon; sid:200044015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.tvxkmp.top"; classtype:attempted-recon; sid:200044016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.vjlile.top"; classtype:attempted-recon; sid:200044017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.vnxgwb.top"; classtype:attempted-recon; sid:200044018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.vordmh.top"; classtype:attempted-recon; sid:200044019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.xdaupp.top"; classtype:attempted-recon; sid:200044020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.xhgmfb.top"; classtype:attempted-recon; sid:200044021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.xniqmj.top"; classtype:attempted-recon; sid:200044022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.xulhaq.top"; classtype:attempted-recon; sid:200044023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.zbvvpg.top"; classtype:attempted-recon; sid:200044024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.zeyeds.ltd"; classtype:attempted-recon; sid:200044025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.zqjkvx.top"; classtype:attempted-recon; sid:200044026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcevacsei.aaa.zrxpv.top"; classtype:attempted-recon; sid:200044027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.2021071.top"; classtype:attempted-recon; sid:200044028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.alister.ltd"; classtype:attempted-recon; sid:200044029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.cjehdm.top"; classtype:attempted-recon; sid:200044030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.clllbx.top"; classtype:attempted-recon; sid:200044031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.ebwptg.top"; classtype:attempted-recon; sid:200044032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.fcwh886.top"; classtype:attempted-recon; sid:200044033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.francis.ltd"; classtype:attempted-recon; sid:200044034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.fzosfk.top"; classtype:attempted-recon; sid:200044035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.gafuwd.top"; classtype:attempted-recon; sid:200044036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.glmbfd.top"; classtype:attempted-recon; sid:200044037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.hncwbn.top"; classtype:attempted-recon; sid:200044038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.ipexqv.top"; classtype:attempted-recon; sid:200044039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.jimdyd.top"; classtype:attempted-recon; sid:200044040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.jjglsw.top"; classtype:attempted-recon; sid:200044041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.leigh.ltd"; classtype:attempted-recon; sid:200044042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.leonard.ltd"; classtype:attempted-recon; sid:200044043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.lhixak.top"; classtype:attempted-recon; sid:200044044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.lhzfkh.top"; classtype:attempted-recon; sid:200044045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.limassol.group"; classtype:attempted-recon; sid:200044046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.loskh.top"; classtype:attempted-recon; sid:200044047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.njrksy.top"; classtype:attempted-recon; sid:200044048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.norfolk.ltd"; classtype:attempted-recon; sid:200044049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.npxfcv.top"; classtype:attempted-recon; sid:200044050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.nvjdhuei.icu"; classtype:attempted-recon; sid:200044051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.oamprk.top"; classtype:attempted-recon; sid:200044052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.owens.ltd"; classtype:attempted-recon; sid:200044053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.ptywgv.top"; classtype:attempted-recon; sid:200044054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.qzvxui.top"; classtype:attempted-recon; sid:200044055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.reynolds.ltd"; classtype:attempted-recon; sid:200044056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.riley.ltd"; classtype:attempted-recon; sid:200044057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.robertson.ltd"; classtype:attempted-recon; sid:200044058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.rowan.ltd"; classtype:attempted-recon; sid:200044059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.shjpxn.top"; classtype:attempted-recon; sid:200044060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.sinclair.ltd"; classtype:attempted-recon; sid:200044061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.sqmim.top"; classtype:attempted-recon; sid:200044062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.tvrimx.top"; classtype:attempted-recon; sid:200044063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.tvxkmp.top"; classtype:attempted-recon; sid:200044064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.vjlile.top"; classtype:attempted-recon; sid:200044065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.vnxgwb.top"; classtype:attempted-recon; sid:200044066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.vordmh.top"; classtype:attempted-recon; sid:200044067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.xdaupp.top"; classtype:attempted-recon; sid:200044068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.xhgmfb.top"; classtype:attempted-recon; sid:200044069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.xniqmj.top"; classtype:attempted-recon; sid:200044070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.xulhaq.top"; classtype:attempted-recon; sid:200044071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.zbvvpg.top"; classtype:attempted-recon; sid:200044072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.zeyeds.ltd"; classtype:attempted-recon; sid:200044073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.zqjkvx.top"; classtype:attempted-recon; sid:200044074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvasei.a.zrxpv.top"; classtype:attempted-recon; sid:200044075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.284nxw.icu"; classtype:attempted-recon; sid:200044076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.33hf19.icu"; classtype:attempted-recon; sid:200044077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.473glv.icu"; classtype:attempted-recon; sid:200044078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.4k2dci.icu"; classtype:attempted-recon; sid:200044079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.687cem.icu"; classtype:attempted-recon; sid:200044080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.69bn6b.icu"; classtype:attempted-recon; sid:200044081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.6c7bza.icu"; classtype:attempted-recon; sid:200044082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.6pw2wd.icu"; classtype:attempted-recon; sid:200044083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.6rtqht.icu"; classtype:attempted-recon; sid:200044084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.6t1vk7.icu"; classtype:attempted-recon; sid:200044085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.7a4s96.icu"; classtype:attempted-recon; sid:200044086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.82casa.icu"; classtype:attempted-recon; sid:200044087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.9d24dh.icu"; classtype:attempted-recon; sid:200044088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.9pw3lv.icu"; classtype:attempted-recon; sid:200044089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.9zv0ny.icu"; classtype:attempted-recon; sid:200044090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.aale2a.icu"; classtype:attempted-recon; sid:200044091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.aayldm.top"; classtype:attempted-recon; sid:200044092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ajxdpg.top"; classtype:attempted-recon; sid:200044093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ansklx.top"; classtype:attempted-recon; sid:200044094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ao0dkn.icu"; classtype:attempted-recon; sid:200044095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.aogild.top"; classtype:attempted-recon; sid:200044096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.bucyvo.top"; classtype:attempted-recon; sid:200044097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.bwxsxf.top"; classtype:attempted-recon; sid:200044098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.bxsxvy.top"; classtype:attempted-recon; sid:200044099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.cgogay.top"; classtype:attempted-recon; sid:200044100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.cmudlt.top"; classtype:attempted-recon; sid:200044101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ctdwug.top"; classtype:attempted-recon; sid:200044102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.cwpgoh.top"; classtype:attempted-recon; sid:200044103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.d5u49w.icu"; classtype:attempted-recon; sid:200044104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.dbezzz.top"; classtype:attempted-recon; sid:200044105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.dbhlbm.top"; classtype:attempted-recon; sid:200044106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.drkild.icu"; classtype:attempted-recon; sid:200044107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.e7ie6j.icu"; classtype:attempted-recon; sid:200044108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.eahbrm.top"; classtype:attempted-recon; sid:200044109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.enioab.top"; classtype:attempted-recon; sid:200044110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.erkdnv.top"; classtype:attempted-recon; sid:200044111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.fn0aqh.icu"; classtype:attempted-recon; sid:200044112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.hblfhq.top"; classtype:attempted-recon; sid:200044113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.hefhjq.icu"; classtype:attempted-recon; sid:200044114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.hli3b0.icu"; classtype:attempted-recon; sid:200044115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.hlsyku.icu"; classtype:attempted-recon; sid:200044116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.hmziti.top"; classtype:attempted-recon; sid:200044117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.inkblog.ink"; classtype:attempted-recon; sid:200044118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.j3tu3m.icu"; classtype:attempted-recon; sid:200044119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.j77o38.icu"; classtype:attempted-recon; sid:200044120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.jehe99.icu"; classtype:attempted-recon; sid:200044121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.juls8q.icu"; classtype:attempted-recon; sid:200044122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.k3ma2x.icu"; classtype:attempted-recon; sid:200044123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.k9pn0d.icu"; classtype:attempted-recon; sid:200044124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ka83cb.icu"; classtype:attempted-recon; sid:200044125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.kb5b6d.icu"; classtype:attempted-recon; sid:200044126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.kgfkdv.top"; classtype:attempted-recon; sid:200044127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.krjqpe.top"; classtype:attempted-recon; sid:200044128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.kvrhdp.top"; classtype:attempted-recon; sid:200044129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.lfyacu.icu"; classtype:attempted-recon; sid:200044130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ljmuov.top"; classtype:attempted-recon; sid:200044131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ll64vg.icu"; classtype:attempted-recon; sid:200044132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.llufip.top"; classtype:attempted-recon; sid:200044133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.lwgayp.top"; classtype:attempted-recon; sid:200044134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.lylxce.top"; classtype:attempted-recon; sid:200044135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.mcltim.top"; classtype:attempted-recon; sid:200044136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.mfx741.icu"; classtype:attempted-recon; sid:200044137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.mgjpjr.top"; classtype:attempted-recon; sid:200044138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.mjdnpt.top"; classtype:attempted-recon; sid:200044139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.nqveqi.top"; classtype:attempted-recon; sid:200044140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.nrhpkc.icu"; classtype:attempted-recon; sid:200044141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.nu57wl.icu"; classtype:attempted-recon; sid:200044142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.nv9dtw.icu"; classtype:attempted-recon; sid:200044143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ojyzcd.top"; classtype:attempted-recon; sid:200044144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.okbpku.icu"; classtype:attempted-recon; sid:200044145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.oppxsj.top"; classtype:attempted-recon; sid:200044146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.or1glf.icu"; classtype:attempted-recon; sid:200044147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.pe14pc.icu"; classtype:attempted-recon; sid:200044148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.psdexq.top"; classtype:attempted-recon; sid:200044149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.psdoni.top"; classtype:attempted-recon; sid:200044150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.pujapd.top"; classtype:attempted-recon; sid:200044151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.pzgoea.top"; classtype:attempted-recon; sid:200044152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.q0s2sm.icu"; classtype:attempted-recon; sid:200044153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.qclqjo.top"; classtype:attempted-recon; sid:200044154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.qnqwcs.icu"; classtype:attempted-recon; sid:200044155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.qpchzg.top"; classtype:attempted-recon; sid:200044156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.qqjjzi.top"; classtype:attempted-recon; sid:200044157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.qvgavp.top"; classtype:attempted-recon; sid:200044158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.rbyycn.top"; classtype:attempted-recon; sid:200044159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.rmgomo.top"; classtype:attempted-recon; sid:200044160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.rsxojx.top"; classtype:attempted-recon; sid:200044161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.sawjbk.top"; classtype:attempted-recon; sid:200044162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.slnb02.icu"; classtype:attempted-recon; sid:200044163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.srcwhi.top"; classtype:attempted-recon; sid:200044164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.srwwap.top"; classtype:attempted-recon; sid:200044165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.sthtuh.top"; classtype:attempted-recon; sid:200044166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.syeuaw.top"; classtype:attempted-recon; sid:200044167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.tazsl1.icu"; classtype:attempted-recon; sid:200044168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.tbnilj.top"; classtype:attempted-recon; sid:200044169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.tl86n6.icu"; classtype:attempted-recon; sid:200044170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.to5fb9.icu"; classtype:attempted-recon; sid:200044171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.u0c8sn.icu"; classtype:attempted-recon; sid:200044172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.uixah3.icu"; classtype:attempted-recon; sid:200044173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ukesvp.icu"; classtype:attempted-recon; sid:200044174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ukrtxd.top"; classtype:attempted-recon; sid:200044175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.upahh5.icu"; classtype:attempted-recon; sid:200044176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.uxvqzp.top"; classtype:attempted-recon; sid:200044177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.vdpgwm.top"; classtype:attempted-recon; sid:200044178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.vqeyuo.top"; classtype:attempted-recon; sid:200044179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.vspjok.icu"; classtype:attempted-recon; sid:200044180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.vvkdlh.top"; classtype:attempted-recon; sid:200044181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.vxcrlo.top"; classtype:attempted-recon; sid:200044182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.wfirhj.top"; classtype:attempted-recon; sid:200044183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.whnjwr.top"; classtype:attempted-recon; sid:200044184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.witojr.top"; classtype:attempted-recon; sid:200044185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.wmygyx.top"; classtype:attempted-recon; sid:200044186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.wpzqxg.top"; classtype:attempted-recon; sid:200044187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.wsojbg.icu"; classtype:attempted-recon; sid:200044188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.wxpckc.icu"; classtype:attempted-recon; sid:200044189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.xd1bpn.icu"; classtype:attempted-recon; sid:200044190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.xeygaj.top"; classtype:attempted-recon; sid:200044191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.xydvkg.top"; classtype:attempted-recon; sid:200044192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.xyuhnm.top"; classtype:attempted-recon; sid:200044193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.xztftf.top"; classtype:attempted-recon; sid:200044194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ymifv0.icu"; classtype:attempted-recon; sid:200044195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.yqasjy.icu"; classtype:attempted-recon; sid:200044196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.yuxvpc.top"; classtype:attempted-recon; sid:200044197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.yvjdgy.top"; classtype:attempted-recon; sid:200044198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.yybtfl.top"; classtype:attempted-recon; sid:200044199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.zhsntm.top"; classtype:attempted-recon; sid:200044200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.zhwpnq.top"; classtype:attempted-recon; sid:200044201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.zovh96.icu"; classtype:attempted-recon; sid:200044202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.zoyqhl.top"; classtype:attempted-recon; sid:200044203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.037768888861.xyz"; classtype:attempted-recon; sid:200044204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.284nxw.icu"; classtype:attempted-recon; sid:200044205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.33hf19.icu"; classtype:attempted-recon; sid:200044206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.473glv.icu"; classtype:attempted-recon; sid:200044207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.4k2dci.icu"; classtype:attempted-recon; sid:200044208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.687cem.icu"; classtype:attempted-recon; sid:200044209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.69bn6b.icu"; classtype:attempted-recon; sid:200044210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.6c7bza.icu"; classtype:attempted-recon; sid:200044211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.6pw2wd.icu"; classtype:attempted-recon; sid:200044212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.6rtqht.icu"; classtype:attempted-recon; sid:200044213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.6t1vk7.icu"; classtype:attempted-recon; sid:200044214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.7a4s96.icu"; classtype:attempted-recon; sid:200044215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.82casa.icu"; classtype:attempted-recon; sid:200044216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.9d24dh.icu"; classtype:attempted-recon; sid:200044217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.9pw3lv.icu"; classtype:attempted-recon; sid:200044218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.9zv0ny.icu"; classtype:attempted-recon; sid:200044219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.aale2a.icu"; classtype:attempted-recon; sid:200044220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.aayldm.top"; classtype:attempted-recon; sid:200044221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.adldni.top"; classtype:attempted-recon; sid:200044222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.afqzgx.top"; classtype:attempted-recon; sid:200044223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ajxdpg.top"; classtype:attempted-recon; sid:200044224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ansklx.top"; classtype:attempted-recon; sid:200044225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ao0dkn.icu"; classtype:attempted-recon; sid:200044226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.aogild.top"; classtype:attempted-recon; sid:200044227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.bucyvo.top"; classtype:attempted-recon; sid:200044228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.bwxsxf.top"; classtype:attempted-recon; sid:200044229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.bxsxvy.top"; classtype:attempted-recon; sid:200044230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.cgogay.top"; classtype:attempted-recon; sid:200044231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.cmudlt.top"; classtype:attempted-recon; sid:200044232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ctdwug.top"; classtype:attempted-recon; sid:200044233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.d5u49w.icu"; classtype:attempted-recon; sid:200044234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.dbezzz.top"; classtype:attempted-recon; sid:200044235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.dbhlbm.top"; classtype:attempted-recon; sid:200044236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.dqbdkl.top"; classtype:attempted-recon; sid:200044237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.drkild.icu"; classtype:attempted-recon; sid:200044238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.e7ie6j.icu"; classtype:attempted-recon; sid:200044239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.eahbrm.top"; classtype:attempted-recon; sid:200044240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.enioab.top"; classtype:attempted-recon; sid:200044241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.erkdnv.top"; classtype:attempted-recon; sid:200044242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.fn0aqh.icu"; classtype:attempted-recon; sid:200044243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.hblfhq.top"; classtype:attempted-recon; sid:200044244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.hefhjq.icu"; classtype:attempted-recon; sid:200044245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.hli3b0.icu"; classtype:attempted-recon; sid:200044246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.hlsyku.icu"; classtype:attempted-recon; sid:200044247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.hmziti.top"; classtype:attempted-recon; sid:200044248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.inkblog.ink"; classtype:attempted-recon; sid:200044249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.j3tu3m.icu"; classtype:attempted-recon; sid:200044250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.j77o38.icu"; classtype:attempted-recon; sid:200044251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.jehe99.icu"; classtype:attempted-recon; sid:200044252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.juls8q.icu"; classtype:attempted-recon; sid:200044253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.k3ma2x.icu"; classtype:attempted-recon; sid:200044254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.k9pn0d.icu"; classtype:attempted-recon; sid:200044255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ka83cb.icu"; classtype:attempted-recon; sid:200044256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.kb5b6d.icu"; classtype:attempted-recon; sid:200044257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.kgfkdv.top"; classtype:attempted-recon; sid:200044258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.krjqpe.top"; classtype:attempted-recon; sid:200044259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.kvrhdp.top"; classtype:attempted-recon; sid:200044260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.lcazit.top"; classtype:attempted-recon; sid:200044261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.lfyacu.icu"; classtype:attempted-recon; sid:200044262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ljmuov.top"; classtype:attempted-recon; sid:200044263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ll64vg.icu"; classtype:attempted-recon; sid:200044264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.llufip.top"; classtype:attempted-recon; sid:200044265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.lwgayp.top"; classtype:attempted-recon; sid:200044266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.lylxce.top"; classtype:attempted-recon; sid:200044267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.mfx741.icu"; classtype:attempted-recon; sid:200044268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.mgjpjr.top"; classtype:attempted-recon; sid:200044269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.mjdnpt.top"; classtype:attempted-recon; sid:200044270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.nqveqi.top"; classtype:attempted-recon; sid:200044271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.nrhpkc.icu"; classtype:attempted-recon; sid:200044272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.nu57wl.icu"; classtype:attempted-recon; sid:200044273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.nv9dtw.icu"; classtype:attempted-recon; sid:200044274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ojyzcd.top"; classtype:attempted-recon; sid:200044275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.okbpku.icu"; classtype:attempted-recon; sid:200044276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.oppxsj.top"; classtype:attempted-recon; sid:200044277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.or1glf.icu"; classtype:attempted-recon; sid:200044278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.pe14pc.icu"; classtype:attempted-recon; sid:200044279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.psdoni.top"; classtype:attempted-recon; sid:200044280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.pujapd.top"; classtype:attempted-recon; sid:200044281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.pzgoea.top"; classtype:attempted-recon; sid:200044282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.q0s2sm.icu"; classtype:attempted-recon; sid:200044283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.qclqjo.top"; classtype:attempted-recon; sid:200044284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.qeaogd.top"; classtype:attempted-recon; sid:200044285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.qnqwcs.icu"; classtype:attempted-recon; sid:200044286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.qpchzg.top"; classtype:attempted-recon; sid:200044287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.qqjjzi.top"; classtype:attempted-recon; sid:200044288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.qvgavp.top"; classtype:attempted-recon; sid:200044289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.rbyycn.top"; classtype:attempted-recon; sid:200044290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.rmgomo.top"; classtype:attempted-recon; sid:200044291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.rsxojx.top"; classtype:attempted-recon; sid:200044292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.sawjbk.top"; classtype:attempted-recon; sid:200044293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.slnb02.icu"; classtype:attempted-recon; sid:200044294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.sthtuh.top"; classtype:attempted-recon; sid:200044295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.syeuaw.top"; classtype:attempted-recon; sid:200044296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.tazsl1.icu"; classtype:attempted-recon; sid:200044297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.tbnilj.top"; classtype:attempted-recon; sid:200044298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.tl86n6.icu"; classtype:attempted-recon; sid:200044299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.to5fb9.icu"; classtype:attempted-recon; sid:200044300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.u0c8sn.icu"; classtype:attempted-recon; sid:200044301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.uixah3.icu"; classtype:attempted-recon; sid:200044302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ukesvp.icu"; classtype:attempted-recon; sid:200044303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ukrtxd.top"; classtype:attempted-recon; sid:200044304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.upahh5.icu"; classtype:attempted-recon; sid:200044305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.uxdgpy.top"; classtype:attempted-recon; sid:200044306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.vdpgwm.top"; classtype:attempted-recon; sid:200044307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.vqeyuo.top"; classtype:attempted-recon; sid:200044308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.vspjok.icu"; classtype:attempted-recon; sid:200044309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.vvkdlh.top"; classtype:attempted-recon; sid:200044310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.vxcrlo.top"; classtype:attempted-recon; sid:200044311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.werbdt.top"; classtype:attempted-recon; sid:200044312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.wfirhj.top"; classtype:attempted-recon; sid:200044313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.whnjwr.top"; classtype:attempted-recon; sid:200044314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.witojr.top"; classtype:attempted-recon; sid:200044315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.wmygyx.top"; classtype:attempted-recon; sid:200044316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.wpzqxg.top"; classtype:attempted-recon; sid:200044317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.wsojbg.icu"; classtype:attempted-recon; sid:200044318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.wxpckc.icu"; classtype:attempted-recon; sid:200044319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.xd1bpn.icu"; classtype:attempted-recon; sid:200044320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.xeygaj.top"; classtype:attempted-recon; sid:200044321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.xgysxo.top"; classtype:attempted-recon; sid:200044322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.xydvkg.top"; classtype:attempted-recon; sid:200044323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.xyuhnm.top"; classtype:attempted-recon; sid:200044324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.xztftf.top"; classtype:attempted-recon; sid:200044325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.ymifv0.icu"; classtype:attempted-recon; sid:200044326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.yqasjy.icu"; classtype:attempted-recon; sid:200044327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.yuxvpc.top"; classtype:attempted-recon; sid:200044328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.yvjdgy.top"; classtype:attempted-recon; sid:200044329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.yybtfl.top"; classtype:attempted-recon; sid:200044330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.zhsntm.top"; classtype:attempted-recon; sid:200044331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.zhwpnq.top"; classtype:attempted-recon; sid:200044332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.zovh96.icu"; classtype:attempted-recon; sid:200044333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvcvenvci.vivcaasenvs.zoyqhl.top"; classtype:attempted-recon; sid:200044334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200044335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200044336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200044337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200044338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200044339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200044340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200044341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200044342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200044343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200044344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200044345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200044346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200044347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200044348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200044349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200044350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200044351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200044352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200044353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200044354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200044355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200044356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200044357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200044358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200044359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200044360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200044361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200044362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200044363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200044364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200044365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200044366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200044367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200044368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200044369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200044370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200044371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200044372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200044373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200044374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200044375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200044376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200044377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200044378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200044379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200044380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200044381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200044382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200044383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200044384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200044385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200044386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200044387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200044388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200044389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200044390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200044391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200044392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200044393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200044394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200044395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200044396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200044397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200044398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200044399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200044400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200044401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200044402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200044403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200044404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200044405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200044406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200044407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200044408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200044409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200044410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200044411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200044412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200044413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200044414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200044415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200044416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200044417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200044418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200044419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200044420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200044421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200044422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200044423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200044424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200044425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200044426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200044427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200044428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200044429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200044430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200044431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200044432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200044433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200044434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200044435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200044436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200044437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200044438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200044439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200044440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200044441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200044442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200044443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200044444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200044445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200044446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200044447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200044448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200044449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200044450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200044451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200044452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200044453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200044454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200044455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200044456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200044457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200044458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200044459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200044460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200044461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200044462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200044463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200044464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200044465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200044466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200044467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200044468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200044469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200044470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveccascesia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200044471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveciscsn.visasecvsvei.tcpduc.top"; classtype:attempted-recon; sid:200044472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveiasecsn.viscaiescvsvei.cxvuvs.top"; classtype:attempted-recon; sid:200044473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveiasecsn.viscaiescvsvei.yetbrg.top"; classtype:attempted-recon; sid:200044474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsveiscesn.visacscevsvei.yetbrg.top"; classtype:attempted-recon; sid:200044475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200044476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200044477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200044478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200044479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200044480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200044481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200044482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200044483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200044484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200044485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200044486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200044487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200044488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200044489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200044490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200044491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200044492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200044493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200044494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200044495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200044496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200044497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200044498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200044499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200044500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200044501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200044502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200044503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200044504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200044505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200044506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200044507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200044508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200044509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200044510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200044511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200044512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200044513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200044514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200044515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200044516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200044517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200044518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200044519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200044520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200044521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200044522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200044523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200044524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200044525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200044526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200044527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200044528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200044529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200044530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200044531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200044532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200044533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200044534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200044535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200044536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200044537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200044538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200044539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200044540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200044541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200044542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200044543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200044544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200044545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200044546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200044547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200044548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200044549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200044550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200044551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200044552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200044553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200044554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200044555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200044556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200044557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200044558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200044559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200044560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200044561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200044562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200044563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200044564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200044565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200044566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200044567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200044568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200044569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200044570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200044571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200044572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200044573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200044574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200044575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200044576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200044577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200044578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200044579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200044580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200044581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200044582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200044583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200044584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200044585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200044586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200044587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200044588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200044589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200044590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200044591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200044592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200044593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200044594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200044595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200044596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200044597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200044598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200044599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200044600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200044601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200044602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200044603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200044604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200044605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200044606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200044607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200044608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200044609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200044610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200044611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvsscecaseia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200044612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200044613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200044614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200044615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200044616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200044617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200044618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200044619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200044620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200044621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200044622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200044623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200044624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200044625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200044626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200044627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200044628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200044629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200044630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200044631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200044632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200044633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200044634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200044635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200044636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200044637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200044638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200044639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200044640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200044641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200044642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200044643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200044644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200044645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200044646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200044647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200044648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200044649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200044650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200044651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200044652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200044653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200044654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200044655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200044656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200044657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200044658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200044659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200044660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200044661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200044662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200044663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200044664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200044665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200044666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200044667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200044668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200044669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200044670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200044671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200044672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200044673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200044674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200044675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200044676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200044677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200044678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200044679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200044680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200044681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200044682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200044683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200044684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200044685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200044686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200044687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200044688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200044689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200044690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200044691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200044692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200044693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200044694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200044695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200044696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200044697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200044698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200044699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200044700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200044701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200044702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200044703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200044704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200044705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200044706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200044707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200044708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200044709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200044710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200044711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200044712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200044713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200044714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200044715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200044716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200044717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200044718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200044719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200044720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200044721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200044722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200044723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200044724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200044725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200044726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200044727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200044728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200044729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200044730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200044731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200044732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200044733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200044734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200044735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200044736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200044737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200044738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200044739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200044740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200044741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200044742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200044743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200044744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200044745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200044746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200044747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200044748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaeseeesia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200044749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200044750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200044751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200044752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200044753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200044754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200044755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200044756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200044757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200044758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200044759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200044760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200044761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200044762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200044763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200044764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.csndax.icu"; classtype:attempted-recon; sid:200044765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200044766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200044767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200044768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.erqer.icu"; classtype:attempted-recon; sid:200044769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200044770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200044771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200044772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200044773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200044774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200044775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200044776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200044777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200044778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200044779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200044780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200044781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200044782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200044783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200044784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200044785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200044786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200044787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200044788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200044789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200044790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200044791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200044792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200044793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200044794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200044795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200044796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200044797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lianges.icu"; classtype:attempted-recon; sid:200044798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200044799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200044800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.likijs.icu"; classtype:attempted-recon; sid:200044801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200044802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200044803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200044804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200044805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200044806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200044807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200044808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200044809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200044810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200044811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200044812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200044813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200044814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200044815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200044816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200044817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200044818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200044819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200044820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200044821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200044822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200044823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200044824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200044825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200044826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200044827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.maediof.icu"; classtype:attempted-recon; sid:200044828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200044829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200044830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200044831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200044832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200044833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200044834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200044835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200044836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200044837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.msodik.icu"; classtype:attempted-recon; sid:200044838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200044839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200044840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nanish.icu"; classtype:attempted-recon; sid:200044841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200044842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200044843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200044844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200044845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200044846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200044847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200044848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200044849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200044850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200044851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200044852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.paddki.icu"; classtype:attempted-recon; sid:200044853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200044854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200044855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200044856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200044857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200044858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.recordd.icu"; classtype:attempted-recon; sid:200044859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200044860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200044861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200044862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200044863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200044864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200044865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200044866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200044867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200044868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.trsas.icu"; classtype:attempted-recon; sid:200044869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200044870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200044871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.usideq.icu"; classtype:attempted-recon; sid:200044872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.v3454.icu"; classtype:attempted-recon; sid:200044873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200044874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.vardir.icu"; classtype:attempted-recon; sid:200044875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200044876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200044877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200044878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200044879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200044880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200044881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200044882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200044883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200044884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200044885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vivsvvccaesesia.aeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200044886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vixyxulwgq.duckdns.org"; classtype:attempted-recon; sid:200044887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vizvudayvg.duckdns.org"; classtype:attempted-recon; sid:200044888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vizxykkxxv.duckdns.org"; classtype:attempted-recon; sid:200044889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjbwxqdtzn.duckdns.org"; classtype:attempted-recon; sid:200044890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjbysfrfew.duckdns.org"; classtype:attempted-recon; sid:200044891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjlnwmbowc.duckdns.org"; classtype:attempted-recon; sid:200044892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjmawvwews.duckdns.org"; classtype:attempted-recon; sid:200044893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjnted-merchandise.5482097.xyz"; classtype:attempted-recon; sid:200044894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjnted-pl-ijfoks.liweijie.top"; classtype:attempted-recon; sid:200044895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjqnmegkds.duckdns.org"; classtype:attempted-recon; sid:200044896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjrslnrkfu.duckdns.org"; classtype:attempted-recon; sid:200044897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjrvffrjon.duckdns.org"; classtype:attempted-recon; sid:200044898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjwrqhfjoi.duckdns.org"; classtype:attempted-recon; sid:200044899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vjztkimuym.duckdns.org"; classtype:attempted-recon; sid:200044900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkdhqulrwp.duckdns.org"; classtype:attempted-recon; sid:200044901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkexqohtju.duckdns.org"; classtype:attempted-recon; sid:200044902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkgolosmqw.tk"; classtype:attempted-recon; sid:200044903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkhjswjkxl.duckdns.org"; classtype:attempted-recon; sid:200044904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkmatka.in"; classtype:attempted-recon; sid:200044905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkmoiagdzz.duckdns.org"; classtype:attempted-recon; sid:200044906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkozuatulo.duckdns.org"; classtype:attempted-recon; sid:200044907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkpcqzwhrl.duckdns.org"; classtype:attempted-recon; sid:200044908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkrdetukgb.duckdns.org"; classtype:attempted-recon; sid:200044909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vksuzvqvcj.duckdns.org"; classtype:attempted-recon; sid:200044910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vkyzzzlzli.duckdns.org"; classtype:attempted-recon; sid:200044911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlcqxaiyqy.duckdns.org"; classtype:attempted-recon; sid:200044912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlgepnxwxa.duckdns.org"; classtype:attempted-recon; sid:200044913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlgvkwceyz.duckdns.org"; classtype:attempted-recon; sid:200044914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlgwdttqxk.duckdns.org"; classtype:attempted-recon; sid:200044915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlivsmpoiw.duckdns.org"; classtype:attempted-recon; sid:200044916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlnbuyfcwa.duckdns.org"; classtype:attempted-recon; sid:200044917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlnted-polska.merchant6311465.xyz"; classtype:attempted-recon; sid:200044918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlpkezwihr.duckdns.org"; classtype:attempted-recon; sid:200044919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlsa-co.metacosmos.asia"; classtype:attempted-recon; sid:200044920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlunifahij.duckdns.org"; classtype:attempted-recon; sid:200044921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlveyhfxlf.duckdns.org"; classtype:attempted-recon; sid:200044922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlvffrdugz.duckdns.org"; classtype:attempted-recon; sid:200044923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vlzkqhtsfm.duckdns.org"; classtype:attempted-recon; sid:200044924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vm-system0021.message2.workers.dev"; classtype:attempted-recon; sid:200044925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmboxx.xyz"; classtype:attempted-recon; sid:200044926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmcqntuuhk.duckdns.org"; classtype:attempted-recon; sid:200044927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmengglbeq.duckdns.org"; classtype:attempted-recon; sid:200044928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmfgjtlsuf.duckdns.org"; classtype:attempted-recon; sid:200044929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmglpppeow.duckdns.org"; classtype:attempted-recon; sid:200044930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmjfufhujs.duckdns.org"; classtype:attempted-recon; sid:200044931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmldnchkri.duckdns.org"; classtype:attempted-recon; sid:200044932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmpostkigl.duckdns.org"; classtype:attempted-recon; sid:200044933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmpqhxznuv.duckdns.org"; classtype:attempted-recon; sid:200044934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmrubxguze.duckdns.org"; classtype:attempted-recon; sid:200044935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vnfovcwjqr.duckdns.org"; classtype:attempted-recon; sid:200044936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vnnxdzfngh.duckdns.org"; classtype:attempted-recon; sid:200044937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vnvwtojqxf.duckdns.org"; classtype:attempted-recon; sid:200044938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voceabacaului.ro"; classtype:attempted-recon; sid:200044939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vocsfrpe.t.justns.ru"; classtype:attempted-recon; sid:200044940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voddearszm.duckdns.org"; classtype:attempted-recon; sid:200044941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vohcakslsm.duckdns.org"; classtype:attempted-recon; sid:200044942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vohxuzokoi.duckdns.org"; classtype:attempted-recon; sid:200044943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voicemai.myportfolio.com"; classtype:attempted-recon; sid:200044944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voicemail-refbe4d.sharedfiles-auth.workers.dev"; classtype:attempted-recon; sid:200044945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voicemessagejsgd.firebaseapp.com"; classtype:attempted-recon; sid:200044946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voicemessagejsgd.web.app"; classtype:attempted-recon; sid:200044947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voinbkapug.duckdns.org"; classtype:attempted-recon; sid:200044948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"volvocarskc.us1.list-manage.com"; classtype:attempted-recon; sid:200044949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vomyijcsii.duckdns.org"; classtype:attempted-recon; sid:200044950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vondimpeux.duckdns.org"; classtype:attempted-recon; sid:200044951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vonkstrcke.duckdns.org"; classtype:attempted-recon; sid:200044952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vopro.podia.com"; classtype:attempted-recon; sid:200044953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vorfojihog.duckdns.org"; classtype:attempted-recon; sid:200044954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vosapmzcnn.duckdns.org"; classtype:attempted-recon; sid:200044955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vottwhebmm.duckdns.org"; classtype:attempted-recon; sid:200044956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vouchere-astrazeneca.totemsoftware.ro"; classtype:attempted-recon; sid:200044957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpaixxfdts.duckdns.org"; classtype:attempted-recon; sid:200044958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpbluxmmtd.duckdns.org"; classtype:attempted-recon; sid:200044959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpfhuqqkqs.duckdns.org"; classtype:attempted-recon; sid:200044960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpgwslvyue.duckdns.org"; classtype:attempted-recon; sid:200044961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpjhkplrlq.duckdns.org"; classtype:attempted-recon; sid:200044962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpmucmmiuc.duckdns.org"; classtype:attempted-recon; sid:200044963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vps50749.inmotionhosting.com"; classtype:attempted-recon; sid:200044964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vptgdazdzr.duckdns.org"; classtype:attempted-recon; sid:200044965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpwvbpmikk.duckdns.org"; classtype:attempted-recon; sid:200044966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vpxfvbgeyn.duckdns.org"; classtype:attempted-recon; sid:200044967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vqqiwblkwj.duckdns.org"; classtype:attempted-recon; sid:200044968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vqrroddfjo.duckdns.org"; classtype:attempted-recon; sid:200044969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrenmfzzlx.duckdns.org"; classtype:attempted-recon; sid:200044970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vresksyeyj.duckdns.org"; classtype:attempted-recon; sid:200044971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrhpewcjhi.duckdns.org"; classtype:attempted-recon; sid:200044972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrhzugmcbu.duckdns.org"; classtype:attempted-recon; sid:200044973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrkimmcnug.duckdns.org"; classtype:attempted-recon; sid:200044974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrlfpolliq.duckdns.org"; classtype:attempted-recon; sid:200044975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vroptaq.top"; classtype:attempted-recon; sid:200044976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrowdcjuyf.duckdns.org"; classtype:attempted-recon; sid:200044977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrpdlnumaa.duckdns.org"; classtype:attempted-recon; sid:200044978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrxpbieuqk.duckdns.org"; classtype:attempted-recon; sid:200044979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vrxqaeugfm.duckdns.org"; classtype:attempted-recon; sid:200044980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vryanfskby.duckdns.org"; classtype:attempted-recon; sid:200044981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vs.ybgs66qc.cn"; classtype:attempted-recon; sid:200044982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaiaaececori.vsavcarveoia.d24mu.icu"; classtype:attempted-recon; sid:200044983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaieaasceorri.vsvacacveori.d24mu.icu"; classtype:attempted-recon; sid:200044984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaiesascsorri.vsvacacverri.1p2igt.icu"; classtype:attempted-recon; sid:200044985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaiesascsorri.vsvacacverri.d24mu.icu"; classtype:attempted-recon; sid:200044986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaisaecscori.vsavcarveria.1p2igt.icu"; classtype:attempted-recon; sid:200044987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaisaecscori.vsavcarveria.acucbs.top"; classtype:attempted-recon; sid:200044988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaisaecscori.vsavcarveria.moogyb.top"; classtype:attempted-recon; sid:200044989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaisaecscori.vsavcarveria.xhgb8k.shop"; classtype:attempted-recon; sid:200044990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaosaeaeceri.vsaccarveooira.gyzt807.xyz"; classtype:attempted-recon; sid:200044991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaosaeaeceri.vsaccarveooira.mgandi.top"; classtype:attempted-recon; sid:200044992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaosaeaeceri.vsaccarveooira.ysjqhc.top"; classtype:attempted-recon; sid:200044993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaaosaeasceri.vsaccarveorira.ehngpw.top"; classtype:attempted-recon; sid:200044994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaaeeeicecevi.viaaescaarsvcrorai.d24mu.icu"; classtype:attempted-recon; sid:200044995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaaeeeicecevi.viaaescaarsvcrorai.sfoofl.top"; classtype:attempted-recon; sid:200044996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaaeeeicecevi.viaaescaarsvcrorai.tjd1cs.icu"; classtype:attempted-recon; sid:200044997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaaeeeicecori.vsaaevcaarsvcroiai.d24mu.icu"; classtype:attempted-recon; sid:200044998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaaeeeicecori.vsaaevcaarsvcroiai.jo73g.icu"; classtype:attempted-recon; sid:200044999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaiaeaeccecori.vsavcarsveroiai.1p2igt.icu"; classtype:attempted-recon; sid:200045000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaiaeaeccecori.vsavcarsveroiai.d24mu.icu"; classtype:attempted-recon; sid:200045001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaiseaeccscori.vsavcarsverriai.y2jph.icu"; classtype:attempted-recon; sid:200045002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaiseaeccscori.vsavcarsverriai.zayziz.shop"; classtype:attempted-recon; sid:200045003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaiseaeccscori.vsavcarsverriai.zbjyiw.top"; classtype:attempted-recon; sid:200045004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaoseaeacsceri.vsaccarsverorirai.1p2igt.icu"; classtype:attempted-recon; sid:200045005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaoseaeacsceri.vsaccarsverorirai.d24mu.icu"; classtype:attempted-recon; sid:200045006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaoseaeacsceri.vsaccarsverorirai.rjohat.shop"; classtype:attempted-recon; sid:200045007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeiceceri.vsaccaearsavercoirai.1p2igt.icu"; classtype:attempted-recon; sid:200045008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicecevi.viaccaearsavcrcorrai.wtrapv.top"; classtype:attempted-recon; sid:200045009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicecevi.viaccaearsavcrcorrai.zxj6008.xyz"; classtype:attempted-recon; sid:200045010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicsceri.vsaccaearsavercrirai.1p2igt.icu"; classtype:attempted-recon; sid:200045011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicsceri.vsaccaearsavercrirai.d24mu.icu"; classtype:attempted-recon; sid:200045012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicscevi.viacvaearsavcrcsrrai.d24mu.icu"; classtype:attempted-recon; sid:200045013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicscevi.viacvaearsavcrcsrrai.gzj8007.xyz"; classtype:attempted-recon; sid:200045014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicscori.vsaaevcaarsvcrriai.9rjsbn.icu"; classtype:attempted-recon; sid:200045015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicscori.vsaaevcaarsvcrriai.d24mu.icu"; classtype:attempted-recon; sid:200045016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicscori.vsaaevcaarsvcrriai.dhwynj.top"; classtype:attempted-recon; sid:200045017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaseeeicscori.vsaaevcaarsvcrriai.mavbpi.top"; classtype:attempted-recon; sid:200045018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacaveeeicscevi.viaaesvaarsvcrsrai.d24mu.icu"; classtype:attempted-recon; sid:200045019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaaei.visaecevvasaosr.6887453.xyz"; classtype:attempted-recon; sid:200045020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaaei.visaecevvasaosr.bcjgin.top"; classtype:attempted-recon; sid:200045021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaaei.visaecevvasaosr.fodxlh.top"; classtype:attempted-recon; sid:200045022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaaei.visaecevvasaosr.ivupqh.top"; classtype:attempted-recon; sid:200045023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaesi.viasaeevaassr.homhcy.top"; classtype:attempted-recon; sid:200045024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaesi.viasaeevaassr.hxsyjk.top"; classtype:attempted-recon; sid:200045025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaesi.viasaeevaassr.iwqdzn.top"; classtype:attempted-recon; sid:200045026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaesi.viasaeevaassr.pdmvfc.top"; classtype:attempted-recon; sid:200045027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaesi.viasaeevaassr.uxhejc.top"; classtype:attempted-recon; sid:200045028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaaesi.viasaeevaassr.vergeb.top"; classtype:attempted-recon; sid:200045029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaasi.visaeecevvassr.5378887.xyz"; classtype:attempted-recon; sid:200045030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaasi.visaeecevvassr.hzwrnd.top"; classtype:attempted-recon; sid:200045031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaasi.visaeecevvassr.ivupqh.top"; classtype:attempted-recon; sid:200045032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaasi.visaeecevvassr.pdmvfc.top"; classtype:attempted-recon; sid:200045033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaasi.visaeecevvassr.txvcqg.top"; classtype:attempted-recon; sid:200045034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaasi.visaeecevvassr.wtkiwf.top"; classtype:attempted-recon; sid:200045035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaeaei.visacaasaosr.2124458.xyz"; classtype:attempted-recon; sid:200045036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaeaei.visacaasaosr.6887453.xyz"; classtype:attempted-recon; sid:200045037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaeaei.visacaasaosr.dlsefg.top"; classtype:attempted-recon; sid:200045038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaeaei.visacaasaosr.ivupqh.top"; classtype:attempted-recon; sid:200045039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaeaei.visacaasaosr.nsqbty.top"; classtype:attempted-recon; sid:200045040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaeaei.visacaasaosr.ssmkdz.top"; classtype:attempted-recon; sid:200045041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaesi.visaevaassr.2355587.xyz"; classtype:attempted-recon; sid:200045042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaesi.visaevaassr.6887453.xyz"; classtype:attempted-recon; sid:200045043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaesi.visaevaassr.7788513.xyz"; classtype:attempted-recon; sid:200045044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaesi.visaevaassr.ssmkdz.top"; classtype:attempted-recon; sid:200045045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaesi.visaevaassr.txvcqg.top"; classtype:attempted-recon; sid:200045046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaccaesi.visaevaassr.vppvl.top"; classtype:attempted-recon; sid:200045047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacceaaei.visaccasaos.gwoosi.id"; classtype:attempted-recon; sid:200045048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacceaaei.visaccasaos.ulcodn.za.com"; classtype:attempted-recon; sid:200045049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacceasi.visaevsaos.bwzojf.za.com"; classtype:attempted-recon; sid:200045050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacceasi.visaevsaos.vbojinw.bar"; classtype:attempted-recon; sid:200045051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacieaeceacecevi.viascarsvcrorai.1p2igt.icu"; classtype:attempted-recon; sid:200045052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacieaeceacecevi.viascarsvcrorai.d24mu.icu"; classtype:attempted-recon; sid:200045053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacieaeceacecevi.viascarsvcrorai.ehngpw.top"; classtype:attempted-recon; sid:200045054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacieveceacscevi.viasvarsvcrsrai.1p2igt.icu"; classtype:attempted-recon; sid:200045055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacieveceacscevi.viasvarsvcrsrai.d24mu.icu"; classtype:attempted-recon; sid:200045056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacieveceacscevi.viasvarsvcrsrai.ihhagj.top"; classtype:attempted-recon; sid:200045057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacioseceacecevi.viaccarsvcroorrai.afevzf.top"; classtype:attempted-recon; sid:200045058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacioseceacscevi.viacvarsvcrosrrai.1p2igt.icu"; classtype:attempted-recon; sid:200045059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaaaei.visaecevvasaosr.2355587.xyz"; classtype:attempted-recon; sid:200045060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaaaei.visaecevvasaosr.5378887.xyz"; classtype:attempted-recon; sid:200045061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaaaei.visaecevvasaosr.ebltts.top"; classtype:attempted-recon; sid:200045062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaaaei.visaecevvasaosr.homhcy.top"; classtype:attempted-recon; sid:200045063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaaaei.visaecevvasaosr.vppvl.top"; classtype:attempted-recon; sid:200045064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaasi.visavecevvassr.2355587.xyz"; classtype:attempted-recon; sid:200045065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaasi.visavecevvassr.5378887.xyz"; classtype:attempted-recon; sid:200045066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaasi.visavecevvassr.dlsefg.top"; classtype:attempted-recon; sid:200045067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaasi.visavecevvassr.fodxlh.top"; classtype:attempted-recon; sid:200045068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaasi.visavecevvassr.hzwrnd.top"; classtype:attempted-recon; sid:200045069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaasi.visavecevvassr.ivupqh.top"; classtype:attempted-recon; sid:200045070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaasi.visavecevvassr.vppvl.top"; classtype:attempted-recon; sid:200045071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaeaei.visacaasaosr.6887453.xyz"; classtype:attempted-recon; sid:200045072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaeaei.visacaasaosr.bcjgin.top"; classtype:attempted-recon; sid:200045073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaeaei.visacaasaosr.ivupqh.top"; classtype:attempted-recon; sid:200045074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaeaei.visacaasaosr.vppvl.top"; classtype:attempted-recon; sid:200045075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaesi.visavvaassr.2124458.xyz"; classtype:attempted-recon; sid:200045076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaesi.visavvaassr.3838833.xyz"; classtype:attempted-recon; sid:200045077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaesi.visavvaassr.5378887.xyz"; classtype:attempted-recon; sid:200045078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaesi.visavvaassr.58coo.icu"; classtype:attempted-recon; sid:200045079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaesi.visavvaassr.bcjgin.top"; classtype:attempted-recon; sid:200045080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaesi.visavvaassr.dlsefg.top"; classtype:attempted-recon; sid:200045081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacvaesi.visavvaassr.wtkiwf.top"; classtype:attempted-recon; sid:200045082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveoaei.visaccasaos.hzntyf.cyou"; classtype:attempted-recon; sid:200045083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveoaei.visaccasaos.lpczei.za.com"; classtype:attempted-recon; sid:200045084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveoaei.visaccasaos.mliqfef.bar"; classtype:attempted-recon; sid:200045085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveoaei.visaccasaos.vzsyjg.za.com"; classtype:attempted-recon; sid:200045086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveosi.visavvsaos.egqgvt.cyou"; classtype:attempted-recon; sid:200045087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveosi.visavvsaos.hdryio.za.com"; classtype:attempted-recon; sid:200045088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveosi.visavvsaos.kabavjy.bar"; classtype:attempted-recon; sid:200045089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveosi.visavvsaos.vo64202.tokyo"; classtype:attempted-recon; sid:200045090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsacveosi.visavvsaos.xorwtjr.bar"; classtype:attempted-recon; sid:200045091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaiaaceori.vsvcaveoi.1p2igt.icu"; classtype:attempted-recon; sid:200045092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaiaaceori.vsvcaveoi.d24mu.icu"; classtype:attempted-recon; sid:200045093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaieaceaecevi.viascarvcora.1p2igt.icu"; classtype:attempted-recon; sid:200045094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaieaceaecevi.viascarvcora.d24mu.icu"; classtype:attempted-recon; sid:200045095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaieaceaecevi.viascarvcora.gzj8007.xyz"; classtype:attempted-recon; sid:200045096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaieeacsaeervi.visacacvcorr.swlmui.top"; classtype:attempted-recon; sid:200045097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaieevcsaservi.visavacvcsrr.gnptde.shop"; classtype:attempted-recon; sid:200045098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaievceascevi.viasvarvcsra.d24mu.icu"; classtype:attempted-recon; sid:200045099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaievceascevi.viasvarvcsra.fzcftf.top"; classtype:attempted-recon; sid:200045100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaiosceaecevi.viaccarvcoorra.2d9em1.icu"; classtype:attempted-recon; sid:200045101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaiosceaecevi.viaccarvcoorra.d24mu.icu"; classtype:attempted-recon; sid:200045102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaiosceaecevi.viaccarvcoorra.oycpxz.top"; classtype:attempted-recon; sid:200045103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaiosceaecevi.viaccarvcoorra.qcg3j9.icu"; classtype:attempted-recon; sid:200045104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaiosceascevi.viacvarvcosrra.1p2igt.icu"; classtype:attempted-recon; sid:200045105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaisacsori.vsvcaveri.d24mu.icu"; classtype:attempted-recon; sid:200045106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaisacsori.vsvcaveri.do2t1.icu"; classtype:attempted-recon; sid:200045107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaisacsori.vsvcaveri.ewdbfk.icu"; classtype:attempted-recon; sid:200045108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaosaaseri.vsccaveorir.1p2igt.icu"; classtype:attempted-recon; sid:200045109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsaosaaseri.vsccaveorir.eftros.top"; classtype:attempted-recon; sid:200045110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsbwivyswx.duckdns.org"; classtype:attempted-recon; sid:200045111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaiaeaaceori.vsavcavaeoia.1p2igt.icu"; classtype:attempted-recon; sid:200045112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaiaeaaceori.vsavcavaeoia.d24mu.icu"; classtype:attempted-recon; sid:200045113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaiseaacsori.vsavcavaeria.d24mu.icu"; classtype:attempted-recon; sid:200045114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaiseaacsori.vsavcavaeria.dhwynj.top"; classtype:attempted-recon; sid:200045115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaiseaacsori.vsavcavaeria.kxmmvb.top"; classtype:attempted-recon; sid:200045116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaiseaacsori.vsavcavaeria.sfoofl.top"; classtype:attempted-recon; sid:200045117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaoseaaaeeri.vsaccavaeooair.1p2igt.icu"; classtype:attempted-recon; sid:200045118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaoseaaaeeri.vsaccavaeooair.bauwmq.top"; classtype:attempted-recon; sid:200045119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaoseaaaeeri.vsaccavaeooair.exepco.top"; classtype:attempted-recon; sid:200045120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaoseaaaeeri.vsaccavaeooair.gzj8007.xyz"; classtype:attempted-recon; sid:200045121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaoseaaaeeri.vsaccavaeooair.vnbxy.top"; classtype:attempted-recon; sid:200045122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscaoseaaaseri.vsaccavaeorair.d24mu.icu"; classtype:attempted-recon; sid:200045123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.1p2igt.icu"; classtype:attempted-recon; sid:200045124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.acucbs.top"; classtype:attempted-recon; sid:200045125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.d24mu.icu"; classtype:attempted-recon; sid:200045126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.didvts.top"; classtype:attempted-recon; sid:200045127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.fbseba.top"; classtype:attempted-recon; sid:200045128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.lsikdoe.icu"; classtype:attempted-recon; sid:200045129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.o4elaa.icu"; classtype:attempted-recon; sid:200045130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicaeevi.viaaescaavsacrorai.sfoofl.top"; classtype:attempted-recon; sid:200045131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicceori.vsaaevcaavsacroiai.1p2igt.icu"; classtype:attempted-recon; sid:200045132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicceori.vsaaevcaavsacroiai.6997854.xyz"; classtype:attempted-recon; sid:200045133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicceori.vsaaevcaavsacroiai.d24mu.icu"; classtype:attempted-recon; sid:200045134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicceori.vsaaevcaavsacroiai.fqbpis.top"; classtype:attempted-recon; sid:200045135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaaeeaicceori.vsaaevcaavsacroiai.qcg3j9.icu"; classtype:attempted-recon; sid:200045136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaoseeaacaeeri.vsaccavsaerooairi.3968745.icu"; classtype:attempted-recon; sid:200045137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaoseeaacaseri.vsaccavsaerorairi.1p2igt.icu"; classtype:attempted-recon; sid:200045138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaoseeaacaseri.vsaccavsaerorairi.rgiclw.top"; classtype:attempted-recon; sid:200045139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaoseeaacaseri.vsaccavsaerorairi.vaylqb.top"; classtype:attempted-recon; sid:200045140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaseeaicaeeri.vsaccaeavsaaercoairi.1p2igt.icu"; classtype:attempted-recon; sid:200045141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaseeaicaeeri.vsaccaeavsaaercoairi.ayqtuj.top"; classtype:attempted-recon; sid:200045142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaseeaicaeevi.viaccaeavsaacrcoarri.0yaae.icu"; classtype:attempted-recon; sid:200045143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaseeaicaseri.vsaccaeavsaaercrairi.d24mu.icu"; classtype:attempted-recon; sid:200045144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaseeaiccsori.vsaaevcaavsacrriai.d24mu.icu"; classtype:attempted-recon; sid:200045145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaveeaicasevi.viaaesvaavsacrsrai.d24mu.icu"; classtype:attempted-recon; sid:200045146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccaveeaicasevi.viaaesvaavsacrsrai.jlsnos.top"; classtype:attempted-recon; sid:200045147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccieaeeaccaeevi.viascavsacrorai.2d9em1.icu"; classtype:attempted-recon; sid:200045148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccieaeeaccaeevi.viascavsacrorai.d24mu.icu"; classtype:attempted-recon; sid:200045149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccieaeeaccaeevi.viascavsacrorai.gjqyzk.top"; classtype:attempted-recon; sid:200045150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccieveeaccasevi.viasvavsacrsrai.cdxkvt.top"; classtype:attempted-recon; sid:200045151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccieveeaccasevi.viasvavsacrsrai.rjohat.shop"; classtype:attempted-recon; sid:200045152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccioseeaccaeevi.viaccavsacrooarri.d24mu.icu"; classtype:attempted-recon; sid:200045153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccioseeaccaeevi.viaccavsacrooarri.kokfrh.top"; classtype:attempted-recon; sid:200045154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccioseeaccaeevi.viaccavsacrooarri.ysjqhc.top"; classtype:attempted-recon; sid:200045155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccioseeaccasevi.viacvavsacrosarri.1p2igt.icu"; classtype:attempted-recon; sid:200045156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsccioseeaccasevi.viacvavsacrosarri.d24mu.icu"; classtype:attempted-recon; sid:200045157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscd.zgwbds.cn"; classtype:attempted-recon; sid:200045158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscieaeacaeevi.viascavacora.1p2igt.icu"; classtype:attempted-recon; sid:200045159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscieaeacaeevi.viascavacora.ctoknv.shop"; classtype:attempted-recon; sid:200045160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscieaeacaeevi.viascavacora.d24mu.icu"; classtype:attempted-recon; sid:200045161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscioseacasevi.viacvavacosarr.1p2igt.icu"; classtype:attempted-recon; sid:200045162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscioseacasevi.viacvavacosarr.moogyb.top"; classtype:attempted-recon; sid:200045163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vscioseacasevi.viacvavacosarr.zxj6001.xyz"; classtype:attempted-recon; sid:200045164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsd.brrqbd.cn"; classtype:attempted-recon; sid:200045165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsd.ijprqkx.cn"; classtype:attempted-recon; sid:200045166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsdb.37985.cn"; classtype:attempted-recon; sid:200045167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsdbf.nlabnfa.cn"; classtype:attempted-recon; sid:200045168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsdf.xkwmyz.cn"; classtype:attempted-recon; sid:200045169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vse.cz-cva3ytrkvdj8ru2br0nq.cva3ytrkvdj8ru2br0nq.manxttrider.com"; classtype:attempted-recon; sid:200045170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsfrviqvcj.duckdns.org"; classtype:attempted-recon; sid:200045171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsfvccapfl.duckdns.org"; classtype:attempted-recon; sid:200045172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsgd.grdgrdgr.cn"; classtype:attempted-recon; sid:200045173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsheudpycl.duckdns.org"; classtype:attempted-recon; sid:200045174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsieacaeevi.viscavcor.1p2igt.icu"; classtype:attempted-recon; sid:200045175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsieacaeevi.viscavcor.d24mu.icu"; classtype:attempted-recon; sid:200045176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsieacaeevi.viscavcor.o3ufga.icu"; classtype:attempted-recon; sid:200045177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsieacaeevi.viscavcor.rgiclw.top"; classtype:attempted-recon; sid:200045178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsievcasevi.visvavcsr.3pax4.icu"; classtype:attempted-recon; sid:200045179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsievcasevi.visvavcsr.ehngpw.top"; classtype:attempted-recon; sid:200045180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsievcasevi.visvavcsr.lsikdoe.icu"; classtype:attempted-recon; sid:200045181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsievcasevi.visvavcsr.verse7.xyz"; classtype:attempted-recon; sid:200045182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsioscaeevi.viccavcoorr.1p2igt.icu"; classtype:attempted-recon; sid:200045183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsioscaeevi.viccavcoorr.ayqtuj.top"; classtype:attempted-recon; sid:200045184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsioscaeevi.viccavcoorr.d24mu.icu"; classtype:attempted-recon; sid:200045185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsioscaeevi.viccavcoorr.ssfszj.top"; classtype:attempted-recon; sid:200045186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsioscasevi.vicvavcosrr.d24mu.icu"; classtype:attempted-recon; sid:200045187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssaiaeacerori.vsvacaveeoisc.1p2igt.icu"; classtype:attempted-recon; sid:200045188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssaiaeacerori.vsvacaveeoisc.bqoqzf.top"; classtype:attempted-recon; sid:200045189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssaiaeacerori.vsvacaveeoisc.d24mu.icu"; classtype:attempted-recon; sid:200045190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssaiaeacerori.vsvacaveeoisc.xx66ss19.xyz"; classtype:attempted-recon; sid:200045191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssaiseacsrori.vsvacaveerisc.9nsyz.icu"; classtype:attempted-recon; sid:200045192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssieaecaerevi.visacavecorsc.cdxkvt.top"; classtype:attempted-recon; sid:200045193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssieaecaerevi.visacavecorsc.wzdbzn.top"; classtype:attempted-recon; sid:200045194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssievecasrevi.visavavecsrsc.d24mu.icu"; classtype:attempted-recon; sid:200045195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vssievecasrevi.visavavecsrsc.gfsuyo.top"; classtype:attempted-recon; sid:200045196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vstnybwdji.duckdns.org"; classtype:attempted-recon; sid:200045197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.axrcbx.top"; classtype:attempted-recon; sid:200045198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.azrsog.top"; classtype:attempted-recon; sid:200045199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.buavhf.top"; classtype:attempted-recon; sid:200045200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.cckrka.shop"; classtype:attempted-recon; sid:200045201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.geqnuq.top"; classtype:attempted-recon; sid:200045202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.isvuiy.top"; classtype:attempted-recon; sid:200045203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.jfcxph.top"; classtype:attempted-recon; sid:200045204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.jsmfgc.top"; classtype:attempted-recon; sid:200045205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.kbroxv.top"; classtype:attempted-recon; sid:200045206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.kvdxks.top"; classtype:attempted-recon; sid:200045207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.mdxbrn.top"; classtype:attempted-recon; sid:200045208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.nnawmj.top"; classtype:attempted-recon; sid:200045209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.nofalw.top"; classtype:attempted-recon; sid:200045210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.oajqfn.top"; classtype:attempted-recon; sid:200045211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.orcbvv.top"; classtype:attempted-recon; sid:200045212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.pgdfhw.top"; classtype:attempted-recon; sid:200045213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.pkwrdl.top"; classtype:attempted-recon; sid:200045214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.pmnaeh.top"; classtype:attempted-recon; sid:200045215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.qbcbta.top"; classtype:attempted-recon; sid:200045216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.rgqjka.top"; classtype:attempted-recon; sid:200045217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.sorjpe.top"; classtype:attempted-recon; sid:200045218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.svfocp.top"; classtype:attempted-recon; sid:200045219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.tppwpi.top"; classtype:attempted-recon; sid:200045220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.tvbcmo.top"; classtype:attempted-recon; sid:200045221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.uarmbh.top"; classtype:attempted-recon; sid:200045222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.uiedwv.top"; classtype:attempted-recon; sid:200045223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.ukohwk.top"; classtype:attempted-recon; sid:200045224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.vlunrr.top"; classtype:attempted-recon; sid:200045225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.wezouj.top"; classtype:attempted-recon; sid:200045226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.wiqlcn.top"; classtype:attempted-recon; sid:200045227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.xewfoa.top"; classtype:attempted-recon; sid:200045228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.xwdvad.top"; classtype:attempted-recon; sid:200045229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.zqawii.top"; classtype:attempted-recon; sid:200045230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoicseavcia.c.zvzqtl.top"; classtype:attempted-recon; sid:200045231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.axrcbx.top"; classtype:attempted-recon; sid:200045232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.azrsog.top"; classtype:attempted-recon; sid:200045233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.buavhf.top"; classtype:attempted-recon; sid:200045234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.cckrka.shop"; classtype:attempted-recon; sid:200045235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.geqnuq.top"; classtype:attempted-recon; sid:200045236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.isvuiy.top"; classtype:attempted-recon; sid:200045237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.jfcxph.top"; classtype:attempted-recon; sid:200045238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.jsmfgc.top"; classtype:attempted-recon; sid:200045239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.kbroxv.top"; classtype:attempted-recon; sid:200045240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.kvdxks.top"; classtype:attempted-recon; sid:200045241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.mdxbrn.top"; classtype:attempted-recon; sid:200045242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.nnawmj.top"; classtype:attempted-recon; sid:200045243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.nofalw.top"; classtype:attempted-recon; sid:200045244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.oajqfn.top"; classtype:attempted-recon; sid:200045245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.onazqm.top"; classtype:attempted-recon; sid:200045246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.orcbvv.top"; classtype:attempted-recon; sid:200045247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.owbxts.top"; classtype:attempted-recon; sid:200045248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.pgdfhw.top"; classtype:attempted-recon; sid:200045249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.pkwrdl.top"; classtype:attempted-recon; sid:200045250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.pmnaeh.top"; classtype:attempted-recon; sid:200045251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.qbcbta.top"; classtype:attempted-recon; sid:200045252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.rgqjka.top"; classtype:attempted-recon; sid:200045253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.sorjpe.top"; classtype:attempted-recon; sid:200045254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.svfocp.top"; classtype:attempted-recon; sid:200045255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.tppwpi.top"; classtype:attempted-recon; sid:200045256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.tvbcmo.top"; classtype:attempted-recon; sid:200045257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.uarmbh.top"; classtype:attempted-recon; sid:200045258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.uiedwv.top"; classtype:attempted-recon; sid:200045259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.ukohwk.top"; classtype:attempted-recon; sid:200045260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.vlunrr.top"; classtype:attempted-recon; sid:200045261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.wezouj.top"; classtype:attempted-recon; sid:200045262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.wiqlcn.top"; classtype:attempted-recon; sid:200045263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.xewfoa.top"; classtype:attempted-recon; sid:200045264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.xwdvad.top"; classtype:attempted-recon; sid:200045265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.zqawii.top"; classtype:attempted-recon; sid:200045266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsoisavcia.o.zvzqtl.top"; classtype:attempted-recon; sid:200045267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.axrcbx.top"; classtype:attempted-recon; sid:200045268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.azrsog.top"; classtype:attempted-recon; sid:200045269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.buavhf.top"; classtype:attempted-recon; sid:200045270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.cckrka.shop"; classtype:attempted-recon; sid:200045271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.geqnuq.top"; classtype:attempted-recon; sid:200045272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.isvuiy.top"; classtype:attempted-recon; sid:200045273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.jfcxph.top"; classtype:attempted-recon; sid:200045274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200045275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.kbroxv.top"; classtype:attempted-recon; sid:200045276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.kvdxks.top"; classtype:attempted-recon; sid:200045277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200045278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.nnawmj.top"; classtype:attempted-recon; sid:200045279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.nofalw.top"; classtype:attempted-recon; sid:200045280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.oajqfn.top"; classtype:attempted-recon; sid:200045281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.obekup.shop"; classtype:attempted-recon; sid:200045282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.orcbvv.top"; classtype:attempted-recon; sid:200045283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.owbxts.top"; classtype:attempted-recon; sid:200045284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200045285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200045286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200045287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.qbcbta.top"; classtype:attempted-recon; sid:200045288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.rgqjka.top"; classtype:attempted-recon; sid:200045289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.sorjpe.top"; classtype:attempted-recon; sid:200045290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.svfocp.top"; classtype:attempted-recon; sid:200045291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.tppwpi.top"; classtype:attempted-recon; sid:200045292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200045293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.uarmbh.top"; classtype:attempted-recon; sid:200045294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.uiedwv.top"; classtype:attempted-recon; sid:200045295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.ukohwk.top"; classtype:attempted-recon; sid:200045296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.urgggv.shop"; classtype:attempted-recon; sid:200045297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.vlunrr.top"; classtype:attempted-recon; sid:200045298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.wezouj.top"; classtype:attempted-recon; sid:200045299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200045300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.xewfoa.top"; classtype:attempted-recon; sid:200045301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.xuacoo.shop"; classtype:attempted-recon; sid:200045302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.xwdvad.top"; classtype:attempted-recon; sid:200045303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.zqawii.top"; classtype:attempted-recon; sid:200045304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiceseavcia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200045305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.axrcbx.top"; classtype:attempted-recon; sid:200045306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.azrsog.top"; classtype:attempted-recon; sid:200045307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.buavhf.top"; classtype:attempted-recon; sid:200045308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.geqnuq.top"; classtype:attempted-recon; sid:200045309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.isvuiy.top"; classtype:attempted-recon; sid:200045310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.jfcxph.top"; classtype:attempted-recon; sid:200045311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.jsmfgc.top"; classtype:attempted-recon; sid:200045312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.kbroxv.top"; classtype:attempted-recon; sid:200045313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.kvdxks.top"; classtype:attempted-recon; sid:200045314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.mdxbrn.top"; classtype:attempted-recon; sid:200045315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.nnawmj.top"; classtype:attempted-recon; sid:200045316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.nofalw.top"; classtype:attempted-recon; sid:200045317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.oajqfn.top"; classtype:attempted-recon; sid:200045318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.orcbvv.top"; classtype:attempted-recon; sid:200045319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.pgdfhw.top"; classtype:attempted-recon; sid:200045320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.pkwrdl.top"; classtype:attempted-recon; sid:200045321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.pmnaeh.top"; classtype:attempted-recon; sid:200045322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.qbcbta.top"; classtype:attempted-recon; sid:200045323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.rgqjka.top"; classtype:attempted-recon; sid:200045324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.sorjpe.top"; classtype:attempted-recon; sid:200045325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.svfocp.top"; classtype:attempted-recon; sid:200045326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.sxmerd.shop"; classtype:attempted-recon; sid:200045327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.tppwpi.top"; classtype:attempted-recon; sid:200045328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.tvbcmo.top"; classtype:attempted-recon; sid:200045329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.uarmbh.top"; classtype:attempted-recon; sid:200045330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.uiedwv.top"; classtype:attempted-recon; sid:200045331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.ukohwk.top"; classtype:attempted-recon; sid:200045332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.vlunrr.top"; classtype:attempted-recon; sid:200045333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.wezouj.top"; classtype:attempted-recon; sid:200045334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.wiqlcn.top"; classtype:attempted-recon; sid:200045335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.xewfoa.top"; classtype:attempted-recon; sid:200045336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.xwdvad.top"; classtype:attempted-recon; sid:200045337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.zqawii.top"; classtype:attempted-recon; sid:200045338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvecsvoiseavcia.oea.zvzqtl.top"; classtype:attempted-recon; sid:200045339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.azrsog.top"; classtype:attempted-recon; sid:200045340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.buavhf.top"; classtype:attempted-recon; sid:200045341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.geqnuq.top"; classtype:attempted-recon; sid:200045342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.isvuiy.top"; classtype:attempted-recon; sid:200045343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.jfcxph.top"; classtype:attempted-recon; sid:200045344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.jsmfgc.top"; classtype:attempted-recon; sid:200045345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.kbroxv.top"; classtype:attempted-recon; sid:200045346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.kvdxks.top"; classtype:attempted-recon; sid:200045347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.mdxbrn.top"; classtype:attempted-recon; sid:200045348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.nnawmj.top"; classtype:attempted-recon; sid:200045349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.nofalw.top"; classtype:attempted-recon; sid:200045350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.oajqfn.top"; classtype:attempted-recon; sid:200045351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.orcbvv.top"; classtype:attempted-recon; sid:200045352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.pgdfhw.top"; classtype:attempted-recon; sid:200045353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.pkwrdl.top"; classtype:attempted-recon; sid:200045354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.pmnaeh.top"; classtype:attempted-recon; sid:200045355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.qbcbta.top"; classtype:attempted-recon; sid:200045356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.rgqjka.top"; classtype:attempted-recon; sid:200045357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.sorjpe.top"; classtype:attempted-recon; sid:200045358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.svfocp.top"; classtype:attempted-recon; sid:200045359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.tppwpi.top"; classtype:attempted-recon; sid:200045360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.tvbcmo.top"; classtype:attempted-recon; sid:200045361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.uarmbh.top"; classtype:attempted-recon; sid:200045362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.uiedwv.top"; classtype:attempted-recon; sid:200045363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.ukohwk.top"; classtype:attempted-recon; sid:200045364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.vlunrr.top"; classtype:attempted-recon; sid:200045365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.wezouj.top"; classtype:attempted-recon; sid:200045366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.wiqlcn.top"; classtype:attempted-recon; sid:200045367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.xewfoa.top"; classtype:attempted-recon; sid:200045368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.xuacoo.shop"; classtype:attempted-recon; sid:200045369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.xwdvad.top"; classtype:attempted-recon; sid:200045370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.zqawii.top"; classtype:attempted-recon; sid:200045371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcscoeiasvcia.c.zvzqtl.top"; classtype:attempted-recon; sid:200045372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.axrcbx.top"; classtype:attempted-recon; sid:200045373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.azrsog.top"; classtype:attempted-recon; sid:200045374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.buavhf.top"; classtype:attempted-recon; sid:200045375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.cckrka.shop"; classtype:attempted-recon; sid:200045376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.geqnuq.top"; classtype:attempted-recon; sid:200045377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.isvuiy.top"; classtype:attempted-recon; sid:200045378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.jfcxph.top"; classtype:attempted-recon; sid:200045379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.jsmfgc.top"; classtype:attempted-recon; sid:200045380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.kbroxv.top"; classtype:attempted-recon; sid:200045381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.kvdxks.top"; classtype:attempted-recon; sid:200045382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.mdxbrn.top"; classtype:attempted-recon; sid:200045383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.nnawmj.top"; classtype:attempted-recon; sid:200045384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.nofalw.top"; classtype:attempted-recon; sid:200045385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.oajqfn.top"; classtype:attempted-recon; sid:200045386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.obekup.shop"; classtype:attempted-recon; sid:200045387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.orcbvv.top"; classtype:attempted-recon; sid:200045388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.peshlh.shop"; classtype:attempted-recon; sid:200045389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.pgdfhw.top"; classtype:attempted-recon; sid:200045390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.pkwrdl.top"; classtype:attempted-recon; sid:200045391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.pmnaeh.top"; classtype:attempted-recon; sid:200045392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.qbcbta.top"; classtype:attempted-recon; sid:200045393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.rgqjka.top"; classtype:attempted-recon; sid:200045394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.sorjpe.top"; classtype:attempted-recon; sid:200045395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.svfocp.top"; classtype:attempted-recon; sid:200045396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.sxmerd.shop"; classtype:attempted-recon; sid:200045397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.tppwpi.top"; classtype:attempted-recon; sid:200045398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.tvbcmo.top"; classtype:attempted-recon; sid:200045399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.uarmbh.top"; classtype:attempted-recon; sid:200045400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.uiedwv.top"; classtype:attempted-recon; sid:200045401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.ukohwk.top"; classtype:attempted-recon; sid:200045402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.vlunrr.top"; classtype:attempted-recon; sid:200045403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.wezouj.top"; classtype:attempted-recon; sid:200045404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.wiqlcn.top"; classtype:attempted-recon; sid:200045405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.xewfoa.top"; classtype:attempted-recon; sid:200045406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.xwdvad.top"; classtype:attempted-recon; sid:200045407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.yxpfzh.top"; classtype:attempted-recon; sid:200045408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.zqawii.top"; classtype:attempted-recon; sid:200045409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevcsoiasvcia.o.zvzqtl.top"; classtype:attempted-recon; sid:200045410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.axrcbx.top"; classtype:attempted-recon; sid:200045411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.azrsog.top"; classtype:attempted-recon; sid:200045412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.buavhf.top"; classtype:attempted-recon; sid:200045413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.fmttqq.top"; classtype:attempted-recon; sid:200045414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.geqnuq.top"; classtype:attempted-recon; sid:200045415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.isvuiy.top"; classtype:attempted-recon; sid:200045416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.jcqpfm.top"; classtype:attempted-recon; sid:200045417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.jfcxph.top"; classtype:attempted-recon; sid:200045418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.jsmfgc.top"; classtype:attempted-recon; sid:200045419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.kbroxv.top"; classtype:attempted-recon; sid:200045420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.kvdxks.top"; classtype:attempted-recon; sid:200045421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.mdxbrn.top"; classtype:attempted-recon; sid:200045422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.nnawmj.top"; classtype:attempted-recon; sid:200045423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.nofalw.top"; classtype:attempted-recon; sid:200045424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.oajqfn.top"; classtype:attempted-recon; sid:200045425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.orcbvv.top"; classtype:attempted-recon; sid:200045426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.pgdfhw.top"; classtype:attempted-recon; sid:200045427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.pkwrdl.top"; classtype:attempted-recon; sid:200045428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.pmnaeh.top"; classtype:attempted-recon; sid:200045429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.qbcbta.top"; classtype:attempted-recon; sid:200045430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.rgqjka.top"; classtype:attempted-recon; sid:200045431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.sorjpe.top"; classtype:attempted-recon; sid:200045432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.svfocp.top"; classtype:attempted-recon; sid:200045433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.tppwpi.top"; classtype:attempted-recon; sid:200045434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.tvbcmo.top"; classtype:attempted-recon; sid:200045435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.uarmbh.top"; classtype:attempted-recon; sid:200045436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.uiedwv.top"; classtype:attempted-recon; sid:200045437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.ukohwk.top"; classtype:attempted-recon; sid:200045438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.vlunrr.top"; classtype:attempted-recon; sid:200045439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.wezouj.top"; classtype:attempted-recon; sid:200045440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.wiqlcn.top"; classtype:attempted-recon; sid:200045441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.xewfoa.top"; classtype:attempted-recon; sid:200045442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.xwdvad.top"; classtype:attempted-recon; sid:200045443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.zqawii.top"; classtype:attempted-recon; sid:200045444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsacsevcia.c.zvzqtl.top"; classtype:attempted-recon; sid:200045445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.axrcbx.top"; classtype:attempted-recon; sid:200045446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.azrsog.top"; classtype:attempted-recon; sid:200045447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.buavhf.top"; classtype:attempted-recon; sid:200045448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.geqnuq.top"; classtype:attempted-recon; sid:200045449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.isvuiy.top"; classtype:attempted-recon; sid:200045450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.jfcxph.top"; classtype:attempted-recon; sid:200045451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.jsmfgc.top"; classtype:attempted-recon; sid:200045452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.kbroxv.top"; classtype:attempted-recon; sid:200045453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.kvdxks.top"; classtype:attempted-recon; sid:200045454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.mdxbrn.top"; classtype:attempted-recon; sid:200045455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.mjfemh.shop"; classtype:attempted-recon; sid:200045456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.nnawmj.top"; classtype:attempted-recon; sid:200045457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.nofalw.top"; classtype:attempted-recon; sid:200045458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.oajqfn.top"; classtype:attempted-recon; sid:200045459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.orcbvv.top"; classtype:attempted-recon; sid:200045460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.pgdfhw.top"; classtype:attempted-recon; sid:200045461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.pkwrdl.top"; classtype:attempted-recon; sid:200045462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.pmnaeh.top"; classtype:attempted-recon; sid:200045463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.qbcbta.top"; classtype:attempted-recon; sid:200045464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.rgqjka.top"; classtype:attempted-recon; sid:200045465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.sorjpe.top"; classtype:attempted-recon; sid:200045466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.svfocp.top"; classtype:attempted-recon; sid:200045467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.tppwpi.top"; classtype:attempted-recon; sid:200045468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.tvbcmo.top"; classtype:attempted-recon; sid:200045469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.uarmbh.top"; classtype:attempted-recon; sid:200045470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.uiedwv.top"; classtype:attempted-recon; sid:200045471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.ukohwk.top"; classtype:attempted-recon; sid:200045472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.vlunrr.top"; classtype:attempted-recon; sid:200045473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.wezouj.top"; classtype:attempted-recon; sid:200045474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.wiqlcn.top"; classtype:attempted-recon; sid:200045475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.xewfoa.top"; classtype:attempted-recon; sid:200045476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.xwdvad.top"; classtype:attempted-recon; sid:200045477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.zqawii.top"; classtype:attempted-recon; sid:200045478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevsasvcia.a.zvzqtl.top"; classtype:attempted-recon; sid:200045479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.axrcbx.top"; classtype:attempted-recon; sid:200045480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.azrsog.top"; classtype:attempted-recon; sid:200045481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.buavhf.top"; classtype:attempted-recon; sid:200045482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.geqnuq.top"; classtype:attempted-recon; sid:200045483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.isvuiy.top"; classtype:attempted-recon; sid:200045484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.jfcxph.top"; classtype:attempted-recon; sid:200045485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200045486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.kbroxv.top"; classtype:attempted-recon; sid:200045487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.kvdxks.top"; classtype:attempted-recon; sid:200045488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200045489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.mjfemh.shop"; classtype:attempted-recon; sid:200045490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.nnawmj.top"; classtype:attempted-recon; sid:200045491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.nofalw.top"; classtype:attempted-recon; sid:200045492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.oajqfn.top"; classtype:attempted-recon; sid:200045493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.orcbvv.top"; classtype:attempted-recon; sid:200045494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.peshlh.shop"; classtype:attempted-recon; sid:200045495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200045496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200045497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200045498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.qbcbta.top"; classtype:attempted-recon; sid:200045499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.rgqjka.top"; classtype:attempted-recon; sid:200045500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.sorjpe.top"; classtype:attempted-recon; sid:200045501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.svfocp.top"; classtype:attempted-recon; sid:200045502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.sxmerd.shop"; classtype:attempted-recon; sid:200045503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.tppwpi.top"; classtype:attempted-recon; sid:200045504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200045505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.uarmbh.top"; classtype:attempted-recon; sid:200045506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.uiedwv.top"; classtype:attempted-recon; sid:200045507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.ukohwk.top"; classtype:attempted-recon; sid:200045508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.vlunrr.top"; classtype:attempted-recon; sid:200045509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.wezouj.top"; classtype:attempted-recon; sid:200045510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200045511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.xewfoa.top"; classtype:attempted-recon; sid:200045512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.xwdvad.top"; classtype:attempted-recon; sid:200045513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.yxpfzh.top"; classtype:attempted-recon; sid:200045514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.zqawii.top"; classtype:attempted-recon; sid:200045515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsceoeiasvcia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200045516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.axrcbx.top"; classtype:attempted-recon; sid:200045517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.azrsog.top"; classtype:attempted-recon; sid:200045518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.buavhf.top"; classtype:attempted-recon; sid:200045519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.geqnuq.top"; classtype:attempted-recon; sid:200045520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.isvuiy.top"; classtype:attempted-recon; sid:200045521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.jcqpfm.top"; classtype:attempted-recon; sid:200045522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.jfcxph.top"; classtype:attempted-recon; sid:200045523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.jsmfgc.top"; classtype:attempted-recon; sid:200045524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.kbroxv.top"; classtype:attempted-recon; sid:200045525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.kvdxks.top"; classtype:attempted-recon; sid:200045526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.mdxbrn.top"; classtype:attempted-recon; sid:200045527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.nnawmj.top"; classtype:attempted-recon; sid:200045528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.nofalw.top"; classtype:attempted-recon; sid:200045529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.oajqfn.top"; classtype:attempted-recon; sid:200045530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.orcbvv.top"; classtype:attempted-recon; sid:200045531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.pgdfhw.top"; classtype:attempted-recon; sid:200045532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.pkwrdl.top"; classtype:attempted-recon; sid:200045533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.pmnaeh.top"; classtype:attempted-recon; sid:200045534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.qbcbta.top"; classtype:attempted-recon; sid:200045535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.rgqjka.top"; classtype:attempted-recon; sid:200045536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.sorjpe.top"; classtype:attempted-recon; sid:200045537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.svfocp.top"; classtype:attempted-recon; sid:200045538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.sxmerd.shop"; classtype:attempted-recon; sid:200045539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.tppwpi.top"; classtype:attempted-recon; sid:200045540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.tvbcmo.top"; classtype:attempted-recon; sid:200045541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.uarmbh.top"; classtype:attempted-recon; sid:200045542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.uiedwv.top"; classtype:attempted-recon; sid:200045543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.ukohwk.top"; classtype:attempted-recon; sid:200045544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.urgggv.shop"; classtype:attempted-recon; sid:200045545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.vlunrr.top"; classtype:attempted-recon; sid:200045546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.vnbmwi.shop"; classtype:attempted-recon; sid:200045547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.wezouj.top"; classtype:attempted-recon; sid:200045548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.wiqlcn.top"; classtype:attempted-recon; sid:200045549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.xewfoa.top"; classtype:attempted-recon; sid:200045550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.zqawii.top"; classtype:attempted-recon; sid:200045551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvcsoeiasvcia.oea.zvzqtl.top"; classtype:attempted-recon; sid:200045552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.axrcbx.top"; classtype:attempted-recon; sid:200045553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.azrsog.top"; classtype:attempted-recon; sid:200045554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.buavhf.top"; classtype:attempted-recon; sid:200045555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.cckrka.shop"; classtype:attempted-recon; sid:200045556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.fmttqq.top"; classtype:attempted-recon; sid:200045557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.geqnuq.top"; classtype:attempted-recon; sid:200045558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.isvuiy.top"; classtype:attempted-recon; sid:200045559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.jfcxph.top"; classtype:attempted-recon; sid:200045560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200045561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.kbroxv.top"; classtype:attempted-recon; sid:200045562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.kvdxks.top"; classtype:attempted-recon; sid:200045563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200045564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.nnawmj.top"; classtype:attempted-recon; sid:200045565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.nofalw.top"; classtype:attempted-recon; sid:200045566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.oajqfn.top"; classtype:attempted-recon; sid:200045567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.obekup.shop"; classtype:attempted-recon; sid:200045568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.orcbvv.top"; classtype:attempted-recon; sid:200045569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200045570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200045571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200045572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.qbcbta.top"; classtype:attempted-recon; sid:200045573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.rgqjka.top"; classtype:attempted-recon; sid:200045574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.sorjpe.top"; classtype:attempted-recon; sid:200045575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.svfocp.top"; classtype:attempted-recon; sid:200045576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.tppwpi.top"; classtype:attempted-recon; sid:200045577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200045578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.uarmbh.top"; classtype:attempted-recon; sid:200045579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.uiedwv.top"; classtype:attempted-recon; sid:200045580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.ukohwk.top"; classtype:attempted-recon; sid:200045581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.urgggv.shop"; classtype:attempted-recon; sid:200045582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.vlunrr.top"; classtype:attempted-recon; sid:200045583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.wezouj.top"; classtype:attempted-recon; sid:200045584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200045585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.xewfoa.top"; classtype:attempted-recon; sid:200045586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.xwdvad.top"; classtype:attempted-recon; sid:200045587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.zqawii.top"; classtype:attempted-recon; sid:200045588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsacesevcia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200045589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.axrcbx.top"; classtype:attempted-recon; sid:200045590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.azrsog.top"; classtype:attempted-recon; sid:200045591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.buavhf.top"; classtype:attempted-recon; sid:200045592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.geqnuq.top"; classtype:attempted-recon; sid:200045593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.isvuiy.top"; classtype:attempted-recon; sid:200045594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.jfcxph.top"; classtype:attempted-recon; sid:200045595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.jsmfgc.top"; classtype:attempted-recon; sid:200045596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.kbroxv.top"; classtype:attempted-recon; sid:200045597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.kvdxks.top"; classtype:attempted-recon; sid:200045598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.mdxbrn.top"; classtype:attempted-recon; sid:200045599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.nnawmj.top"; classtype:attempted-recon; sid:200045600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.nofalw.top"; classtype:attempted-recon; sid:200045601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.oajqfn.top"; classtype:attempted-recon; sid:200045602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.orcbvv.top"; classtype:attempted-recon; sid:200045603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.pgdfhw.top"; classtype:attempted-recon; sid:200045604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.pkwrdl.top"; classtype:attempted-recon; sid:200045605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.pmnaeh.top"; classtype:attempted-recon; sid:200045606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.qbcbta.top"; classtype:attempted-recon; sid:200045607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.rgqjka.top"; classtype:attempted-recon; sid:200045608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.sorjpe.top"; classtype:attempted-recon; sid:200045609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.svfocp.top"; classtype:attempted-recon; sid:200045610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.sxmerd.shop"; classtype:attempted-recon; sid:200045611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.tppwpi.top"; classtype:attempted-recon; sid:200045612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.tvbcmo.top"; classtype:attempted-recon; sid:200045613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.uarmbh.top"; classtype:attempted-recon; sid:200045614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.uiedwv.top"; classtype:attempted-recon; sid:200045615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.ukohwk.top"; classtype:attempted-recon; sid:200045616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.vlunrr.top"; classtype:attempted-recon; sid:200045617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.wezouj.top"; classtype:attempted-recon; sid:200045618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.wiqlcn.top"; classtype:attempted-recon; sid:200045619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.xewfoa.top"; classtype:attempted-recon; sid:200045620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.xuacoo.shop"; classtype:attempted-recon; sid:200045621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.xwdvad.top"; classtype:attempted-recon; sid:200045622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.zqawii.top"; classtype:attempted-recon; sid:200045623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsveevvsasevcia.aea.zvzqtl.top"; classtype:attempted-recon; sid:200045624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200045625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200045626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200045627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200045628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200045629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200045630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200045631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200045632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200045633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200045634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200045635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200045636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200045637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200045638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200045639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200045640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200045641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200045642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200045643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200045644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200045645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200045646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200045647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200045648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200045649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200045650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200045651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200045652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200045653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200045654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200045655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200045656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200045657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200045658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200045659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200045660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200045661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200045662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200045663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200045664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200045665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200045666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200045667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200045668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200045669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200045670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200045671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200045672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200045673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200045674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200045675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200045676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200045677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200045678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200045679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200045680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200045681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200045682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200045683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200045684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200045685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200045686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200045687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200045688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200045689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200045690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200045691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200045692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200045693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200045694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200045695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200045696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200045697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200045698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200045699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200045700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200045701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200045702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200045703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200045704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200045705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200045706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200045707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200045708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200045709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200045710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200045711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200045712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200045713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200045714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200045715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200045716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200045717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200045718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200045719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200045720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200045721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200045722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200045723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200045724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200045725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200045726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200045727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200045728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200045729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200045730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200045731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200045732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200045733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200045734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200045735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200045736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200045737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200045738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200045739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200045740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200045741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200045742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200045743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200045744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200045745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200045746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200045747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200045748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200045749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200045750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200045751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200045752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200045753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200045754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200045755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200045756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200045757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200045758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200045759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesaccavceia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200045760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200045761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200045762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200045763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200045764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200045765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200045766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200045767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200045768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200045769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200045770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200045771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200045772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200045773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200045774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200045775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200045776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200045777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200045778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200045779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200045780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200045781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200045782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200045783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200045784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200045785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200045786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200045787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200045788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200045789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200045790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200045791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200045792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200045793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200045794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200045795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200045796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200045797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200045798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200045799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200045800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200045801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200045802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200045803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200045804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200045805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200045806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200045807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200045808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200045809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200045810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200045811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200045812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200045813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200045814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200045815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200045816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200045817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200045818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200045819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200045820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200045821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200045822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200045823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200045824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200045825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200045826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200045827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200045828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200045829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200045830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200045831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200045832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200045833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200045834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200045835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200045836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200045837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200045838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200045839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200045840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200045841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200045842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200045843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200045844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200045845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200045846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200045847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200045848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200045849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200045850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200045851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200045852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200045853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200045854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200045855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200045856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200045857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200045858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200045859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200045860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200045861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200045862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200045863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200045864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200045865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200045866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200045867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200045868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200045869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200045870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200045871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200045872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200045873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200045874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200045875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200045876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200045877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200045878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200045879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200045880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200045881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200045882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200045883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200045884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200045885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200045886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200045887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200045888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200045889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200045890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200045891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200045892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200045893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200045894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200045895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200045896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaiceavcia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200045897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200045898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200045899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200045900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200045901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200045902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200045903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200045904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200045905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200045906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200045907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200045908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200045909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200045910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200045911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200045912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200045913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200045914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200045915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200045916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200045917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200045918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200045919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200045920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200045921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200045922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200045923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200045924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200045925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200045926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200045927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200045928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200045929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200045930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200045931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200045932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200045933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200045934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200045935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200045936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200045937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200045938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200045939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200045940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200045941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200045942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200045943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200045944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200045945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200045946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200045947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200045948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200045949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200045950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200045951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200045952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200045953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200045954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200045955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200045956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200045957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200045958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200045959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200045960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200045961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200045962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200045963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200045964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200045965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200045966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200045967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200045968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200045969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200045970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200045971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200045972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200045973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200045974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200045975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200045976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200045977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200045978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200045979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200045980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200045981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200045982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200045983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200045984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200045985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200045986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200045987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200045988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200045989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200045990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200045991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200045992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200045993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200045994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200045995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200045996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200045997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200045998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200045999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200046001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200046007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200046017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200046020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200046021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200046023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesoccaisvcia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200046035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200046036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200046037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200046038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200046039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200046040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200046041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200046042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200046043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200046044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200046045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200046046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200046047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200046048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200046049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200046050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200046051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200046052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200046053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200046054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200046055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200046056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200046057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200046058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200046059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200046060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200046061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200046062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200046063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200046064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200046065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200046066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200046067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200046068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200046069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200046070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200046071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200046072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200046073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200046074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200046075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200046076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200046077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200046078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200046079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200046080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200046081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200046082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200046083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200046084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200046085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200046086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200046087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200046088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200046089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200046090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200046091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200046092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200046093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200046094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200046095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200046096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200046097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200046098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200046099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200046100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200046101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200046102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200046103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200046104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200046105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200046106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200046107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200046108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200046109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200046110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200046111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200046112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200046113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200046114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200046115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200046116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200046117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200046118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200046119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200046120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200046121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200046122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200046123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200046124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200046125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200046126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200046127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200046128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200046129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200046130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200046131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200046132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200046133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200046134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200046135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200046136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200046138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200046144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200046154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200046157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200046158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200046160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvessacscavca.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200046172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200046173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200046174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200046175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200046176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200046177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200046178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200046179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200046180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200046181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200046182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200046183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200046184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200046185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200046186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200046187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200046188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200046189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200046190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200046191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200046192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200046193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200046194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200046195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200046196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200046197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200046198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200046199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200046200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200046201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200046202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200046203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200046204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200046205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200046206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200046207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200046208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200046209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200046210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200046211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200046212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200046213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200046214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200046215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200046216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200046217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200046218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200046219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200046220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200046221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200046222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200046223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200046224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200046225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200046226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200046227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200046228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200046229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200046230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200046231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200046232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200046233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200046234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200046235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200046236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200046237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200046238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200046239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200046240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200046241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200046242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200046243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200046244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200046245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200046246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200046247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200046248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200046249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200046250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200046251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200046252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200046253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200046254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200046255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200046256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200046257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200046258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200046259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200046260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200046261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200046262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200046263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200046264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200046265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200046266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200046267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200046268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200046269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200046270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200046271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200046272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200046273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200046275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200046281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200046291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200046294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200046295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200046297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveceia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200046309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200046310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200046311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200046312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200046313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200046314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200046315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200046316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200046317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200046318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200046319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200046320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200046321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200046322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200046323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.csndax.icu"; classtype:attempted-recon; sid:200046324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200046325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200046326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200046327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.erqer.icu"; classtype:attempted-recon; sid:200046328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200046329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200046330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200046331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200046332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200046333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200046334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200046335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200046336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200046337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200046338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200046339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200046340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200046341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200046342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200046343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200046344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200046345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200046346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200046347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200046348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200046349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200046350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200046351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200046352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200046353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200046354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200046355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200046356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lianges.icu"; classtype:attempted-recon; sid:200046357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200046358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200046359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.likijs.icu"; classtype:attempted-recon; sid:200046360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200046361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200046362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200046363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200046364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200046365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200046366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200046367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200046368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200046369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200046370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200046371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200046372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200046373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200046374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200046375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200046376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200046377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200046378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200046379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200046380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200046381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200046382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200046383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200046384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200046385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200046386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.maediof.icu"; classtype:attempted-recon; sid:200046387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200046388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200046389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200046390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200046391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200046392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200046393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200046394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200046395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200046396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.msodik.icu"; classtype:attempted-recon; sid:200046397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200046398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200046399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nanish.icu"; classtype:attempted-recon; sid:200046400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200046401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200046402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200046403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200046404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200046405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200046406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200046407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200046408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200046409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200046410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.paddki.icu"; classtype:attempted-recon; sid:200046412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.recordd.icu"; classtype:attempted-recon; sid:200046418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.trsas.icu"; classtype:attempted-recon; sid:200046428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.usideq.icu"; classtype:attempted-recon; sid:200046431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.v3454.icu"; classtype:attempted-recon; sid:200046432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.vardir.icu"; classtype:attempted-recon; sid:200046434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaaveia.aeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200046446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200046447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200046448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200046449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200046450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200046451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200046452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200046453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200046454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200046455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200046456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200046457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200046458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200046459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200046460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.csndax.icu"; classtype:attempted-recon; sid:200046461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200046462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200046463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200046464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.erqer.icu"; classtype:attempted-recon; sid:200046465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200046466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200046467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200046468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200046469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200046470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200046471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200046472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200046473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200046474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200046475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200046476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200046477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200046478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200046479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200046480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200046481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200046482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200046483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200046484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200046485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200046486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200046487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200046488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200046489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200046490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200046491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200046492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200046493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lianges.icu"; classtype:attempted-recon; sid:200046494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200046495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200046496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.likijs.icu"; classtype:attempted-recon; sid:200046497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200046498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200046499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200046500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200046501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200046502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200046503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200046504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200046505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200046506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200046507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200046508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200046509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200046510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200046511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200046512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200046513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200046514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200046515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200046516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200046517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200046518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200046519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200046520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200046521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200046522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200046523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.maediof.icu"; classtype:attempted-recon; sid:200046524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200046525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200046526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200046527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200046528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200046529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200046530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200046531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200046532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200046533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.msodik.icu"; classtype:attempted-recon; sid:200046534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200046535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200046536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nanish.icu"; classtype:attempted-recon; sid:200046537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200046538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200046539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200046540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200046541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200046542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200046543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200046544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200046545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200046546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200046547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.paddki.icu"; classtype:attempted-recon; sid:200046549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.recordd.icu"; classtype:attempted-recon; sid:200046555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.trsas.icu"; classtype:attempted-recon; sid:200046565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.usideq.icu"; classtype:attempted-recon; sid:200046568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.v3454.icu"; classtype:attempted-recon; sid:200046569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.vardir.icu"; classtype:attempted-recon; sid:200046571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieavcia.oeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200046583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200046584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200046585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200046586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200046587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200046588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200046589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200046590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200046591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200046592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200046593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200046594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200046595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200046596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200046597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200046598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200046599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200046600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200046601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200046602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200046603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200046604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200046605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200046606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200046607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200046608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200046609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200046610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200046611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200046612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200046613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200046614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200046615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200046616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200046617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200046618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200046619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200046620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200046621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200046622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200046623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200046624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200046625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200046626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200046627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200046628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200046629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200046630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200046631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200046632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200046633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200046634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200046635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200046636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200046637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200046638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200046639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200046640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200046641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200046642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200046643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200046644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200046645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200046646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200046647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200046648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200046649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200046650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200046651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200046652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200046653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200046654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200046655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200046656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200046657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200046658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200046659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200046660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200046661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200046662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200046663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200046664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200046665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200046666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200046667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200046668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200046669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200046670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200046671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200046672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200046673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200046674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200046675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200046676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200046677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200046678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200046679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200046680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200046681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200046682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200046683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200046684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200046686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200046692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200046702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200046705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200046706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200046708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvesvccaoieseavcia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200046720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200046721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200046722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200046723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200046724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200046725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200046726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200046727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200046728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200046729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200046730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200046731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200046732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200046733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200046734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200046735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200046736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200046737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200046738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200046739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200046740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200046741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200046742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200046743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200046744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200046745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200046746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200046747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200046748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200046749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200046750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200046751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200046752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200046753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200046754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200046755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200046756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200046757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200046758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200046759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200046760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200046761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200046762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200046763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200046764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200046765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200046766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200046767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200046768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200046769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200046770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200046771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200046772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200046773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200046774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200046775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200046776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200046777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200046778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200046779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200046780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200046781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200046782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200046783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200046784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200046785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200046786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200046787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200046788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200046789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200046790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200046791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200046792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200046793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200046794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200046795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200046796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200046797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200046798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200046799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200046800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200046801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200046802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200046803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200046804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200046805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200046806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200046807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200046808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200046809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200046810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200046811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200046812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200046813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200046814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200046815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200046816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200046817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200046818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200046819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200046820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200046821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200046823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200046829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200046839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200046842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200046843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200046845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasceiasvcia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200046857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200046858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200046859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200046860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200046861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200046862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200046863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200046864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200046865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200046866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200046867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200046868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200046869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200046870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200046871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200046872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200046873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200046874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200046875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200046876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200046877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200046878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200046879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200046880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200046881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200046882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200046883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200046884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200046885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200046886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200046887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200046888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200046889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200046890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200046891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200046892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200046893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200046894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200046895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200046896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200046897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200046898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200046899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200046900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200046901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200046902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200046903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200046904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200046905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200046906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200046907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200046908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200046909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200046910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200046911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200046912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200046913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200046914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200046915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200046916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200046917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200046918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200046919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200046920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200046921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200046922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200046923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200046924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200046925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200046926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200046927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200046928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200046929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200046930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200046931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200046932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200046933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200046934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200046935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200046936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200046937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200046938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200046939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200046940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200046941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200046942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200046943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200046944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200046945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200046946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200046947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200046948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200046949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200046950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200046951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200046952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200046953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200046954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200046955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200046956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200046957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200046958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200046959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200046960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200046961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200046962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200046963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200046964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200046965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200046966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200046967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200046968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200046969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200046970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200046971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200046972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200046973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200046974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200046975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200046976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200046977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200046978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200046979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200046980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200046981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200046982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200046983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200046984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200046985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200046986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200046987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200046988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200046989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200046990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200046991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200046992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevcccasoasvcia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200046993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.axrcbx.top"; classtype:attempted-recon; sid:200046994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.azrsog.top"; classtype:attempted-recon; sid:200046995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.buavhf.top"; classtype:attempted-recon; sid:200046996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.geqnuq.top"; classtype:attempted-recon; sid:200046997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.isvuiy.top"; classtype:attempted-recon; sid:200046998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.jfcxph.top"; classtype:attempted-recon; sid:200046999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.jsmfgc.top"; classtype:attempted-recon; sid:200047000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.kbroxv.top"; classtype:attempted-recon; sid:200047001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.kvdxks.top"; classtype:attempted-recon; sid:200047002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.mdxbrn.top"; classtype:attempted-recon; sid:200047003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.nnawmj.top"; classtype:attempted-recon; sid:200047004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.nofalw.top"; classtype:attempted-recon; sid:200047005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.oajqfn.top"; classtype:attempted-recon; sid:200047006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.onazqm.top"; classtype:attempted-recon; sid:200047007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.orcbvv.top"; classtype:attempted-recon; sid:200047008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.peshlh.shop"; classtype:attempted-recon; sid:200047009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.pgdfhw.top"; classtype:attempted-recon; sid:200047010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.pkwrdl.top"; classtype:attempted-recon; sid:200047011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.pmnaeh.top"; classtype:attempted-recon; sid:200047012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.qbcbta.top"; classtype:attempted-recon; sid:200047013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.rgqjka.top"; classtype:attempted-recon; sid:200047014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.sorjpe.top"; classtype:attempted-recon; sid:200047015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.svfocp.top"; classtype:attempted-recon; sid:200047016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.tppwpi.top"; classtype:attempted-recon; sid:200047017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.tvbcmo.top"; classtype:attempted-recon; sid:200047018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.uarmbh.top"; classtype:attempted-recon; sid:200047019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.uiedwv.top"; classtype:attempted-recon; sid:200047020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.ukohwk.top"; classtype:attempted-recon; sid:200047021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.vlunrr.top"; classtype:attempted-recon; sid:200047022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.wezouj.top"; classtype:attempted-recon; sid:200047023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.wiqlcn.top"; classtype:attempted-recon; sid:200047024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.xewfoa.top"; classtype:attempted-recon; sid:200047025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.xuacoo.shop"; classtype:attempted-recon; sid:200047026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.xwdvad.top"; classtype:attempted-recon; sid:200047027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.yxpfzh.top"; classtype:attempted-recon; sid:200047028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.zqawii.top"; classtype:attempted-recon; sid:200047029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcceia.c.zvzqtl.top"; classtype:attempted-recon; sid:200047030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.axrcbx.top"; classtype:attempted-recon; sid:200047031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.azrsog.top"; classtype:attempted-recon; sid:200047032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.buavhf.top"; classtype:attempted-recon; sid:200047033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.geqnuq.top"; classtype:attempted-recon; sid:200047034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.isvuiy.top"; classtype:attempted-recon; sid:200047035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.jfcxph.top"; classtype:attempted-recon; sid:200047036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.jsmfgc.top"; classtype:attempted-recon; sid:200047037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.kbroxv.top"; classtype:attempted-recon; sid:200047038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.kvdxks.top"; classtype:attempted-recon; sid:200047039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.mdxbrn.top"; classtype:attempted-recon; sid:200047040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.nnawmj.top"; classtype:attempted-recon; sid:200047041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.nofalw.top"; classtype:attempted-recon; sid:200047042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.oajqfn.top"; classtype:attempted-recon; sid:200047043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.obekup.shop"; classtype:attempted-recon; sid:200047044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.orcbvv.top"; classtype:attempted-recon; sid:200047045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.pgdfhw.top"; classtype:attempted-recon; sid:200047046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.pkwrdl.top"; classtype:attempted-recon; sid:200047047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.pmnaeh.top"; classtype:attempted-recon; sid:200047048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.qbcbta.top"; classtype:attempted-recon; sid:200047049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.rgqjka.top"; classtype:attempted-recon; sid:200047050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.sorjpe.top"; classtype:attempted-recon; sid:200047051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.svfocp.top"; classtype:attempted-recon; sid:200047052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.tppwpi.top"; classtype:attempted-recon; sid:200047053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.tvbcmo.top"; classtype:attempted-recon; sid:200047054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.uarmbh.top"; classtype:attempted-recon; sid:200047055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.uiedwv.top"; classtype:attempted-recon; sid:200047056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.ukohwk.top"; classtype:attempted-recon; sid:200047057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.vlunrr.top"; classtype:attempted-recon; sid:200047058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.vnbmwi.shop"; classtype:attempted-recon; sid:200047059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.wezouj.top"; classtype:attempted-recon; sid:200047060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.wiqlcn.top"; classtype:attempted-recon; sid:200047061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.xewfoa.top"; classtype:attempted-recon; sid:200047062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.xwdvad.top"; classtype:attempted-recon; sid:200047063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.yxpfzh.top"; classtype:attempted-recon; sid:200047064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.zqawii.top"; classtype:attempted-recon; sid:200047065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsavcia.a.zvzqtl.top"; classtype:attempted-recon; sid:200047066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200047067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200047068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200047069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200047070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200047071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200047072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200047073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200047074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200047075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200047076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200047077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200047078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200047079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200047080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200047081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200047082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200047083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200047084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200047085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200047086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200047087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200047088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200047089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200047090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200047091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200047092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200047093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200047094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200047095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200047096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200047097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200047098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200047099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200047100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200047101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200047102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200047103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200047104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200047105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200047106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200047107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200047108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200047109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200047110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200047111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200047112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200047113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200047114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200047115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200047116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200047117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200047118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200047119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200047120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200047121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200047122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200047123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200047124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200047125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200047126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200047127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200047128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200047129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200047130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200047131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200047132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200047133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200047134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200047135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200047136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200047137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200047138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200047139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200047140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200047141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200047142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200047143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200047144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200047145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200047146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200047147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200047148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200047149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200047150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200047151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200047152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200047153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200047154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200047155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200047156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200047157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200047158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200047159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200047160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200047161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200047162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200047163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200047164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200047165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200047166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200047167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200047168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200047169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200047170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200047171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200047172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200047173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200047174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200047175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200047176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200047177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200047178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200047179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200047180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200047181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200047182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200047183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200047184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200047185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200047186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200047187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200047188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200047189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200047190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200047191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200047192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200047193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200047194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200047195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200047196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200047197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200047198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200047199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200047200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200047201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200047202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaacevcia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200047203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.0e0db.icu"; classtype:attempted-recon; sid:200047204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200047205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200047206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200047207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.asjdied.icu"; classtype:attempted-recon; sid:200047208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200047209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.bahusue.icu"; classtype:attempted-recon; sid:200047210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.baidu123.icu"; classtype:attempted-recon; sid:200047211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200047212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.bfhju.icu"; classtype:attempted-recon; sid:200047213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200047214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200047215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200047216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200047217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.cocodes.icu"; classtype:attempted-recon; sid:200047218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.csndax.icu"; classtype:attempted-recon; sid:200047219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200047220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200047221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.dieowp.icu"; classtype:attempted-recon; sid:200047222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.erqer.icu"; classtype:attempted-recon; sid:200047223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200047224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ghdes.icu"; classtype:attempted-recon; sid:200047225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.gocdr.icu"; classtype:attempted-recon; sid:200047226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200047227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200047228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200047229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.hajsued.icu"; classtype:attempted-recon; sid:200047230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.harginsu.icu"; classtype:attempted-recon; sid:200047231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200047232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.hoalside.icu"; classtype:attempted-recon; sid:200047233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200047234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200047235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200047236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200047237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.jhusd.icu"; classtype:attempted-recon; sid:200047238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.jpisi.icu"; classtype:attempted-recon; sid:200047239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200047240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200047241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.jssjue.icu"; classtype:attempted-recon; sid:200047242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.kaosid.icu"; classtype:attempted-recon; sid:200047243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200047244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.koplsig.icu"; classtype:attempted-recon; sid:200047245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200047246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ksudie.icu"; classtype:attempted-recon; sid:200047247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.laiisode.icu"; classtype:attempted-recon; sid:200047248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200047249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lasdas.icu"; classtype:attempted-recon; sid:200047250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200047251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lianges.icu"; classtype:attempted-recon; sid:200047252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200047253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200047254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.likijs.icu"; classtype:attempted-recon; sid:200047255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200047256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200047257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.losijdue.icu"; classtype:attempted-recon; sid:200047258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200047259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200047260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200047261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lshosie.icu"; classtype:attempted-recon; sid:200047262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200047263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200047264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200047265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200047266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200047267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200047268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200047269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200047270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200047271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsposie.icu"; classtype:attempted-recon; sid:200047272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200047273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200047274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200047275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200047276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200047277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200047278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200047279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200047280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200047281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.maediof.icu"; classtype:attempted-recon; sid:200047282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200047283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.mangesd.icu"; classtype:attempted-recon; sid:200047284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.margincolor.icu"; classtype:attempted-recon; sid:200047285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200047286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200047287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.msjdud.icu"; classtype:attempted-recon; sid:200047288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200047289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200047290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.msjudi.icu"; classtype:attempted-recon; sid:200047291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.msodik.icu"; classtype:attempted-recon; sid:200047292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200047293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.namkdi.icu"; classtype:attempted-recon; sid:200047294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nanish.icu"; classtype:attempted-recon; sid:200047295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200047296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200047297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nhduio.icu"; classtype:attempted-recon; sid:200047298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200047299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200047300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200047301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200047302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200047303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200047304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200047305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.omgg0.icu"; classtype:attempted-recon; sid:200047306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.paddki.icu"; classtype:attempted-recon; sid:200047307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.pilidu.icu"; classtype:attempted-recon; sid:200047308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200047309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200047310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.qiehao.icu"; classtype:attempted-recon; sid:200047311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.qishui3.icu"; classtype:attempted-recon; sid:200047312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.recordd.icu"; classtype:attempted-recon; sid:200047313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200047314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200047315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.sinnod.icu"; classtype:attempted-recon; sid:200047316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200047317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200047318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200047319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200047320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200047321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200047322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.trsas.icu"; classtype:attempted-recon; sid:200047323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200047324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.tyroess.icu"; classtype:attempted-recon; sid:200047325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.usideq.icu"; classtype:attempted-recon; sid:200047326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.v3454.icu"; classtype:attempted-recon; sid:200047327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.vajdui.icu"; classtype:attempted-recon; sid:200047328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.vardir.icu"; classtype:attempted-recon; sid:200047329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200047330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200047331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200047332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200047333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200047334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xskieus.icu"; classtype:attempted-recon; sid:200047335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200047336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200047337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200047338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200047339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsccaascia.ooaesc.yianskd.icu"; classtype:attempted-recon; sid:200047340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.axrcbx.top"; classtype:attempted-recon; sid:200047341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.azrsog.top"; classtype:attempted-recon; sid:200047342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.buavhf.top"; classtype:attempted-recon; sid:200047343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.geqnuq.top"; classtype:attempted-recon; sid:200047344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.isvuiy.top"; classtype:attempted-recon; sid:200047345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.jfcxph.top"; classtype:attempted-recon; sid:200047346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.jsmfgc.top"; classtype:attempted-recon; sid:200047347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.kbroxv.top"; classtype:attempted-recon; sid:200047348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.kvdxks.top"; classtype:attempted-recon; sid:200047349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.mdxbrn.top"; classtype:attempted-recon; sid:200047350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.nnawmj.top"; classtype:attempted-recon; sid:200047351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.nofalw.top"; classtype:attempted-recon; sid:200047352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.oajqfn.top"; classtype:attempted-recon; sid:200047353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.orcbvv.top"; classtype:attempted-recon; sid:200047354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.peshlh.shop"; classtype:attempted-recon; sid:200047355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.pgdfhw.top"; classtype:attempted-recon; sid:200047356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.pkwrdl.top"; classtype:attempted-recon; sid:200047357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.pmnaeh.top"; classtype:attempted-recon; sid:200047358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.qbcbta.top"; classtype:attempted-recon; sid:200047359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.rgqjka.top"; classtype:attempted-recon; sid:200047360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.sorjpe.top"; classtype:attempted-recon; sid:200047361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.svfocp.top"; classtype:attempted-recon; sid:200047362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.tppwpi.top"; classtype:attempted-recon; sid:200047363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.tvbcmo.top"; classtype:attempted-recon; sid:200047364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.uarmbh.top"; classtype:attempted-recon; sid:200047365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.uiedwv.top"; classtype:attempted-recon; sid:200047366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.ukohwk.top"; classtype:attempted-recon; sid:200047367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.vlunrr.top"; classtype:attempted-recon; sid:200047368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.wezouj.top"; classtype:attempted-recon; sid:200047369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.wiqlcn.top"; classtype:attempted-recon; sid:200047370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.xewfoa.top"; classtype:attempted-recon; sid:200047371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.xwdvad.top"; classtype:attempted-recon; sid:200047372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.zqawii.top"; classtype:attempted-recon; sid:200047373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceceia.cea.zvzqtl.top"; classtype:attempted-recon; sid:200047374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.axrcbx.top"; classtype:attempted-recon; sid:200047375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.azrsog.top"; classtype:attempted-recon; sid:200047376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.buavhf.top"; classtype:attempted-recon; sid:200047377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.geqnuq.top"; classtype:attempted-recon; sid:200047378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.isvuiy.top"; classtype:attempted-recon; sid:200047379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.jfcxph.top"; classtype:attempted-recon; sid:200047380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.jsmfgc.top"; classtype:attempted-recon; sid:200047381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.kbroxv.top"; classtype:attempted-recon; sid:200047382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.kvdxks.top"; classtype:attempted-recon; sid:200047383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.mdxbrn.top"; classtype:attempted-recon; sid:200047384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.nnawmj.top"; classtype:attempted-recon; sid:200047385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.nofalw.top"; classtype:attempted-recon; sid:200047386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.oajqfn.top"; classtype:attempted-recon; sid:200047387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.obekup.shop"; classtype:attempted-recon; sid:200047388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.orcbvv.top"; classtype:attempted-recon; sid:200047389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.owbxts.top"; classtype:attempted-recon; sid:200047390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.pgdfhw.top"; classtype:attempted-recon; sid:200047391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.pkwrdl.top"; classtype:attempted-recon; sid:200047392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.pmnaeh.top"; classtype:attempted-recon; sid:200047393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.qbcbta.top"; classtype:attempted-recon; sid:200047394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.rgqjka.top"; classtype:attempted-recon; sid:200047395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.sorjpe.top"; classtype:attempted-recon; sid:200047396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.svfocp.top"; classtype:attempted-recon; sid:200047397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.sxmerd.shop"; classtype:attempted-recon; sid:200047398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.tppwpi.top"; classtype:attempted-recon; sid:200047399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.tvbcmo.top"; classtype:attempted-recon; sid:200047400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.uarmbh.top"; classtype:attempted-recon; sid:200047401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.uiedwv.top"; classtype:attempted-recon; sid:200047402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.ukohwk.top"; classtype:attempted-recon; sid:200047403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.urgggv.shop"; classtype:attempted-recon; sid:200047404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.vlunrr.top"; classtype:attempted-recon; sid:200047405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.wezouj.top"; classtype:attempted-recon; sid:200047406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.wiqlcn.top"; classtype:attempted-recon; sid:200047407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.xewfoa.top"; classtype:attempted-recon; sid:200047408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.xwdvad.top"; classtype:attempted-recon; sid:200047409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.yxpfzh.top"; classtype:attempted-recon; sid:200047410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.zqawii.top"; classtype:attempted-recon; sid:200047411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevsvavceia.aea.zvzqtl.top"; classtype:attempted-recon; sid:200047412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200047413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200047414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200047415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200047416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200047417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200047418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200047419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200047420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200047421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200047422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200047423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200047424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200047425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200047426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200047427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.csndax.icu"; classtype:attempted-recon; sid:200047428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200047429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200047430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200047431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.erqer.icu"; classtype:attempted-recon; sid:200047432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200047433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200047434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200047435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200047436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200047437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200047438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200047439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200047440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200047441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200047442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200047443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200047444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200047445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200047446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200047447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200047448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200047449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200047450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200047451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200047452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200047453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200047454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200047455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200047456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200047457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200047458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200047459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200047460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lianges.icu"; classtype:attempted-recon; sid:200047461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200047462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200047463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.likijs.icu"; classtype:attempted-recon; sid:200047464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200047465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200047466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200047467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200047468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200047469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200047470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200047471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200047472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200047473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200047474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200047475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200047476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200047477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200047478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200047479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200047480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200047481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200047482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200047483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200047484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200047485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200047486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200047487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200047488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200047489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200047490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.maediof.icu"; classtype:attempted-recon; sid:200047491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200047492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200047493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200047494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200047495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200047496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200047497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200047498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200047499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200047500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.msodik.icu"; classtype:attempted-recon; sid:200047501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200047502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200047503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nanish.icu"; classtype:attempted-recon; sid:200047504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200047505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200047506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200047507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200047508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200047509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200047510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200047511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200047512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200047513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200047514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200047515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.paddki.icu"; classtype:attempted-recon; sid:200047516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200047517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200047518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200047519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200047520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200047521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.recordd.icu"; classtype:attempted-recon; sid:200047522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200047523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200047524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200047525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200047526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200047527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200047528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200047529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200047530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200047531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.trsas.icu"; classtype:attempted-recon; sid:200047532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200047533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200047534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.usideq.icu"; classtype:attempted-recon; sid:200047535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.v3454.icu"; classtype:attempted-recon; sid:200047536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200047537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.vardir.icu"; classtype:attempted-recon; sid:200047538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200047539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200047540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200047541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200047542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200047543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200047544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200047545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200047546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200047547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200047548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseiasvcia.oeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200047549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200047550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200047551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200047552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200047553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200047554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200047555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200047556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200047557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200047558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200047559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200047560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200047561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200047562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200047563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200047564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200047565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200047566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200047567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200047568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200047569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200047570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200047571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200047572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200047573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200047574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200047575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200047576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200047577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200047578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200047579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200047580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200047581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200047582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200047583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200047584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200047585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200047586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200047587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200047588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200047589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200047590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200047591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200047592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200047593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200047594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200047595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200047596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200047597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200047598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200047599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200047600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200047601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200047602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200047603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200047604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200047605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200047606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200047607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200047608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200047609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200047610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200047611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200047612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200047613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200047614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200047615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200047616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200047617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200047618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200047619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200047620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200047621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200047622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200047623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200047624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200047625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200047626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200047627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200047628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200047629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200047630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200047631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200047632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200047633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200047634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200047635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200047636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200047637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200047638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200047639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200047640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200047641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200047642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200047643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200047644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200047645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200047646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200047647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200047648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200047649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200047650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200047651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200047652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200047653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200047654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200047655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200047656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200047657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200047658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200047659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200047660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200047661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200047662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200047663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200047664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200047665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200047666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200047667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200047668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200047669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200047670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200047671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200047672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200047673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200047674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200047675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200047676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200047677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200047678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200047679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200047680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200047681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200047682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200047683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200047684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200047685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccacseoeiasvcia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200047686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.0e0db.icu"; classtype:attempted-recon; sid:200047687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200047688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200047689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200047690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.asjdied.icu"; classtype:attempted-recon; sid:200047691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200047692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.bahusue.icu"; classtype:attempted-recon; sid:200047693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.baidu123.icu"; classtype:attempted-recon; sid:200047694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200047695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.bfhju.icu"; classtype:attempted-recon; sid:200047696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200047697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200047698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200047699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200047700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.cocodes.icu"; classtype:attempted-recon; sid:200047701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.csndax.icu"; classtype:attempted-recon; sid:200047702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200047703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200047704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.dieowp.icu"; classtype:attempted-recon; sid:200047705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.erqer.icu"; classtype:attempted-recon; sid:200047706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200047707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ghdes.icu"; classtype:attempted-recon; sid:200047708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.gocdr.icu"; classtype:attempted-recon; sid:200047709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200047710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200047711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200047712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.hajsued.icu"; classtype:attempted-recon; sid:200047713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.harginsu.icu"; classtype:attempted-recon; sid:200047714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200047715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.hoalside.icu"; classtype:attempted-recon; sid:200047716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200047717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200047718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200047719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200047720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.jhusd.icu"; classtype:attempted-recon; sid:200047721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.jpisi.icu"; classtype:attempted-recon; sid:200047722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200047723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200047724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.jssjue.icu"; classtype:attempted-recon; sid:200047725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.kaosid.icu"; classtype:attempted-recon; sid:200047726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200047727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.koplsig.icu"; classtype:attempted-recon; sid:200047728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200047729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ksudie.icu"; classtype:attempted-recon; sid:200047730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.laiisode.icu"; classtype:attempted-recon; sid:200047731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200047732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lasdas.icu"; classtype:attempted-recon; sid:200047733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200047734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lianges.icu"; classtype:attempted-recon; sid:200047735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200047736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200047737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.likijs.icu"; classtype:attempted-recon; sid:200047738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200047739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200047740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.losijdue.icu"; classtype:attempted-recon; sid:200047741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200047742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200047743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200047744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lshosie.icu"; classtype:attempted-recon; sid:200047745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200047746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200047747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200047748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200047749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200047750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200047751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200047752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200047753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200047754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsposie.icu"; classtype:attempted-recon; sid:200047755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200047756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200047757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200047758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200047759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200047760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200047761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200047762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200047763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200047764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.maediof.icu"; classtype:attempted-recon; sid:200047765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200047766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.mangesd.icu"; classtype:attempted-recon; sid:200047767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.margincolor.icu"; classtype:attempted-recon; sid:200047768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200047769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200047770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.msjdud.icu"; classtype:attempted-recon; sid:200047771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200047772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200047773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.msjudi.icu"; classtype:attempted-recon; sid:200047774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.msodik.icu"; classtype:attempted-recon; sid:200047775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200047776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.namkdi.icu"; classtype:attempted-recon; sid:200047777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nanish.icu"; classtype:attempted-recon; sid:200047778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200047779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200047780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nhduio.icu"; classtype:attempted-recon; sid:200047781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200047782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200047783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200047784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200047785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200047786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200047787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200047788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.omgg0.icu"; classtype:attempted-recon; sid:200047789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.paddki.icu"; classtype:attempted-recon; sid:200047790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.pilidu.icu"; classtype:attempted-recon; sid:200047791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200047792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200047793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.qiehao.icu"; classtype:attempted-recon; sid:200047794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.qishui3.icu"; classtype:attempted-recon; sid:200047795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.recordd.icu"; classtype:attempted-recon; sid:200047796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200047797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200047798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.sinnod.icu"; classtype:attempted-recon; sid:200047799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200047800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200047801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200047802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200047803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200047804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200047805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.trsas.icu"; classtype:attempted-recon; sid:200047806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200047807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.tyroess.icu"; classtype:attempted-recon; sid:200047808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.usideq.icu"; classtype:attempted-recon; sid:200047809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.v3454.icu"; classtype:attempted-recon; sid:200047810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.vajdui.icu"; classtype:attempted-recon; sid:200047811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.vardir.icu"; classtype:attempted-recon; sid:200047812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200047813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200047814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200047815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200047816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200047817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xskieus.icu"; classtype:attempted-recon; sid:200047818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200047819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200047820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200047821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200047822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaesevcia.ceooaesc.yianskd.icu"; classtype:attempted-recon; sid:200047823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.0e0db.icu"; classtype:attempted-recon; sid:200047824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.6f1mf.icu"; classtype:attempted-recon; sid:200047825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.asdaeer.icu"; classtype:attempted-recon; sid:200047826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.asdueiw.icu"; classtype:attempted-recon; sid:200047827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.asjdied.icu"; classtype:attempted-recon; sid:200047828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.b5jsued.icu"; classtype:attempted-recon; sid:200047829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.bahusue.icu"; classtype:attempted-recon; sid:200047830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.baidu123.icu"; classtype:attempted-recon; sid:200047831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.baudiqq.icu"; classtype:attempted-recon; sid:200047832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.bfhju.icu"; classtype:attempted-recon; sid:200047833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.bsdeio.icu"; classtype:attempted-recon; sid:200047834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.bvhjjd.icu"; classtype:attempted-recon; sid:200047835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.cdiosa.icu"; classtype:attempted-recon; sid:200047836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ckfbs.icu"; classtype:attempted-recon; sid:200047837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.cocodes.icu"; classtype:attempted-recon; sid:200047838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.csndax.icu"; classtype:attempted-recon; sid:200047839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.d3skoc332.icu"; classtype:attempted-recon; sid:200047840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.dayuhao.icu"; classtype:attempted-recon; sid:200047841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.dieowp.icu"; classtype:attempted-recon; sid:200047842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.erqer.icu"; classtype:attempted-recon; sid:200047843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.fpaksix.icu"; classtype:attempted-recon; sid:200047844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ghdes.icu"; classtype:attempted-recon; sid:200047845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.gocdr.icu"; classtype:attempted-recon; sid:200047846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.gsyeidt.icu"; classtype:attempted-recon; sid:200047847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.gsyeuwi.icu"; classtype:attempted-recon; sid:200047848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.gtxdifu.icu"; classtype:attempted-recon; sid:200047849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.hajsued.icu"; classtype:attempted-recon; sid:200047850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.harginsu.icu"; classtype:attempted-recon; sid:200047851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.hliurkd.icu"; classtype:attempted-recon; sid:200047852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.hoalside.icu"; classtype:attempted-recon; sid:200047853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.hsyueiod.icu"; classtype:attempted-recon; sid:200047854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.huaxianone.icu"; classtype:attempted-recon; sid:200047855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.i1lyb.icu"; classtype:attempted-recon; sid:200047856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ixousudy.icu"; classtype:attempted-recon; sid:200047857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.jhusd.icu"; classtype:attempted-recon; sid:200047858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.jpisi.icu"; classtype:attempted-recon; sid:200047859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.jskidoe.icu"; classtype:attempted-recon; sid:200047860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.jsodiek.icu"; classtype:attempted-recon; sid:200047861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.jssjue.icu"; classtype:attempted-recon; sid:200047862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.kaosid.icu"; classtype:attempted-recon; sid:200047863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.kjdjwuw.icu"; classtype:attempted-recon; sid:200047864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.koplsig.icu"; classtype:attempted-recon; sid:200047865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ksidujed.icu"; classtype:attempted-recon; sid:200047866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ksudie.icu"; classtype:attempted-recon; sid:200047867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.laiisode.icu"; classtype:attempted-recon; sid:200047868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.laoisuej.icu"; classtype:attempted-recon; sid:200047869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lasdas.icu"; classtype:attempted-recon; sid:200047870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lciskdu.icu"; classtype:attempted-recon; sid:200047871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lianges.icu"; classtype:attempted-recon; sid:200047872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lijhdjsu.icu"; classtype:attempted-recon; sid:200047873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lijhdy.icu"; classtype:attempted-recon; sid:200047874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.likijs.icu"; classtype:attempted-recon; sid:200047875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lingangbcy.xyz"; classtype:attempted-recon; sid:200047876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lkosdf.icu"; classtype:attempted-recon; sid:200047877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.losijdue.icu"; classtype:attempted-recon; sid:200047878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsasdfg.icu"; classtype:attempted-recon; sid:200047879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsggppe.icu"; classtype:attempted-recon; sid:200047880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsgsda.icu"; classtype:attempted-recon; sid:200047881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lshosie.icu"; classtype:attempted-recon; sid:200047882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsjdhi.icu"; classtype:attempted-recon; sid:200047883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsklsope.icu"; classtype:attempted-recon; sid:200047884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lskoposi.icu"; classtype:attempted-recon; sid:200047885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsloposl.icu"; classtype:attempted-recon; sid:200047886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lslpoi223.icu"; classtype:attempted-recon; sid:200047887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsoidike.icu"; classtype:attempted-recon; sid:200047888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsoieuy.icu"; classtype:attempted-recon; sid:200047889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsoieuyr.icu"; classtype:attempted-recon; sid:200047890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsoiujds.icu"; classtype:attempted-recon; sid:200047891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsposie.icu"; classtype:attempted-recon; sid:200047892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lspxoiu.icu"; classtype:attempted-recon; sid:200047893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsqpoisue.icu"; classtype:attempted-recon; sid:200047894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsshkly.icu"; classtype:attempted-recon; sid:200047895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lssncjud.icu"; classtype:attempted-recon; sid:200047896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lssopdie.icu"; classtype:attempted-recon; sid:200047897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lssqwe3ly.icu"; classtype:attempted-recon; sid:200047898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lsxoisd.icu"; classtype:attempted-recon; sid:200047899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.lxiskjde.icu"; classtype:attempted-recon; sid:200047900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ma4k6.icu"; classtype:attempted-recon; sid:200047901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.maediof.icu"; classtype:attempted-recon; sid:200047902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.magxoisud.icu"; classtype:attempted-recon; sid:200047903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.mangesd.icu"; classtype:attempted-recon; sid:200047904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.margincolor.icu"; classtype:attempted-recon; sid:200047905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.mjsudio.icu"; classtype:attempted-recon; sid:200047906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.mpdskdf.icu"; classtype:attempted-recon; sid:200047907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.msjdud.icu"; classtype:attempted-recon; sid:200047908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.msjdyf.icu"; classtype:attempted-recon; sid:200047909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.msjhdyue.icu"; classtype:attempted-recon; sid:200047910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.msjudi.icu"; classtype:attempted-recon; sid:200047911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.msodik.icu"; classtype:attempted-recon; sid:200047912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.mxkusjdi.icu"; classtype:attempted-recon; sid:200047913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.namkdi.icu"; classtype:attempted-recon; sid:200047914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nanish.icu"; classtype:attempted-recon; sid:200047915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ncjhdyri.icu"; classtype:attempted-recon; sid:200047916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.ncjxliskd.icu"; classtype:attempted-recon; sid:200047917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nhduio.icu"; classtype:attempted-recon; sid:200047918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nhusiwa.icu"; classtype:attempted-recon; sid:200047919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nishilaji.icu"; classtype:attempted-recon; sid:200047920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nsjdyues.icu"; classtype:attempted-recon; sid:200047921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nsyheuks.icu"; classtype:attempted-recon; sid:200047922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nvmkdi.icu"; classtype:attempted-recon; sid:200047923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.nxhgsyd.icu"; classtype:attempted-recon; sid:200047924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.olkijsd.icu"; classtype:attempted-recon; sid:200047925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.omgg0.icu"; classtype:attempted-recon; sid:200047926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.paddki.icu"; classtype:attempted-recon; sid:200047927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.pilidu.icu"; classtype:attempted-recon; sid:200047928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.plaiksd.icu"; classtype:attempted-recon; sid:200047929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.qhjkof.icu"; classtype:attempted-recon; sid:200047930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.qiehao.icu"; classtype:attempted-recon; sid:200047931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.qishui3.icu"; classtype:attempted-recon; sid:200047932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.recordd.icu"; classtype:attempted-recon; sid:200047933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.sdaiexswe.icu"; classtype:attempted-recon; sid:200047934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.sdwsyde.icu"; classtype:attempted-recon; sid:200047935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.sinnod.icu"; classtype:attempted-recon; sid:200047936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.sokdjhre.icu"; classtype:attempted-recon; sid:200047937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.t4gwf.icu"; classtype:attempted-recon; sid:200047938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.tablegsh.icu"; classtype:attempted-recon; sid:200047939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.tashpitum.icu"; classtype:attempted-recon; sid:200047940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.tiafedf.icu"; classtype:attempted-recon; sid:200047941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.toutiaohao.icu"; classtype:attempted-recon; sid:200047942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.trsas.icu"; classtype:attempted-recon; sid:200047943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.tsyudasd.icu"; classtype:attempted-recon; sid:200047944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.tyroess.icu"; classtype:attempted-recon; sid:200047945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.usideq.icu"; classtype:attempted-recon; sid:200047946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.v3454.icu"; classtype:attempted-recon; sid:200047947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.vajdui.icu"; classtype:attempted-recon; sid:200047948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.vardir.icu"; classtype:attempted-recon; sid:200047949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xiksjude.icu"; classtype:attempted-recon; sid:200047950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xiuydw.icu"; classtype:attempted-recon; sid:200047951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xlsoida.icu"; classtype:attempted-recon; sid:200047952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xmsjdhf.icu"; classtype:attempted-recon; sid:200047953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xmsjude.icu"; classtype:attempted-recon; sid:200047954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xskieus.icu"; classtype:attempted-recon; sid:200047955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xujsioa.icu"; classtype:attempted-recon; sid:200047956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xuyhsjd.icu"; classtype:attempted-recon; sid:200047957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xzkuf.icu"; classtype:attempted-recon; sid:200047958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.xzsywte.icu"; classtype:attempted-recon; sid:200047959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsvevvccasaevcia.aeooaesc.yianskd.icu"; classtype:attempted-recon; sid:200047960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vsz.dpbdquk.cn"; classtype:attempted-recon; sid:200047961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtgmzrfeha.duckdns.org"; classtype:attempted-recon; sid:200047962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtgwjvpmxd.duckdns.org"; classtype:attempted-recon; sid:200047963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtkmzkdpjq.duckdns.org"; classtype:attempted-recon; sid:200047964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtkusxvqnr.duckdns.org"; classtype:attempted-recon; sid:200047965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtrq51.hyperphp.com"; classtype:attempted-recon; sid:200047966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtsrrrddhu.duckdns.org"; classtype:attempted-recon; sid:200047967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtxmail2018.myfreesites.net"; classtype:attempted-recon; sid:200047968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vtxseootnr.duckdns.org"; classtype:attempted-recon; sid:200047969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vub-appsk.web.app"; classtype:attempted-recon; sid:200047970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vubzbilmoc.duckdns.org"; classtype:attempted-recon; sid:200047971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vugtmayqmk.duckdns.org"; classtype:attempted-recon; sid:200047972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vulgskkjwu.duckdns.org"; classtype:attempted-recon; sid:200047973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vuphgavuwb.duckdns.org"; classtype:attempted-recon; sid:200047974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vusrcapenf.duckdns.org"; classtype:attempted-recon; sid:200047975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vuycvufjio.duckdns.org"; classtype:attempted-recon; sid:200047976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvallet-palyogn.technology"; classtype:attempted-recon; sid:200047977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvanm.com"; classtype:attempted-recon; sid:200047978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvcpefanll.duckdns.org"; classtype:attempted-recon; sid:200047979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvewmpabkf.duckdns.org"; classtype:attempted-recon; sid:200047980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvfcsarnou.duckdns.org"; classtype:attempted-recon; sid:200047981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvhpugdpet.duckdns.org"; classtype:attempted-recon; sid:200047982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vviapobcob.duckdns.org"; classtype:attempted-recon; sid:200047983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvjeshmlgc.duckdns.org"; classtype:attempted-recon; sid:200047984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvjyqwwkgv.duckdns.org"; classtype:attempted-recon; sid:200047985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvntechnologies.com"; classtype:attempted-recon; sid:200047986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvueqqwlbp.duckdns.org"; classtype:attempted-recon; sid:200047987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvvlwxlxoi.duckdns.org"; classtype:attempted-recon; sid:200047988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvwzonasengurapichincha.com"; classtype:attempted-recon; sid:200047989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvygdjfxla.duckdns.org"; classtype:attempted-recon; sid:200047990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vvzhgqqvfx.duckdns.org"; classtype:attempted-recon; sid:200047991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwgknrsbkk.duckdns.org"; classtype:attempted-recon; sid:200047992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwjwwwjjjx.duckdns.org"; classtype:attempted-recon; sid:200047993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwlsqhkjsf.duckdns.org"; classtype:attempted-recon; sid:200047994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwopngsynr.duckdns.org"; classtype:attempted-recon; sid:200047995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwoqhivhak.duckdns.org"; classtype:attempted-recon; sid:200047996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwoubewdks.duckdns.org"; classtype:attempted-recon; sid:200047997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwsaessrin.duckdns.org"; classtype:attempted-recon; sid:200047998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwsdwzdbxl.duckdns.org"; classtype:attempted-recon; sid:200047999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwswfmrhud.duckdns.org"; classtype:attempted-recon; sid:200048000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwvpinchincha.com"; classtype:attempted-recon; sid:200048001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwvqzylrhm.duckdns.org"; classtype:attempted-recon; sid:200048002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vwzroxbgfa.duckdns.org"; classtype:attempted-recon; sid:200048003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vx.c9in4n7.cn"; classtype:attempted-recon; sid:200048004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vx.lc460cv.cn"; classtype:attempted-recon; sid:200048005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vx.odhik3vy.cn"; classtype:attempted-recon; sid:200048006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vx.oyiorpg.cn"; classtype:attempted-recon; sid:200048007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vx.wcw3oln.cn"; classtype:attempted-recon; sid:200048008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vx.wjc91aw.cn"; classtype:attempted-recon; sid:200048009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vx.x43lzzv.cn"; classtype:attempted-recon; sid:200048010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxacocrhdj.duckdns.org"; classtype:attempted-recon; sid:200048011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxaexeulqv.duckdns.org"; classtype:attempted-recon; sid:200048012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxcd.yatpvbn.cn"; classtype:attempted-recon; sid:200048013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.bkoqyqh.cn"; classtype:attempted-recon; sid:200048014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.caatmem.cn"; classtype:attempted-recon; sid:200048015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.eaowewa.cn"; classtype:attempted-recon; sid:200048016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.euvinzi.cn"; classtype:attempted-recon; sid:200048017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.fznobe1r.cn"; classtype:attempted-recon; sid:200048018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.igwkrxp.cn"; classtype:attempted-recon; sid:200048019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.lbibock.cn"; classtype:attempted-recon; sid:200048020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.ttxmcry.cn"; classtype:attempted-recon; sid:200048021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxd.udodcvk.cn"; classtype:attempted-recon; sid:200048022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxds.ionooc.cn"; classtype:attempted-recon; sid:200048023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxdse.myfreesites.net"; classtype:attempted-recon; sid:200048024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxhkivfrkk.duckdns.org"; classtype:attempted-recon; sid:200048025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxiyfopnpw.duckdns.org"; classtype:attempted-recon; sid:200048026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxkixlwvut.duckdns.org"; classtype:attempted-recon; sid:200048027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxnpflyezw.duckdns.org"; classtype:attempted-recon; sid:200048028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxoaxyhtul.duckdns.org"; classtype:attempted-recon; sid:200048029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxsd.aqnqkdm.cn"; classtype:attempted-recon; sid:200048030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxsd.tbtlufu.cn"; classtype:attempted-recon; sid:200048031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxz.pjjpd24.cn"; classtype:attempted-recon; sid:200048032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxz.ubqfcvc.cn"; classtype:attempted-recon; sid:200048033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxzs.hjmhlnl.cn"; classtype:attempted-recon; sid:200048034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vxzs.vcyqzek.cn"; classtype:attempted-recon; sid:200048035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vyattaworld.com"; classtype:attempted-recon; sid:200048036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vykuntapuramtenali.org"; classtype:attempted-recon; sid:200048037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vysqcygavl.duckdns.org"; classtype:attempted-recon; sid:200048038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vystar.toorassociate.com"; classtype:attempted-recon; sid:200048039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vyvhbbdmtd.duckdns.org"; classtype:attempted-recon; sid:200048040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vyvmrcbecj.duckdns.org"; classtype:attempted-recon; sid:200048041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vyvqzmkrbn.duckdns.org"; classtype:attempted-recon; sid:200048042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vywyffrzzv.duckdns.org"; classtype:attempted-recon; sid:200048043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vyxokmgxca.duckdns.org"; classtype:attempted-recon; sid:200048044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzdbn.rspdebl.cn"; classtype:attempted-recon; sid:200048045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzds.u1m33p9.cn"; classtype:attempted-recon; sid:200048046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzgeurqkzg.duckdns.org"; classtype:attempted-recon; sid:200048047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vziaipjqjk.duckdns.org"; classtype:attempted-recon; sid:200048048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzkeebyojw.duckdns.org"; classtype:attempted-recon; sid:200048049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzppktmrml.duckdns.org"; classtype:attempted-recon; sid:200048050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzrnlwnrwn.duckdns.org"; classtype:attempted-recon; sid:200048051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzvtzgjvdb.duckdns.org"; classtype:attempted-recon; sid:200048052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzwpjpxcvn.duckdns.org"; classtype:attempted-recon; sid:200048053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzxds.yuanshengjiankang.cn"; classtype:attempted-recon; sid:200048054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vzxsrkqgpt.duckdns.org"; classtype:attempted-recon; sid:200048055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w.digitalfans.com"; classtype:attempted-recon; sid:200048056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w53.duckdns.org"; classtype:attempted-recon; sid:200048057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w6eu6w77.cn"; classtype:attempted-recon; sid:200048058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w782409br247e.blogspot.com"; classtype:attempted-recon; sid:200048059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w80e4yhgf0-phw0vhb0-pswbhdv0-bwhs0-rbhvr.obs.la-south-2.myhuaweicloud.com"; classtype:attempted-recon; sid:200048060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w83774-3843.firebaseapp.com"; classtype:attempted-recon; sid:200048061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w83774-3843.web.app"; classtype:attempted-recon; sid:200048062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w92.myportfolio.com"; classtype:attempted-recon; sid:200048063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"w9eventos.com"; classtype:attempted-recon; sid:200048064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wa.mfs.gg"; classtype:attempted-recon; sid:200048065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wafygvpsdn.duckdns.org"; classtype:attempted-recon; sid:200048066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wahana.lk"; classtype:attempted-recon; sid:200048067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wahed-koudsi2001.github.io"; classtype:attempted-recon; sid:200048068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wakhrzxkcn.duckdns.org"; classtype:attempted-recon; sid:200048069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"waldenkathy59.wixsite.com"; classtype:attempted-recon; sid:200048070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walldesign.com.tr"; classtype:attempted-recon; sid:200048071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet-connect012.web.app"; classtype:attempted-recon; sid:200048072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet-exodus.siterubix.com"; classtype:attempted-recon; sid:200048073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet-exodux.github.io"; classtype:attempted-recon; sid:200048074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet-validator.tech"; classtype:attempted-recon; sid:200048075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet.nnynnonero.com"; classtype:attempted-recon; sid:200048076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet.polygon-technology.me"; classtype:attempted-recon; sid:200048077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet.polyqontechnoloqy.xyz"; classtype:attempted-recon; sid:200048078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallet.silesiacoin.com"; classtype:attempted-recon; sid:200048079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletappconnect.com"; classtype:attempted-recon; sid:200048080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletappsolution.com"; classtype:attempted-recon; sid:200048081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletconnectall.net"; classtype:attempted-recon; sid:200048082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletconnects.tel"; classtype:attempted-recon; sid:200048083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletexedus.siterubix.com"; classtype:attempted-recon; sid:200048084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletreconcile.com"; classtype:attempted-recon; sid:200048085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallets-connect.co"; classtype:attempted-recon; sid:200048086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallets-support.com"; classtype:attempted-recon; sid:200048087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wallets-update.rf.gd"; classtype:attempted-recon; sid:200048088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletsdefi.com"; classtype:attempted-recon; sid:200048089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletsencrypts.com"; classtype:attempted-recon; sid:200048090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletsushi.net"; classtype:attempted-recon; sid:200048091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletvalidation.link"; classtype:attempted-recon; sid:200048092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletvalidators.com"; classtype:attempted-recon; sid:200048093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletwebrectification.net"; classtype:attempted-recon; sid:200048094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walthamfirefighters.com"; classtype:attempted-recon; sid:200048095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wana78420.myfreesites.net"; classtype:attempted-recon; sid:200048096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wandering-fire-1c00.jamaljewellerry356.workers.dev"; classtype:attempted-recon; sid:200048097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wandering-frosreg.people-meedia.workers.dev"; classtype:attempted-recon; sid:200048098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wandering-recip.u1r79b1c.workers.dev"; classtype:attempted-recon; sid:200048099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wapking.com.se"; classtype:attempted-recon; sid:200048100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wapuzagrfq.duckdns.org"; classtype:attempted-recon; sid:200048101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"waqassupplies.com"; classtype:attempted-recon; sid:200048102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"warlikedimgrayruntimes.servicebofbnk.repl.co"; classtype:attempted-recon; sid:200048103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"warnertelecomm.com"; classtype:attempted-recon; sid:200048104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"warsa.bandungkab.go.id"; classtype:attempted-recon; sid:200048105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"waseswayya.duckdns.org"; classtype:attempted-recon; sid:200048106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"watch-unlimited.com"; classtype:attempted-recon; sid:200048107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"watchess.com.pk"; classtype:attempted-recon; sid:200048108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"watxrjcmte.duckdns.org"; classtype:attempted-recon; sid:200048109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"waves-enterprise.com"; classtype:attempted-recon; sid:200048110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wavivzqswf.duckdns.org"; classtype:attempted-recon; sid:200048111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wawxflgpab.duckdns.org"; classtype:attempted-recon; sid:200048112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wayuai.com"; classtype:attempted-recon; sid:200048113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbcfvkzmmq.duckdns.org"; classtype:attempted-recon; sid:200048114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbgdnepshi.duckdns.org"; classtype:attempted-recon; sid:200048115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbiruapswt.duckdns.org"; classtype:attempted-recon; sid:200048116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wblewtyspt.duckdns.org"; classtype:attempted-recon; sid:200048117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wblteitxqr.duckdns.org"; classtype:attempted-recon; sid:200048118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbrcqcivqv.duckdns.org"; classtype:attempted-recon; sid:200048119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbryucmhef.duckdns.org"; classtype:attempted-recon; sid:200048120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbthrxkdyn.duckdns.org"; classtype:attempted-recon; sid:200048121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbvfvzqgmu.duckdns.org"; classtype:attempted-recon; sid:200048122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbvhwekpng.duckdns.org"; classtype:attempted-recon; sid:200048123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbvjmwsuxz.duckdns.org"; classtype:attempted-recon; sid:200048124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wbvvpesqwu.duckdns.org"; classtype:attempted-recon; sid:200048125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wceazwtpqm.duckdns.org"; classtype:attempted-recon; sid:200048126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcjekrstkj.duckdns.org"; classtype:attempted-recon; sid:200048127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcnbjtwiam.duckdns.org"; classtype:attempted-recon; sid:200048128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcnclvscyi.duckdns.org"; classtype:attempted-recon; sid:200048129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcnxgcozoj.duckdns.org"; classtype:attempted-recon; sid:200048130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcnzazjesv.duckdns.org"; classtype:attempted-recon; sid:200048131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcnzgiefip.duckdns.org"; classtype:attempted-recon; sid:200048132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcrpeztpou.duckdns.org"; classtype:attempted-recon; sid:200048133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wcxomeiofc.duckdns.org"; classtype:attempted-recon; sid:200048134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdacozkvfi.duckdns.org"; classtype:attempted-recon; sid:200048135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdbjirrdpd.duckdns.org"; classtype:attempted-recon; sid:200048136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdcmstfarr.duckdns.org"; classtype:attempted-recon; sid:200048137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wderwtfntd.duckdns.org"; classtype:attempted-recon; sid:200048138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdfclkhohg.duckdns.org"; classtype:attempted-recon; sid:200048139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdhlcidris.duckdns.org"; classtype:attempted-recon; sid:200048140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdkipomgjd.duckdns.org"; classtype:attempted-recon; sid:200048141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdoagruzdy.duckdns.org"; classtype:attempted-recon; sid:200048142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdsjyookfr.duckdns.org"; classtype:attempted-recon; sid:200048143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdwadazuvo.duckdns.org"; classtype:attempted-recon; sid:200048144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdweebwuuu.duckdns.org"; classtype:attempted-recon; sid:200048145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdxdotzrwc.duckdns.org"; classtype:attempted-recon; sid:200048146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdxkbydzzv.duckdns.org"; classtype:attempted-recon; sid:200048147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wdyvuitvli.duckdns.org"; classtype:attempted-recon; sid:200048148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weathered-bread02.peoople-media.workers.dev"; classtype:attempted-recon; sid:200048149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weathered-brook-6f8c.stubhub.workers.dev"; classtype:attempted-recon; sid:200048150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weathered-king-77ec.noxexexe.workers.dev"; classtype:attempted-recon; sid:200048151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weathered.mnevicionzone.workers.dev"; classtype:attempted-recon; sid:200048152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web-exoduss.com"; classtype:attempted-recon; sid:200048153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web-hiper-central.com"; classtype:attempted-recon; sid:200048154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web-sand-home.blogspot.com"; classtype:attempted-recon; sid:200048155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web-soc.firebaseapp.com"; classtype:attempted-recon; sid:200048156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web-soc.web.app"; classtype:attempted-recon; sid:200048157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web.activationaccess.com"; classtype:attempted-recon; sid:200048158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web.bredbanque.trans.sylog.co"; classtype:attempted-recon; sid:200048159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web.logodesign.net"; classtype:attempted-recon; sid:200048160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web.prodepo.com.tr"; classtype:attempted-recon; sid:200048161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web1.your1shopwithxz.com"; classtype:attempted-recon; sid:200048162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web3coi.web.app"; classtype:attempted-recon; sid:200048163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web3nodeapp.net"; classtype:attempted-recon; sid:200048164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web8484.web07.bero-webspace.de"; classtype:attempted-recon; sid:200048165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web8493.web07.bero-webspace.de"; classtype:attempted-recon; sid:200048166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web8504.web07.bero-webspace.de"; classtype:attempted-recon; sid:200048167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web8515.web07.bero-webspace.de"; classtype:attempted-recon; sid:200048168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web8574.web07.bero-webspace.de"; classtype:attempted-recon; sid:200048169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web8578.web07.bero-webspace.de"; classtype:attempted-recon; sid:200048170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web8579.web07.bero-webspace.de"; classtype:attempted-recon; sid:200048171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webairbnb.com"; classtype:attempted-recon; sid:200048172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webanalytics.harsha-abakus.com"; classtype:attempted-recon; sid:200048173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webclient.moreapp.com"; classtype:attempted-recon; sid:200048174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webconnectappsync.com"; classtype:attempted-recon; sid:200048175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webdappsauth.com"; classtype:attempted-recon; sid:200048176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webdatamltrainingdiag842.blob.core.windows.net"; classtype:attempted-recon; sid:200048177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webdonosti.com"; classtype:attempted-recon; sid:200048178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webelektron.pl"; classtype:attempted-recon; sid:200048179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webksblewf.duckdns.org"; classtype:attempted-recon; sid:200048180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webm-c3af3.firebaseapp.com"; classtype:attempted-recon; sid:200048181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webm-c3af3.web.app"; classtype:attempted-recon; sid:200048182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-105789.weeblysite.com"; classtype:attempted-recon; sid:200048183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-105816.weeblysite.com"; classtype:attempted-recon; sid:200048184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-cisco.firebaseapp.com"; classtype:attempted-recon; sid:200048185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-cisco.web.app"; classtype:attempted-recon; sid:200048186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-iinet-net-auindexphpmail.builderallwppro.com"; classtype:attempted-recon; sid:200048187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-laposte19.yolasite.com"; classtype:attempted-recon; sid:200048188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-laposte27.yolasite.com"; classtype:attempted-recon; sid:200048189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-roundcubeblack.firebaseapp.com"; classtype:attempted-recon; sid:200048190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-roundcubeblack.web.app"; classtype:attempted-recon; sid:200048191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail-sso8uyg.web.app"; classtype:attempted-recon; sid:200048192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail.bellahills.com"; classtype:attempted-recon; sid:200048193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail.salemgroups.com"; classtype:attempted-recon; sid:200048194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmail81pne.mailsrrsso908.workers.dev"; classtype:attempted-recon; sid:200048195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmailadmin0.myfreesites.net"; classtype:attempted-recon; sid:200048196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmailmaster.ml"; classtype:attempted-recon; sid:200048197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmailoutl.zyrosite.com"; classtype:attempted-recon; sid:200048198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmailpt.yolasite.com"; classtype:attempted-recon; sid:200048199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmial.constituters.shop"; classtype:attempted-recon; sid:200048200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webpage.revenue.services.i9tn4.us"; classtype:attempted-recon; sid:200048201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webper.eu"; classtype:attempted-recon; sid:200048202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webportaledati.com"; classtype:attempted-recon; sid:200048203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"websecupasslibrpstbpqs-authcertiplus.com"; classtype:attempted-recon; sid:200048204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webseguridadportalbancadavivienda.com"; classtype:attempted-recon; sid:200048205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webservice-mailupdatemail.arqanexportcompany1664.workers.dev"; classtype:attempted-recon; sid:200048206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webstories.eu"; classtype:attempted-recon; sid:200048207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webupdateserve.z33.web.core.windows.net"; classtype:attempted-recon; sid:200048208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webvalidator-interface.net"; classtype:attempted-recon; sid:200048209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webwalletconnect.com"; classtype:attempted-recon; sid:200048210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webzpllluh.duckdns.org"; classtype:attempted-recon; sid:200048211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wechatt.net"; classtype:attempted-recon; sid:200048212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wedpahecey.duckdns.org"; classtype:attempted-recon; sid:200048213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wefpvsnidm.duckdns.org"; classtype:attempted-recon; sid:200048214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weirdandtwisted.com"; classtype:attempted-recon; sid:200048215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wejotwmqye.duckdns.org"; classtype:attempted-recon; sid:200048216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"well-account.introductionally.webhostingforstudents.com"; classtype:attempted-recon; sid:200048217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wellhealthhtc.com"; classtype:attempted-recon; sid:200048218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wellsecure1.com"; classtype:attempted-recon; sid:200048219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wellsfargo.xghklkhggl.workers.dev"; classtype:attempted-recon; sid:200048220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wellssecure91.com"; classtype:attempted-recon; sid:200048221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wellssecurelogin.com"; classtype:attempted-recon; sid:200048222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wenandwander.com"; classtype:attempted-recon; sid:200048223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wenebelabuice.firebaseapp.com"; classtype:attempted-recon; sid:200048224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wenebelabuice.web.app"; classtype:attempted-recon; sid:200048225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weoiyvcj34jk5g.club"; classtype:attempted-recon; sid:200048226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weplays-connect.tv"; classtype:attempted-recon; sid:200048227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weprotectyourprivacy4562565869.co.vu"; classtype:attempted-recon; sid:200048228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"werare.ru"; classtype:attempted-recon; sid:200048229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"westrock-corp.dongfangfuli.com"; classtype:attempted-recon; sid:200048230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"westrockozarksjobs.com"; classtype:attempted-recon; sid:200048231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"westwoodfox.com"; classtype:attempted-recon; sid:200048232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wesxkwebam.duckdns.org"; classtype:attempted-recon; sid:200048233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wesyrtqhpk.duckdns.org"; classtype:attempted-recon; sid:200048234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wetalk247channels.tv"; classtype:attempted-recon; sid:200048235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wetransfe-f5044.firebaseapp.com"; classtype:attempted-recon; sid:200048236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wetransfe-f5044.web.app"; classtype:attempted-recon; sid:200048237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wevpjrduhz.duckdns.org"; classtype:attempted-recon; sid:200048238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wewillpmhb.duckdns.org"; classtype:attempted-recon; sid:200048239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfcguemyve.duckdns.org"; classtype:attempted-recon; sid:200048240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfdtsfumxt.duckdns.org"; classtype:attempted-recon; sid:200048241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wffewpahzy.duckdns.org"; classtype:attempted-recon; sid:200048242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wffvfizxba.duckdns.org"; classtype:attempted-recon; sid:200048243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfljfgfsuj.duckdns.org"; classtype:attempted-recon; sid:200048244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfluhvxroj.duckdns.org"; classtype:attempted-recon; sid:200048245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfmevfxqkz.duckdns.org"; classtype:attempted-recon; sid:200048246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfmfgjxhvq.duckdns.org"; classtype:attempted-recon; sid:200048247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfomtdempd.duckdns.org"; classtype:attempted-recon; sid:200048248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfqbimuhme.duckdns.org"; classtype:attempted-recon; sid:200048249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wftjchgerv.duckdns.org"; classtype:attempted-recon; sid:200048250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfxmkwkhwj.duckdns.org"; classtype:attempted-recon; sid:200048251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wfzpcnnerb.duckdns.org"; classtype:attempted-recon; sid:200048252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgaybnmvlw.duckdns.org"; classtype:attempted-recon; sid:200048253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgdnqshuas.duckdns.org"; classtype:attempted-recon; sid:200048254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgfcswasio.duckdns.org"; classtype:attempted-recon; sid:200048255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgftpxqxoc.duckdns.org"; classtype:attempted-recon; sid:200048256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wggfdrhkga.duckdns.org"; classtype:attempted-recon; sid:200048257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgkwyodvgw.duckdns.org"; classtype:attempted-recon; sid:200048258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wglpidrnbi.duckdns.org"; classtype:attempted-recon; sid:200048259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgohkdgzou.duckdns.org"; classtype:attempted-recon; sid:200048260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgrcfhphyh.duckdns.org"; classtype:attempted-recon; sid:200048261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgujarxzfn.duckdns.org"; classtype:attempted-recon; sid:200048262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgytzmjglr.duckdns.org"; classtype:attempted-recon; sid:200048263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgyzbjeenn.duckdns.org"; classtype:attempted-recon; sid:200048264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whare.100webspace.net"; classtype:attempted-recon; sid:200048265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whatsapp-amel.cf"; classtype:attempted-recon; sid:200048266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whatsapp-gruop18.tk"; classtype:attempted-recon; sid:200048267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whbafxpszr.duckdns.org"; classtype:attempted-recon; sid:200048268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wheelsofmercy.org"; classtype:attempted-recon; sid:200048269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whgsmmewsh.duckdns.org"; classtype:attempted-recon; sid:200048270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"white-block-2e16.desatt.workers.dev"; classtype:attempted-recon; sid:200048271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"white-bonus-05b3.wastemanddd.workers.dev"; classtype:attempted-recon; sid:200048272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"white-bush-4bbc.goldenwolf542.workers.dev"; classtype:attempted-recon; sid:200048273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"white-field-05e4.kdg6smak.workers.dev"; classtype:attempted-recon; sid:200048274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"white-glitter-ba48.casterweed.workers.dev"; classtype:attempted-recon; sid:200048275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whitetzfx.com"; classtype:attempted-recon; sid:200048276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whkmkwwkqr.duckdns.org"; classtype:attempted-recon; sid:200048277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whlwnudhgf.duckdns.org"; classtype:attempted-recon; sid:200048278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whoppingneedysemicolon.bancoinf.repl.co"; classtype:attempted-recon; sid:200048279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whosreadynow.com"; classtype:attempted-recon; sid:200048280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whuythyeup.duckdns.org"; classtype:attempted-recon; sid:200048281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whwdnucykb.duckdns.org"; classtype:attempted-recon; sid:200048282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whyeesgjpg.duckdns.org"; classtype:attempted-recon; sid:200048283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wibrzaxgzn.duckdns.org"; classtype:attempted-recon; sid:200048284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"widadkamillah.github.io"; classtype:attempted-recon; sid:200048285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"widget-dot-lbk-asistente-pre-principal.appspot.com"; classtype:attempted-recon; sid:200048286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wifldevehf.duckdns.org"; classtype:attempted-recon; sid:200048287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wifwjrtwva.duckdns.org"; classtype:attempted-recon; sid:200048288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wigford.uno"; classtype:attempted-recon; sid:200048289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wikkwitlwj.duckdns.org"; classtype:attempted-recon; sid:200048290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wild-star-f174.4882sddxshaee.workers.dev"; classtype:attempted-recon; sid:200048291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wilezpecqf.duckdns.org"; classtype:attempted-recon; sid:200048292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"will31greativy31c24a.myportfolio.com"; classtype:attempted-recon; sid:200048293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wim7pt.webwave.dev"; classtype:attempted-recon; sid:200048294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"win-31082022.s3.ir-thr-at1.arvanstorage.com"; classtype:attempted-recon; sid:200048295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"windstream-net.firebaseapp.com"; classtype:attempted-recon; sid:200048296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"winstickview.myportfolio.com"; classtype:attempted-recon; sid:200048297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"winter-heart-4660.peasemeoff.workers.dev"; classtype:attempted-recon; sid:200048298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"winter-thunder-a1ba.gdjklahdkjsadampie.workers.dev"; classtype:attempted-recon; sid:200048299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wioyfmpaqr.duckdns.org"; classtype:attempted-recon; sid:200048300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wiqmszzpxe.duckdns.org"; classtype:attempted-recon; sid:200048301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wiqvwolpcs.duckdns.org"; classtype:attempted-recon; sid:200048302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wiqwchdnyf.duckdns.org"; classtype:attempted-recon; sid:200048303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wireconfirmation68c10a25442a3e13.blogspot.com"; classtype:attempted-recon; sid:200048304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wires-business-starter.webflow.io"; classtype:attempted-recon; sid:200048305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wiselogin.me"; classtype:attempted-recon; sid:200048306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wisgjgjhtios.firebaseapp.com"; classtype:attempted-recon; sid:200048307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wisgjgjhtios.web.app"; classtype:attempted-recon; sid:200048308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wispy-flower-c715.westemoreland.workers.dev"; classtype:attempted-recon; sid:200048309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wispy-glitter-dec5.extraspo.workers.dev"; classtype:attempted-recon; sid:200048310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wisrjpeqvx.duckdns.org"; classtype:attempted-recon; sid:200048311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"withered-paper-e878.woodmasonloop.workers.dev"; classtype:attempted-recon; sid:200048312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"withsupportaids.com"; classtype:attempted-recon; sid:200048313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wiuwownsff.duckdns.org"; classtype:attempted-recon; sid:200048314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wiwmgozsdg.duckdns.org"; classtype:attempted-recon; sid:200048315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wiwztyynon.duckdns.org"; classtype:attempted-recon; sid:200048316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wizardly-shockley-f824fb.netlify.app"; classtype:attempted-recon; sid:200048317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjcoppxbbi.duckdns.org"; classtype:attempted-recon; sid:200048318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjcrtxtfdc.duckdns.org"; classtype:attempted-recon; sid:200048319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjfuqpiffd.duckdns.org"; classtype:attempted-recon; sid:200048320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjjgubcmrp.duckdns.org"; classtype:attempted-recon; sid:200048321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjmmzzzlyz.duckdns.org"; classtype:attempted-recon; sid:200048322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjnfjnvbhm.duckdns.org"; classtype:attempted-recon; sid:200048323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjqujqwjac.duckdns.org"; classtype:attempted-recon; sid:200048324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjwwjwvamm.duckdns.org"; classtype:attempted-recon; sid:200048325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjyabbqpkd.duckdns.org"; classtype:attempted-recon; sid:200048326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjymyoidel.duckdns.org"; classtype:attempted-recon; sid:200048327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wjzannzlqd.duckdns.org"; classtype:attempted-recon; sid:200048328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wkayjsibdg.duckdns.org"; classtype:attempted-recon; sid:200048329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wkazisan.github.io"; classtype:attempted-recon; sid:200048330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wkeumpmzbu.duckdns.org"; classtype:attempted-recon; sid:200048331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wkfjmjorpr.duckdns.org"; classtype:attempted-recon; sid:200048332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wkiirahykn.duckdns.org"; classtype:attempted-recon; sid:200048333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wkmhziyisx.duckdns.org"; classtype:attempted-recon; sid:200048334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wknqpzrvxd.duckdns.org"; classtype:attempted-recon; sid:200048335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wkokkwddyq.duckdns.org"; classtype:attempted-recon; sid:200048336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlabaszqyr.duckdns.org"; classtype:attempted-recon; sid:200048337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlccintbjh.duckdns.org"; classtype:attempted-recon; sid:200048338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlfrjbfazx.duckdns.org"; classtype:attempted-recon; sid:200048339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlhglmftvt.duckdns.org"; classtype:attempted-recon; sid:200048340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wljvejuvma.duckdns.org"; classtype:attempted-recon; sid:200048341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlkfjahqav.duckdns.org"; classtype:attempted-recon; sid:200048342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlkljewkrw.duckdns.org"; classtype:attempted-recon; sid:200048343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlmthnosfl.duckdns.org"; classtype:attempted-recon; sid:200048344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlnimokfrk.duckdns.org"; classtype:attempted-recon; sid:200048345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlnwztyami.duckdns.org"; classtype:attempted-recon; sid:200048346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlocxztucp.duckdns.org"; classtype:attempted-recon; sid:200048347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlpfzyrywn.duckdns.org"; classtype:attempted-recon; sid:200048348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlqjthrjvb.duckdns.org"; classtype:attempted-recon; sid:200048349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlrbfmuczd.duckdns.org"; classtype:attempted-recon; sid:200048350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlrlcwqbvo.duckdns.org"; classtype:attempted-recon; sid:200048351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlroejaslr.duckdns.org"; classtype:attempted-recon; sid:200048352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wltcnt08201.blogspot.com"; classtype:attempted-recon; sid:200048353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlukenrace.duckdns.org"; classtype:attempted-recon; sid:200048354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlwjopfeur.duckdns.org"; classtype:attempted-recon; sid:200048355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wlxmfxogxu.duckdns.org"; classtype:attempted-recon; sid:200048356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmasxoihgs.duckdns.org"; classtype:attempted-recon; sid:200048357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmdeszmafz.duckdns.org"; classtype:attempted-recon; sid:200048358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmietjzklm.duckdns.org"; classtype:attempted-recon; sid:200048359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmjinhjldj.duckdns.org"; classtype:attempted-recon; sid:200048360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmnijpdfnp.duckdns.org"; classtype:attempted-recon; sid:200048361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmpkddjvuu.duckdns.org"; classtype:attempted-recon; sid:200048362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmqfctjjex.duckdns.org"; classtype:attempted-recon; sid:200048363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmqfsixviw.duckdns.org"; classtype:attempted-recon; sid:200048364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmrhzoyhxh.duckdns.org"; classtype:attempted-recon; sid:200048365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmrpjodvyh.duckdns.org"; classtype:attempted-recon; sid:200048366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wmskuzefyd.duckdns.org"; classtype:attempted-recon; sid:200048367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wnalkwqbgg.duckdns.org"; classtype:attempted-recon; sid:200048368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wnbpjveave.duckdns.org"; classtype:attempted-recon; sid:200048369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wngypjyqvg.duckdns.org"; classtype:attempted-recon; sid:200048370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wnijxaqzhj.duckdns.org"; classtype:attempted-recon; sid:200048371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wnlxnxcnlv.duckdns.org"; classtype:attempted-recon; sid:200048372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wntcpppoul.duckdns.org"; classtype:attempted-recon; sid:200048373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wnubqavzlc.duckdns.org"; classtype:attempted-recon; sid:200048374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wnxjwgaapq.duckdns.org"; classtype:attempted-recon; sid:200048375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wnyhsphlyt.duckdns.org"; classtype:attempted-recon; sid:200048376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"woabfctiem.duckdns.org"; classtype:attempted-recon; sid:200048377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"woditxrsbx.duckdns.org"; classtype:attempted-recon; sid:200048378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wohnqlwgrr.duckdns.org"; classtype:attempted-recon; sid:200048379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wojiet-palygon.com"; classtype:attempted-recon; sid:200048380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wokgdpzirv.duckdns.org"; classtype:attempted-recon; sid:200048381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"womkyaigbb.duckdns.org"; classtype:attempted-recon; sid:200048382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wonderlandtime.org"; classtype:attempted-recon; sid:200048383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wonijumypd.duckdns.org"; classtype:attempted-recon; sid:200048384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"woodmetalstil.com"; classtype:attempted-recon; sid:200048385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wopvnlcfgx.duckdns.org"; classtype:attempted-recon; sid:200048386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"worddocoffice365.myportfolio.com"; classtype:attempted-recon; sid:200048387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"workprotocoles-com.webs.com"; classtype:attempted-recon; sid:200048388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"workshalas.com"; classtype:attempted-recon; sid:200048389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"world-js.com"; classtype:attempted-recon; sid:200048390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"woucfsvsgc.duckdns.org"; classtype:attempted-recon; sid:200048391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wouldlance.com"; classtype:attempted-recon; sid:200048392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wouldyouinekthissite-bb5c2a.ingress-baronn.ewp.live"; classtype:attempted-recon; sid:200048393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wowfpiqpip.duckdns.org"; classtype:attempted-recon; sid:200048394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wp-login.azurewebsites.net"; classtype:attempted-recon; sid:200048395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wp1sl706.top"; classtype:attempted-recon; sid:200048396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpcinadsxj.duckdns.org"; classtype:attempted-recon; sid:200048397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpdodfzszh.duckdns.org"; classtype:attempted-recon; sid:200048398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wperfthuvm.duckdns.org"; classtype:attempted-recon; sid:200048399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wphapxflkm.duckdns.org"; classtype:attempted-recon; sid:200048400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpidvuekwc.duckdns.org"; classtype:attempted-recon; sid:200048401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpkcizzdrw.duckdns.org"; classtype:attempted-recon; sid:200048402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpmknsecqr.duckdns.org"; classtype:attempted-recon; sid:200048403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpnrotoepv.duckdns.org"; classtype:attempted-recon; sid:200048404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wporsxbptv.duckdns.org"; classtype:attempted-recon; sid:200048405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpsblhyubw.duckdns.org"; classtype:attempted-recon; sid:200048406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpsoar.com"; classtype:attempted-recon; sid:200048407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wptest.chopperward.com"; classtype:attempted-recon; sid:200048408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wptwizeaqk.duckdns.org"; classtype:attempted-recon; sid:200048409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpvkzgpxny.duckdns.org"; classtype:attempted-recon; sid:200048410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wpwubutshs.duckdns.org"; classtype:attempted-recon; sid:200048411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqiutqsjvd.duckdns.org"; classtype:attempted-recon; sid:200048412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqivodlrlv.duckdns.org"; classtype:attempted-recon; sid:200048413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqkfjzrwta.duckdns.org"; classtype:attempted-recon; sid:200048414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqlpepxegj.duckdns.org"; classtype:attempted-recon; sid:200048415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqojusviwt.duckdns.org"; classtype:attempted-recon; sid:200048416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqyqwiasew.duckdns.org"; classtype:attempted-recon; sid:200048417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqzarlmrdg.duckdns.org"; classtype:attempted-recon; sid:200048418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqzqwogffo.duckdns.org"; classtype:attempted-recon; sid:200048419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqzuijzdkj.duckdns.org"; classtype:attempted-recon; sid:200048420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wrestlingpei.ca"; classtype:attempted-recon; sid:200048421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wrevcvcxhl.duckdns.org"; classtype:attempted-recon; sid:200048422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wrfybiefxg.duckdns.org"; classtype:attempted-recon; sid:200048423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wriiaidpyp.duckdns.org"; classtype:attempted-recon; sid:200048424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wrimhaogar.duckdns.org"; classtype:attempted-recon; sid:200048425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wrlaxecgcu.duckdns.org"; classtype:attempted-recon; sid:200048426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wrlmwdrywe.duckdns.org"; classtype:attempted-recon; sid:200048427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsi.no"; classtype:attempted-recon; sid:200048428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsid-3b4521b55b87455cb4a82e3w221dqas.weebly.com"; classtype:attempted-recon; sid:200048429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsignin10rpsnv0.yolasite.com"; classtype:attempted-recon; sid:200048430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wslyaotmcz.duckdns.org"; classtype:attempted-recon; sid:200048431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsqlsgmttx.duckdns.org"; classtype:attempted-recon; sid:200048432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsrjdjvgtn.duckdns.org"; classtype:attempted-recon; sid:200048433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsuqvrgzyn.duckdns.org"; classtype:attempted-recon; sid:200048434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsvphaysez.duckdns.org"; classtype:attempted-recon; sid:200048435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wsxrmcku-115297.proposhareportalauth.workers.dev"; classtype:attempted-recon; sid:200048436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtawwyvgef.duckdns.org"; classtype:attempted-recon; sid:200048437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtcgdhwtmg.duckdns.org"; classtype:attempted-recon; sid:200048438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtdiimbvnn.duckdns.org"; classtype:attempted-recon; sid:200048439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtlnmgvapx.duckdns.org"; classtype:attempted-recon; sid:200048440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtpgbjjbxs.duckdns.org"; classtype:attempted-recon; sid:200048441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtpreenjve.duckdns.org"; classtype:attempted-recon; sid:200048442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtsaroyssd.duckdns.org"; classtype:attempted-recon; sid:200048443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtsxvhnxwn.duckdns.org"; classtype:attempted-recon; sid:200048444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wtxacbfbkm.duckdns.org"; classtype:attempted-recon; sid:200048445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wua.soundestlink.com"; classtype:attempted-recon; sid:200048446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wuehhciwds.duckdns.org"; classtype:attempted-recon; sid:200048447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wueuxgqzpy.duckdns.org"; classtype:attempted-recon; sid:200048448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wuewzxiksy.duckdns.org"; classtype:attempted-recon; sid:200048449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wuinso.site"; classtype:attempted-recon; sid:200048450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wukfbgvkme.duckdns.org"; classtype:attempted-recon; sid:200048451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wuplcagzio.duckdns.org"; classtype:attempted-recon; sid:200048452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wuqgpcqxdq.duckdns.org"; classtype:attempted-recon; sid:200048453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wutkkjjxwa.duckdns.org"; classtype:attempted-recon; sid:200048454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wuusdpfeyw.duckdns.org"; classtype:attempted-recon; sid:200048455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wuyeuaaigl.duckdns.org"; classtype:attempted-recon; sid:200048456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wv3vajpaeass.com"; classtype:attempted-recon; sid:200048457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvbmmzipwb.duckdns.org"; classtype:attempted-recon; sid:200048458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvbskkyovq.duckdns.org"; classtype:attempted-recon; sid:200048459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvbvurqgyb.duckdns.org"; classtype:attempted-recon; sid:200048460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvevarxccn.duckdns.org"; classtype:attempted-recon; sid:200048461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvhhihvzer.duckdns.org"; classtype:attempted-recon; sid:200048462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvhijjjivu.duckdns.org"; classtype:attempted-recon; sid:200048463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvjjwwwvjj.duckdns.org"; classtype:attempted-recon; sid:200048464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvschupras.duckdns.org"; classtype:attempted-recon; sid:200048465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvuivvvlyx.duckdns.org"; classtype:attempted-recon; sid:200048466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvv.lmterbarkbenefit.com"; classtype:attempted-recon; sid:200048467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvvjsnmtko.duckdns.org"; classtype:attempted-recon; sid:200048468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvvw-uniswap.vip"; classtype:attempted-recon; sid:200048469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvvw.bancaporinternet.extracash-lbkperu.com"; classtype:attempted-recon; sid:200048470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvw.lnterbankbenefit.com"; classtype:attempted-recon; sid:200048471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvwmpufgce.duckdns.org"; classtype:attempted-recon; sid:200048472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvwoappcpp.duckdns.org"; classtype:attempted-recon; sid:200048473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvwsorare-com.blogspot.com"; classtype:attempted-recon; sid:200048474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wvyaxvfljc.duckdns.org"; classtype:attempted-recon; sid:200048475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ww.bcp.errordeingreso.pe.jungle-co.ir"; classtype:attempted-recon; sid:200048476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ww0911ww.myportfolio.com"; classtype:attempted-recon; sid:200048477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ww1.ibkcredit.com"; classtype:attempted-recon; sid:200048478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ww11.lbk-personas.website"; classtype:attempted-recon; sid:200048479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwcdwithtesla.xs1.biz"; classtype:attempted-recon; sid:200048480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwdghzwfgw.duckdns.org"; classtype:attempted-recon; sid:200048481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwetldjejt.duckdns.org"; classtype:attempted-recon; sid:200048482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwitau0comuy.x10.mx"; classtype:attempted-recon; sid:200048483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwjdqcvatm.duckdns.org"; classtype:attempted-recon; sid:200048484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwkkderxee.duckdns.org"; classtype:attempted-recon; sid:200048485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwpamfpsal.duckdns.org"; classtype:attempted-recon; sid:200048486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwpdsltnti.duckdns.org"; classtype:attempted-recon; sid:200048487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwphhwxkgi.duckdns.org"; classtype:attempted-recon; sid:200048488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwqazotgbx.duckdns.org"; classtype:attempted-recon; sid:200048489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwqfdc.hyperphp.com"; classtype:attempted-recon; sid:200048490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwrccqxglu.duckdns.org"; classtype:attempted-recon; sid:200048491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwsnawhbiy.duckdns.org"; classtype:attempted-recon; sid:200048492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwurjcaice.duckdns.org"; classtype:attempted-recon; sid:200048493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwv.lnterbankbenefit.com"; classtype:attempted-recon; sid:200048494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www--wellsfargo--com--t949329d48d6c.wsipv6.com"; classtype:attempted-recon; sid:200048495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www--wellsfargo--com--u449329d48d6c.wsipv6.com"; classtype:attempted-recon; sid:200048496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www--wellsfargo--com--u649329d48d6c.wsipv6.com"; classtype:attempted-recon; sid:200048497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www--wellsfargo--com--yg49329d48d6c.wsipv6.com"; classtype:attempted-recon; sid:200048498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-bitflyer-go-com-br.blogspot.com"; classtype:attempted-recon; sid:200048499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-cita-previa-en-linea-cr.yolasite.com"; classtype:attempted-recon; sid:200048500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-cr-mufg-jp.lpp314app.xyz"; classtype:attempted-recon; sid:200048501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-cursosdigitalesmx-com.filesusr.com"; classtype:attempted-recon; sid:200048502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-degelyehuda-org-il.filesusr.com"; classtype:attempted-recon; sid:200048503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-dkb-de-login.amuchamltd.com"; classtype:attempted-recon; sid:200048504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-dkb.net"; classtype:attempted-recon; sid:200048505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-dofus-com.fr"; classtype:attempted-recon; sid:200048506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-europe564598-com.filesusr.com"; classtype:attempted-recon; sid:200048507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-europessign-com.filesusr.com"; classtype:attempted-recon; sid:200048508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-ing-de.net"; classtype:attempted-recon; sid:200048509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-magic-eden-welcome-0y.com"; classtype:attempted-recon; sid:200048510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-pancake-swap.com"; classtype:attempted-recon; sid:200048511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-shiibaswapp.site"; classtype:attempted-recon; sid:200048512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www1.sembacea.top"; classtype:attempted-recon; sid:200048513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www1.smbs-cozec.icu"; classtype:attempted-recon; sid:200048514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www1.smbs-cozw.icu"; classtype:attempted-recon; sid:200048515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www1.smbsacnd.icu"; classtype:attempted-recon; sid:200048516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www1.smbscrad.icu"; classtype:attempted-recon; sid:200048517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.amazaon.co.jp.login.awto.cn"; classtype:attempted-recon; sid:200048518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.amazaon.co.jp.login.chayuanren.cn"; classtype:attempted-recon; sid:200048519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.amazaon.co.jp.login.diangewang.cn"; classtype:attempted-recon; sid:200048520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.amazaon.co.jp.login.lianxinyu.cn"; classtype:attempted-recon; sid:200048521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.amazaon.co.jp.login.lorgl.cn"; classtype:attempted-recon; sid:200048522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.amazaon.co.jp.login.nfrartwork.cn"; classtype:attempted-recon; sid:200048523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.arnazon.uppdate.co.jp.kissyahoo.cn"; classtype:attempted-recon; sid:200048524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.arnzaon.co.jploginvcdf7gh8h9.shengrisonghua.cn"; classtype:attempted-recon; sid:200048525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.eakl-nucra.icu"; classtype:attempted-recon; sid:200048526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.eakl-nueoa.icu"; classtype:attempted-recon; sid:200048527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.eakl-nuzra.icu"; classtype:attempted-recon; sid:200048528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.eakl-urens.icu"; classtype:attempted-recon; sid:200048529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.etc-meisai.jp.char1base.com"; classtype:attempted-recon; sid:200048530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.etc-meisai.jp.sayhuxo.cn"; classtype:attempted-recon; sid:200048531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.micasuid.cyou"; classtype:attempted-recon; sid:200048532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.micavtcd.cyou"; classtype:attempted-recon; sid:200048533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.micaxted.cyou"; classtype:attempted-recon; sid:200048534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.miceard.cyou"; classtype:attempted-recon; sid:200048535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.miceznd.cyou"; classtype:attempted-recon; sid:200048536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.miceztd.cyou"; classtype:attempted-recon; sid:200048537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.micsuad.cyou"; classtype:attempted-recon; sid:200048538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.micsurad.cyou"; classtype:attempted-recon; sid:200048539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.milcasered.cyou"; classtype:attempted-recon; sid:200048540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.milcasorad.cyou"; classtype:attempted-recon; sid:200048541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.smbs-cozec.icu"; classtype:attempted-recon; sid:200048542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.smbs-cozev.icu"; classtype:attempted-recon; sid:200048543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.smbs-cozw.icu"; classtype:attempted-recon; sid:200048544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.smbsacnd.icu"; classtype:attempted-recon; sid:200048545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www2.smbscrad.icu"; classtype:attempted-recon; sid:200048546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www3.cmtb.workers.dev"; classtype:attempted-recon; sid:200048547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www3.idpass-net.nenkin.go.jp"; classtype:attempted-recon; sid:200048548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwwamamicrodata.s3.us-west-2.amazonaws.com"; classtype:attempted-recon; sid:200048549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwwhomedecoration.com"; classtype:attempted-recon; sid:200048550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwwwv-roblox.com"; classtype:attempted-recon; sid:200048551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwxvhanick.duckdns.org"; classtype:attempted-recon; sid:200048552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwzyieurzo.duckdns.org"; classtype:attempted-recon; sid:200048553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxcmmmsdtr.duckdns.org"; classtype:attempted-recon; sid:200048554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxdkbpzmrb.duckdns.org"; classtype:attempted-recon; sid:200048555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxdvbxnhpq.duckdns.org"; classtype:attempted-recon; sid:200048556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxfivsrjzh.duckdns.org"; classtype:attempted-recon; sid:200048557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxfmhy.webwave.dev"; classtype:attempted-recon; sid:200048558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxfyxqlfys.duckdns.org"; classtype:attempted-recon; sid:200048559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxgliejofv.duckdns.org"; classtype:attempted-recon; sid:200048560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxjoamnaoq.duckdns.org"; classtype:attempted-recon; sid:200048561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxobzlqzvr.duckdns.org"; classtype:attempted-recon; sid:200048562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxouqmsdca.duckdns.org"; classtype:attempted-recon; sid:200048563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxqdc.hyperphp.com"; classtype:attempted-recon; sid:200048564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxt.b24.mywebsitetransfer.com"; classtype:attempted-recon; sid:200048565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxytxncaik.duckdns.org"; classtype:attempted-recon; sid:200048566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wydrgryqyf.duckdns.org"; classtype:attempted-recon; sid:200048567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wyjbdgctrj.duckdns.org"; classtype:attempted-recon; sid:200048568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wyltokqcig.duckdns.org"; classtype:attempted-recon; sid:200048569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wyniezthhe.duckdns.org"; classtype:attempted-recon; sid:200048570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wyogpiaemd.duckdns.org"; classtype:attempted-recon; sid:200048571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wyolvuxntj.duckdns.org"; classtype:attempted-recon; sid:200048572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wypuoyuptt.duckdns.org"; classtype:attempted-recon; sid:200048573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wyvhwqlqtn.duckdns.org"; classtype:attempted-recon; sid:200048574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wywpopdhzx.duckdns.org"; classtype:attempted-recon; sid:200048575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzclypzsnu.duckdns.org"; classtype:attempted-recon; sid:200048576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzf4cx.webwave.dev"; classtype:attempted-recon; sid:200048577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzfgjqkmdt.duckdns.org"; classtype:attempted-recon; sid:200048578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzilsvvuvt.duckdns.org"; classtype:attempted-recon; sid:200048579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzjcwgkxxj.duckdns.org"; classtype:attempted-recon; sid:200048580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzkeojirlw.duckdns.org"; classtype:attempted-recon; sid:200048581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzoctiftgv.duckdns.org"; classtype:attempted-recon; sid:200048582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzreyqvcjf.duckdns.org"; classtype:attempted-recon; sid:200048583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzssvqdsqu.duckdns.org"; classtype:attempted-recon; sid:200048584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wztecnfavw.duckdns.org"; classtype:attempted-recon; sid:200048585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzwciplosr.duckdns.org"; classtype:attempted-recon; sid:200048586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzwrgqaubk.duckdns.org"; classtype:attempted-recon; sid:200048587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wzznzeeybs.duckdns.org"; classtype:attempted-recon; sid:200048588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"x2das-caaaa-aaaad-qdzha-cai.ic0.app"; classtype:attempted-recon; sid:200048589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"x2y2.company"; classtype:attempted-recon; sid:200048590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"x455656x.x8778x88.repl.co"; classtype:attempted-recon; sid:200048591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"x5cgg-pyaaa-aaaad-qdzhq-cai.raw.ic0.app"; classtype:attempted-recon; sid:200048592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"x65633.repl.co"; classtype:attempted-recon; sid:200048593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xaima728191.webcindario.com"; classtype:attempted-recon; sid:200048594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xaimsuuq211.webcindario.com"; classtype:attempted-recon; sid:200048595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xajtnrlmci.duckdns.org"; classtype:attempted-recon; sid:200048596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xandero.cf"; classtype:attempted-recon; sid:200048597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xaoaiqgqqd.duckdns.org"; classtype:attempted-recon; sid:200048598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xarrganihd.duckdns.org"; classtype:attempted-recon; sid:200048599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xaryqgxbmo.duckdns.org"; classtype:attempted-recon; sid:200048600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xavianxz.co.vu"; classtype:attempted-recon; sid:200048601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xavyqwhdcb.duckdns.org"; classtype:attempted-recon; sid:200048602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xawkdtcavp.duckdns.org"; classtype:attempted-recon; sid:200048603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xazeitqxaq.duckdns.org"; classtype:attempted-recon; sid:200048604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbfnf.65918.cn"; classtype:attempted-recon; sid:200048605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbfnf.67526.cn"; classtype:attempted-recon; sid:200048606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbglqfwlbw.duckdns.org"; classtype:attempted-recon; sid:200048607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbgvfmorjb.duckdns.org"; classtype:attempted-recon; sid:200048608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbgyxmagbz.duckdns.org"; classtype:attempted-recon; sid:200048609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbhoyxzhwc.duckdns.org"; classtype:attempted-recon; sid:200048610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbigdxyyke.duckdns.org"; classtype:attempted-recon; sid:200048611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbmrsycajm.duckdns.org"; classtype:attempted-recon; sid:200048612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbnkvgyjrm.duckdns.org"; classtype:attempted-recon; sid:200048613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbpdndgioy.duckdns.org"; classtype:attempted-recon; sid:200048614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xbuwlcaduf.duckdns.org"; classtype:attempted-recon; sid:200048615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xc.sjxlocv.cn"; classtype:attempted-recon; sid:200048616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcaizjckcz.duckdns.org"; classtype:attempted-recon; sid:200048617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcbaljwiae.duckdns.org"; classtype:attempted-recon; sid:200048618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcd.weixin62.cn"; classtype:attempted-recon; sid:200048619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcd.wuxhbz.cn"; classtype:attempted-recon; sid:200048620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcekdqqsiw.duckdns.org"; classtype:attempted-recon; sid:200048621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xchvtfakfb.duckdns.org"; classtype:attempted-recon; sid:200048622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xchwqtktsi.duckdns.org"; classtype:attempted-recon; sid:200048623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcj.mhozvb.cn"; classtype:attempted-recon; sid:200048624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcjmnapyku.duckdns.org"; classtype:attempted-recon; sid:200048625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcjrhvuazp.duckdns.org"; classtype:attempted-recon; sid:200048626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xckufylmqd.duckdns.org"; classtype:attempted-recon; sid:200048627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xclqcwqwbj.duckdns.org"; classtype:attempted-recon; sid:200048628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcoonfflsc.duckdns.org"; classtype:attempted-recon; sid:200048629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcpesiokbp.duckdns.org"; classtype:attempted-recon; sid:200048630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcrzstudes.duckdns.org"; classtype:attempted-recon; sid:200048631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcxnbfjteh.duckdns.org"; classtype:attempted-recon; sid:200048632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xcyhrivqjt.duckdns.org"; classtype:attempted-recon; sid:200048633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xd.dlhc6uk.cn"; classtype:attempted-recon; sid:200048634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdbzotxkus.duckdns.org"; classtype:attempted-recon; sid:200048635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdekwkethx.duckdns.org"; classtype:attempted-recon; sid:200048636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdgr.wq27an.cn"; classtype:attempted-recon; sid:200048637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdhgogwixt.duckdns.org"; classtype:attempted-recon; sid:200048638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdlmqwleia.duckdns.org"; classtype:attempted-recon; sid:200048639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdmjwaqrif.duckdns.org"; classtype:attempted-recon; sid:200048640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdoqsaldtx.duckdns.org"; classtype:attempted-recon; sid:200048641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdrqpwpwsa.duckdns.org"; classtype:attempted-recon; sid:200048642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdrsdqpmlq.duckdns.org"; classtype:attempted-recon; sid:200048643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdsf.2tv305x.cn"; classtype:attempted-recon; sid:200048644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdtkstftue.duckdns.org"; classtype:attempted-recon; sid:200048645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdudqccesm.duckdns.org"; classtype:attempted-recon; sid:200048646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdv.axpwsbt.cn"; classtype:attempted-recon; sid:200048647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdv.ozvxwyb.cn"; classtype:attempted-recon; sid:200048648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdv.utrbetl.cn"; classtype:attempted-recon; sid:200048649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdwrnskoaq.duckdns.org"; classtype:attempted-recon; sid:200048650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xdxuqlbcql.duckdns.org"; classtype:attempted-recon; sid:200048651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xeajqawjak.duckdns.org"; classtype:attempted-recon; sid:200048652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xebfuaffpe.duckdns.org"; classtype:attempted-recon; sid:200048653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xechwxjhdm.duckdns.org"; classtype:attempted-recon; sid:200048654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xedhfaeefh.duckdns.org"; classtype:attempted-recon; sid:200048655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xeghtcavxi.duckdns.org"; classtype:attempted-recon; sid:200048656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xehgblgliw.duckdns.org"; classtype:attempted-recon; sid:200048657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xehtyqwexk.duckdns.org"; classtype:attempted-recon; sid:200048658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xeinlexsxd.duckdns.org"; classtype:attempted-recon; sid:200048659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xenmkaxsmb.duckdns.org"; classtype:attempted-recon; sid:200048660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xenrzdsksh.duckdns.org"; classtype:attempted-recon; sid:200048661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xepnakkemp.duckdns.org"; classtype:attempted-recon; sid:200048662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xerclinexz.co.vu"; classtype:attempted-recon; sid:200048663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xexynjdeoe.duckdns.org"; classtype:attempted-recon; sid:200048664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xezslgasiu.duckdns.org"; classtype:attempted-recon; sid:200048665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfaisxaqtr.duckdns.org"; classtype:attempted-recon; sid:200048666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfamlmeizu.duckdns.org"; classtype:attempted-recon; sid:200048667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfeoxxokua9.typeform.com"; classtype:attempted-recon; sid:200048668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfinniityinox.weebly.com"; classtype:attempted-recon; sid:200048669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfjxoixwwv.duckdns.org"; classtype:attempted-recon; sid:200048670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfmvbobufq.duckdns.org"; classtype:attempted-recon; sid:200048671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfndbuuqbe.duckdns.org"; classtype:attempted-recon; sid:200048672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfnjmxwwvv.duckdns.org"; classtype:attempted-recon; sid:200048673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfnrmfgjzo.duckdns.org"; classtype:attempted-recon; sid:200048674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfplyibfvf.duckdns.org"; classtype:attempted-recon; sid:200048675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfsd.ulzqr6l.cn"; classtype:attempted-recon; sid:200048676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfwkzuefby.duckdns.org"; classtype:attempted-recon; sid:200048677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfxymqbmmf.duckdns.org"; classtype:attempted-recon; sid:200048678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfyuaqloke.duckdns.org"; classtype:attempted-recon; sid:200048679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xfzozcnlod.duckdns.org"; classtype:attempted-recon; sid:200048680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgdeeuigvk.duckdns.org"; classtype:attempted-recon; sid:200048681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgesvhfaun.duckdns.org"; classtype:attempted-recon; sid:200048682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgfnvkzwpk.duckdns.org"; classtype:attempted-recon; sid:200048683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xggllpnvqh.duckdns.org"; classtype:attempted-recon; sid:200048684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xghjm.0nh61zh.cn"; classtype:attempted-recon; sid:200048685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xghlsp.com"; classtype:attempted-recon; sid:200048686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgsdociour.duckdns.org"; classtype:attempted-recon; sid:200048687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgskncffov.duckdns.org"; classtype:attempted-recon; sid:200048688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgvyzgorje.duckdns.org"; classtype:attempted-recon; sid:200048689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgxfpbgsqp.duckdns.org"; classtype:attempted-recon; sid:200048690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgyvyvzcmu.duckdns.org"; classtype:attempted-recon; sid:200048691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xgzxpckvjt.duckdns.org"; classtype:attempted-recon; sid:200048692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xherspffpl.duckdns.org"; classtype:attempted-recon; sid:200048693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhfhc.secpw5i.cn"; classtype:attempted-recon; sid:200048694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhgsysglvn.duckdns.org"; classtype:attempted-recon; sid:200048695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhjy.gkqktga.cn"; classtype:attempted-recon; sid:200048696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhlxxtaoln.duckdns.org"; classtype:attempted-recon; sid:200048697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhn.otlqv32.cn"; classtype:attempted-recon; sid:200048698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhnjv.fzjyzqa.cn"; classtype:attempted-recon; sid:200048699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhrloywhgy.duckdns.org"; classtype:attempted-recon; sid:200048700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhtcj.4t2w18.cn"; classtype:attempted-recon; sid:200048701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhvrfungim.duckdns.org"; classtype:attempted-recon; sid:200048702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhxvwlbvly.duckdns.org"; classtype:attempted-recon; sid:200048703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xiaomi-supp0rt.top"; classtype:attempted-recon; sid:200048704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xiczrudijy.duckdns.org"; classtype:attempted-recon; sid:200048705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xifpauwscu.duckdns.org"; classtype:attempted-recon; sid:200048706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xikdjtifsr.duckdns.org"; classtype:attempted-recon; sid:200048707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xilourgikesergasies.com.gr"; classtype:attempted-recon; sid:200048708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xiluckqbmw.duckdns.org"; classtype:attempted-recon; sid:200048709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xioksurnsh.duckdns.org"; classtype:attempted-recon; sid:200048710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xipwpvehne.duckdns.org"; classtype:attempted-recon; sid:200048711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xiqhawzsli.duckdns.org"; classtype:attempted-recon; sid:200048712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xiwteilmtz.duckdns.org"; classtype:attempted-recon; sid:200048713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjbpbkoehu.duckdns.org"; classtype:attempted-recon; sid:200048714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjcwcsjxar.duckdns.org"; classtype:attempted-recon; sid:200048715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjfdgdfhgdhu.hostfree.pw"; classtype:attempted-recon; sid:200048716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjgchwqwhh.duckdns.org"; classtype:attempted-recon; sid:200048717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjhvuhpapp.duckdns.org"; classtype:attempted-recon; sid:200048718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjjhfbhbxu.duckdns.org"; classtype:attempted-recon; sid:200048719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjkrwtyvsw.duckdns.org"; classtype:attempted-recon; sid:200048720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjmhmqgiin.duckdns.org"; classtype:attempted-recon; sid:200048721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjnyyknpwq.duckdns.org"; classtype:attempted-recon; sid:200048722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjoszjnnzr.duckdns.org"; classtype:attempted-recon; sid:200048723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjoxsfoqnp.duckdns.org"; classtype:attempted-recon; sid:200048724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjprbpjyyd.duckdns.org"; classtype:attempted-recon; sid:200048725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xjupcejkwz.duckdns.org"; classtype:attempted-recon; sid:200048726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkeykzgjfw.duckdns.org"; classtype:attempted-recon; sid:200048727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkftpzjfib.duckdns.org"; classtype:attempted-recon; sid:200048728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkgrftljou.duckdns.org"; classtype:attempted-recon; sid:200048729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkldqqqqpd.duckdns.org"; classtype:attempted-recon; sid:200048730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkolqhrnsa.duckdns.org"; classtype:attempted-recon; sid:200048731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkplexjtwc.duckdns.org"; classtype:attempted-recon; sid:200048732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkqfqizszx.duckdns.org"; classtype:attempted-recon; sid:200048733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkqqhatugs.duckdns.org"; classtype:attempted-recon; sid:200048734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkuzllldbv.duckdns.org"; classtype:attempted-recon; sid:200048735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkyadrymad.duckdns.org"; classtype:attempted-recon; sid:200048736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xkzmjhrmus.duckdns.org"; classtype:attempted-recon; sid:200048737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xlblaszgig.duckdns.org"; classtype:attempted-recon; sid:200048738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xldufqnxxp.duckdns.org"; classtype:attempted-recon; sid:200048739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xlhlpanhba.duckdns.org"; classtype:attempted-recon; sid:200048740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xljirhdtjv.duckdns.org"; classtype:attempted-recon; sid:200048741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xlrbgssdct.duckdns.org"; classtype:attempted-recon; sid:200048742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xlsv.oalt.cfgliders.com."; classtype:attempted-recon; sid:200048743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmfzmqhoag.duckdns.org"; classtype:attempted-recon; sid:200048744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmgqanuqfd.duckdns.org"; classtype:attempted-recon; sid:200048745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmilupzwtg.duckdns.org"; classtype:attempted-recon; sid:200048746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmjppvrcdh.duckdns.org"; classtype:attempted-recon; sid:200048747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmqcmtxyab.duckdns.org"; classtype:attempted-recon; sid:200048748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmqieeyqup.duckdns.org"; classtype:attempted-recon; sid:200048749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmsalzzhln.duckdns.org"; classtype:attempted-recon; sid:200048750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmsdlgqbfi.duckdns.org"; classtype:attempted-recon; sid:200048751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmwztknahq.duckdns.org"; classtype:attempted-recon; sid:200048752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmxrtrftem.duckdns.org"; classtype:attempted-recon; sid:200048753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xmyzchdryp.duckdns.org"; classtype:attempted-recon; sid:200048754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn-----6kccgdjl0abvczjkklk0ahex4f2kj.xn--p1ai"; classtype:attempted-recon; sid:200048755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn----ctbeu0aamfekp0m.xn--p1ai"; classtype:attempted-recon; sid:200048756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--allgrolokalnie-x4b.pl"; classtype:attempted-recon; sid:200048757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--conta-atualiza-o-snb5e.weebly.com"; classtype:attempted-recon; sid:200048758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--ltappen-80a.se"; classtype:attempted-recon; sid:200048759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--ooksrare-mnb.net"; classtype:attempted-recon; sid:200048760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--phere-udb.finance"; classtype:attempted-recon; sid:200048761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--w1ai.web.app"; classtype:attempted-recon; sid:200048762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn34r.app.link"; classtype:attempted-recon; sid:200048763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnbkhowlbe.duckdns.org"; classtype:attempted-recon; sid:200048764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xncofpdpnh.duckdns.org"; classtype:attempted-recon; sid:200048765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnfjcufiic.duckdns.org"; classtype:attempted-recon; sid:200048766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnhijfooki.duckdns.org"; classtype:attempted-recon; sid:200048767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnhqrifrvi.duckdns.org"; classtype:attempted-recon; sid:200048768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnkuqtoesv.duckdns.org"; classtype:attempted-recon; sid:200048769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnoonaudyb.duckdns.org"; classtype:attempted-recon; sid:200048770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnpsogyquq.duckdns.org"; classtype:attempted-recon; sid:200048771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xntjyiicds.duckdns.org"; classtype:attempted-recon; sid:200048772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xnxxn7w8asd.liveblog365.com"; classtype:attempted-recon; sid:200048773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xohdaofoki.duckdns.org"; classtype:attempted-recon; sid:200048774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xomyohiswl.duckdns.org"; classtype:attempted-recon; sid:200048775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xonuluzpye.duckdns.org"; classtype:attempted-recon; sid:200048776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xoonjztlak.duckdns.org"; classtype:attempted-recon; sid:200048777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xormkcwmbf.duckdns.org"; classtype:attempted-recon; sid:200048778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xorudypnmf.duckdns.org"; classtype:attempted-recon; sid:200048779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xovdejjvaa.duckdns.org"; classtype:attempted-recon; sid:200048780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xovebvrzsf.duckdns.org"; classtype:attempted-recon; sid:200048781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xowomjrtcg.duckdns.org"; classtype:attempted-recon; sid:200048782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xoyzixmipy.duckdns.org"; classtype:attempted-recon; sid:200048783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xozbrlkjjm.duckdns.org"; classtype:attempted-recon; sid:200048784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xozkhyghyp.duckdns.org"; classtype:attempted-recon; sid:200048785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xpgdqbgvxa.duckdns.org"; classtype:attempted-recon; sid:200048786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xpgomujnui.duckdns.org"; classtype:attempted-recon; sid:200048787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xphmtqlihc.duckdns.org"; classtype:attempted-recon; sid:200048788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xpjyyohjee.duckdns.org"; classtype:attempted-recon; sid:200048789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xpwdxpzluu.duckdns.org"; classtype:attempted-recon; sid:200048790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xpwmkkuxnb.duckdns.org"; classtype:attempted-recon; sid:200048791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xpxnzltzqt.duckdns.org"; classtype:attempted-recon; sid:200048792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xpxqrbxjbe.duckdns.org"; classtype:attempted-recon; sid:200048793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqcpeou.top"; classtype:attempted-recon; sid:200048794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqfjwfrvgr.duckdns.org"; classtype:attempted-recon; sid:200048795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqftmpalzd.duckdns.org"; classtype:attempted-recon; sid:200048796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqmfftkhwe.duckdns.org"; classtype:attempted-recon; sid:200048797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqnpwoonlm.duckdns.org"; classtype:attempted-recon; sid:200048798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqppikjkkd.duckdns.org"; classtype:attempted-recon; sid:200048799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqstsmiajv.duckdns.org"; classtype:attempted-recon; sid:200048800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqxdbhyjth.duckdns.org"; classtype:attempted-recon; sid:200048801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xqzkbzbxlq.duckdns.org"; classtype:attempted-recon; sid:200048802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrefhhsriv.duckdns.org"; classtype:attempted-recon; sid:200048803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrelddvmcm.duckdns.org"; classtype:attempted-recon; sid:200048804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrhdysyjvd.duckdns.org"; classtype:attempted-recon; sid:200048805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrhrlxizph.duckdns.org"; classtype:attempted-recon; sid:200048806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrihsdvlpv.duckdns.org"; classtype:attempted-recon; sid:200048807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrjrnqi.ga"; classtype:attempted-recon; sid:200048808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xroqjhevgr.duckdns.org"; classtype:attempted-recon; sid:200048809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrrwgmqfxs.duckdns.org"; classtype:attempted-recon; sid:200048810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xrsjyctosj.duckdns.org"; classtype:attempted-recon; sid:200048811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xruwwgaizx.duckdns.org"; classtype:attempted-recon; sid:200048812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xs.gkxfauo.cn"; classtype:attempted-recon; sid:200048813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsaqqqelcr.duckdns.org"; classtype:attempted-recon; sid:200048814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsbndzrrjs.com"; classtype:attempted-recon; sid:200048815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsbrookshhjx.top"; classtype:attempted-recon; sid:200048816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsduzdhpio.m1nv.cyou"; classtype:attempted-recon; sid:200048817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xseitubmoh.duckdns.org"; classtype:attempted-recon; sid:200048818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xskzpykzan.duckdns.org"; classtype:attempted-recon; sid:200048819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xslwiyjzsw.duckdns.org"; classtype:attempted-recon; sid:200048820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsportak1xsxrs.hostfree.pw"; classtype:attempted-recon; sid:200048821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsrwsounas.duckdns.org"; classtype:attempted-recon; sid:200048822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xswypkhvri.duckdns.org"; classtype:attempted-recon; sid:200048823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsxytkjgxe.duckdns.org"; classtype:attempted-recon; sid:200048824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsylproyen.duckdns.org"; classtype:attempted-recon; sid:200048825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xszrqhlzdz.duckdns.org"; classtype:attempted-recon; sid:200048826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xtbkfeykyf.duckdns.org"; classtype:attempted-recon; sid:200048827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xtckqewqgv.duckdns.org"; classtype:attempted-recon; sid:200048828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xthycgkvlm.duckdns.org"; classtype:attempted-recon; sid:200048829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xtjxrjlicr.duckdns.org"; classtype:attempted-recon; sid:200048830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xtkszfyqwf.duckdns.org"; classtype:attempted-recon; sid:200048831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xtrkdaxzdx.duckdns.org"; classtype:attempted-recon; sid:200048832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xttmashgcq.duckdns.org"; classtype:attempted-recon; sid:200048833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xttquynyqa.duckdns.org"; classtype:attempted-recon; sid:200048834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xtyyehgxac.duckdns.org"; classtype:attempted-recon; sid:200048835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xufiwitfqt.duckdns.org"; classtype:attempted-recon; sid:200048836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xuhuotsdbi.duckdns.org"; classtype:attempted-recon; sid:200048837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xuilwnxngw.duckdns.org"; classtype:attempted-recon; sid:200048838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xupwbtmfna.duckdns.org"; classtype:attempted-recon; sid:200048839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xurfanxrts.duckdns.org"; classtype:attempted-recon; sid:200048840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xutdbqekwx.duckdns.org"; classtype:attempted-recon; sid:200048841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xuxlanhhof.duckdns.org"; classtype:attempted-recon; sid:200048842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xv.hmemwyd.cn"; classtype:attempted-recon; sid:200048843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xv.uybrbbt.cn"; classtype:attempted-recon; sid:200048844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvalhalla.me"; classtype:attempted-recon; sid:200048845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvd.mf7t0ah.cn"; classtype:attempted-recon; sid:200048846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvd.tmtvttz.cn"; classtype:attempted-recon; sid:200048847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvgnkpleaj.duckdns.org"; classtype:attempted-recon; sid:200048848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvhccclzps.duckdns.org"; classtype:attempted-recon; sid:200048849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvjhycauzw.duckdns.org"; classtype:attempted-recon; sid:200048850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvqxfjmvez.duckdns.org"; classtype:attempted-recon; sid:200048851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvskjxrtxn.duckdns.org"; classtype:attempted-recon; sid:200048852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvulrzjtse.duckdns.org"; classtype:attempted-recon; sid:200048853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvunbwmqtr.duckdns.org"; classtype:attempted-recon; sid:200048854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvwodrrlyf.duckdns.org"; classtype:attempted-recon; sid:200048855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvxnfzzuuq.duckdns.org"; classtype:attempted-recon; sid:200048856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xvz.09vnsr7.cn"; classtype:attempted-recon; sid:200048857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwafqjruei.duckdns.org"; classtype:attempted-recon; sid:200048858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwdgzxbpoz.duckdns.org"; classtype:attempted-recon; sid:200048859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwgrgdrlnr.duckdns.org"; classtype:attempted-recon; sid:200048860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwjtguubta.duckdns.org"; classtype:attempted-recon; sid:200048861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwkjkqsjtd.duckdns.org"; classtype:attempted-recon; sid:200048862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwmtyoberm.duckdns.org"; classtype:attempted-recon; sid:200048863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwqbgolaqa.duckdns.org"; classtype:attempted-recon; sid:200048864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwufdrgtag.duckdns.org"; classtype:attempted-recon; sid:200048865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwwvypfuix.duckdns.org"; classtype:attempted-recon; sid:200048866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwynpzfquo.duckdns.org"; classtype:attempted-recon; sid:200048867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xwzfbiftij.duckdns.org"; classtype:attempted-recon; sid:200048868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xx.yknis.pellegrinaggiomariano.it"; classtype:attempted-recon; sid:200048869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxawofpbxm.duckdns.org"; classtype:attempted-recon; sid:200048870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxcbbqadhl.duckdns.org"; classtype:attempted-recon; sid:200048871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxcmkwfxco.duckdns.org"; classtype:attempted-recon; sid:200048872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxepevqmig.duckdns.org"; classtype:attempted-recon; sid:200048873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxkl.onedrive0001.workers.dev"; classtype:attempted-recon; sid:200048874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxmrvrnrxi.duckdns.org"; classtype:attempted-recon; sid:200048875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxoirvycyk.duckdns.org"; classtype:attempted-recon; sid:200048876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxonkliadr.duckdns.org"; classtype:attempted-recon; sid:200048877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxphase.office0.workers.dev"; classtype:attempted-recon; sid:200048878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxtwtimqci.duckdns.org"; classtype:attempted-recon; sid:200048879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxvcfeqnlx.duckdns.org"; classtype:attempted-recon; sid:200048880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxx-com-dot-c2c01-531c7.uc.r.appspot.com"; classtype:attempted-recon; sid:200048881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xxxxxxxxxxxxxxxxxxxxxxxx-eba51.web.app"; classtype:attempted-recon; sid:200048882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xyawtsliyv.duckdns.org"; classtype:attempted-recon; sid:200048883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xybnqvtund.duckdns.org"; classtype:attempted-recon; sid:200048884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xycfhqnvry.duckdns.org"; classtype:attempted-recon; sid:200048885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xykdretnjd.duckdns.org"; classtype:attempted-recon; sid:200048886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xymvsnygoo.duckdns.org"; classtype:attempted-recon; sid:200048887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xypbryoulg.duckdns.org"; classtype:attempted-recon; sid:200048888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xythndo.punctulcentral.org"; classtype:attempted-recon; sid:200048889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xyysktrwvy.duckdns.org"; classtype:attempted-recon; sid:200048890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xz.0xc3rk9.cn"; classtype:attempted-recon; sid:200048891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xz.jv1xa6r.cn"; classtype:attempted-recon; sid:200048892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xzlijffcqq.duckdns.org"; classtype:attempted-recon; sid:200048893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xzndrqbsnb.duckdns.org"; classtype:attempted-recon; sid:200048894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xzokefikgo.duckdns.org"; classtype:attempted-recon; sid:200048895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xzqggfsyzj.duckdns.org"; classtype:attempted-recon; sid:200048896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xztssc.com"; classtype:attempted-recon; sid:200048897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xzvs.idxjmrj.cn"; classtype:attempted-recon; sid:200048898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xzzdktajyv.duckdns.org"; classtype:attempted-recon; sid:200048899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"y00ts.blog"; classtype:attempted-recon; sid:200048900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"y24ke.34ei.site"; classtype:attempted-recon; sid:200048901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yaaxdgmyqv.duckdns.org"; classtype:attempted-recon; sid:200048902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yabhhgfekp.duckdns.org"; classtype:attempted-recon; sid:200048903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yaf42.weeblysite.com"; classtype:attempted-recon; sid:200048904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-104721.weeblysite.com"; classtype:attempted-recon; sid:200048905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-105034.weeblysite.com"; classtype:attempted-recon; sid:200048906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-107361.weeblysite.com"; classtype:attempted-recon; sid:200048907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-att-108797.square.site"; classtype:attempted-recon; sid:200048908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-jp.bifinity.icu"; classtype:attempted-recon; sid:200048909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-jp.jymbji.icu"; classtype:attempted-recon; sid:200048910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-jp.paisoier.icu"; classtype:attempted-recon; sid:200048911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-jp.sx88.icu"; classtype:attempted-recon; sid:200048912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo-mail-100110.square.site"; classtype:attempted-recon; sid:200048913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo.mailservice.workers.dev"; classtype:attempted-recon; sid:200048914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoo.onlinemail.workers.dev"; classtype:attempted-recon; sid:200048915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoomail0732.boxmode.io"; classtype:attempted-recon; sid:200048916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahooupdated-2022.square.site"; classtype:attempted-recon; sid:200048917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahuomall.square.site"; classtype:attempted-recon; sid:200048918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yairix.github.io"; classtype:attempted-recon; sid:200048919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yandus.info"; classtype:attempted-recon; sid:200048920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yaqancnixu.duckdns.org"; classtype:attempted-recon; sid:200048921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yaqoobi.org"; classtype:attempted-recon; sid:200048922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yarwpcxrge.duckdns.org"; classtype:attempted-recon; sid:200048923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yasufhgiuy.duckdns.org"; classtype:attempted-recon; sid:200048924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yatienadzli.com"; classtype:attempted-recon; sid:200048925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yavivwynud.duckdns.org"; classtype:attempted-recon; sid:200048926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yayanti.com"; classtype:attempted-recon; sid:200048927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybbbuzmwrj.duckdns.org"; classtype:attempted-recon; sid:200048928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybblxvqtqt.duckdns.org"; classtype:attempted-recon; sid:200048929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybdvzrhatn.duckdns.org"; classtype:attempted-recon; sid:200048930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybfdvjmtj-01924995.middocmain.workers.dev"; classtype:attempted-recon; sid:200048931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybkhkgoovp.duckdns.org"; classtype:attempted-recon; sid:200048932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybkphmoevz.duckdns.org"; classtype:attempted-recon; sid:200048933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybmonrozxj.duckdns.org"; classtype:attempted-recon; sid:200048934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybqxrkeozq.duckdns.org"; classtype:attempted-recon; sid:200048935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybszfdifte.duckdns.org"; classtype:attempted-recon; sid:200048936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybuqagfqal.duckdns.org"; classtype:attempted-recon; sid:200048937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybxccorlvi.duckdns.org"; classtype:attempted-recon; sid:200048938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ybyxbmfsjo.duckdns.org"; classtype:attempted-recon; sid:200048939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycabukzlfb.duckdns.org"; classtype:attempted-recon; sid:200048940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycjigzyvrc.duckdns.org"; classtype:attempted-recon; sid:200048941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yclivrzpir.duckdns.org"; classtype:attempted-recon; sid:200048942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yclnflzevn.duckdns.org"; classtype:attempted-recon; sid:200048943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycmjpydqak.duckdns.org"; classtype:attempted-recon; sid:200048944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycmoautosj.duckdns.org"; classtype:attempted-recon; sid:200048945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycoqgidspx.duckdns.org"; classtype:attempted-recon; sid:200048946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycpuvlhhhq.duckdns.org"; classtype:attempted-recon; sid:200048947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yctbzilstd.duckdns.org"; classtype:attempted-recon; sid:200048948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycuopp102362.weeblysite.com"; classtype:attempted-recon; sid:200048949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ycvggzhned.duckdns.org"; classtype:attempted-recon; sid:200048950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yczimudegt.duckdns.org"; classtype:attempted-recon; sid:200048951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ydanwyuqss.duckdns.org"; classtype:attempted-recon; sid:200048952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ydhyjvbtzc.duckdns.org"; classtype:attempted-recon; sid:200048953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ydktplowim.duckdns.org"; classtype:attempted-recon; sid:200048954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ydmgsfeisq.duckdns.org"; classtype:attempted-recon; sid:200048955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ydntwzkzji.duckdns.org"; classtype:attempted-recon; sid:200048956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ydtezmsliw.duckdns.org"; classtype:attempted-recon; sid:200048957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yebryjpxfq.duckdns.org"; classtype:attempted-recon; sid:200048958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yedlhcwwlh.duckdns.org"; classtype:attempted-recon; sid:200048959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yegnqdvamk.duckdns.org"; classtype:attempted-recon; sid:200048960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yeisouthsudan.org"; classtype:attempted-recon; sid:200048961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yellowocta.com"; classtype:attempted-recon; sid:200048962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yepkqfeozc.duckdns.org"; classtype:attempted-recon; sid:200048963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yesqyudysc.duckdns.org"; classtype:attempted-recon; sid:200048964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yeuqyryevb.duckdns.org"; classtype:attempted-recon; sid:200048965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yezmbsdqcf.duckdns.org"; classtype:attempted-recon; sid:200048966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yfevrpihgm.duckdns.org"; classtype:attempted-recon; sid:200048967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yfhikkeaih.duckdns.org"; classtype:attempted-recon; sid:200048968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yflvduftbx.duckdns.org"; classtype:attempted-recon; sid:200048969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yfmsgkmqzj.duckdns.org"; classtype:attempted-recon; sid:200048970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yftgmzuxvi.duckdns.org"; classtype:attempted-recon; sid:200048971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yfvaojycyv.duckdns.org"; classtype:attempted-recon; sid:200048972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yfwjjtadka.duckdns.org"; classtype:attempted-recon; sid:200048973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yfzpkxmhrq.duckdns.org"; classtype:attempted-recon; sid:200048974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygemsgzxfx.duckdns.org"; classtype:attempted-recon; sid:200048975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygevkixnfi.duckdns.org"; classtype:attempted-recon; sid:200048976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygkutqx3.cf"; classtype:attempted-recon; sid:200048977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygkutqx4.cf"; classtype:attempted-recon; sid:200048978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygkutqx6.cf"; classtype:attempted-recon; sid:200048979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yglxcojilv.duckdns.org"; classtype:attempted-recon; sid:200048980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygmjvxzdwn.duckdns.org"; classtype:attempted-recon; sid:200048981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygpbeteirh.duckdns.org"; classtype:attempted-recon; sid:200048982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygqvajbgwl.duckdns.org"; classtype:attempted-recon; sid:200048983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygtvcagvqu.duckdns.org"; classtype:attempted-recon; sid:200048984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygumcjpwla.duckdns.org"; classtype:attempted-recon; sid:200048985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yguzezliya.duckdns.org"; classtype:attempted-recon; sid:200048986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygwaaefqag.duckdns.org"; classtype:attempted-recon; sid:200048987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ygyrfwu387.wixsite.com"; classtype:attempted-recon; sid:200048988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhbcjlffll.duckdns.org"; classtype:attempted-recon; sid:200048989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhccvhslzp.duckdns.org"; classtype:attempted-recon; sid:200048990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhcruvmzij.duckdns.org"; classtype:attempted-recon; sid:200048991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhfdb.wta4ji.cn"; classtype:attempted-recon; sid:200048992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhffheruud.duckdns.org"; classtype:attempted-recon; sid:200048993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhqccvacxn.duckdns.org"; classtype:attempted-recon; sid:200048994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhqgwwrxib.duckdns.org"; classtype:attempted-recon; sid:200048995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhshcnqxlt.duckdns.org"; classtype:attempted-recon; sid:200048996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhyxiutqxc.duckdns.org"; classtype:attempted-recon; sid:200048997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhz42n6oesixsja.cf"; classtype:attempted-recon; sid:200048998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhzllebhah.duckdns.org"; classtype:attempted-recon; sid:200048999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yhzrmtuyat.duckdns.org"; classtype:attempted-recon; sid:200049000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yicjmdzjxk.duckdns.org"; classtype:attempted-recon; sid:200049001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yijnyphgpe.duckdns.org"; classtype:attempted-recon; sid:200049002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yimltisiqv.duckdns.org"; classtype:attempted-recon; sid:200049003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yip.su"; classtype:attempted-recon; sid:200049004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yipee.club"; classtype:attempted-recon; sid:200049005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yipugmsfdd.duckdns.org"; classtype:attempted-recon; sid:200049006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yiqvcfxyee.duckdns.org"; classtype:attempted-recon; sid:200049007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yitmtlbwvz.duckdns.org"; classtype:attempted-recon; sid:200049008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yiuwulwvye.duckdns.org"; classtype:attempted-recon; sid:200049009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjcsdirrrp.duckdns.org"; classtype:attempted-recon; sid:200049010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjerhyzpth.duckdns.org"; classtype:attempted-recon; sid:200049011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjfnohvoxb.duckdns.org"; classtype:attempted-recon; sid:200049012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjgimgrfga.duckdns.org"; classtype:attempted-recon; sid:200049013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjjyzokefm.duckdns.org"; classtype:attempted-recon; sid:200049014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjlxrbmbae.duckdns.org"; classtype:attempted-recon; sid:200049015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjmmaxurnw.duckdns.org"; classtype:attempted-recon; sid:200049016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjppdlqtqh.duckdns.org"; classtype:attempted-recon; sid:200049017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjqhsaffut.duckdns.org"; classtype:attempted-recon; sid:200049018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjrnrjidrc.duckdns.org"; classtype:attempted-recon; sid:200049019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjrxddzney.duckdns.org"; classtype:attempted-recon; sid:200049020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjshqxbdrp.duckdns.org"; classtype:attempted-recon; sid:200049021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjusqurxmf.duckdns.org"; classtype:attempted-recon; sid:200049022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjvbngxczi.duckdns.org"; classtype:attempted-recon; sid:200049023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yjyxkvtlql.duckdns.org"; classtype:attempted-recon; sid:200049024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykcpjcxuxv.duckdns.org"; classtype:attempted-recon; sid:200049025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykdrseyufj.duckdns.org"; classtype:attempted-recon; sid:200049026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykftcwsfws.duckdns.org"; classtype:attempted-recon; sid:200049027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykihcwrxjs.duckdns.org"; classtype:attempted-recon; sid:200049028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykkbkjpsnv.duckdns.org"; classtype:attempted-recon; sid:200049029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykllaopwcp.duckdns.org"; classtype:attempted-recon; sid:200049030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yknagkvdvk.duckdns.org"; classtype:attempted-recon; sid:200049031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yknvettqlw.duckdns.org"; classtype:attempted-recon; sid:200049032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykscopsbco.duckdns.org"; classtype:attempted-recon; sid:200049033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yksvkwstwk.duckdns.org"; classtype:attempted-recon; sid:200049034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ykxidhshrz.duckdns.org"; classtype:attempted-recon; sid:200049035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ylfizlqssx.duckdns.org"; classtype:attempted-recon; sid:200049036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ylgzledigp.duckdns.org"; classtype:attempted-recon; sid:200049037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ylinlalcrk.duckdns.org"; classtype:attempted-recon; sid:200049038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yliqnknbkx.duckdns.org"; classtype:attempted-recon; sid:200049039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yljvajxhze.duckdns.org"; classtype:attempted-recon; sid:200049040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ylvxveorly.duckdns.org"; classtype:attempted-recon; sid:200049041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ylzcwxicsz.duckdns.org"; classtype:attempted-recon; sid:200049042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yma1ll0g0n.odoo.com"; classtype:attempted-recon; sid:200049043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ymailacct-jckm08.weebly.com"; classtype:attempted-recon; sid:200049044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ymailacct-jmck.weebly.com"; classtype:attempted-recon; sid:200049045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ymaszyayqe.duckdns.org"; classtype:attempted-recon; sid:200049046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ymdaepaogx.duckdns.org"; classtype:attempted-recon; sid:200049047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ymmjdthfzw.duckdns.org"; classtype:attempted-recon; sid:200049048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ymspzsgurs.duckdns.org"; classtype:attempted-recon; sid:200049049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ymvkqavbdy.duckdns.org"; classtype:attempted-recon; sid:200049050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynddcislpf.duckdns.org"; classtype:attempted-recon; sid:200049051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yngchewchj.duckdns.org"; classtype:attempted-recon; sid:200049052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynhwblmhcz.duckdns.org"; classtype:attempted-recon; sid:200049053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynhyzatzgg.duckdns.org"; classtype:attempted-recon; sid:200049054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yniykzassaz.hostfree.pw"; classtype:attempted-recon; sid:200049055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynjcxiehie.duckdns.org"; classtype:attempted-recon; sid:200049056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynpzksxqqy.duckdns.org"; classtype:attempted-recon; sid:200049057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynqz7317.odns.fr"; classtype:attempted-recon; sid:200049058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynrqqxjvti.duckdns.org"; classtype:attempted-recon; sid:200049059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynsnnlsnva.duckdns.org"; classtype:attempted-recon; sid:200049060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynwdcqeoxs.duckdns.org"; classtype:attempted-recon; sid:200049061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ynyjqiwtom.duckdns.org"; classtype:attempted-recon; sid:200049062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yocmmwstkh.duckdns.org"; classtype:attempted-recon; sid:200049063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yodsecinserv.firebaseapp.com"; classtype:attempted-recon; sid:200049064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yoeaadlenn.duckdns.org"; classtype:attempted-recon; sid:200049065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yoexnaqcxm.duckdns.org"; classtype:attempted-recon; sid:200049066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yogdarshan.com"; classtype:attempted-recon; sid:200049067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yogicpa.com"; classtype:attempted-recon; sid:200049068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yogini-polygonbc.blogspot.com"; classtype:attempted-recon; sid:200049069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yojylbizyo.duckdns.org"; classtype:attempted-recon; sid:200049070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yolbfpoxek.duckdns.org"; classtype:attempted-recon; sid:200049071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yonfxspbnv.duckdns.org"; classtype:attempted-recon; sid:200049072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yorku.cahvh2ep66gfpnjwh3zjgi-hvh2ep66gfpnjwh3zjgi.bakkasund.com"; classtype:attempted-recon; sid:200049073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yorsthgifg.duckdns.org"; classtype:attempted-recon; sid:200049074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yoslpskwqy.duckdns.org"; classtype:attempted-recon; sid:200049075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"youn.bxxnskkdkdkrkrnfnf.workers.dev"; classtype:attempted-recon; sid:200049076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yousee-refusion.web.app"; classtype:attempted-recon; sid:200049077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"youtube-b24.xyz"; classtype:attempted-recon; sid:200049078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yowqzxmeux.duckdns.org"; classtype:attempted-recon; sid:200049079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypcjixozmx.duckdns.org"; classtype:attempted-recon; sid:200049080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypcvnemldt.duckdns.org"; classtype:attempted-recon; sid:200049081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypdbifcalx.duckdns.org"; classtype:attempted-recon; sid:200049082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypfbjdvbsq.duckdns.org"; classtype:attempted-recon; sid:200049083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypfngfjlut.duckdns.org"; classtype:attempted-recon; sid:200049084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypjxmwnavq.duckdns.org"; classtype:attempted-recon; sid:200049085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yplbxuqaov.duckdns.org"; classtype:attempted-recon; sid:200049086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypmcsgtlir.duckdns.org"; classtype:attempted-recon; sid:200049087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypokfnpdtx.duckdns.org"; classtype:attempted-recon; sid:200049088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yptvanokui.duckdns.org"; classtype:attempted-recon; sid:200049089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypunboziko.duckdns.org"; classtype:attempted-recon; sid:200049090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ypvhpbcwmv.duckdns.org"; classtype:attempted-recon; sid:200049091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqbkqrmmuy.duckdns.org"; classtype:attempted-recon; sid:200049092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqcmbcfvix.duckdns.org"; classtype:attempted-recon; sid:200049093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqdnrjhjfr.duckdns.org"; classtype:attempted-recon; sid:200049094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqfglywvus.duckdns.org"; classtype:attempted-recon; sid:200049095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqfyaeuqna.duckdns.org"; classtype:attempted-recon; sid:200049096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqkykbcpjh.duckdns.org"; classtype:attempted-recon; sid:200049097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqtftjwvvy.duckdns.org"; classtype:attempted-recon; sid:200049098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yqtkrjyxej.duckdns.org"; classtype:attempted-recon; sid:200049099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrdqkhxmsc.duckdns.org"; classtype:attempted-recon; sid:200049100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrgxcbbtut.duckdns.org"; classtype:attempted-recon; sid:200049101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrjszwynhd.duckdns.org"; classtype:attempted-recon; sid:200049102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrjvihrxpc.duckdns.org"; classtype:attempted-recon; sid:200049103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrmboixnrp.duckdns.org"; classtype:attempted-recon; sid:200049104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrqxhabwgm.duckdns.org"; classtype:attempted-recon; sid:200049105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrscawxhhf.duckdns.org"; classtype:attempted-recon; sid:200049106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrsfrmukjo.duckdns.org"; classtype:attempted-recon; sid:200049107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yrzfsomwrx.duckdns.org"; classtype:attempted-recon; sid:200049108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysczdajs.com"; classtype:attempted-recon; sid:200049109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yshlpcwcjl.duckdns.org"; classtype:attempted-recon; sid:200049110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysjbrdlsjt.duckdns.org"; classtype:attempted-recon; sid:200049111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysjuezfgyv.duckdns.org"; classtype:attempted-recon; sid:200049112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysjvqecsmz.duckdns.org"; classtype:attempted-recon; sid:200049113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysnfkijere.duckdns.org"; classtype:attempted-recon; sid:200049114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysrnudmtkg.duckdns.org"; classtype:attempted-recon; sid:200049115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysvlhqathm.duckdns.org"; classtype:attempted-recon; sid:200049116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ysxxdcrzhf.duckdns.org"; classtype:attempted-recon; sid:200049117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yt8734569849.wixsite.com"; classtype:attempted-recon; sid:200049118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytatyrxvqk.duckdns.org"; classtype:attempted-recon; sid:200049119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytbenbzbuv.duckdns.org"; classtype:attempted-recon; sid:200049120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytdefdpocn.duckdns.org"; classtype:attempted-recon; sid:200049121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yted23.hyperphp.com"; classtype:attempted-recon; sid:200049122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytek.co.il"; classtype:attempted-recon; sid:200049123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytfkwitzdv.duckdns.org"; classtype:attempted-recon; sid:200049124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ythbregvergerg.jutnhybgtrefsc.repl.co"; classtype:attempted-recon; sid:200049125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytilrnsibb.duckdns.org"; classtype:attempted-recon; sid:200049126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytjhrdzqji.duckdns.org"; classtype:attempted-recon; sid:200049127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytjyhegf.byethost32.com"; classtype:attempted-recon; sid:200049128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytklhg.com"; classtype:attempted-recon; sid:200049129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytpwacukjv.duckdns.org"; classtype:attempted-recon; sid:200049130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytrwbwweve.duckdns.org"; classtype:attempted-recon; sid:200049131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytspxbhanv.duckdns.org"; classtype:attempted-recon; sid:200049132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ytwaqhwpvf.duckdns.org"; classtype:attempted-recon; sid:200049133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yufcxoucfk.duckdns.org"; classtype:attempted-recon; sid:200049134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yufgh42fges.club"; classtype:attempted-recon; sid:200049135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yugusjduvb.duckdns.org"; classtype:attempted-recon; sid:200049136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yuiooklo6778.liveblog365.com"; classtype:attempted-recon; sid:200049137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yuiqwdendsi2312.liveblog365.com"; classtype:attempted-recon; sid:200049138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yuitpawcjc.duckdns.org"; classtype:attempted-recon; sid:200049139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yukghzkmdy.duckdns.org"; classtype:attempted-recon; sid:200049140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yulidxywqr.duckdns.org"; classtype:attempted-recon; sid:200049141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yunyu-sh.com"; classtype:attempted-recon; sid:200049142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yuplteyoyl.duckdns.org"; classtype:attempted-recon; sid:200049143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yuqdozxiwi.duckdns.org"; classtype:attempted-recon; sid:200049144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yuryo-anzen.com"; classtype:attempted-recon; sid:200049145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yutourange.t.justns.ru"; classtype:attempted-recon; sid:200049146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yuxvwwkssh.duckdns.org"; classtype:attempted-recon; sid:200049147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvcbktrvsz.duckdns.org"; classtype:attempted-recon; sid:200049148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvcxsqcxhm.duckdns.org"; classtype:attempted-recon; sid:200049149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvcybyazvq.duckdns.org"; classtype:attempted-recon; sid:200049150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvguehozzz.duckdns.org"; classtype:attempted-recon; sid:200049151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvhqgpliul.duckdns.org"; classtype:attempted-recon; sid:200049152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvhxznnkkd.duckdns.org"; classtype:attempted-recon; sid:200049153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvkthcxnnm.duckdns.org"; classtype:attempted-recon; sid:200049154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvlgzpptfs.duckdns.org"; classtype:attempted-recon; sid:200049155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvqxvkvesg.duckdns.org"; classtype:attempted-recon; sid:200049156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvtlrlrzqa.duckdns.org"; classtype:attempted-recon; sid:200049157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvtlrmjmkq.duckdns.org"; classtype:attempted-recon; sid:200049158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvxcpfzgrq.duckdns.org"; classtype:attempted-recon; sid:200049159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yvxneuspuy.duckdns.org"; classtype:attempted-recon; sid:200049160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ywjrftguhu.duckdns.org"; classtype:attempted-recon; sid:200049161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ywsahvbhjw.duckdns.org"; classtype:attempted-recon; sid:200049162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ywurtjmpmc.duckdns.org"; classtype:attempted-recon; sid:200049163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ywxo.mjt.lu"; classtype:attempted-recon; sid:200049164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ywyimtvzbn.duckdns.org"; classtype:attempted-recon; sid:200049165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yxaqzubroa.duckdns.org"; classtype:attempted-recon; sid:200049166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yxnrexcnjb.duckdns.org"; classtype:attempted-recon; sid:200049167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yxojkngoxa.duckdns.org"; classtype:attempted-recon; sid:200049168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yxtzzrtgrz.duckdns.org"; classtype:attempted-recon; sid:200049169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yxxxtlkcmt.duckdns.org"; classtype:attempted-recon; sid:200049170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yydjgccriu.duckdns.org"; classtype:attempted-recon; sid:200049171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yygctxtyvh.duckdns.org"; classtype:attempted-recon; sid:200049172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yyjbspimod.duckdns.org"; classtype:attempted-recon; sid:200049173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yyrduqiasv.duckdns.org"; classtype:attempted-recon; sid:200049174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yyyidaadxk.duckdns.org"; classtype:attempted-recon; sid:200049175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yzdpfqluee.duckdns.org"; classtype:attempted-recon; sid:200049176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yzhbzjbqta.duckdns.org"; classtype:attempted-recon; sid:200049177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yznlcnspiy.duckdns.org"; classtype:attempted-recon; sid:200049178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yzoxasxlbi.duckdns.org"; classtype:attempted-recon; sid:200049179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yzxgnergga.duckdns.org"; classtype:attempted-recon; sid:200049180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yzzhmtazkv.duckdns.org"; classtype:attempted-recon; sid:200049181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"z0nesegure-viabcpcontigobeta.englishtutorweb.com"; classtype:attempted-recon; sid:200049182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zaeciigqnp.duckdns.org"; classtype:attempted-recon; sid:200049183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zafrfdywmm.duckdns.org"; classtype:attempted-recon; sid:200049184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zajwuolcke.duckdns.org"; classtype:attempted-recon; sid:200049185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zaper-finance.org"; classtype:attempted-recon; sid:200049186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zapper-fi.co"; classtype:attempted-recon; sid:200049187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zbhpgpugwq.duckdns.org"; classtype:attempted-recon; sid:200049188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zbjsxpyyuj.duckdns.org"; classtype:attempted-recon; sid:200049189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zblpoawhbh.duckdns.org"; classtype:attempted-recon; sid:200049190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zbowxaye.ml"; classtype:attempted-recon; sid:200049191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zbvtxqhqin.firebaseapp.com"; classtype:attempted-recon; sid:200049192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zbvtxqhqin.web.app"; classtype:attempted-recon; sid:200049193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zbyzvcugxi.duckdns.org"; classtype:attempted-recon; sid:200049194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zciroternind2718.liveblog365.com"; classtype:attempted-recon; sid:200049195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcmnmdvqpo.duckdns.org"; classtype:attempted-recon; sid:200049196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcnaanggpn.duckdns.org"; classtype:attempted-recon; sid:200049197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcnbugegph.duckdns.org"; classtype:attempted-recon; sid:200049198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcquktafzh.duckdns.org"; classtype:attempted-recon; sid:200049199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcqzjxjnyw.duckdns.org"; classtype:attempted-recon; sid:200049200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcsjlnzcmh.duckdns.org"; classtype:attempted-recon; sid:200049201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcwpzffxlt.duckdns.org"; classtype:attempted-recon; sid:200049202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdaidryckc.duckdns.org"; classtype:attempted-recon; sid:200049203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdaypc.blob.core.windows.net"; classtype:attempted-recon; sid:200049204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdduhkuihk.duckdns.org"; classtype:attempted-recon; sid:200049205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdg.867nhmd.cn"; classtype:attempted-recon; sid:200049206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdovapuvfv.duckdns.org"; classtype:attempted-recon; sid:200049207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdryiotoix.duckdns.org"; classtype:attempted-recon; sid:200049208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdsopukmbq.duckdns.org"; classtype:attempted-recon; sid:200049209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zdzaypqror.duckdns.org"; classtype:attempted-recon; sid:200049210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zealous-cliff-0a8252010.1.azurestaticapps.net"; classtype:attempted-recon; sid:200049211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeawzc.hyperphp.com"; classtype:attempted-recon; sid:200049212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeii-egipt.bombsquadz.com"; classtype:attempted-recon; sid:200049213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeiron.net.in"; classtype:attempted-recon; sid:200049214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zemalidmio.duckdns.org"; classtype:attempted-recon; sid:200049215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeodgkskrg.duckdns.org"; classtype:attempted-recon; sid:200049216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zepfybpyix.duckdns.org"; classtype:attempted-recon; sid:200049217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zepmltkjip.duckdns.org"; classtype:attempted-recon; sid:200049218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zerdgkvyhg.duckdns.org"; classtype:attempted-recon; sid:200049219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zerion-io.com"; classtype:attempted-recon; sid:200049220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zerione.io"; classtype:attempted-recon; sid:200049221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zetstabrig.duckdns.org"; classtype:attempted-recon; sid:200049222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zevisyujof.duckdns.org"; classtype:attempted-recon; sid:200049223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zexbtsoupe.duckdns.org"; classtype:attempted-recon; sid:200049224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zfcwyfikcz.duckdns.org"; classtype:attempted-recon; sid:200049225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zfgoripisf.duckdns.org"; classtype:attempted-recon; sid:200049226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zfhcfbfnps.duckdns.org"; classtype:attempted-recon; sid:200049227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zfhocbsrkx.duckdns.org"; classtype:attempted-recon; sid:200049228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zftmomprdq.duckdns.org"; classtype:attempted-recon; sid:200049229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zftqqmwugi.duckdns.org"; classtype:attempted-recon; sid:200049230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zfzidgeevo.duckdns.org"; classtype:attempted-recon; sid:200049231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zfzvujtkxj.duckdns.org"; classtype:attempted-recon; sid:200049232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zfzwpjukam.duckdns.org"; classtype:attempted-recon; sid:200049233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgbcctximx.duckdns.org"; classtype:attempted-recon; sid:200049234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgedmrpcxk.duckdns.org"; classtype:attempted-recon; sid:200049235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zggepsgwpq.duckdns.org"; classtype:attempted-recon; sid:200049236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgjgzcpyiz.duckdns.org"; classtype:attempted-recon; sid:200049237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zglxauight.duckdns.org"; classtype:attempted-recon; sid:200049238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgugylxsqu.duckdns.org"; classtype:attempted-recon; sid:200049239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zguxsiakcs.duckdns.org"; classtype:attempted-recon; sid:200049240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgxhc.ytcrt17.cn"; classtype:attempted-recon; sid:200049241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgxzuhwfgd.duckdns.org"; classtype:attempted-recon; sid:200049242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgyzxkdpev.duckdns.org"; classtype:attempted-recon; sid:200049243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhakvdoyrp.duckdns.org"; classtype:attempted-recon; sid:200049244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zheard.net"; classtype:attempted-recon; sid:200049245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhmlgzpwvl.duckdns.org"; classtype:attempted-recon; sid:200049246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhnezkgiav.duckdns.org"; classtype:attempted-recon; sid:200049247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhnygrahfi.duckdns.org"; classtype:attempted-recon; sid:200049248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhsvhbmxdx.duckdns.org"; classtype:attempted-recon; sid:200049249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhsxfsobmi.duckdns.org"; classtype:attempted-recon; sid:200049250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhtatd.ga"; classtype:attempted-recon; sid:200049251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhugkpkhac.duckdns.org"; classtype:attempted-recon; sid:200049252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhxnvryctr.duckdns.org"; classtype:attempted-recon; sid:200049253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zhxplzfqwx.duckdns.org"; classtype:attempted-recon; sid:200049254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zi0034034323.web.app"; classtype:attempted-recon; sid:200049255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zi992883923923.web.app"; classtype:attempted-recon; sid:200049256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zidwxuojff.duckdns.org"; classtype:attempted-recon; sid:200049257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zihs1w01.myportfolio.com"; classtype:attempted-recon; sid:200049258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zihztkczzo.duckdns.org"; classtype:attempted-recon; sid:200049259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ziipazxukc.duckdns.org"; classtype:attempted-recon; sid:200049260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ziipnsxwgr.duckdns.org"; classtype:attempted-recon; sid:200049261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zimbra-auth.instanthq.com"; classtype:attempted-recon; sid:200049262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zimbra-customercare.berthascholarship.org"; classtype:attempted-recon; sid:200049263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zimbrafaq.instanthq.com"; classtype:attempted-recon; sid:200049264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zimlhlcvca.duckdns.org"; classtype:attempted-recon; sid:200049265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zimuktxjwp.duckdns.org"; classtype:attempted-recon; sid:200049266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zionsnfxlj.duckdns.org"; classtype:attempted-recon; sid:200049267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ziscrucojw.duckdns.org"; classtype:attempted-recon; sid:200049268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zitnqydwdi.duckdns.org"; classtype:attempted-recon; sid:200049269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zjahncsfsa.duckdns.org"; classtype:attempted-recon; sid:200049270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zjdopzvkel.duckdns.org"; classtype:attempted-recon; sid:200049271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zjgwfskkbw.duckdns.org"; classtype:attempted-recon; sid:200049272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zjlskxcbem.duckdns.org"; classtype:attempted-recon; sid:200049273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zjltviagoo.duckdns.org"; classtype:attempted-recon; sid:200049274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zjonepnfgp.duckdns.org"; classtype:attempted-recon; sid:200049275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zjvusiopuc.duckdns.org"; classtype:attempted-recon; sid:200049276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkacgen.ga"; classtype:attempted-recon; sid:200049277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkadxdghns.duckdns.org"; classtype:attempted-recon; sid:200049278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkbaaebbxk.duckdns.org"; classtype:attempted-recon; sid:200049279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkbvzdhkco.duckdns.org"; classtype:attempted-recon; sid:200049280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkfxr.xyz"; classtype:attempted-recon; sid:200049281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkidbguaxq.duckdns.org"; classtype:attempted-recon; sid:200049282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkkmcordrr.duckdns.org"; classtype:attempted-recon; sid:200049283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkmbvqlxln.duckdns.org"; classtype:attempted-recon; sid:200049284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zknhxvxsso.duckdns.org"; classtype:attempted-recon; sid:200049285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkql52.hyperphp.com"; classtype:attempted-recon; sid:200049286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkqqibcdej.duckdns.org"; classtype:attempted-recon; sid:200049287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zldlzhiugz.duckdns.org"; classtype:attempted-recon; sid:200049288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlenjsekhw.duckdns.org"; classtype:attempted-recon; sid:200049289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zliblfclya.duckdns.org"; classtype:attempted-recon; sid:200049290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zljgtbeihp.duckdns.org"; classtype:attempted-recon; sid:200049291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zllzvzbqjr.duckdns.org"; classtype:attempted-recon; sid:200049292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlozxxtlno.duckdns.org"; classtype:attempted-recon; sid:200049293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlrcyleklt.duckdns.org"; classtype:attempted-recon; sid:200049294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zltaylmavf.duckdns.org"; classtype:attempted-recon; sid:200049295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlumrxhrph.duckdns.org"; classtype:attempted-recon; sid:200049296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlxpucbtkz.duckdns.org"; classtype:attempted-recon; sid:200049297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlyiltzhat.duckdns.org"; classtype:attempted-recon; sid:200049298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlzyxbjchr.duckdns.org"; classtype:attempted-recon; sid:200049299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmflapvkcr.duckdns.org"; classtype:attempted-recon; sid:200049300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmfqnbxhfq.duckdns.org"; classtype:attempted-recon; sid:200049301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmhwjevres.duckdns.org"; classtype:attempted-recon; sid:200049302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmiacewldt.duckdns.org"; classtype:attempted-recon; sid:200049303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmiedguquw.duckdns.org"; classtype:attempted-recon; sid:200049304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmiybzhgsx.duckdns.org"; classtype:attempted-recon; sid:200049305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmjmanudyh.duckdns.org"; classtype:attempted-recon; sid:200049306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmnnxgeelr.duckdns.org"; classtype:attempted-recon; sid:200049307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmqmejulfw.duckdns.org"; classtype:attempted-recon; sid:200049308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmsvgbaovt.duckdns.org"; classtype:attempted-recon; sid:200049309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zmtbvvwqfs.duckdns.org"; classtype:attempted-recon; sid:200049310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znazmmhbff.duckdns.org"; classtype:attempted-recon; sid:200049311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zncwunkoch.duckdns.org"; classtype:attempted-recon; sid:200049312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zndjtswkcp.duckdns.org"; classtype:attempted-recon; sid:200049313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zngjofmxui.duckdns.org"; classtype:attempted-recon; sid:200049314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znh.x72adq9.cn"; classtype:attempted-recon; sid:200049315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znibotgkrk.duckdns.org"; classtype:attempted-recon; sid:200049316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znizzmqdls.duckdns.org"; classtype:attempted-recon; sid:200049317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znnhhgwade.duckdns.org"; classtype:attempted-recon; sid:200049318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znuntomyzv.duckdns.org"; classtype:attempted-recon; sid:200049319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znuseiekdn.duckdns.org"; classtype:attempted-recon; sid:200049320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"znzfevzeik.duckdns.org"; classtype:attempted-recon; sid:200049321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zocjulzfnu.duckdns.org"; classtype:attempted-recon; sid:200049322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zofpeveqie.duckdns.org"; classtype:attempted-recon; sid:200049323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zogojxcuon.duckdns.org"; classtype:attempted-recon; sid:200049324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zoiwtdisgr.duckdns.org"; classtype:attempted-recon; sid:200049325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zojmaqb.top"; classtype:attempted-recon; sid:200049326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zolppxedlf.duckdns.org"; classtype:attempted-recon; sid:200049327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zomarudxdu.duckdns.org"; classtype:attempted-recon; sid:200049328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zona-segura-prestamos-banbif.productos-en-linea.com"; classtype:attempted-recon; sid:200049329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zonaensengura.vvvvwpinchincha.com"; classtype:attempted-recon; sid:200049330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zonasegurascajapiura.franquiciasantotomecreditos.com.ar"; classtype:attempted-recon; sid:200049331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zonasegurascajapiura.handshakelimo.com"; classtype:attempted-recon; sid:200049332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zonasegurascajapiura.planosdesaudefacil.com"; classtype:attempted-recon; sid:200049333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zonavirtualenpinchicha.com"; classtype:attempted-recon; sid:200049334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zonpjwqqzh.duckdns.org"; classtype:attempted-recon; sid:200049335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zooxbwxrej.duckdns.org"; classtype:attempted-recon; sid:200049336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zosjumswop.duckdns.org"; classtype:attempted-recon; sid:200049337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zowekpbojt.duckdns.org"; classtype:attempted-recon; sid:200049338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zozksns9.tk"; classtype:attempted-recon; sid:200049339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zpbtnaiyqa.duckdns.org"; classtype:attempted-recon; sid:200049340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zpenmsqqgn.duckdns.org"; classtype:attempted-recon; sid:200049341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zpitaschsl.duckdns.org"; classtype:attempted-recon; sid:200049342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zplrbttuar.duckdns.org"; classtype:attempted-recon; sid:200049343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zpmmxdhftl.duckdns.org"; classtype:attempted-recon; sid:200049344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zpmtniznwl.duckdns.org"; classtype:attempted-recon; sid:200049345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zpnnmcmfxp.duckdns.org"; classtype:attempted-recon; sid:200049346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zpoffucqdw.duckdns.org"; classtype:attempted-recon; sid:200049347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zppcehqvml.duckdns.org"; classtype:attempted-recon; sid:200049348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zppdnziead.duckdns.org"; classtype:attempted-recon; sid:200049349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqdldcjnyp.duckdns.org"; classtype:attempted-recon; sid:200049350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqgortuxbh.duckdns.org"; classtype:attempted-recon; sid:200049351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqithlatux.duckdns.org"; classtype:attempted-recon; sid:200049352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqmlp-taaaa-aaaad-qdmsa-cai.raw.ic0.app"; classtype:attempted-recon; sid:200049353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqnrhefacz.duckdns.org"; classtype:attempted-recon; sid:200049354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqpctfvlyp.duckdns.org"; classtype:attempted-recon; sid:200049355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqpgvyavjo.duckdns.org"; classtype:attempted-recon; sid:200049356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqqpgukrry.duckdns.org"; classtype:attempted-recon; sid:200049357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqsurgzpxn.duckdns.org"; classtype:attempted-recon; sid:200049358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqtbsfykkn.duckdns.org"; classtype:attempted-recon; sid:200049359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqtqwohmbp.duckdns.org"; classtype:attempted-recon; sid:200049360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqxnzqx5.ml"; classtype:attempted-recon; sid:200049361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zqzsewgzqk.duckdns.org"; classtype:attempted-recon; sid:200049362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrctfczern.duckdns.org"; classtype:attempted-recon; sid:200049363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrdqmaavvk.duckdns.org"; classtype:attempted-recon; sid:200049364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrjjbmklzm.duckdns.org"; classtype:attempted-recon; sid:200049365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrjphhwkbk.duckdns.org"; classtype:attempted-recon; sid:200049366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrnptckemi.duckdns.org"; classtype:attempted-recon; sid:200049367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zromjyuylo.duckdns.org"; classtype:attempted-recon; sid:200049368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrpskzztmc.duckdns.org"; classtype:attempted-recon; sid:200049369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrrbtqqroq.duckdns.org"; classtype:attempted-recon; sid:200049370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrrqffobgw.duckdns.org"; classtype:attempted-recon; sid:200049371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zruosfherl.duckdns.org"; classtype:attempted-recon; sid:200049372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zruvojkbkv.duckdns.org"; classtype:attempted-recon; sid:200049373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrwsx.rf.gd"; classtype:attempted-recon; sid:200049374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrzpssbnvw.duckdns.org"; classtype:attempted-recon; sid:200049375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zrzxklvtuo.duckdns.org"; classtype:attempted-recon; sid:200049376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zs.kqkk4ch.cn"; classtype:attempted-recon; sid:200049377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zs.t6j0fa6.cn"; classtype:attempted-recon; sid:200049378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zs8scy3g487324cyg23c.c1.biz"; classtype:attempted-recon; sid:200049379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zsgxh.supibao.cn"; classtype:attempted-recon; sid:200049380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zskaxmmciv.duckdns.org"; classtype:attempted-recon; sid:200049381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zsmqfbbidf.duckdns.org"; classtype:attempted-recon; sid:200049382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zsmtozjuel.duckdns.org"; classtype:attempted-recon; sid:200049383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zsstittfkr.duckdns.org"; classtype:attempted-recon; sid:200049384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zsvxiijtab.duckdns.org"; classtype:attempted-recon; sid:200049385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zsznvoiaql.duckdns.org"; classtype:attempted-recon; sid:200049386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ztdqrqyqgq.duckdns.org"; classtype:attempted-recon; sid:200049387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ztfloczhua.duckdns.org"; classtype:attempted-recon; sid:200049388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ztnoamzrpc.duckdns.org"; classtype:attempted-recon; sid:200049389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ztowf4.webwave.dev"; classtype:attempted-recon; sid:200049390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ztpsjhtvmw.duckdns.org"; classtype:attempted-recon; sid:200049391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ztvxukxoov.duckdns.org"; classtype:attempted-recon; sid:200049392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zucmpnjves.duckdns.org"; classtype:attempted-recon; sid:200049393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuedqeveat.duckdns.org"; classtype:attempted-recon; sid:200049394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuehitemyp.duckdns.org"; classtype:attempted-recon; sid:200049395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuhmvmvcdh.duckdns.org"; classtype:attempted-recon; sid:200049396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuhrpdzzxx.duckdns.org"; classtype:attempted-recon; sid:200049397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuiniptaos.duckdns.org"; classtype:attempted-recon; sid:200049398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zumqkwcdle.duckdns.org"; classtype:attempted-recon; sid:200049399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuqpilxxif.duckdns.org"; classtype:attempted-recon; sid:200049400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zurbrioerf.com"; classtype:attempted-recon; sid:200049401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuriescents.com"; classtype:attempted-recon; sid:200049402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zurotqqvtw.duckdns.org"; classtype:attempted-recon; sid:200049403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuvvijzlhs.duckdns.org"; classtype:attempted-recon; sid:200049404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zuzcgziijm.duckdns.org"; classtype:attempted-recon; sid:200049405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvcyqiqddc.duckdns.org"; classtype:attempted-recon; sid:200049406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvd.fmwhkqv.cn"; classtype:attempted-recon; sid:200049407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvd.nr57mgg.cn"; classtype:attempted-recon; sid:200049408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvdmuoqdmd.duckdns.org"; classtype:attempted-recon; sid:200049409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvento.com"; classtype:attempted-recon; sid:200049410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvgaiguhhk.duckdns.org"; classtype:attempted-recon; sid:200049411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvjlwormfv.duckdns.org"; classtype:attempted-recon; sid:200049412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvsaxhldwm.duckdns.org"; classtype:attempted-recon; sid:200049413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvujkfdhok.duckdns.org"; classtype:attempted-recon; sid:200049414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvupzvcopp.duckdns.org"; classtype:attempted-recon; sid:200049415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvvrnnxidr.duckdns.org"; classtype:attempted-recon; sid:200049416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvzgukocwh.duckdns.org"; classtype:attempted-recon; sid:200049417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwdnpxsgmo.duckdns.org"; classtype:attempted-recon; sid:200049418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwdxfaflyz.duckdns.org"; classtype:attempted-recon; sid:200049419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwewclaakl.duckdns.org"; classtype:attempted-recon; sid:200049420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwkuzinuzw.duckdns.org"; classtype:attempted-recon; sid:200049421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwlnozhbvs.duckdns.org"; classtype:attempted-recon; sid:200049422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwmclaukka.duckdns.org"; classtype:attempted-recon; sid:200049423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwnlcpzlyw.duckdns.org"; classtype:attempted-recon; sid:200049424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwouucddjo.duckdns.org"; classtype:attempted-recon; sid:200049425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwsfnemtev.duckdns.org"; classtype:attempted-recon; sid:200049426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwwasurmjx.duckdns.org"; classtype:attempted-recon; sid:200049427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwwchoxret.duckdns.org"; classtype:attempted-recon; sid:200049428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwwempatgk.duckdns.org"; classtype:attempted-recon; sid:200049429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxdtctukar.duckdns.org"; classtype:attempted-recon; sid:200049430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxexafyaqm.duckdns.org"; classtype:attempted-recon; sid:200049431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxgfvckjrq.duckdns.org"; classtype:attempted-recon; sid:200049432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxnpbjlqtt.duckdns.org"; classtype:attempted-recon; sid:200049433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxq11400office365login8824lkv.myportfolio.com"; classtype:attempted-recon; sid:200049434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxvfyqsbmv.duckdns.org"; classtype:attempted-recon; sid:200049435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zxymzllxjx.duckdns.org"; classtype:attempted-recon; sid:200049436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zyisgnvgka.duckdns.org"; classtype:attempted-recon; sid:200049437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zytutbzsjr.duckdns.org"; classtype:attempted-recon; sid:200049438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzakhsrvod.duckdns.org"; classtype:attempted-recon; sid:200049439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzcskfjxom.duckdns.org"; classtype:attempted-recon; sid:200049440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzgbdfdywq.duckdns.org"; classtype:attempted-recon; sid:200049441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzgeufvnyh.duckdns.org"; classtype:attempted-recon; sid:200049442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzlzotunij.duckdns.org"; classtype:attempted-recon; sid:200049443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzvehtlcgn.duckdns.org"; classtype:attempted-recon; sid:200049444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zzzcgwyqhg.duckdns.org"; classtype:attempted-recon; sid:200049445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bros/"; endswith; nocase; http.host; content:"0nebet.com"; classtype:attempted-recon; sid:200049446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ghjzkg6f/orlenpl-wyh/?_t=1661198131207"; endswith; nocase; http.host; content:"0olut8.cn"; classtype:attempted-recon; sid:200049447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v3/signin/identifier?dsh=s-1006104066:1662988869063476&continue=https://accounts.google.com/?&followup=https://accounts.google.com/?&passive=1209600&xrealip=107.178.238.56&flowname=glifwebsignin&flowentry=servicelogin&ifkv=aqdhywqx1u-dlkznvtm9uhqca1bbclx9wjxuadxr-mjpkbb4tmz5uhhuudv7y4_lbjkexuoao7oo"; endswith; nocase; http.host; content:"129.226.210.78"; classtype:attempted-recon; sid:200049448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v3/signin/identifier?dsh=s-1341450717:1662988874143271&continue=https://accounts.google.com/?&xrealip=193.27.14.36&followup=https://accounts.google.com/?&xrealip=193.27.14.36&passive=1209600&xrealip=193.27.14.36&flowname=glifwebsignin&flowentry=servicelogin&ifkv=aqdhywqzakber5viiy1cwin4wldvou8i6ztb4xfq19fxvxjoknu6qdppvw5wlxnhfxfjraupcvyz"; endswith; nocase; http.host; content:"129.226.210.78"; classtype:attempted-recon; sid:200049449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/o/s!bcxisnewh_cnvrnkj_y2f1eccpwq?e=gvtbd8pbpealap_ppbzgja&amp\;at=9"; endswith; nocase; http.host; content:"1drv.ms"; classtype:attempted-recon; sid:200049450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/u/s!asazsxxj27tygrqveud6b2tyextk"; endswith; nocase; http.host; content:"1drv.ms"; classtype:attempted-recon; sid:200049451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/w/s!aqb1sjv7nuauan8etr6o4rb2z-8?e=siebms"; endswith; nocase; http.host; content:"1drv.ms"; classtype:attempted-recon; sid:200049452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/go/?www.orange.orangao.c%cd%8fo%cd%8fm%cd%8f"; endswith; nocase; http.host; content:"20khvylyn.com"; classtype:attempted-recon; sid:200049453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bbva/592cf4/425bdbd3-91cf-4e9f-9498-7a06b3ad75ec/?test=1"; endswith; nocase; http.host; content:"28ecne20f9u.securetnet.com"; classtype:attempted-recon; sid:200049454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6wwnqr"; endswith; nocase; http.host; content:"2dr.eu"; classtype:attempted-recon; sid:200049455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/themes/3rdst/8-login-form/"; endswith; nocase; http.host; content:"3rdstreetmarket.com"; classtype:attempted-recon; sid:200049456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicelogin?passive=1209600&continue=https://accounts.google.com/?&xrealip=107.178.200.216&followup=https://accounts.google.com/?&xrealip=107.178.200.216"; endswith; nocase; http.host; content:"43.134.191.197"; classtype:attempted-recon; sid:200049457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/wauth-login-present-origin-cob/"; endswith; nocase; http.host; content:"50in50marathonquest.com"; classtype:attempted-recon; sid:200049458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d5b4121d-ad8975c1-fc53-41b2-bad9-ecb97743ffd4-000000/p1odbvtfelzzx9amvwo_h954np8=278"; endswith; nocase; http.host; content:"7b631qxp.r.us-west-2.awstrack.me"; classtype:attempted-recon; sid:200049459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d5fb3b48-737ccb85-d5e2-4457-a851-976cc0f4bb46-000000/7s-v3-kzdc4bgzegonycqrjgcoi=278"; endswith; nocase; http.host; content:"7b631qxp.r.us-west-2.awstrack.me"; classtype:attempted-recon; sid:200049460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d603af46-160c71a9-c106-4e8a-8d41-5f8c8fea17a9-000000/c9_d4zic3z0jjatwzj75zswof1w=278"; endswith; nocase; http.host; content:"7b631qxp.r.us-west-2.awstrack.me"; classtype:attempted-recon; sid:200049461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d641f3ae-89c7fa59-82a2-4f6b-b2a4-cdc8626f95fa-000000/hyy7ncrmtxieavrn3px4goieeos=278"; endswith; nocase; http.host; content:"7b631qxp.r.us-west-2.awstrack.me"; classtype:attempted-recon; sid:200049462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/assets/css/api.php"; endswith; nocase; http.host; content:"99mbet.com"; classtype:attempted-recon; sid:200049463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/assets/img-temp/api.php"; endswith; nocase; http.host; content:"99mbet.com"; classtype:attempted-recon; sid:200049464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/assets/js/api.php"; endswith; nocase; http.host; content:"99mbet.com"; classtype:attempted-recon; sid:200049465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/openpc/directlogin.do"; endswith; nocase; http.host; content:"a-q-f.com"; classtype:attempted-recon; sid:200049466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/id_1ftb3gemh_1ogg?utm=abcsubmit"; endswith; nocase; http.host; content:"abcsubmit.com"; classtype:attempted-recon; sid:200049467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/id_1ftb7k8ik_11di?utm=abcsubmit"; endswith; nocase; http.host; content:"abcsubmit.com"; classtype:attempted-recon; sid:200049468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicelogin?passive=1209600&continue=https://sites.google.com/view/viewbill-bt-1/bt&followup=https://sites.google.com/view/viewbill-bt-1/bt"; endswith; nocase; http.host; content:"accounts.google.com"; classtype:attempted-recon; sid:200049469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman.html"; endswith; nocase; http.host; content:"accounts.google.com"; classtype:attempted-recon; sid:200049470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman2.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman2.html"; endswith; nocase; http.host; content:"accounts.google.com"; classtype:attempted-recon; sid:200049471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html&followup=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html"; endswith; nocase; http.host; content:"accounts.google.com"; classtype:attempted-recon; sid:200049472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html&followup=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html"; endswith; nocase; http.host; content:"accounts.google.com"; classtype:attempted-recon; sid:200049473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html&followup=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html"; endswith; nocase; http.host; content:"accounts.google.com"; classtype:attempted-recon; sid:200049474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/en/bellcocreditunion/"; endswith; nocase; http.host; content:"admin.fifoundry.net"; classtype:attempted-recon; sid:200049475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"aesoioesn.aseoseiseaccn.uqmzwu.top"; classtype:attempted-recon; sid:200049476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"aesooesn.aseoseseaccn.uqmzwu.top"; classtype:attempted-recon; sid:200049477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"aesoosesn.aseoseesceacn.uqmzwu.top"; classtype:attempted-recon; sid:200049478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/#redacted@abuse.ionos.com"; endswith; nocase; http.host; content:"agblxwoyweqsdves-dot-mirm-git0-ogix-ogoa.ue.r.appspot.com"; classtype:attempted-recon; sid:200049479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2005/03/colourful-life-of-aij.html"; endswith; nocase; http.host; content:"aijcs.blogspot.com"; classtype:attempted-recon; sid:200049480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/svxc/index1.php"; endswith; nocase; http.host; content:"aiousolvedassignment.com"; classtype:attempted-recon; sid:200049481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/royal%20malaysian%20airforce%20web%20client%20sign%20in.html"; endswith; nocase; http.host; content:"air.power.livemailsupport.com"; classtype:attempted-recon; sid:200049482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yonetici/newdocs/gdoccc/"; endswith; nocase; http.host; content:"aksehirevdenevenakliyat.com"; classtype:attempted-recon; sid:200049483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/index.html"; endswith; nocase; http.host; content:"alharaj-alalmi.com"; classtype:attempted-recon; sid:200049484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/our/ourtime/ourtime.html"; endswith; nocase; http.host; content:"ambrosecourt.com"; classtype:attempted-recon; sid:200049485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pc/amazonall_signin1.php"; endswith; nocase; http.host; content:"amozon.co.jp.llhgmt.com"; classtype:attempted-recon; sid:200049486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pc/amazonall_signin1.php"; endswith; nocase; http.host; content:"amozon.co.jp.xfjszt.com"; classtype:attempted-recon; sid:200049487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2409d185-0697-4010-b988-2a5310917-2409d185-0697-4010-b988-2a531/index-01.html"; endswith; nocase; http.host; content:"ams3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200049488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cnd/quenmass.htm"; endswith; nocase; http.host; content:"ams3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200049489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/space4944/kumlin.htm"; endswith; nocase; http.host; content:"ams3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200049490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jps/webmail_reset.htm"; endswith; nocase; http.host; content:"anekaslot.com"; classtype:attempted-recon; sid:200049491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/message/c3upfo4mvzsgg1?autoload=1&amp\;app_absent=0"; endswith; nocase; http.host; content:"api.whatsapp.com"; classtype:attempted-recon; sid:200049492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/s/x6agocx9zvj049azirk4aw3xrqdedqhl"; endswith; nocase; http.host; content:"app.box.com"; classtype:attempted-recon; sid:200049493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/s/ymr0ltw3hmn8icxebz16gjhcyhqa49w4"; endswith; nocase; http.host; content:"app.box.com"; classtype:attempted-recon; sid:200049494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/document/27bcdebd7736cefa2575f4f56d1439096536f544"; endswith; nocase; http.host; content:"app.pandadoc.com"; classtype:attempted-recon; sid:200049495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/064ca177fcb7d3b79b1a0de5fb00ade981aeff90?"; endswith; nocase; http.host; content:"app.pandadoc.com"; classtype:attempted-recon; sid:200049496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/26bcb52213a6d759d76014ff4e11c37cae6ae56c"; endswith; nocase; http.host; content:"app.pandadoc.com"; classtype:attempted-recon; sid:200049497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/27bcdebd7736cefa2575f4f56d1439096536f544"; endswith; nocase; http.host; content:"app.pandadoc.com"; classtype:attempted-recon; sid:200049498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/abg7_xbalh"; endswith; nocase; http.host; content:"appurl.io"; classtype:attempted-recon; sid:200049499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kektfripag"; endswith; nocase; http.host; content:"appurl.io"; classtype:attempted-recon; sid:200049500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tryu/secure.business.bt.com/app/"; endswith; nocase; http.host; content:"at-e.co.jp"; classtype:attempted-recon; sid:200049501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wordpress/wp-admin/user/public/tolbox/"; endswith; nocase; http.host; content:"atlanticcity.com"; classtype:attempted-recon; sid:200049502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/shop/v1/?vn=ctv-tfnlinkbot-pc4-cos-usr-bdl2-alt-wrl-wrle-cc1-cic-cf4-dpf&chatmessage=false&slidechat=false"; endswith; nocase; http.host; content:"att-promotions.com"; classtype:attempted-recon; sid:200049503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveeaeasevcercreoi.viiavucrrnsvscrroieeaio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.6yajqmu.tokyo"; classtype:attempted-recon; sid:200049505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.q14tx8u.tokyo"; classtype:attempted-recon; sid:200049506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveeseasevcsrcreoi.viiavuerrnsvscrrsieeaio.xogutju.tokyo"; classtype:attempted-recon; sid:200049507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.6yajqmu.tokyo"; classtype:attempted-recon; sid:200049508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.q14tx8u.tokyo"; classtype:attempted-recon; sid:200049509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveoseaseacerceeoi.viiacucrrnsvscrrooeieraio.xogutju.tokyo"; classtype:attempted-recon; sid:200049510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.6yajqmu.tokyo"; classtype:attempted-recon; sid:200049511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avicacveoseaseacsrceeoi.viiacuerrnsvscrroseieraio.xogutju.tokyo"; classtype:attempted-recon; sid:200049513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.6yajqmu.tokyo"; classtype:attempted-recon; sid:200049514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacaeiaeaseccercoroi.visavucarnsvserroieaio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacaeiseaseccsrcoroi.visavucarnsvserrrieaio.q14tx8u.tokyo"; classtype:attempted-recon; sid:200049516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.q14tx8u.tokyo"; classtype:attempted-recon; sid:200049518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacaeoseaseacsrceroi.visacucarnsvserroreiraio.xogutju.tokyo"; classtype:attempted-recon; sid:200049519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.6yajqmu.tokyo"; classtype:attempted-recon; sid:200049520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieeaecseacercevoi.viiasucarnsvscrroreaio.xogutju.tokyo"; classtype:attempted-recon; sid:200049522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieevecseacsrcevoi.viiasuvarnsvscrrsreaio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.6yajqmu.tokyo"; classtype:attempted-recon; sid:200049524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieosecseacercevoi.viiacucarnsvscrrooerraio.xogutju.tokyo"; classtype:attempted-recon; sid:200049526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.k8jaf9u.tokyo"; classtype:attempted-recon; sid:200049527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"avscacieosecseacsrcevoi.viiacuvarnsvscrroserraio.q14tx8u.tokyo"; classtype:attempted-recon; sid:200049528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"azeioaz.blogspot.com"; classtype:attempted-recon; sid:200049529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/index.html"; endswith; nocase; http.host; content:"baovesusonglcxt.com"; classtype:attempted-recon; sid:200049530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/js/api-gantengz.php?key"; endswith; nocase; http.host; content:"bardestani-carpet.com"; classtype:attempted-recon; sid:200049531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/css/apicuy.php?key"; endswith; nocase; http.host; content:"bardestani-carpet.com"; classtype:attempted-recon; sid:200049532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/public/ww/7/"; endswith; nocase; http.host; content:"bengalmart.com.bd"; classtype:attempted-recon; sid:200049533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/themes/chpost/ch/?pwd=post"; endswith; nocase; http.host; content:"bestdoctors.com"; classtype:attempted-recon; sid:200049534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/themes/chpost/ch/clients/details.php?verification#_"; endswith; nocase; http.host; content:"bestdoctors.com"; classtype:attempted-recon; sid:200049535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/ngg/wb/index.php"; endswith; nocase; http.host; content:"bikeboat.com"; classtype:attempted-recon; sid:200049536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?bfp"; endswith; nocase; http.host; content:"binancezh.sh"; classtype:attempted-recon; sid:200049537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:w:/g/personal/mtestan2_binghamton_edu/edp3org-ymjbpyq-3xfgf5ob4x8g4fhb0siyy3cfhyg08w?e=4%3an9hzlk&amp\;at=9"; endswith; nocase; http.host; content:"binghamton-my.sharepoint.com"; classtype:attempted-recon; sid:200049538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bancabperverifica"; endswith; nocase; http.host; content:"bit.do"; classtype:attempted-recon; sid:200049539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bnl-nuovasicurezza"; endswith; nocase; http.host; content:"bit.do"; classtype:attempted-recon; sid:200049540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bp-accedi"; endswith; nocase; http.host; content:"bit.do"; classtype:attempted-recon; sid:200049541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bperverifica"; endswith; nocase; http.host; content:"bit.do"; classtype:attempted-recon; sid:200049542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fu8jd"; endswith; nocase; http.host; content:"bit.do"; classtype:attempted-recon; sid:200049543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fuvgz"; endswith; nocase; http.host; content:"bit.do"; classtype:attempted-recon; sid:200049544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/portale-n26-accedi"; endswith; nocase; http.host; content:"bit.do"; classtype:attempted-recon; sid:200049545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3ijwsm2"; endswith; nocase; http.host; content:"bit.ly."; classtype:attempted-recon; sid:200049546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2q7fcpg"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2zejaht"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/34hdmyt"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/366qkes"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/37wssuw"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/39txfq9"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3aoqym4"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3boeajf"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3btlfer"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3ccqacg"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3dj0r1p"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3e8kw2o"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3epsbd9"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3grdybu"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3ib7job?l=www.bancofalabella.cl"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3jkf6va"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3krnsnv"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3kueruz"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3kworri"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3lamwcc"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3ldovbh"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3liysw6"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3nodk2b"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3ppngcc"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3pvc7vy"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3pyxhfl"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3qplrme"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3rwxwd0"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3ubpi3a"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3urj7gg"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3wdi2jy"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3wpb5to"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3yntw4c"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3yqqglu"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/assistenzabper"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/banbif-pe"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bcp_wanuchay"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/claim-gifts"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d_bnl_gruppoparibas"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/erroringreso"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ingresoerror-"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lmterbank"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nabupdateonline"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/shpee_coins"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/udmcmadcracked"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/verifikasiakunanda--2022"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/verifikasipemblokiran_id"; endswith; nocase; http.host; content:"bit.ly"; classtype:attempted-recon; sid:200049593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3g1epw3"; endswith; nocase; http.host; content:"bitly.com"; classtype:attempted-recon; sid:200049594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3jrtmmu"; endswith; nocase; http.host; content:"bitly.com"; classtype:attempted-recon; sid:200049595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a/blocked?hash=3ldwr8w&url=https%3a%2f%2fsecure.oldschool.com-login.cz%2fm%3dweblogin%2floginform.ws825%2c295%2c688%2c41525479%2c2004"; endswith; nocase; http.host; content:"bitly.com"; classtype:attempted-recon; sid:200049596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/taxirsxcy"; endswith; nocase; http.host; content:"bitly.com"; classtype:attempted-recon; sid:200049597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/unemploymentassistances1"; endswith; nocase; http.host; content:"bitly.com"; classtype:attempted-recon; sid:200049598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/accounts_blackbearcc_co_uk/_layouts/15/onedrive.aspx?id=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments%2fngb%20urgente%20substanti%c3%able%20update%20%5f%20voorstel%2epdf&amp\;parent=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments&amp\;originalpath=ahr0chm6ly9ibgfja2jlyxjjy2nvdwstbxkuc2hhcmvwb2ludc5jb20vomi6l2cvcgvyc29uywwvywnjb3vudhnfymxhy2tizwfyy2nfy29fdwsvrve5as01b19mukjbcutzeunhv3eznw9ccfbtmze3b2fsrnrgnhpzuenbvlfiqt9ydgltzt1tqjzyquroodjvzw"; endswith; nocase; http.host; content:"blackbearcccouk-my.sharepoint.com"; classtype:attempted-recon; sid:200049599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/en/balances"; endswith; nocase; http.host; content:"bnbchain.world"; classtype:attempted-recon; sid:200049600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/en/trade/now-e68_bnb"; endswith; nocase; http.host; content:"bnbchain.world"; classtype:attempted-recon; sid:200049601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hxim7w"; endswith; nocase; http.host; content:"bom.so"; classtype:attempted-recon; sid:200049602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?aplicar"; endswith; nocase; http.host; content:"bonomequedoencasa.blogspot.com"; classtype:attempted-recon; sid:200049603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/confermo/"; endswith; nocase; http.host; content:"bpeit.com"; classtype:attempted-recon; sid:200049604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/verify/m&t/login.php"; endswith; nocase; http.host; content:"brauhausschmitzoctoberfest.com"; classtype:attempted-recon; sid:200049605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/login.html"; endswith; nocase; http.host; content:"brooksshoesoutlet.com"; classtype:attempted-recon; sid:200049606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:o:/g/personal/richardmcc_winebinends_org_uk/eqv_1b7hjo5gngtopu852xcbwjtdbkujue4wq9ljz-xq5q?e=pjtgzh"; endswith; nocase; http.host; content:"bt843843p1-my.sharepoint.com"; classtype:attempted-recon; sid:200049607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:w:/g/personal/dkapaon_brandeis_edu/es1enxze9_xblrutnfjfpm8bbxkssfvrpe6cnirweqaapg?e=4%3afdar13&amp\;at=9"; endswith; nocase; http.host; content:"c569257608da4dcaafbc-my.sharepoint.com"; classtype:attempted-recon; sid:200049608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/svxc/index.php"; endswith; nocase; http.host; content:"cannacbdoilrx.com"; classtype:attempted-recon; sid:200049609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/home/payment.php"; endswith; nocase; http.host; content:"carepath-recruitment.co.uk"; classtype:attempted-recon; sid:200049610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wordpress/wp-admin/css/colors/light/webmail.thurweb.ch/login.html"; endswith; nocase; http.host; content:"caxita.co.in"; classtype:attempted-recon; sid:200049611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f/9245db2516febd1d3c13c0a90f65c615"; endswith; nocase; http.host; content:"cbn.li"; classtype:attempted-recon; sid:200049612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f/fa15a875fac963541c5da50d05c179ac"; endswith; nocase; http.host; content:"cbn.li"; classtype:attempted-recon; sid:200049613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/svxc/"; endswith; nocase; http.host; content:"ccb.aeh.mybluehost.me"; classtype:attempted-recon; sid:200049614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/dhdhduuuebdbdbdd/xx-sfrwebcli/ologin.php"; endswith; nocase; http.host; content:"cdn-edinhopedras.nuneshost.com"; classtype:attempted-recon; sid:200049615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"ch-299199919900.blogspot.com"; classtype:attempted-recon; sid:200049616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"chase-help-support-locked.blogspot.com"; classtype:attempted-recon; sid:200049617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"chase-onlinehelp.blogspot.com"; classtype:attempted-recon; sid:200049618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/uploads/2022/06/mail.ionos.com/login.php"; endswith; nocase; http.host; content:"chinabestproduct.com"; classtype:attempted-recon; sid:200049619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2021/02/blog-post_12.html"; endswith; nocase; http.host; content:"chronopostvalidation.blogspot.com"; classtype:attempted-recon; sid:200049620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/proxy/rdh-rjsrv9zzrx57iscgov74o1gka4qjdfj01qr7v8-pkjgyvn50tivt7pzqgm5kuqdmonqle3f8eq_t8f4xl6jdozabmf2lxy-888ai8hdji633rg"; endswith; nocase; http.host; content:"ci3.googleusercontent.com"; classtype:attempted-recon; sid:200049621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/proxy/djc3ckf7jcnj8l0duyaqyjwffeskzbccy9spjiauj_jwrplgw0ahyaf1xozvm6n_fjn8q1-2vkhqqujjr1en3qej703lyxxujt6tto-ttwsl6hgsggp3ehcc"; endswith; nocase; http.host; content:"ci4.googleusercontent.com"; classtype:attempted-recon; sid:200049622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/proxy/zjba9cvtmkfnoveyofx6gqong0kqi3s69d9o2y32fmu_gankb59tj-rb79bolx0bwbsemnonfhh2esy9olfdp-20gybztkzstfhfheqrrjuefxwiwkqws29wxm6tdobikwz-qkzfphpaldfr"; endswith; nocase; http.host; content:"ci4.googleusercontent.com"; classtype:attempted-recon; sid:200049623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/escl6%09%09%09%09%09%20%20"; endswith; nocase; http.host; content:"clck.ru"; classtype:attempted-recon; sid:200049624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gwg8w"; endswith; nocase; http.host; content:"clck.ru"; classtype:attempted-recon; sid:200049625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yzuft&post=665308711_32&cc_key"; endswith; nocase; http.host; content:"clck.ru"; classtype:attempted-recon; sid:200049626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?qs=6541641088c869552ced792d84ee93eabf075e23cd5eba83a7d07a40ad9cf2ce36c931984719b9df7de658999defbc87f999ec46970a0280"; endswith; nocase; http.host; content:"click.message.fruit.com"; classtype:attempted-recon; sid:200049627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2sm/www.facebook.com%2fidmeinc%2f/nk2-ri4n/weg/x37pnvbmkp/axzhlmv4cglyyxrpb24unjbfzgf5cw"; endswith; nocase; http.host; content:"click.pstmrk.it"; classtype:attempted-recon; sid:200049628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fact-comp-h5j6k7j"; endswith; nocase; http.host; content:"clickmetertracking.com"; classtype:attempted-recon; sid:200049629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/core/ups.com/wp-activation/en/app/"; endswith; nocase; http.host; content:"cloud.bwallet.com.br"; classtype:attempted-recon; sid:200049630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafkreidqr7tw7chuyg7pf3obkufp2hultdpoas37vnnofqes7nzkq3kqfe"; endswith; nocase; http.host; content:"cloudflare-ipfs.com"; classtype:attempted-recon; sid:200049631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeigcqxrvhjj5wxf2qr3z3fvwucejix4xwyfgl7s3oersn37augbdfy"; endswith; nocase; http.host; content:"cloudflare-ipfs.com"; classtype:attempted-recon; sid:200049632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/config/webmaii/error.php"; endswith; nocase; http.host; content:"cmark.mycustomerconnect.com"; classtype:attempted-recon; sid:200049633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/config/webmaii/login.php"; endswith; nocase; http.host; content:"cmark.mycustomerconnect.com"; classtype:attempted-recon; sid:200049634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/agt12/outlook"; endswith; nocase; http.host; content:"cognitoforms.com"; classtype:attempted-recon; sid:200049635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/automotive4/hrcompliancesection"; endswith; nocase; http.host; content:"cognitoforms.com"; classtype:attempted-recon; sid:200049636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/knpdf/ussecuredpdfdownloader"; endswith; nocase; http.host; content:"cognitoforms.com"; classtype:attempted-recon; sid:200049637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/en/"; endswith; nocase; http.host; content:"coinmarketcal.com"; classtype:attempted-recon; sid:200049638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pages"; endswith; nocase; http.host; content:"commbank-cancel-payment.com"; classtype:attempted-recon; sid:200049639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/#/"; endswith; nocase; http.host; content:"comusoportecam-produccion.appspot.com"; classtype:attempted-recon; sid:200049640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/h/y/b6733bec265eb698"; endswith; nocase; http.host; content:"confirmsubscription.com"; classtype:attempted-recon; sid:200049641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418&amp\;email=jackdavis@eureliosollutions.com&amp\;fid=1&amp\;fid=4&amp\;rand=13inboxlightaspxn.1774256418"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;amp"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;ampopensource:observable-35835700-0d08-4c25-a188-b8312ba00a941067515"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;fid.4.1252899642&amp\;fid=1&amp\;fav.1&amp\;rand.13inboxlight.aspxn.1774256418&amp\;fid.1252899642&amp\;fid.1&amp\;fav.1&amp\;email=&amp\;.rand=13inboxlight.aspx?n=1774256418&amp\;fid=4"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;fid.4.1252899642&amp\;fid=4&amp\;fav.1&amp\;rand.13inboxlight.aspxn.1774256418&amp\;fid.1252899642&amp\;fid.1&amp\;email=jsmith@imaphost.com&amp\;.rand=13inboxlight.aspx?n=1774256418"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/network/acct?email=jackdavis@eureliosollutions.com"; endswith; nocase; http.host; content:"creativecombat.com"; classtype:attempted-recon; sid:200049651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/images/verify/update/y.html"; endswith; nocase; http.host; content:"creativeingredient.com"; classtype:attempted-recon; sid:200049652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2011/02/habbo-crediti-gratis-sicuro-100.html"; endswith; nocase; http.host; content:"creditiperhabbogratissicuro100.blogspot.com"; classtype:attempted-recon; sid:200049653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:o:/p/clord/eo0lfhtannnjiehfwx2q5o8b_lkpqdhacft8rkvqad2nqg?e=5%3aq65oiu&amp\;at=9"; endswith; nocase; http.host; content:"curtislibrary-my.sharepoint.com"; classtype:attempted-recon; sid:200049654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"cusstomerservicee.blogspot.com"; classtype:attempted-recon; sid:200049655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/accediora"; endswith; nocase; http.host; content:"cutt.ly"; classtype:attempted-recon; sid:200049656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ebvdr"; endswith; nocase; http.host; content:"cutt.us"; classtype:attempted-recon; sid:200049657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/aws/login/amazon/signin.php"; endswith; nocase; http.host; content:"dadaotravel.com"; classtype:attempted-recon; sid:200049658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/aws/login/amazon/signin.php?country=en-us&amp\;lang=en"; endswith; nocase; http.host; content:"dadaotravel.com"; classtype:attempted-recon; sid:200049659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/aws/login/amazon/signin.php?country=it-italy&amp\;lang=it"; endswith; nocase; http.host; content:"dadaotravel.com"; classtype:attempted-recon; sid:200049660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/webmail-rd1278/index.html"; endswith; nocase; http.host; content:"danashaymarketing.com"; classtype:attempted-recon; sid:200049661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?d#wallets"; endswith; nocase; http.host; content:"dapp.accessactivationbot.com"; classtype:attempted-recon; sid:200049662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uploads/team/zxc.php"; endswith; nocase; http.host; content:"demo.mobileappformyrestaurant.co.uk"; classtype:attempted-recon; sid:200049663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hotsite/inicio?utm_source=sendpulse&utm_medium=email&utm_campaign=2021_desejoourocard_ciclo_6_opt-in_sem_opt-in_varejo_%235om-p2_p8_p16_p9_frio&spush=ywxjyw50yxjhy2fzc2lhbmu2n0bnbwfpbc5jb20="; endswith; nocase; http.host; content:"desejoourocard.com.br"; classtype:attempted-recon; sid:200049664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/online/showdocument?documentid=1fce937a-ba39-4053-a83a-f07711ad8efd&invitationid=82f3e840-cd11-4da4-8579-304bd7e930b0"; endswith; nocase; http.host; content:"digisigner.com"; classtype:attempted-recon; sid:200049665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7p8ma?confirmation"; endswith; nocase; http.host; content:"dik.si"; classtype:attempted-recon; sid:200049666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dirbn"; endswith; nocase; http.host; content:"dik.si"; classtype:attempted-recon; sid:200049667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/iavat"; endswith; nocase; http.host; content:"dik.si"; classtype:attempted-recon; sid:200049668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ot6v7?confirmation"; endswith; nocase; http.host; content:"dik.si"; classtype:attempted-recon; sid:200049669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tpjda?confirmation"; endswith; nocase; http.host; content:"dik.si"; classtype:attempted-recon; sid:200049670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/w9smu"; endswith; nocase; http.host; content:"dik.si"; classtype:attempted-recon; sid:200049671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/14038722/"; endswith; nocase; http.host; content:"direct.lc.chat"; classtype:attempted-recon; sid:200049672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/23/index1.php"; endswith; nocase; http.host; content:"dispatching-center-uspost.com"; classtype:attempted-recon; sid:200049673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/23/index4.php"; endswith; nocase; http.host; content:"dispatching-center-uspost.com"; classtype:attempted-recon; sid:200049674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?url=https%3a%2f%2fpushrushed88.duckdns.org%2fredirect%2f&key=ulc_4epigzz16uwfb5b_yg"; endswith; nocase; http.host; content:"disq.us"; classtype:attempted-recon; sid:200049675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/paymydoctor-at-www-paymydoctor-com/"; endswith; nocase; http.host; content:"districtchronicles.com"; classtype:attempted-recon; sid:200049676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/document/d/e/2pacx-1vszcwxk6nifthkg32wjxfjgq9yc-jjujkbsumqeeau8uw7xkcutyp0tbgux2mvwu8iqfrxxlunajob8/pub"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/document/d/e/2pacx-1vt_xl-m0ff8yqqhzhgseahgwejo0znh9re6w0qvgbe0qfe084hrebjjg673htphdnvbcdnq6agehncq/pub?mobilelogin"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/document/d/e/2pacx-1vth3iya0ov7p49rk9ejozgqnueuk8fna2mky389hertlwx4mnoyhl1mlhnwbz8sxnsqtk8i5uysmq68/pub?embedded=true"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/18tk5qmpccb5nygfkfeo9xc5qowvffgdjvy52swoyhd8/viewform?edit_requested=true"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4/viewform?edit_requested=true"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1casphevkfdaz2okqj70wdai3pdwwg1weh_rpk9v0z3a/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1g1hatisjxswx8aoimoehyj2gumqe6oqb8wczylqpiou/viewform?usp=forms_home&amp\;ths=true&edit_requested=true"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1gs07chp1nmdlfpzzgcswjfzjtek057wtnfs8ws_jbky/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1htjqwgpnkonvm8dbgasjax8mkpu_pvnj0c71ttkfpn4/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1quv0zklyhgw_4y4pfincdtzmt6qim5qffhfuxcb4kl4/viewform?edit_requested=true"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/1xqimvjghvfozh7itbnfykzhs1njn2ib87dj29qowr2s/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc-dgjx5xrdu-0vsevx2bd16zlt6rydibvfdsgrqlxld4lozw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc-nv7qlz6jg_y9ze5k9ds_kzo8hyelurb5j5veve1q4jkiwq/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc-xysogohjsbzmcnoded8ooar2gz1c5zxobgk8envh3jbpow/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc0o4vlkf8kr3nf2m594obfauspo2orpvqmat7dmhk272ex3q/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc0yyqlieizg0nzouznvhsjfags1h9qi5hpdw3qlgbivm501q/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc1sinntdpgo5c6tz6crpbkhdb59q9y8mjtcwfr5v93buo9wa/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc4bagzjzmstbnjhy7zpy5zsx-xrn7reoouolv54luk5tihha/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc8ivrcjrbnxs_ckmgkrmk1unmuijsqwkbudbmayumt3e438g/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc8uc5aztlek3s6dqtk1etorhez5m2yvubyw5qmfkpisrelcq/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc_enqwhhv1jnvzy55mb4ghvjd4wcz9plnolh2eoitk7qgbra/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsc_f0pxmnwzrtbck6u06fdzocmhgzvjzlc8cu7c9b456fhccq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscaoiohhbm7suyz9ol9o9ueunbxn6donxrfjge2cevdw_8jmw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscbpunbcb6ubfnwjo9jol26cjvjjsvpzkz_wb9exxt9c7erdq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscbtba5srjedev4uvqq49pt3recywqah-ar5szplndj-dxhgw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscc98m5fw4ifog0zeiuquxitizmisrgsdvyxvtxsppunpkwzq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscckv1-rxhipcmrhnwfvq2lhuxx18nzcm1e7e0oz8ienixtgw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscclmqirehqtkm3vl4u9gm2zv6xfvrddbrgke9fmsfujqbboq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscd8t8sjgxqrsa6dq5kjpmrpsxkvi4bl38sfdu7wa3sl32elg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsceoxsfawdsbd2r-jk2sppywnv1bchzjjcw2xkcj7oqkwqriw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscf9u8nrld-zvu6clr4jcwnw0buqrykdldtzoullbxy8kc1ta/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscfh2njwrve6_rkxxy1yz83keoeekd4maqcnd-ivq7rkg0uca/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscirilop6_iti0zvvrlsbk8zfaeo-f10otlhj9k5liyervk4g/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscjsewetq_v_cbpyh9dzjwsaoldxz2zx816022wp1vej8gv1g/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscjtat4fmstlxz3hbfkg4qyi-epfdmun7_avcqwvgscoydytw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscjvnhykksssaw-kycyrl6ywg_r3fdjuyqhk2mrmxcpgwfxoa/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscmzyecgbuuccfs_5e5axn9hpruzskqmvseedm0xz1qrqb5vg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscn6xxq_xvtivggy_4rkibou1i27e0kpiimikafpaavki1vsq/viewform?usp=send_form&usp=embed_facebook"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscndiqyfu0gtgwomcwsy-8nadvzgljrpdhkv6pedgh0avniag/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscpilmb3qeojpnro6hw5ekpw1g4ub7j7feusjzsmq9obnoq2g/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscqbbsvkpxnasqgeazpzwxp1ln7qzdurt-nqn4azqa7q14euw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscqstjp2am_gdxb3vmgu9lkv6l7jho80rmyd7lmujoarxrqjg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscrmsgjymaojts0bfneswvnfekiw6zya5rzyqoa1ydp5wkcrw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsctmueyv-hoo8lvwjhptfnaht4ymn8cr3tnftbfnqmjb6xpwg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscuttypbph1iazuis8aa6xvrlmagwglmdcrrg8g2oymskvbva/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscvqmhqgwbubzxdynzgvlbmmziyagdiadz2eyhc-s-ro8ndfq/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscxktatyielmhqxqqxtesa1ih5armwcrqy5r9-95cslplt5rg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscy0frglrf-omcz0vkzncs5vnnwg-sbnzhqxv7fhse6pfwf7w/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscywhsspi2neolntfe02hpq6jqilhxprhi_z58uj2lfqortyq/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlscz4uf8dtvwhgxggkzsbbhjcgu9npgc6agxpy5o2fwpo6tv5q/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsczswa80hlvnpkqiuayjwbf8ha_rqzov0iiz18iixjatmqk9g/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd-1s4o-n_p_bhfqqs2agxxx4erjuvj6e5pwndokq5tg5cnzq/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd-bdmru2lv7bv1fk1mwwkxyrvf6uyx11zlly9k0j2gdse_rw/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd26pifmynauv34el3gdnx3yzwdue9bannzsfcy7bdkyfotaq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd28bt51jk8onxnbburwsyu2xlc52wmdkgisnqrkvotohz7mw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd2nideystvwbbe_ai_glo93rwmxwkf_ok7sl_dvxqtacpwla/viewform?pli=1"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd2ou8uvxtpuhvfme1q0hzpsnfnwg-nfno2_niqp6fzcjobog/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd3x6brnru3toiionptordwmc4zorxcky1ebpmeg6bb4jfuca/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd493if3zxczsfqzw_g592pog6wbhptgrci8sbhji11gq312a/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd5a68ino7qnojzidjg3eemyspl_vscjc06rtn1yjqnrewj9q/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd7jgegqudsjg7blscqgfvdftyvlno6xreg6wjuxl0hnfbwtw/viewform?vc=0&amp\;c=0&amp\;w=1&amp\;flr=0&amp\;gxids=7628"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd8vkw5fxeroe_pxa7n5cdfpukhahbg_7k7sg0iuosh_xsyoa/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd9poeb_wmgffgg8taw4z_np0kdbo32gr35k1zxizj7lcdela/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsd_c4wpt0zzouwt5lr9p5kn5cylz3ananv1hlix6u_h36w1rg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsda4flfi-1_gvwqnbb1dcxz_mb5omo9t2oc-vslzfgh6avrag/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdbgprbyowwcugqslasnoo-sbqcrgi6ppycsytvsw2_dwfeug/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdcga7ojllxp3z9puyfumhvn7klcijhty86bmhawtv5r6wwqg/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdcznggxnwia2ct8kmxid1tdqhgerhnmixukxuj7nmq1lqsma/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdf04avkjwvete8rj-wa3i7u6_8-orwqu-c-owvgb0nrxumga/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdfarxg-0eurkyimsg-ukgl4mbtgvwfhe1wzbdxmb7oaosnyg/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdinjm_qvdbv3roybqi073rm1pujmrrs7lid7c3qk-4xwweew/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdjmguhf2gu58xprr02lay_fc7kwixkq5zmtsn-5rgblqhbiw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdjmguhf2gu58xprr02lay_fc7kwixkq5zmtsn-5rgblqhbiw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdmjjljjfmjeijeyraxfm6pzupdbvoie7d_ussaqgqu2jh7zq/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdn6j3pmzbohssod769dzdjgkzhq9gt0czpk41k7ovrh41rkw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdnega_6c_pz9_q9ep9epm4iwqfsrxqsnaz-j9dyldimaoocg/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdqupro5hny5wbr5o5logbzdfh19mlw8vggtnzxrouoyvzkog/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdrk4xndjat7qhzawgsc96chkgkg66dcwrujwfkgjhzkmzhqg/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdv5owjshz-50lp-lmzff4i2z0r9sg31mh9_7b51rt-2ixoew/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdvwkczn_rxvn1522z1mcojbs40ymrctyizpyuv72_0wbypgq/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdxkjfhjk2jl99royttlqooscpgo3r9kauddp0idc_ih1g4ug/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdxm-rwnv41p3wdcbtetukrctoakvuoe1h_uy8jgnxy7kldza/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdy1071rbhheyidjzo6fw5busqot5eunllw_thawo6udamfaq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdybqflfptobqslhflytic3g936bnojaljztk6ct1d5mjvnnw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdz5olqkck6id4jh4_uiuejnndrt4qwgs8wpqtdfqqtvgsqbw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsdzrubbm3nrqdzjs6q7phutjgmn-dm8zquphjg9ge31q7bdhg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse0wzdylvek6cpem3mb8zeny09jij27yj-b1p6yytyue-1rwg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse3-zgmg83lctfks0egmambwonybkscrvxix--n1azwngkphg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse3ukgwguotprcg8cfwp4kxwz64r5ogqq1j_m4ohjpop5f7mg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse3va6zonlim5niyl74b8jis-o0fwno4qethj1q7rm2r5xdba/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse5htthgifmniezokiypnjjhanvkvlehsrk9esgcpoauqutiw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse8ds15kxxdcrhfspcfrbvy6sbdhp0e4540zzmhhvzouewvka/viewform?vc=0&c=0&w=1&flr=0&usp=mail_form_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse_mo9pzgdahzdgz0wctr7lm0cqm_zwos8ljc4cqgtvnqfmfq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlse_pppzkv1rppkqwcnttkpvx35meb94rruunhijhuua5svvcw/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseaopmohwe4llodr6rvz9ybhvfg0zoqnsxzvzuqwblxhy17ta/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseap64bhtbncjqllykpujyr2fa_s9yyfiylqbdnutvdu0kntw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsebpakzyvtprhygwe23jlsdieyoca0jtiyy-f68nqwofparww/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsecilc_5ka58gxqjfrpwbfwmhykkdly-lwm9yubx1l1gwzgpg/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseck8-g3um70ihw-ajfait5whcec3qdowobizswz8_-et_jkq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsecl3bk58g9ucirun7tsjpfkkkeryur6xaryenk613tqzqfxg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsedam8qavfd7nwszgyriuofus5xlgrvwcojm_8jtzpiw9ud_q/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsedg-b07st85voaknpclg88z_zybaqffowcrxa-6eq1hemokg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseenhbbxtwamfmork3asua_pfejkhmxkqv8hlzwo-uznm3t1w/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseghb19gxs04xdkab1cubu6qmclhh_rpb2fwa8nwutpbwnkba/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsegnx2irh_r_gtlspwo66pv4vkht2oobqmvjtvs4yqjj6vr7q/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseht4cdltkad8967jjarcb5nafonbaw3dtpynth9mdk94hf-q/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsehwehncrhloyw72aebvvzvvzjrs6yz6qphpm1dvobyr8rnig/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseirld9oyigwxmec2bc-ax4yd-m-rhezlne00aminsjf0uteq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsejavlqdkikylynqlg6p7kyfu4qnlyy31opnfttucuhgmek4a/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsejzzt0w_l58kpcmcq1bseqi53i0retcnl0a1-uldxvnyz-ka/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsel8uq3oplbpuz97bjyv7s-6wdghzjiaiauioimsb9buzjfuw/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsemwyrvcln1ql8uxd0dsiswveuehikz5hwalfeni7jjfaefmg/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseo-icwia4ztexz9jczqsndvpn_la5_zoz8wkg2ldu_hm_4ew/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseo-icwia4ztexz9jczqsndvpn_la5_zoz8wkg2ldu_hm_4ew/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseoz9zpmm0c0fjksklv-p1hsrwsuybmj6bvbd_fkewzzcv_ea/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsepe4jevfm3mjc-vndxuq_9wjpc7afrjadkxvp8czawh27cqg/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseq5h3-5stw3bwnpoi6g-gfwcgej7q82incdm01dd1lf182iq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseqdx2wgybdxlhascsuopq1xqsmwrxjf4erl_cpmvtt96dq_g/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseqvqnxg0qnfc_qjompqm_bjbey-oivzpldd-sybsidx1syna/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlser-b6q--nvif2fj7nbn88dh8lj-s2yfbgjyuygwsacbhm6lw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlserwgqm-czpabole0qw-jg4bhicctqdjm3ex3v4vzifj5wldw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseszgantjzuxgteg0dsiizzmadcwjbjqcsri5nidod2rd2_lg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlset42bzecl3yrdnnffv6f7kecxpd1sy4rbh3h3govwg1k1z1w/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlseumxp-wga1x873upqxmi_hx8nbbllh12zzmxia1xuqp2mgbq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsevpkt1byhl-oqjptw8wbecnm7-iqnax-mz8zd-mxp0fol3jg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsezbbqgms0nnvgk6aq0xz8sa19zyd8w87c8js99mpi3go1mqg/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsezxizhvg-i28_n8fyddanndnufw9veep4kk934yekxvxdmdw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf-exsf9vm0rleksdp46wa2dfca3dhphayf4tl4rktjvmgguw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf0-sqpytlsyi6uz7javookkcvby-sd4j8bc58zujl773d8qq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf0appdcwb17-g15hxqlvwdz2cngcp90uuisclz55s2volujg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf32hx6ujsi_gqji38udpamxxxnhyrx8qhmqcqnteinj_0cmg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf36z5diim8ke7cwmm_uobqacgk-r3w_uslnwnn60nzwqi3fg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf37osr6zds7tctpiqseyyoqpqnzaeyv704aye3atqnyhd4-a/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf3wmsem7zluqpxpuwmk9qxvc5uvpl1qkhc3grlydk1ulezua/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsf7rktag6kzmtxateu6hu9atx0meohtzokrqkuvn62ojflqba/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfaekglhjlubx-j0s40wtk-dntowamok2u3dl24wdxhni6cuw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfdy4lqz9cxxc2z-9qldm8asxoikrw5w_jb9d0iciiyy_bpbq/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfe2ymhbjhlp2njbhcnyypkh2q_svr-hjv6jakyhkrcvnrfhw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfeoy_w3jwkkz8psgsw4nrja9tmg2lx0x0nvtmv38k0hjzzmq/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfesajj9-epeg0p0pdzfaf3xooefbwmwsn2jne-6doh86mocg/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfetregzccisehncfk6344jq5ab3iq6ft0a6k_v156sh5j24g/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfgejlprqaiajfduzoh8gejctdxdv-kyn38ztkb3fu6poxwzw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfgvr248yh1nbpu7vxfge6ez6e6vr66ia2m649og4_a87g6vw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfhrcintrbwx2of6w4vp1xd4fldir-qeghinej4jhsw4qzhjg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfjchag9rs_yczr5hheyuc70ukrtaonxwdhxso7_qhcpp04lq/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfjlibrqxxpw2arqzpzumujjray3jpd_mzn_kltz7jrbc93dq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfjpx-sxpejnp_q2fmfu0jy8oqoesrx9wbrqplcychw9luupa/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfk9hpkld9-qwaxs8b0cpslaw2-oomu6bcwpxkmp-fo8kr3ew/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfkl2vgsks6ni0mb3-noocjqf7auguvh9lavsnwjjy2c0mgzg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfksirdejkit-tdeiwrnkf00ygsqdsqth0hmwydiqdik10tna/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfmppmwkaythtoskrsm7wewzrcamfxbeyuc6f1ewjjmzisfwq/viewform?usp=pp_url"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfnjyzbmw-pd1byw4b4opoksx2cealounsnhg5fjc3fk1qocq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfnlsbejsiacubkj2geltmn7slefoweeczuagp3jfmfkijg4a/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfqf7_zc-bsb7ej4d_rikrhb3bi-o15o1l1lsa-dw0nr-pztg/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfqjyamn38kyfu1gixlitpfnnivmi4dcrwllbchwywxcnmcba/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfrhtzc1pcighculgyjg6juret215diaac89flqhhwg0wx9aw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfrw9nsla2lpenbntfmz3q_bu-6vayjudjntqikzcei2rl3ya/viewform?usp=send_form"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfrzt6zpkhgtvzqutkypqtjffxaucn3evqpf6ytbqug3t41yw/viewform?usp=pp_urlorganization"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfsia_g4fb5yg_cu8fjuxcndbgqz1setzfedm0cw0eaonb57g/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsftriyys-rvphnbmh6v6lyimxjy3rpog8xvtb3v1agqhawiva/viewform?usp=sf_link"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfurofbzbtgxzdlg7v1q6lzyf6rqi8chpmiuzmmiqmxqhzb8g/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfwdsuczwrih_wnciwh_qjpg1v5p-qk8zyjjoccpbhmyeygrq/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfyg4g3xanl17-4i833ep0joctptyxfsylqd3m2wujpwu1uiw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/d/e/1faipqlsfzhyjvw1nn6bvqhbwmd3rcrm6gukuzir5u9tmsszmcrr8nyw/viewform"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vq5dr7ajdkfwicg5n2lbhbfo85bwvgageeqmuvllkwg5i2iuhekmsvmwotev1nnzoy8xasnxerngqew/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vq7oplr_-m2wcmmli5bewiwc-vkkblykry1ejy1vfvkm6c-yanjplkligavkr2dt8vkw6dmpyzkp_ki/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vqfy0klc7lmimfug7xrvape2jdz8153ptionyg7ht7va1ggm5loptsqunpgtiwn36i9y8ggrat6f7ka/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vqljiqoxuypxg7a8r5x7frbq4cqcvnb77n155fzyxweegqibwjyjnpghjky3howsxyb0pe3g2wm_xpm/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vqo0xukh2wuts-r_jah5nfa3jsnxxdkgvfcafnigv47ptitu24xoqtt_fhtwbm1p6wpz5ajydo3ho9-/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vqopq9v2asclxkhw1tgkr3v1no0smckg8as4x6t4cyhuszvfjkaosxhp2phofsyb8ag0f-anei4kzqb/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vqqcbi03ke8ybh6i0nyvaecikxaa6gdgzvgwdaygprivb_-gkvuvkvqb6hqfld9vovgdewxfkt6n1z-/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vqx_zel_kuemn6sejjmr951m_x6bzzai7iqp25hfj909xoffbtw822kfnfdpl4uarmqcjov-ztc9m0l/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vqywoq-kea3q3xkdnwfqqdxg368izvbbqutcjaxpy3t8duksihqmnqm70qvpl0oox5l-ijx6srgpgrz/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vr1mdvfskxsvwpevn0kbbzdj03tkd-qianser_mo-xjpu0pllzd34jz_eodizwbjztx0qsbqtch6oyl/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vr47cjjl6r4iffpd0yquj85wazh1jdtp6xpiofpjgzwu18olbjgh1cyqtfcolgtpryqmk2irslyi-rp/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrgv40o-9hv-h-te58y7dluzlgkiq2lgps9rphybq5nrrnwau-nlsnedjuazhprry10otfrh3_iq1tp/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vriyg_oiukpuguzpg2epbnyy4qjmk1v3maunksjuumfujoeerubxylo9_hltssk-qv7jsrfqfppdcgn/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrl1ylbscadiuntrkeq5xe_bz5zwgfjgao5atkkbeidhn_aqqyspym3hagxsqckazae7pwdwtgkfkvg/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrndlzd4qdrc7kjcsjuzzmrrr2jdhcja_8bqfaromkv4gc0xzecwkk64xdd0cqcypwk3_s_2plp8wtv/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub#slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub?start=false&amp\;loop=false&amp\;delayms=3000&amp\;slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrpahi2ri6ovz6eun9nmdyvxyen0na9v3_qjmcq-kwctc4lqjkedcbeyf4doyfx5urafpn8mu6hcrnj/pub?start=false"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrpahi2ri6ovz6eun9nmdyvxyen0na9v3_qjmcq-kwctc4lqjkedcbeyf4doyfx5urafpn8mu6hcrnj/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrrbkktbsjl0p2tdhjzjo2uawkvwbwipzqv2sgbcl7xpkns2l-hixlz_bwi0cstwntvcxq1a5r1lj4x/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrriatvgvtaoki3lje5es155asdvvgmqqjoosenskwwiutrtwubnfwgosjeuupxd5oda3gx6hbdaslk/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vrxxwdr6rx90gjqaynsfyoxo6zyqem0t5dkhvlps37wzw_yvtv1l-9a46qzs57vfulfph8uqh32fbvb/pub?%20start=false&amp\;loop=false&amp\;delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vs4t3osol5-a2tlqhpxcbnoykx-v0xpvbkex3ikocawxpr1jez_fqk0zq8ylq7w8_4du3b3z57qhj9r/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vs9iynmnt1qmlzrx07ug9wjcpumi8oop9omycxzs32_crcuz7usvufh4mzinngrsspgcofr-qq3fxot/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vsfs_pk4-zigqm1bnegx_9gawv7ys2cx90o0o77ppfeimlqbtuy7wv14npitdzydmp9gnfrcjiufcyu/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vsgw9oh1ixw4dhkvxkwxlwsu7de-mla1kkntrqmjmqiy0zicd42e_8eakt3kiywvfk0vrfexpkcjlmb/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vskgwhr2flv0fouv_mac13jdyp5a-drx8tnnnd4soc852jjodbgozj44z7_9v5_0xlktsc10xy93zgm/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vslpj7pk4-axbccjqtpblesxanwetmsmefuchs2sloxncmvllwzftu83w_w_uia1mjemn717hwpcfnq/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vspnbijel3trkgiucqlxf7ozncbv8afgi8spwy1we3rmyp_degyrb8lt2euqyscu25c3ow_qsaa4qqd/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vsrlb5wlmujw62qr1paqhiyiso0jfaxxzzlpaxtg6fgxhbg1o-q8w_fxbx628pud1ljjcxuwyrav0xb/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vssxayagcehnojap_9vi4vkx2fwqtkzpgwviy2j2efosj2xfmvqmsyv1avj3eclx5wb22joceezc8t0/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vstfqvabl0hbhkiycydogunjhmqqyeh-achsm8zlhzfvqv_d7ez5x4bgpphh-es6xilbwod1niq1hkz/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vstqki4nnnyrhsn5l0tj0ec7y31bzuyy4tndmtidtdxtpbnwjjrb1nj5rjx_04hmctvvf5iu4yxhjx8/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vsx8ahrvwaowtfdbywictcemrz6z1wlqenjtp97v184yas9irqjz2-axi0yov-zb9yo2o5rwe4c50hi/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vsyjh3oqjp_mkyqdaub6tdi-r0ern7crtrrkktdqq6uzvearmeidpgrwvued9lf7jirwkvoi8s63qn2/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vszmxwf77cx9jec22hwonfd-l1fnnca3x407pvkw3_aanghjmyvustququfenxznzckxgaszizaop76/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vtlsctrmytwlfbm8jahnsimsxwdjdk7ndptazmfi8y9togp2o8uozykkul9qp3xxeyhbco4zoeuiwbg/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vtq-t3xjc_nf74w2uz3lqt-hbg-39f7xizkvxay1ngcpmau9murjkla2ye5ahoqobamifucwmttssw5/pub?start=false&loop=false&delayms=3000&slide=id.p"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/presentation/d/e/2pacx-1vtwkjwy3_-kl8f5w9p6a1topb1ob0r15tijqhclejlxmwtsicqxiktafoxdxkehh4tlvfye7c6xs3og/pub?start=false&loop=false&delayms=3000"; endswith; nocase; http.host; content:"docs.google.com"; classtype:attempted-recon; sid:200049906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/3a5r5a92ssx38jsi"; endswith; nocase; http.host; content:"docsend.com"; classtype:attempted-recon; sid:200049907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/7kbaanzkgswcge6a"; endswith; nocase; http.host; content:"docsend.com"; classtype:attempted-recon; sid:200049908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/jd4wxg8qzwd3b34e"; endswith; nocase; http.host; content:"docsend.com"; classtype:attempted-recon; sid:200049909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mt/log/"; endswith; nocase; http.host; content:"doinikdak.com"; classtype:attempted-recon; sid:200049910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"doufatin.blogspot.com"; classtype:attempted-recon; sid:200049911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/19zpw90jgon3j5merxi1pauvkjdmx8nfq/edit"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1bcdyitw2vo5jp6yrbdmiy8cfrkcf4tby/view?usp=drive_web"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1c5o9_y8_octsepwyojfarn1k-kj4d9fe"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1fdgs5g6fqqkudcl2meym63ua3yu0o-tb/view?usp=drive_web"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1ginbnlpvt7kpfnog9a68fqmn7k3aivui"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1hdvx7j89h5l7yz39idgzhqji93jnkl_c/view"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1jixb69t_nw9tmkhvfrejkfzof3d-ijet/view"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1qf58h-1lunq1pubplwdhwd3uooj_vjxa/view"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1robiosanbh8doqa7yuiewn3akz4094ho/edit"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1sf-ka2tuqr3-ievafi4ok5hjd4fsqqg1/view?usp=sharing_eip_m&amp\;ts=6302a657"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/file/d/1vcc1-wujbe-iacakickb5lk7pli9dhon/view?usp=sharing"; endswith; nocase; http.host; content:"drive.google.com"; classtype:attempted-recon; sid:200049922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/aruba.it/aruba.webmail/arubaredirecti.php"; endswith; nocase; http.host; content:"duobabiji.com"; classtype:attempted-recon; sid:200049923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/t/m&t.com/home/login"; endswith; nocase; http.host; content:"duratechindia.in"; classtype:attempted-recon; sid:200049924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?ref=agfuc2pvzxjnc0bnbxguzgu"; endswith; nocase; http.host; content:"dyuvstyfawecteraw.blogspot.com"; classtype:attempted-recon; sid:200049925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/owa/auth/logon.aspx?replacecurrent=1&amp\;url=https%3a%2f%2feast.exch082.serverdata.net%2fowa"; endswith; nocase; http.host; content:"east.exch082.serverdata.net"; classtype:attempted-recon; sid:200049926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/marco_eeverywhere_com/_layouts/15/onedrive.aspx?id=/personal/marco_eeverywhere_com/documents/documents&amp\;originalpath=ahr0chm6ly9lzxzlcnl3agvyzs1tes5zagfyzxbvaw50lmnvbs86zjovcc9tyxjjby9fcwhvbeq1x3hltknorzbdmdvvmgjvvujoy1z3b25futjvejhtlwxqrg9svwvrp3j0aw1lpvduaunytfu4mlvn"; endswith; nocase; http.host; content:"eeverywhere-my.sharepoint.com"; classtype:attempted-recon; sid:200049927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m&#61\;0"; endswith; nocase; http.host; content:"eleoelswka.blogspot.com"; classtype:attempted-recon; sid:200049928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?u=5tlkgeu&amp\;o=gqfpqzm&amp\;m=1&amp\;t=th_ppp11"; endswith; nocase; http.host; content:"elite-ladies-here.life"; classtype:attempted-recon; sid:200049929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?url=https%3a%2f%2ftilbakebetalin.wpengine.com%2fsw%2flog%2f&data=04%7c01%7c%7c11af7bbcb8534b33863408d9e17cff46%7c84df9e7fe9f640afb435aaaaaaaaaaaa%7c1%7c0%7c637788749239190942%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000&sdata=wyye%2fyjymouztvtdzw%2bfpfpyzj4nrvzhvloufqhq128%3d&reserved=0"; endswith; nocase; http.host; content:"emea01.safelinks.protection.outlook.com"; classtype:attempted-recon; sid:200049930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"eneeeetsowww.blogspot.com"; classtype:attempted-recon; sid:200049931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:x:/r/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=t6t%2fhn1dkbyhlyx%2beimbazufa43rrgz6%2faaaewnocdi%3d&docid=1_18168db23429e45f29fdf2e7be120efc4&wdformid=%7bb9970f62%2d44c3%2d4d09%2d9929%2d6e1eb652da57%7d&action=formsubmit"; endswith; nocase; http.host; content:"ersfilter-my.sharepoint.com"; classtype:attempted-recon; sid:200049932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%20sjfgzhadhvte2gyowjf83iqbjrjehik4s=&amp\;docid=1_135f7008dfbfa44e6b09dab0eb165b997&amp\;wdformid={e037f2d9-5daa-4916-ba03-eb11d0aa6dea}&amp\;action=formsubmit"; endswith; nocase; http.host; content:"ersfilter-my.sharepoint.com"; classtype:attempted-recon; sid:200049933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%2bsjfgzhadhvte2gyowjf83iqbjrjehik4s%3d&docid=1_135f7008dfbfa44e6b09dab0eb165b997&wdformid=%7be037f2d9%2d5daa%2d4916%2dba03%2deb11d0aa6dea%7d&action=formsubmit"; endswith; nocase; http.host; content:"ersfilter-my.sharepoint.com"; classtype:attempted-recon; sid:200049934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v1/app/gbwa/image/transformer/4573be1d04074ebfab8fbb16f21a65de"; endswith; nocase; http.host; content:"esa.www.wamodshost.com"; classtype:attempted-recon; sid:200049935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/2022/-/load/2fb8b0994e6db65ef9b701f0ff58641a/execution.html?validation=e1s1"; endswith; nocase; http.host; content:"esnafbenim.com"; classtype:attempted-recon; sid:200049936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/2022/-/load/4d9083f78ff409bb703e9b046cf7c99f/execution.html?validation=e1s1"; endswith; nocase; http.host; content:"esnafbenim.com"; classtype:attempted-recon; sid:200049937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/2022/-/load/bfae6ea2b13539dd0a32fd97c65fbec5/execution.html?validation=e1s1"; endswith; nocase; http.host; content:"esnafbenim.com"; classtype:attempted-recon; sid:200049938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wary"; endswith; nocase; http.host; content:"espace-immobilier-concept.com"; classtype:attempted-recon; sid:200049939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wary/"; endswith; nocase; http.host; content:"espace-immobilier-concept.com"; classtype:attempted-recon; sid:200049940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jp"; endswith; nocase; http.host; content:"etac-co.etc.jp-jackysanto.qqwallet.com.cn"; classtype:attempted-recon; sid:200049941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/index.html"; endswith; nocase; http.host; content:"eu-001.fra1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200049942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/17369aa91d5549c192b0f736d5822403:rr-frontpage/index.html"; endswith; nocase; http.host; content:"eu2.contabostorage.com"; classtype:attempted-recon; sid:200049943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hpcb"; endswith; nocase; http.host; content:"eventlink.to"; classtype:attempted-recon; sid:200049944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/shard/s339/client/snv?noteguid=f48e12fd-48da-e57f-8e76-cdf6e4054e1d&amp\;notekey=02a9fa6bd051dc6b4581ee3b617b3f88&amp\;sn=https://www.evernote.com/shard/s339/sh/f48e12fd-48da-e57f-8e76-cdf6e4054e1d/02a9fa6bd051dc6b4581ee3b617b3f88&amp\;title=optus%20webmail"; endswith; nocase; http.host; content:"evernote.com"; classtype:attempted-recon; sid:200049945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/shard/s446/client/snv?noteguid=4dc119ab-57d6-b8e0-4fcb-c11c0a637b94&notekey=9ddb3753cb700b0c86a78176be71f4f5&sn=https%3a%2f%2fwww.evernote.com%2fshard%2fs446%2fsh%2f4dc119ab-57d6-b8e0-4fcb-c11c0a637b94%2f9ddb3753cb700b0c86a78176be71f4f5&title=you%2bhave%2breceived%2ban%2binvoice."; endswith; nocase; http.host; content:"evernote.com"; classtype:attempted-recon; sid:200049946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/shard/s446/sh/4dc119ab-57d6-b8e0-4fcb-c11c0a637b94/9ddb3753cb700b0c86a78176be71f4f5"; endswith; nocase; http.host; content:"evernote.com"; classtype:attempted-recon; sid:200049947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/tim_hansen_excelelectrical_com/_layouts/15/onedrive.aspx?id=/personal/tim_hansen_excelelectrical_com/documents/open%20to%20view%20shared%20document%20in%20hitech%20sharepoint&amp\;originalpath=ahr0chm6ly9legnlbgvszwn0cmljywwwlw15lnnoyxjlcg9pbnquy29tlzpmoi9nl3blcnnvbmfsl3rpbv9oyw5zzw5fzxhjzwxlbgvjdhjpy2fsx2nvbs9fa2zoazdydndfaettvl9pwulkctdzmejlveeyr3awzwjnsdfkrgdjrfdfttznp3j0aw1lpunrvevzrwxcmlvn"; endswith; nocase; http.host; content:"excelelectrical0-my.sharepoint.com"; classtype:attempted-recon; sid:200049948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/r?us_privacy=&amp\;a=p-w_ayumw3pzr2w&amp\;labels=_qc.clk,_click.adserver.rtb,_click.rand.60541&amp\;rtbip=192.184.70.137&amp\;rtbdata2=eaaaiencvf9odwdnzxrzx1e0mjfftwfuywdlzf9tzxj2awnlimofncj-jtiws_b-ohnodhrwczovl3d3dy5syxcuy29twihbt0llsefpmvdcvwi0vmdxvi1julfbztjdullinvfzuuitwjdutjfpdu3bfukaayfd3aqeoaebqahv4fyeugeawahq-aniadv5u4til9obfllxavhtz0fpaghnqs1sufktuvntqkhlaarzydroawsyaviznracclocbmc4ronaagliagdqas7hhvv4n_fmqqhgagdoagd4agckaxywlnb1yi0xmjyxotkyndq0odazodc1mamaqamasgmejmh7angd_dgd4gmpcc13x0fzdu13m1baujj36gmfcngfefryawu5mjeymfgdaiaeayoedxf1yw50y2fzdc1xyzhybajvuw&amp\;redirecturl3=https://www.cbtnuggets.com/?utm_source=quantcast&amp\;utm_medium=prospecting&amp\;utm_campaign=general_us&amp\;utm_term=testimonial&amp\;qc_campaign=cbt_nuggets_q421_managed_service&amp\;qc_adid=2078771"; endswith; nocase; http.host; content:"exch.quantserve.com"; classtype:attempted-recon; sid:200049949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hksr"; endswith; nocase; http.host; content:"fanlink.to"; classtype:attempted-recon; sid:200049950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/investorway"; endswith; nocase; http.host; content:"feeds.feedburner.com"; classtype:attempted-recon; sid:200049951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/drttttt/adobe-3d6/"; endswith; nocase; http.host; content:"fieldtripconcept.com"; classtype:attempted-recon; sid:200049952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&amp\;token=58da9567-441f-4f7b-bf07-290e808e5d8d"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&amp\;token=58da9567-441f-4f7b-bf07-290e808e5d8d#hughesmichaela06@gmail.com"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/cardilogist91983.appspot.com/o/index.html?alt=media&amp\;token=40dc7341-52e7-495f-8ba3-04f739b67ca0#@yorku.ca"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&amp\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&amp\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&amp\;prox=p2000isolation@aaa.kr"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&amp\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&amp\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&amp\;prox=yourname@yourcompany.com"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/gho2408gen.appspot.com/o/%5c%5cgho2408gen%2findex2gho_obs.html?alt=media&amp\;token=269e2a71-4a9c-42da-a207-2fc31ff7f812#mohammadahmed7760@gmail.com"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/hellomi-d9cba.appspot.com/o/manamecep.shtml?alt=media&amp\;token=16dce6a5-750b-4237-9520-ffc0f620aae8#dniigyasi33@outlook.com"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/nnnnzzmbcmmm.appspot.com/o/index.html?alt=media&amp\;token=ff8efd0e-8cdb-4767-998b-f421eee08f97"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/okorocha-9d683.appspot.com/o/indexxevol.html?alt=media&amp\;token=f9ee1486-b8df-4f55-8b9c-466fcdcf99a9#@yorku.ca"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&amp\;token=216401d2-aba7-42f4-8fd5-9b672cade830#abuse@optusnet.com.au"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&amp\;token=216401d2-aba7-42f4-8fd5-9b672cade830#tiekimas@tidlo.lt"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/pass-up-date-now.appspot.com/o/update-update-update%2findex.html?alt=media&amp\;token=d3144df5-bf15-4058-a0dc-9610b1a9193c#email=info@domain.tld"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/preserving019029.appspot.com/o/index.html?alt=media&amp\;token=caa885e7-5275-4bde-bc3d-a3eb2c95dfee#r@yorku.ca"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/rei-rezuio-rexire-565.appspot.com/o/%40%40%40indexv-vb-vau-ry-8%252fbv-yu-er-8f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%20-%20copy.html?alt=media&amp\;token=da92acdd-870d-4049-b9ac-f0d373777f06#info@legalshield.com"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/rned-a824v.appspot.com/o/gen%252findex2oli.html?alt=media&amp\;token=828c2259-c86f-442e-91a0-8d43a1fe7d8b#abuse@optusnet.com.au"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/rtzmthtcnncttoaccs.appspot.com/o/index.html?alt=media&amp\;token=8d757dc9-62a7-4c67-b241-997916e540f2"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/scnzmaccsscnncttw.appspot.com/o/index.html?alt=media&amp\;token=fe08a148-55d4-4bb8-8d3a-53479440818f"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/tei-neriou-reuix-678.appspot.com/o/%40%40%40indexv-vb-veu-ry-8%25433%2569.html?alt=media&amp\;token=6b0a9c43-8711-491b-9f40-50ad280ffb32#ggradnigo@prepaidlegal.com"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v0/b/update-d2e45.appspot.com/o/update%2fupdate%2findex.html?alt=media&amp\;token=ca2d4bde-8124-4812-9c7a-1ff88eb47549#@yorku.ca"; endswith; nocase; http.host; content:"firebasestorage.googleapis.com"; classtype:attempted-recon; sid:200049971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:o:/g/personal/lewis_webb_firstfederation_org_uk/eid78dus_cfjrrv2swyzp-ob1udpvku1sjneglgmz_0zwa?e=dcj1hk"; endswith; nocase; http.host; content:"firstfederation-my.sharepoint.com"; classtype:attempted-recon; sid:200049972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/imagex/ahr0cdovl2fscghhlw1hcmtldgluzy5vbmxpbmuvb3b0dxmvymlsbc8=v"; endswith; nocase; http.host; content:"flackbox.com"; classtype:attempted-recon; sid:200049973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dike"; endswith; nocase; http.host; content:"flow.page"; classtype:attempted-recon; sid:200049974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/13c1ofsbi?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/13wrz1ibd?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/1s6hcovwa?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/1s6jiqmub?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/1sbjwytzo?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/1scqelfiy?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/1shwmjpay?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/3ztlklevg?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/jsoo0zbqr?fc=0"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/page/dike"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/page/dixatt"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/page/ejo29"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/page/hip"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/page/j50"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/page/xpsatt"; endswith; nocase; http.host; content:"flowcode.com"; classtype:attempted-recon; sid:200049989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/221027503251138"; endswith; nocase; http.host; content:"form.jotform.com"; classtype:attempted-recon; sid:200049990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/221186654354155"; endswith; nocase; http.host; content:"form.jotform.com"; classtype:attempted-recon; sid:200049991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/221295519236559"; endswith; nocase; http.host; content:"form.jotform.com"; classtype:attempted-recon; sid:200049992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/222214228957053"; endswith; nocase; http.host; content:"form.jotform.com"; classtype:attempted-recon; sid:200049993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/222474829383061"; endswith; nocase; http.host; content:"form.jotform.com"; classtype:attempted-recon; sid:200049994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1mqqu8exzgpptqpl8"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200049995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/383dh17bsrkkq3tu5"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200049996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5wjuv4glrx78xun4a"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200049997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8epxhwdapiab7mfw7"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200049998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8oszgml1rvofdvtv7"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200049999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8vb7wfyzcoeb6vvj8"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9bwawhpz5vi7ilpe6"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/akohiguxjs9wlpu28?sllqm"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b7lqaal42juffiw1a"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bfz2l7i3wvrp5heb9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cfqg5uz57ehywkhp7"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cqzwfmqvrsnm7wrq9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ejefrdpmyoad4gm58"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eozlrnnf7jh84xdp8"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fc47eidpg6e64gkt5"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fvaq9zhxfhgqbusw9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fzlons3fgnjdqdd19?omgbfzrazhlppbtx"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/goerpntl5tfeumdz6"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/iai7pzm4pxyb145i9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jnkkauxwwbfhtuqz9?hkgotygikyoujp"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jzxtb9auexgjcewfa"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kadtekzswcevrtz38"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kehch96avaku7oey7?akowgmooutpwa"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mpkhrpn3jc8pqv7j6"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mwctig62j4y5mgm3a"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nokye42b5qkubgnt9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/puadbxscibgw5ma79?xfccuwmmhgwrwztd"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qxxe9xuu3h1lgpyc9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/rwpcmhm8vtfa7f4m8"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sj21ehdebhkcpvfv6"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/smufgmyhduckbq6ka?fjxhgyroek"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uqzzznxv4cfhu3yr9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v5xtnywt5s6zvpp27"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/w6uh9p66tdq6l1m66"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/x3aasffazsrl8pcr9"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xxjqmu6luzkpnalg6"; endswith; nocase; http.host; content:"forms.gle"; classtype:attempted-recon; sid:200050030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/5ed641e5cabd481304386f35b9120276/"; endswith; nocase; http.host; content:"forms.monday.com"; classtype:attempted-recon; sid:200050031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/5ed641e5cabd481304386f35b9120276?r=use1"; endswith; nocase; http.host; content:"forms.monday.com"; classtype:attempted-recon; sid:200050032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/7875990edf205faf88d81435ebdaa2d5?r=use1"; endswith; nocase; http.host; content:"forms.monday.com"; classtype:attempted-recon; sid:200050033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/deef05667ad4b4a16abdf4cb6da54137"; endswith; nocase; http.host; content:"forms.monday.com"; classtype:attempted-recon; sid:200050034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pages/responsepage.aspx?id=95vlqxxdseiozn16dgibdsdprn5ritrknkwe8o-kcqduntbduvdwsutpqzzcmk85mfdrsjk1u0pats4u"; endswith; nocase; http.host; content:"forms.office.com"; classtype:attempted-recon; sid:200050035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaan__gdpmarun1y5qlrqnjbkuvlhuvgyu0q1q1axszg2wi4u"; endswith; nocase; http.host; content:"forms.office.com"; classtype:attempted-recon; sid:200050036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__tdasqlurfrqmjzxneyxn0g3vexutfvzq0mztu9fms4u"; endswith; nocase; http.host; content:"forms.office.com"; classtype:attempted-recon; sid:200050037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__thg5xvuodnbwtvytzhwwdnctknvovo4tldctexmvi4u"; endswith; nocase; http.host; content:"forms.office.com"; classtype:attempted-recon; sid:200050038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pages/responsepage.aspx?id=jrbxvx3x9keewcq72hm6fnkqekonandcsjd9av060h5urepumvvgmks2te41rfewmlletulvufnuqy4u"; endswith; nocase; http.host; content:"forms.office.com"; classtype:attempted-recon; sid:200050039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pages/responsepage.aspx?id=ohdyclicseeuggrjwocnyc_obsknc9faprsbco6mlnhurtnevvdzuzzewddiq0xoskixulbontdsrs4u"; endswith; nocase; http.host; content:"forms.office.com"; classtype:attempted-recon; sid:200050040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/r/ne89gvwrye"; endswith; nocase; http.host; content:"forms.office.com"; classtype:attempted-recon; sid:200050041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/247michaelbryan/form/signinyourbtaccountcorrectly1"; endswith; nocase; http.host; content:"forms.zoho.com"; classtype:attempted-recon; sid:200050042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pattles066/form/signinyourbtaccountcorrectly"; endswith; nocase; http.host; content:"forms.zoho.com"; classtype:attempted-recon; sid:200050043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/traskray168/form/signinyourbtaccountcorrectly1"; endswith; nocase; http.host; content:"forms.zoho.com"; classtype:attempted-recon; sid:200050044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/25537272940sharefile/microsoftonline.htm"; endswith; nocase; http.host; content:"fra1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/docmented/indexx.html"; endswith; nocase; http.host; content:"fra1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainance.com/index.html"; endswith; nocase; http.host; content:"fra1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/folder9/adobe-3d6/"; endswith; nocase; http.host; content:"freefantasybook.com"; classtype:attempted-recon; sid:200050048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2022/01/daily-rm8888-shopee-1_23.html?m=1"; endswith; nocase; http.host; content:"gift-1212.blogspot.com"; classtype:attempted-recon; sid:200050049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/srb.efnc/5/rmcr.php"; endswith; nocase; http.host; content:"gilroypresents.co.uk"; classtype:attempted-recon; sid:200050050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/o/free/?elqcampaignid=9288/"; endswith; nocase; http.host; content:"go.docusign.com"; classtype:attempted-recon; sid:200050051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01fez46yyrvh6f0bbehn8h419h&amp\;persistence=1&amp\;checksum=069f46345ac935567ad562a3d64a332066064c97f8feae803d555f9cc820c561"; endswith; nocase; http.host; content:"go.skimresources.com"; classtype:attempted-recon; sid:200050052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01fezncfbjbj86yneatjn0qvt4&amp\;persistence=1&amp\;checksum=8142350e161acc6cb246be1d05d596973a1d3ac50af1f3594ee9ea462c87a4ef"; endswith; nocase; http.host; content:"go.skimresources.com"; classtype:attempted-recon; sid:200050053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01ff06m6n2q43m6zcaqrh8xpm2&amp\;persistence=1&amp\;checksum=26e140f8abae23dd0c8dd547390a4deb9fc54b1acf3539d8aa44fb19e04902ef"; endswith; nocase; http.host; content:"go.skimresources.com"; classtype:attempted-recon; sid:200050054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01ff0qxy635yfpkrdaxav47j5k&amp\;persistence=1&amp\;checksum=cb2e0f7328d6ffea0e15a24046095a0bb98d27d4488e822bea4b181763f2eb0b"; endswith; nocase; http.host; content:"go.skimresources.com"; classtype:attempted-recon; sid:200050055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aksf"; endswith; nocase; http.host; content:"goo.su"; classtype:attempted-recon; sid:200050056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https://spk-kunden-manager.com/rcjju7exxu#1lwkr92k20x&sa=d&sntz=1&usg=aovvaw1sjseir4b0q4l8sbg3z3us"; endswith; nocase; http.host; content:"google.ch"; classtype:attempted-recon; sid:200050057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aclk?sa=l&ai=dchcsewjroskd-oj4ahupj2gjhzsgcbwyabaaggj3zg&sig=aod64_2ajjdl31az8tpxqxigajjnzqesgg&q&adurl&ved=2ahukewiho7md-oj4ahw3qvedhytpa1uq0qx6bagdeae"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?hl=en&amp\;q=https://quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com/aaqkagm3ztm2odcyltawzgmtndk3ns05zjuxltixzmyyyznkntexmgaqadpitonhie1hjl70qeb7vdi-quarantine02719message283/quarantine.html%23pimo@apms-ltd.com&amp\;source=gmail&amp\;ust=1654842023923000&amp\;usg=aovvaw3tlbzf2sxh2-mtjs7iurao"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?mo=78986685794&q=https://c1r.at/h49xmdcp&zp=5095739289&kf=59242331&sa=d&usg=afqjcnf_3jyqkupfmf1gle_0jmhtak3s0w"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=http%3a%2f%2fbit.do%2ffr6ci&sa=d&sntz=1&usg=afqjcne7joz-iz-adrzkrxcihj8t9fs9qw"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=http%3a%2f%2fbit.do%2ffsgjq&amp\;sa=d&amp\;sntz=1&amp\;usg=afqjcngvqc30z-4hiaizv03gpwblwu3vnw"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=http%3a%2f%2fcanarytokens.com%2farticles%2fterms%2fimages%2f6273376tgy8lrrnek9ai08a01%2fredirect.html&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw20yd4y6h3k2ostqzlu8pmd"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=http://nouvelles-hybrides.fr/wp-admin/general/hhhheng/hhhheng/hhhhh.php?email%3d%5b%5b-email-%5d%5d&amp\;source=gmail&amp\;ust=1648980902684000&amp\;usg=aovvaw3lj6xdrkr7te65my0ifv8q"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https%3a%2f%2f51.fi%2fai6n&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw3ztrphk75w64vrj-rkdbza"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https%3a%2f%2fpo9cz.weebly.com&amp\;sa=d&amp\;sntz=1&amp\;usg=afqjcnec0vbdyqyotdsbz7gijk588avcwg"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https%3a%2f%2ftestwordpress.top%2fwp-content%2facaynumpang.html&sa=d&sntz=1&usg=afqjcneq22nczpte3zh2zdvetbj9kx5z1g"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https%3a%2f%2fvip.91234567.cn%2fwp-includes%2firsapi1.html&sa=d&sntz=1&usg=afqjcnfo-ujbo-tnv5d6why8olvgunjxjq"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https%3a%2f%2fvk.cc%2fcbjxkb&sa=d&509=848&usg=afqjcnec4gkgoe88ifnjjrnagnlez6uneq"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https://393512dfd8544c98be9a40f2f67df8bd.svc.dynamics.com/t/r/a7uua5shyiplufx4zj7f6u2clgtguiagoxngfoio4am?clientid%3d70000%23%5bemail%5d%2b00-70000&amp\;source=gmail&amp\;ust=1636719774661000&amp\;usg=aovvaw2fsk8htfwhsfqapvbu674n"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https://c1r.at/fzleuule&ry=9080899&sa=d&ha=9992286639&usg=afqjcngde0oxaxjtp-semb24qndyxqpfeg&jj=95316071"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https://c1r.at/n62bfdcp&od=3896761062&sa=d&usg=afqjcnhmj6a5ejlmnfnws314axi9thcopa&qw=69345649672&rh=90290680"; endswith; nocase; http.host; content:"google.com"; classtype:attempted-recon; sid:200050072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/url?q=https://spk-kunden-manager.com/rcjju7exxu#sx0z5vskhyx&sa=d&sntz=1&usg=aovvaw3wt2smooknv0nq-tlwykit"; endswith; nocase; http.host; content:"google.vg"; classtype:attempted-recon; sid:200050073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/i?u=a894ec7f.46t33454t4.pages.dev?user=masoli@legalshieldassociate.com"; endswith; nocase; http.host; content:"googleweblight.com"; classtype:attempted-recon; sid:200050074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/i?u=b4e921f0.sso-mailsrvr-4344e5teed.pages.dev?user=abuse@gmail.com"; endswith; nocase; http.host; content:"googleweblight.com"; classtype:attempted-recon; sid:200050075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/i?u=https://webmailn0s9344.myssomailsecure-srvr3.ws24.biz/index.html?submit=redacted@redacted.tld"; endswith; nocase; http.host; content:"googleweblight.com"; classtype:attempted-recon; sid:200050076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:x:/r/personal/tspencer_gormanusa_com/_layouts/15/wopiframe.aspx?guestaccesstoken=wgfwcmmssvdsofa7ljviwaj85tleclug2xbvoqwlmp0%3d&amp\;docid=1_12424441d8c29412bb868684e5cb74e47&amp\;wdformid=%7b992e319a%2dbe72%2d460b%2db6b4%2d2d3fcf789fc5%7d&amp\;action=formsubmit"; endswith; nocase; http.host; content:"gormanusa-my.sharepoint.com"; classtype:attempted-recon; sid:200050077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2021/12/window.html"; endswith; nocase; http.host; content:"hangovertest1.blogspot.com"; classtype:attempted-recon; sid:200050078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jp"; endswith; nocase; http.host; content:"healingmusicofthesouthwest.com"; classtype:attempted-recon; sid:200050079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://tvnationnews.com/wp-includes/"; endswith; nocase; http.host; content:"hidereferrer.net"; classtype:attempted-recon; sid:200050080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/secure/id/index.php"; endswith; nocase; http.host; content:"higherselfdevelopment.com"; classtype:attempted-recon; sid:200050081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vpib5oq/"; endswith; nocase; http.host; content:"hotm.art"; classtype:attempted-recon; sid:200050082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wncom1b"; endswith; nocase; http.host; content:"hotm.art"; classtype:attempted-recon; sid:200050083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://dplux.com.ng/cgi-bin/"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://en.wikipedia.org/wiki/microsoft_exchange_server"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://free-url-shortener.rb.gy/"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://ib.adnxs.com/seg?redir=https://secure.adnxs.com/seg?redir=http://owl.li/pphv30sb9tt"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://m0-online-infov4.duckdns.org/auth.php"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://trimurl.co/0wsx7z"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://www.aquarelle.es/tienda/ramos-de-rosas/"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://ykm.de/f4b990c239777330"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?https://yuzurihah.duckdns.org/9e9q1tj?userid=yl3czfei"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/https://aratera.com/wp-admin/"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/https://bestanimakers.com/fwdirs?irs-gov.data=sa01331mnq"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/https://performancelocal.com/wp-admin/"; endswith; nocase; http.host; content:"href.li"; classtype:attempted-recon; sid:200050095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"//ykm.de/f4b990c239777330"; endswith; nocase; http.host; content:"href.li?https:"; classtype:attempted-recon; sid:200050096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/n/#cnbpzxjjzubyahjpbnrlcm5hdglvbmfslmnvbq=="; endswith; nocase; http.host; content:"hygocart.com"; classtype:attempted-recon; sid:200050097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ebuse/servic"; endswith; nocase; http.host; content:"i-m.mx"; classtype:attempted-recon; sid:200050098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/webaccountupdate/stockholmsuniversitet/"; endswith; nocase; http.host; content:"i-m.mx"; classtype:attempted-recon; sid:200050099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/prostars/index.html"; endswith; nocase; http.host; content:"idola.net.id"; classtype:attempted-recon; sid:200050100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9834665191/css/tt/security/cont.php"; endswith; nocase; http.host; content:"ief.tqa.mybluehost.me"; classtype:attempted-recon; sid:200050101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mdkea5ckpozm/click-here-to-start"; endswith; nocase; http.host; content:"ifyufyujk.quip.com"; classtype:attempted-recon; sid:200050102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/4t6u/bt"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/4t6u/e"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/btbroadband/bt_broadband"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/btin/bt"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/fgjjm/1-xp"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/iuhj/kay"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/kennymoore12/btinternet"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/kfouo/btcommmms"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/lasodi2/attworld"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/lobby02/attusers"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/lofty2/mobileatt"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/microvalid/bt_mail"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/microvalid/btcomms"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/microvalid/btcommuni"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/msw0rd/att_word"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/msw0rd/attsusers"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/viewer/vbid-31138d48-omsttuer"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200050120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/css/api-ganz.php?key"; endswith; nocase; http.host; content:"imaninet.com"; classtype:attempted-recon; sid:200050121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8"; endswith; nocase; http.host; content:"imcreator.com"; classtype:attempted-recon; sid:200050122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/emailupdatee/owaweb"; endswith; nocase; http.host; content:"imxprs.com"; classtype:attempted-recon; sid:200050123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/outlookwebaccessupgrade/outlookwebaccessupgrade"; endswith; nocase; http.host; content:"imxprs.com"; classtype:attempted-recon; sid:200050124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/webmaiil/accounttportal"; endswith; nocase; http.host; content:"imxprs.com"; classtype:attempted-recon; sid:200050125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/7c158693-cbb8-4e14-b725-137e1c21c304"; endswith; nocase; http.host; content:"indd.adobe.com"; classtype:attempted-recon; sid:200050126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/b3743e05-4279-4cb6-9869-dceb1d0dc694"; endswith; nocase; http.host; content:"indd.adobe.com"; classtype:attempted-recon; sid:200050127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/db74fc8c-bbc2-402b-8499-0135a3092679"; endswith; nocase; http.host; content:"indd.adobe.com"; classtype:attempted-recon; sid:200050128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/js/net/"; endswith; nocase; http.host; content:"injazrest.com"; classtype:attempted-recon; sid:200050129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/index/user/login.html"; endswith; nocase; http.host; content:"inpusdt.com"; classtype:attempted-recon; sid:200050130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9g9h"; endswith; nocase; http.host; content:"inx.lv"; classtype:attempted-recon; sid:200050131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9git"; endswith; nocase; http.host; content:"inx.lv"; classtype:attempted-recon; sid:200050132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9gkk"; endswith; nocase; http.host; content:"inx.lv"; classtype:attempted-recon; sid:200050133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmd2qkznn6vjmwyerzuugvpnzex4xngdhuxe9zxv69xweb/?_x_tr_sl=auto&amp\;_x_tr_tl=en&amp\;_x_tr_hl=en-us&amp\;#abuse@optusnet.com.au"; endswith; nocase; http.host; content:"ipfs-fleek-co.translate.goog"; classtype:attempted-recon; sid:200050134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafkreidurg3sni5oyyppei4dkijavell3dvpgmgmnlbdcflmkbffxj7smq"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeia6ano5rwklrhhxag3jyadrix7slh4v4wwo2g3xwsdowd4rx4eulm"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeiacr6ny4gqer2nnmp4d2qujxpfvtjcqtqrloqqlubkpufkc3vo7ly"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeiagbszmg7i45qtecbq22b2qssbfloccz2w5jlblcdrpd6pe4grnom"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeiblg2hkuyf24md6qubrcu2omofpdgb73aoukpafsqkpflxjby3fum"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeic4olp55f7k6djfpg7atntw4x4ibo2t3cxbtxpvf5ptvgdzrjmu5a/"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeickox6fgjgaccllg65ly7svr4dr6chbvzjqn676cu7bu5lpoa244q"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeicqyn6jliwpp5zfl4ybbuvx67azwr65vg4ssd3teg7rfozfusoipi#redacted@ionos.com"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeidj7btnghlzebbw5ud3anrwe7jzwmdiseb7cgpdf7pu7tfgjrcafe#william@nabaza.com"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeiebgng7rudsc7pumuk3mczfc3dmh75chcafw7untvjagi22n6thbi"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeiew3kqovi4w24krkzgf55ov7kpzz4cr6jwmvabinvgnqh3ipkrhje"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeihm566ce2hlr65n7bdmgdh3wfj7ikw2vvnwv3gehbtyqq22xwtrqy"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmap7f2zzcedqqbhxtm1ymah3jakkpdqyhbdfoteu938sf/#webmaster@cuni.cz"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmbtirqa8ezbj2rhbjd7bg8ncingx4hjcurnmul6dapx5a/#"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmd2qkznn6vjmwyerzuugvpnzex4xngdhuxe9zxv69xweb/?"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmdh8cdcnwpfj66wzfsi8bmobabvehreffj3uet1v4obzy/indexchu4eg.html#redacted@ionos.com"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmdumuhtw4u7kj2p9835yy5xh4f1lu9q9g4zgyoeamy3ji/index0000.html#vanicekp@utia.cas.cz"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmejokdqrqrzhbmrxfz6ow3zochj97duyzeb597rvzbkf5/#webmaster@cuni.cz"; endswith; nocase; http.host; content:"ipfs.fleek.co"; classtype:attempted-recon; sid:200050152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafkreicpgyrb4gwufj4332rrurfukdfyfsp324uppi6b6hm5wco7vag3ki"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeiaugn5la2dmb5ty226w42s54ycvqt4fhphvbvotwqc2h3ypbg3otq"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeibx5nu72jerghy5gbsgv32xrmytydoa6q23pf23i26wfdckj4xlom/melt2.html"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeidm5f2yqj7clnzf7waosbbord4banliuektx2s5unuumuv3hzinae/soft.html"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeieyvi6dxy7fre22rnstt27td7rkhq66itk4cedrynsss5r2ggev2e"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeigaw3imjb4lsz2nezboltle365xmofjmw3t26ornknmiixkpdasee/mas.html"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafybeigjeeyjqhepimsiirv5gz6u5evqmr2igyn23i57ltsiyv7htbkkii"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmauakvyrqnxqzz7pkzm1qdpvlq8jgjd56wu57xtjjre8m"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmauakvyrqnxqzz7pkzm1qdpvlq8jgjd56wu57xtjjre8m?filename=00-00#"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmbuzpoyfqdvxykecupehhes4r5cuf8wws8mgb3bvt7qs4"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmbyxvvnbhmgcieeitavydrhpcsxgxbru5pejqfkr7p3bj"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmebhkt36w3jfrll2k4jevvpvsniym5nessgtvjuaqjxje?key=bf38df4466e9cb6870142585341d7c28c4be5cba&url_01=https://asserta-honeyedly-toom.s3.us-west-004.backblazeb2.com/index.html&url_02=https://climacium-opuntiales-retar.s3.eu-central-003.backblazeb2.com/index.html&url_03=https://equalled-hylodes-penmanship.s3.eu-central-003.backblazeb2.com/index.html&url_04=https://keepsaky-samiri-subcyanide.s3.eu-central-003.backblazeb2.com/index.html&url_05=https://eccyesis-euge-splatterfaced.s3.eu-central-003.backblazeb2.com/index.html&redirect=https://www.amazon.com"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmepqeak8hkth8zqv8yde93hpyxmduzbqm4ecse3o6lyrc"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmqb36uj3mewt1vrzbkwxwhfmzeuykzcbhnorbc8qe1fcg"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmqdfsbwrxz4xd6hbvcsnwaph18c5l4on1prxhkq8rvjz2"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmqr7mdpvhgd1rw2z1b7xwajrk1cvw79e5py6gsxunrymi"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmra62n91wd7v93l9181b3zaapmxceh2syy73cy2qyl28d"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmra62n91wd7v93l9181b3zaapmxceh2syy73cy2qyl28d#redacted@ionos.com"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200050170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/26zvs0?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2n2qh9?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/46jxze"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8ob018?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9qtgag?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aqlojs?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/arxlkh?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/azcyhs?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b6rwz2?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bper_banca"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cmvxje?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cnrl51?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/duueet?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3krgl?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eqc5o8?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f1sdet?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fn46gz?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ghr3al?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gruppo_bpr"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gsprzd?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/h0x9vt?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hj5zgp?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hpbvl8?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hzqseh?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/if3ste?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ifmfwt?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ivxyif?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/j5rfag?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jdtihe?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/js0ej4?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jzpj5l?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kn8cvn?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lfrcnx?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lrabct?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mwmr1t?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/notifica0909"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nt8b8i?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/o0rz2s/"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/osluqg?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ox2urw?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p1vb9l?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pfyqii?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pgmyed?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/prpi5s?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/r7ifgg?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/rs5lnu?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/rwme4v?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sfsmbc?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/shwcbr?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sistema_app"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/skyy3x?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/smartmobilebpr"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sz0oux?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/to4egf?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uaor9g?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ugp4nb"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ukhkqt?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uooqgo?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uovxm4?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uzuttf?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vwf0ax?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wmtte7?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xhvdb6?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yvjzbv?confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yzp976?facebook_confirmation"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200050235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/johan_jent_se/_layouts/15/doc.aspx?sourcedoc=%7beec8258f-a831-42dd-be37-a7186f3b17ee%7d&action=default&slrid=46cb5da0-f097-4000-fa3f-ad6d18add717&originalpath=ahr0chm6ly9qyw5zc29uzw50cmvwcmvuywrhyi1tes5zagfyzxbvaw50lmnvbs86bzovzy9wzxjzb25hbc9qb2hhbl9qzw50x3nll0vvogx5tzr4cu4xq3zqzw5hrzg3ri00qkzlswlowfbjwfp2c0xncgiydfnpz3c_cnrpbwu9b1dcnljfmkuya2c&cid=5712c764-51dd-4b60-bae5-9412676adf48"; endswith; nocase; http.host; content:"janssonentreprenadab-my.sharepoint.com"; classtype:attempted-recon; sid:200050236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:w:/g/personal/dhankins_jecompanies_com/ezmchome9sxbl4kht3dj7mgbxdck6dbig800tfkd1szbja?e=dafgln"; endswith; nocase; http.host; content:"jecompany-my.sharepoint.com"; classtype:attempted-recon; sid:200050237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dost"; endswith; nocase; http.host; content:"jefigscredit.co.ke"; classtype:attempted-recon; sid:200050238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dost/"; endswith; nocase; http.host; content:"jefigscredit.co.ke"; classtype:attempted-recon; sid:200050239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/code-eu1.jivosite.com/widget/jqqceif7de"; endswith; nocase; http.host; content:"jivo.chat"; classtype:attempted-recon; sid:200050240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7euow"; endswith; nocase; http.host; content:"jtbtigers.com"; classtype:attempted-recon; sid:200050241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/contact-us/2970503358622564"; endswith; nocase; http.host; content:"keap.app"; classtype:attempted-recon; sid:200050242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bt_internet"; endswith; nocase; http.host; content:"koji.to"; classtype:attempted-recon; sid:200050243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bt_service_alert."; endswith; nocase; http.host; content:"koji.to"; classtype:attempted-recon; sid:200050244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bt_teem"; endswith; nocase; http.host; content:"koji.to"; classtype:attempted-recon; sid:200050245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/.tmb/cose//correos/?clp=327598322"; endswith; nocase; http.host; content:"krizia.it"; classtype:attempted-recon; sid:200050246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/.tmb/cose//correos/seleccione_medio_de_pago.php"; endswith; nocase; http.host; content:"krizia.it"; classtype:attempted-recon; sid:200050247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/index.html?"; endswith; nocase; http.host; content:"kryptoconnect-support.com"; classtype:attempted-recon; sid:200050248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fthaqu"; endswith; nocase; http.host; content:"kutt.it"; classtype:attempted-recon; sid:200050249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l3leph"; endswith; nocase; http.host; content:"kutt.it"; classtype:attempted-recon; sid:200050250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/swissssss"; endswith; nocase; http.host; content:"kutt.it"; classtype:attempted-recon; sid:200050251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dhtanx/office/index.php"; endswith; nocase; http.host; content:"kuyhaa-me.pw"; classtype:attempted-recon; sid:200050252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/amazon-account-locked-id9517453"; endswith; nocase; http.host; content:"l.ead.me"; classtype:attempted-recon; sid:200050253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/amazon-signin-lf4nnwapv3xgyj"; endswith; nocase; http.host; content:"l.ead.me"; classtype:attempted-recon; sid:200050254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bdbxhz"; endswith; nocase; http.host; content:"l.ead.me"; classtype:attempted-recon; sid:200050255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bdczsh"; endswith; nocase; http.host; content:"l.ead.me"; classtype:attempted-recon; sid:200050256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://abre.ai/eduz?userid=nwwuer4j"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://abre.ai/een1?userid=gkywgnp7"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://abre.ai/egic?userid=urrtk9bo"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://abre.ai/ei3z?userid=nl7mbjhz"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://bit.ly/3mlmufl?trackingid=asgfti6f&signature=newsletter"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://gorkha-uae.com/hrrmxpmk?dt=1"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://qrco.de/bd7zkx?userid=lp9u3b16"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://s.id/12ezw?userid=g8tmk6cv"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l?u=https://s.id/12ezw?userid=iwhzddbk"; endswith; nocase; http.host; content:"l.wl.co"; classtype:attempted-recon; sid:200050265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a0n"; endswith; nocase; http.host; content:"l24.im"; classtype:attempted-recon; sid:200050266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/login.html"; endswith; nocase; http.host; content:"lbank.site"; classtype:attempted-recon; sid:200050267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/627d1ee47d4cb80020d558aa"; endswith; nocase; http.host; content:"ldp.page"; classtype:attempted-recon; sid:200050268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/62985118879fa500156595cf"; endswith; nocase; http.host; content:"ldp.page"; classtype:attempted-recon; sid:200050269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2022/09/sim2.html"; endswith; nocase; http.host; content:"leroudemaroranaa.blogspot.com"; classtype:attempted-recon; sid:200050270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/match_login/match.com/match/login1876.html"; endswith; nocase; http.host; content:"lifeiswhatyoumakeofit.com"; classtype:attempted-recon; sid:200050271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sw/w_11.js"; endswith; nocase; http.host; content:"lin01.bid"; classtype:attempted-recon; sid:200050272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/s/a74a48ad/ghnsf9jjv0_e2miyubuqpq?u=http://www.kntrwyy.radiomanantialesdevidainternacional.com/%23y2fybg9zlmdhcmnpyub0awvycmfhbnrpz3vhlmnvbq=%3d"; endswith; nocase; http.host; content:"link.edgepilot.com"; classtype:attempted-recon; sid:200050273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/40601p5zynl"; endswith; nocase; http.host; content:"linkfly.to"; classtype:attempted-recon; sid:200050274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/zcvbhklluheuiohgffikljgswaadgn"; endswith; nocase; http.host; content:"linkpop.com"; classtype:attempted-recon; sid:200050275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1rvqqm"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8nyk33"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9onwxq"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/assessoriabvonline"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/atdminhabv"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bvha"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/compassvisatteam?fbclid=iwar1y_woca8bfs4hb6doiqhzlulrfftr9ibsoxqbhrfckwlghzfxe2en2n6c"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cungrationoficial"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cupommagalo_2022"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fguugio"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hdyhid"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hifyiu"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ihkl"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jgbjg"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jrpvy"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mssdxd"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nuinvest"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nupagamentos21"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pagamentos.a"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/portalclientebv"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/promocaocasasbahia"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qk1m4v"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/rubbishrubiish"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/suportedigital2"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vv06p6"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vvolr6"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/w1p0l6"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/woo3x4"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yahuumail"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yhooooo"; endswith; nocase; http.host; content:"linkr.bio"; classtype:attempted-recon; sid:200050305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cupom-americana-site"; endswith; nocase; http.host; content:"linkr.bio:443"; classtype:attempted-recon; sid:200050306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/accountupdate12"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/activitlogs"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/adamson12345"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/admin__"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/adminboxalert"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/adminboxalerta"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/alcorbeil503"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/alertadminboxs"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/alertadminupdate"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/alertboxadmin"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/alertmoreadmin"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aoladmin_"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/appiesecure2021"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/att.net12"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/attaccntsachieve"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/attmailuser"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/attservice67"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/britishtelecommunciation"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bt.o.world"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bt45y"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bt5644"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/btbroadteam"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/btbroadteam/"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/btcreator"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/btinternet12"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/btinternet21"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/btsecurelink/"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bttlee"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bupporrrt"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/currentl"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dfghjkjhgdfgh"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dhlpackage"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fearnomore"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fwfweflink"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ggbnhb"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ghvfg"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hendersome"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hthto204"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/imcreatorboard"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/imcreatorbt"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jfgjg"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jgbjgbjh"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/johnbrownn4811"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/johnbulljohn"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mail1083"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/makee4"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/marhfx"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/millie5566"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/newaccount12"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/oqk001?dza=21456"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/redirtoken981?dop=991154801"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sbccglob"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/secubtscjotj"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/status/blocked?username=attservice67"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/status/blocked?username=btsecurelink"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/submisin"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/supportleee"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/updategmxmail"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/verifyyourprotonmailemail"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/webmaioptus"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xxxx5"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yahooatt"; endswith; nocase; http.host; content:"linktr.ee"; classtype:attempted-recon; sid:200050368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/staging/staging/"; endswith; nocase; http.host; content:"lisarobertson.com"; classtype:attempted-recon; sid:200050369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/certificates/schlesingergroup/noo-reply/"; endswith; nocase; http.host; content:"lisarobertson.com"; classtype:attempted-recon; sid:200050370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/widgets/widg/"; endswith; nocase; http.host; content:"lisarobertson.com"; classtype:attempted-recon; sid:200050371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mk/lin/lin/"; endswith; nocase; http.host; content:"livablefutureblog.com"; classtype:attempted-recon; sid:200050372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear%2fk%3d&docid=1_169208e425ed84fea9fd294a6886d67e9&wdformid=%7b06255f86%2d4bf9%2d4ee8%2dbd7e%2dfef81913a79b%7d&action=formsubmit"; endswith; nocase; http.host; content:"livenmitac-my.sharepoint.com"; classtype:attempted-recon; sid:200050373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear/k=&amp\;docid=1_169208e425ed84fea9fd294a6886d67e9&amp\;wdformid={06255f86-4bf9-4ee8-bd7e-fef81913a79b}&amp\;action=formsubmit"; endswith; nocase; http.host; content:"livenmitac-my.sharepoint.com"; classtype:attempted-recon; sid:200050374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6wjbl"; endswith; nocase; http.host; content:"lmy.de"; classtype:attempted-recon; sid:200050375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d-3hbjpx"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d2cagqdm"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d_kqpmtx"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/db5fhxav"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dfxw4_sm=ojdszb15xdzzzv"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/di6hueus"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/di_qntwp"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/difsmpfx"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dkng9_k3"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dn3ujtph"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dnnpnd4y"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dr4agxum"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/drgcsgzw"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/drsgmgjm"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/drxkr5pj"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dvmqs3eb"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dxnhhybc"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e2dq2z7h"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e2p8spez"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e2stmj2s?=mtqeaywlyj1co3"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3g9qxhs"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e55ej5xx"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e5gzdpqa"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e5kpq2fp"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e_idwusk"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/earmae2d%22"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/easrgdqg"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ecymrzgu"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/edvvp6ax"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ee5yc9ca"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eefrfkzq?=ojiouwexpg8h5s"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/effdee-j"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/egbbkcqr"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ehk85dzy"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/emmrycxb"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eqe_7fzg"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eqexis8b?=779auzfcptp61w"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/er86brtc"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/esh6x-2g"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/esjzqf_8"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/et-dkcdj"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eu3tad-d"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eu9zpb6z"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/euhr7uki"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ev55_yea"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/evbzscwd"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/evjgv5bv?=eme9jh5wippejx"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ew4xnymr"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ewfyckzm"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ews7fgtw"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/exc7h6tz"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ez2wd7tg"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ezztetjp"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/g45cgcft"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/g4qytsvf"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/g6y3fhkt"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gat_yr4c"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gbs4ecw8"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gczqssnv"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gepk78hu"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gezjhddn"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gfbpb8pc"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gfudg_bw"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ghktz_zc?=asrrne8hwgbpmp9"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ghktz_zc?=jjbpe2kkugganzg"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ghktz_zc?=yh2qhzgzcwjq4ri"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ghqhm_2d"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gjgskbfu"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gm9mx7ii"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gmhtpmas"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gnpurze8"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/grxqxr5n"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gtqqwvzn"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gw2x_btv"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gxsukn_z?=hmawyn6k"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gyrmxhc4"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gysdniaz"; endswith; nocase; http.host; content:"lnkd.in"; classtype:attempted-recon; sid:200050452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/de/?code=1a468e385b9475ae1d0bfa645841a01f"; endswith; nocase; http.host; content:"login-live.com-s02.net"; classtype:attempted-recon; sid:200050453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ppt9"; endswith; nocase; http.host; content:"lp.vp4.me"; classtype:attempted-recon; sid:200050454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dqrxai"; endswith; nocase; http.host; content:"lt27.de"; classtype:attempted-recon; sid:200050455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jal0cm"; endswith; nocase; http.host; content:"lt27.de"; classtype:attempted-recon; sid:200050456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jnrv8a"; endswith; nocase; http.host; content:"lt27.de"; classtype:attempted-recon; sid:200050457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/malfqj"; endswith; nocase; http.host; content:"lt27.de"; classtype:attempted-recon; sid:200050458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qz2ci3"; endswith; nocase; http.host; content:"lt27.de"; classtype:attempted-recon; sid:200050459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/claimskinn"; endswith; nocase; http.host; content:"lynk.id"; classtype:attempted-recon; sid:200050460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/stimulusbenefit9090"; endswith; nocase; http.host; content:"m.me"; classtype:attempted-recon; sid:200050461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2fcannacoin.xyz/wp-includes/images/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2fmoviefreedownloads.xyz/wp/wp-admin/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2foasysfactory.com/wp-includes/css/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fbodycare.co.za/wp-admin/js/api.php"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fbridgecr.net/wp-content/uploads/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fcricsports.buzz/wp-content/plugins/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fevhservices.co.uk/wp/wp-includes/images/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2flesemauxderenaud.com/wp-admin/css/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fscyrub.com/wp-admin/css/api.php"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fshop.blacklabelmattress.com/wp-content/upgrade/api.html"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://qrs.ly/9gdxb1c"; endswith; nocase; http.host; content:"m.vk.com"; classtype:attempted-recon; sid:200050472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ltau24h/"; endswith; nocase; http.host; content:"ma-part-du-lot.com"; classtype:attempted-recon; sid:200050473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2021/02/blog-post.html"; endswith; nocase; http.host; content:"magyarpoosta.blogspot.com"; classtype:attempted-recon; sid:200050474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/modules/autoupgrade/vendor/home/"; endswith; nocase; http.host; content:"mail.maderkit.com.co"; classtype:attempted-recon; sid:200050475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/login"; endswith; nocase; http.host; content:"maile02.oranga.far-facturea.appsuite.metabusinessanalyst.com"; classtype:attempted-recon; sid:200050476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"mascsosoerd.masecescrerd.mzztru.top"; classtype:attempted-recon; sid:200050477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lnk.asp"; endswith; nocase; http.host; content:"mb102.com"; classtype:attempted-recon; sid:200050478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/certificate-checker?login=false&amp\;originalurl=https%3a%2f%2fbit.ly.mcas.ms%2f3oynzgj%3fmcastsid%3d20893&amp\;mcascsrf=93b468fdf3284ff3f2c8f22a8a87cba95517d378569921d184b2090fc8102d80"; endswith; nocase; http.host; content:"mcas-proxyweb.mcas.ms"; classtype:attempted-recon; sid:200050479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/certificate-checker?login=false&amp\;originalurl=https%3a%2f%2fbit.ly.mcas.ms%2f3tbqbin%3fmcastsid%3d20893&amp\;mcascsrf=0f95c59a30af1e3a152874bd1ed8389e360301a106dd1613f05a98f6033f0361"; endswith; nocase; http.host; content:"mcas-proxyweb.mcas.ms"; classtype:attempted-recon; sid:200050480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/baba/mail.ionos.com/common/auth/email-authentication-id8478388377488299287474729299942949947927449589398/user-session/auth0f38575889948399385943/?email=redacted@abuse.ionos.com"; endswith; nocase; http.host; content:"megatherm-dev.in"; classtype:attempted-recon; sid:200050481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/cp/0ccc3066dc2bcd17/c?mi_u=87923176&mi_origin=&url=http://email.stickercanada.com/t?entity_type=2&entity_id=32534&email_pref_id=34785928&sent_id=1600423397&service_id=22668&redirect_url=https:/relievehotmailonly.cloudns.cl/imagineme/ionos.php"; endswith; nocase; http.host; content:"mi.jetblue.com"; classtype:attempted-recon; sid:200050482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/c?tagid=6565567-e43649793250da163478de2807c5c809&amp\;idc=77972&amp\;redir=https://loginingmocrosofttbox.pllatos.com/?e=@emba.schulich.yorku.ca&amp\;"; endswith; nocase; http.host; content:"mmtro.com"; classtype:attempted-recon; sid:200050483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/references/ask-an-experts/electricity-company-salary-scale/"; endswith; nocase; http.host; content:"mosoah.com"; classtype:attempted-recon; sid:200050484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/609890b8001f18095ac075fc"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/60deff002ca34f5aa4985ab3"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/6112452ca3f6e60d511bad0d"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/61e82b96ed8dd6152815c487#"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/61fbd0ed6ab665110baf7c8d"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/6216d491976b950bb612ee29"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/6217e24f976b950bb6148afa"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/622ef84817a64c6cae942da3"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/622f257117a64c6cae9476f7"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62528753e911ef58a52499d4"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/628e2c9dbd94a175bb6fe784"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/6291f287bd94a175bb75e94d"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/629b6312bd94a175bb849970"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/629c42c3bd94a175bb859032"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/629e7974bd94a175bb89ffeb"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62a096d7bd94a175bb8dc8ec"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62a44bd3bd94a175bb93ccfe"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62aab8d4bd94a175bb9d8b2d"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62ab0092bd94a175bb9df796"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62ab0b05bd94a175bb9e08f3"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62ac8b3b40535c37d67c13bd"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62b21abebd94a175bba7ec1b"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62b729dcbd94a175bbb0a072"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62baae34bd94a175bbb57e50"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62bafb7fbd94a175bbb5e6e7"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/62dbab88971e3e097d4f6e0f"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/630e0e70c2748c14c10ef710"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jenetwood/untitled-form-1"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/layananpihakfacebook/resmipemblokiranfacebook"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/rayzmania1/capitecbankdebitcheckmandate"; endswith; nocase; http.host; content:"my.forms.app"; classtype:attempted-recon; sid:200050514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/epy7xq3y-office-365"; endswith; nocase; http.host; content:"my.visme.co"; classtype:attempted-recon; sid:200050515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjaocseooeb.myjaocseeseb.uqmzwu.top"; classtype:attempted-recon; sid:200050516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcasaeoeb.ca.fnfkau.top"; classtype:attempted-recon; sid:200050517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcasaeoeb.ca.pkvtcu.top"; classtype:attempted-recon; sid:200050518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcasaeoeb.ca.ranzlu.top"; classtype:attempted-recon; sid:200050519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseaecoeb.caaa.fnfkau.top"; classtype:attempted-recon; sid:200050520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseaecoeb.caaa.pkvtcu.top"; classtype:attempted-recon; sid:200050521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseaecoeb.caaa.ranzlu.top"; classtype:attempted-recon; sid:200050522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseeocb.caa.fnfkau.top"; classtype:attempted-recon; sid:200050523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseeocb.caa.pkvtcu.top"; classtype:attempted-recon; sid:200050524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseeocb.caa.ranzlu.top"; classtype:attempted-recon; sid:200050525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseob.c.fnfkau.top"; classtype:attempted-recon; sid:200050526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseob.c.pkvtcu.top"; classtype:attempted-recon; sid:200050527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjcaseob.c.ranzlu.top"; classtype:attempted-recon; sid:200050528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaesacreaoecb.caoaa.fnfkau.top"; classtype:attempted-recon; sid:200050529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaesacreaoecb.caoaa.pkvtcu.top"; classtype:attempted-recon; sid:200050530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaesacreaoecb.caoaa.ranzlu.top"; classtype:attempted-recon; sid:200050531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaesecroab.ccoaa.fnfkau.top"; classtype:attempted-recon; sid:200050532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaesecroab.ccoaa.pkvtcu.top"; classtype:attempted-recon; sid:200050533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaesecroab.ccoaa.ranzlu.top"; classtype:attempted-recon; sid:200050534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceasareaoecb.cao.fnfkau.top"; classtype:attempted-recon; sid:200050535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceasareaoecb.cao.pkvtcu.top"; classtype:attempted-recon; sid:200050536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceasareaoecb.cao.ranzlu.top"; classtype:attempted-recon; sid:200050537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaseroab.cco.fnfkau.top"; classtype:attempted-recon; sid:200050538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaseroab.cco.pkvtcu.top"; classtype:attempted-recon; sid:200050539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjceaseroab.cco.ranzlu.top"; classtype:attempted-recon; sid:200050540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacaseeob.oa.fnfkau.top"; classtype:attempted-recon; sid:200050541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacaseeob.oa.pkvtcu.top"; classtype:attempted-recon; sid:200050542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacaseeob.oa.ranzlu.top"; classtype:attempted-recon; sid:200050543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacasoesb.na.fnfkau.top"; classtype:attempted-recon; sid:200050544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacasoesb.na.pkvtcu.top"; classtype:attempted-recon; sid:200050545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacasoesb.na.ranzlu.top"; classtype:attempted-recon; sid:200050546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsaceasceeob.oaaa.fnfkau.top"; classtype:attempted-recon; sid:200050547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsaceasceeob.oaaa.pkvtcu.top"; classtype:attempted-recon; sid:200050548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsaceasceeob.oaaa.ranzlu.top"; classtype:attempted-recon; sid:200050549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsaceascoesb.naaa.fnfkau.top"; classtype:attempted-recon; sid:200050550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsaceascoesb.naaa.pkvtcu.top"; classtype:attempted-recon; sid:200050551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsaceascoesb.naaa.ranzlu.top"; classtype:attempted-recon; sid:200050552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacesecob.oaa.fnfkau.top"; classtype:attempted-recon; sid:200050553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacesecob.oaa.pkvtcu.top"; classtype:attempted-recon; sid:200050554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacesecob.oaa.ranzlu.top"; classtype:attempted-recon; sid:200050555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacesocsb.naa.fnfkau.top"; classtype:attempted-recon; sid:200050556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacesocsb.naa.pkvtcu.top"; classtype:attempted-recon; sid:200050557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacesocsb.naa.ranzlu.top"; classtype:attempted-recon; sid:200050558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacseob.o.fnfkau.top"; classtype:attempted-recon; sid:200050559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacseob.o.pkvtcu.top"; classtype:attempted-recon; sid:200050560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacseob.o.ranzlu.top"; classtype:attempted-recon; sid:200050561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacsosb.n.fnfkau.top"; classtype:attempted-recon; sid:200050562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacsosb.n.pkvtcu.top"; classtype:attempted-recon; sid:200050563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjsacsosb.n.ranzlu.top"; classtype:attempted-recon; sid:200050564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacarsaeecob.oao.fnfkau.top"; classtype:attempted-recon; sid:200050565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacarsaeecob.oao.pkvtcu.top"; classtype:attempted-recon; sid:200050566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacarsaeecob.oao.ranzlu.top"; classtype:attempted-recon; sid:200050567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacarsaoecsb.nao.fnfkau.top"; classtype:attempted-recon; sid:200050568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacarsaoecsb.nao.pkvtcu.top"; classtype:attempted-recon; sid:200050569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacarsaoecsb.nao.ranzlu.top"; classtype:attempted-recon; sid:200050570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacsreaobc.oo.fnfkau.top"; classtype:attempted-recon; sid:200050571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacsreaobc.oo.pkvtcu.top"; classtype:attempted-recon; sid:200050572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacsreaobc.oo.ranzlu.top"; classtype:attempted-recon; sid:200050573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacsroasbc.no.fnfkau.top"; classtype:attempted-recon; sid:200050574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacsroasbc.no.pkvtcu.top"; classtype:attempted-recon; sid:200050575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseacsroasbc.no.ranzlu.top"; classtype:attempted-recon; sid:200050576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecacrsaeecob.oaoaa.fnfkau.top"; classtype:attempted-recon; sid:200050577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecacrsaeecob.oaoaa.pkvtcu.top"; classtype:attempted-recon; sid:200050578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecacrsaeecob.oaoaa.ranzlu.top"; classtype:attempted-recon; sid:200050579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecacrsaoecsb.naoaa.fnfkau.top"; classtype:attempted-recon; sid:200050580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecacrsaoecsb.naoaa.pkvtcu.top"; classtype:attempted-recon; sid:200050581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecacrsaoecsb.naoaa.ranzlu.top"; classtype:attempted-recon; sid:200050582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecscreaobc.ooaa.fnfkau.top"; classtype:attempted-recon; sid:200050583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecscreaobc.ooaa.pkvtcu.top"; classtype:attempted-recon; sid:200050584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecscreaobc.ooaa.ranzlu.top"; classtype:attempted-recon; sid:200050585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecscroasbc.noaa.fnfkau.top"; classtype:attempted-recon; sid:200050586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecscroasbc.noaa.pkvtcu.top"; classtype:attempted-recon; sid:200050587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"myjseaecscroasbc.noaa.ranzlu.top"; classtype:attempted-recon; sid:200050588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/amz3/service"; endswith; nocase; http.host; content:"myreniwn.com"; classtype:attempted-recon; sid:200050589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/en/b/5j9l4"; endswith; nocase; http.host; content:"n9.cl"; classtype:attempted-recon; sid:200050590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2hhwdm"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6kxp6p"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hxnuzx"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k4jcff"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l4khtv"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pogdut"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/q3euu4"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qzadbp"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tutp27"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vimyln"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vwzsnu"; endswith; nocase; http.host; content:"nah.uy"; classtype:attempted-recon; sid:200050601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:x:/r/personal/ginger_gingerfountain_com/_layouts/15/wopiframe.aspx?guestaccesstoken=gpys8ex7ys1urrzbfeasvlexkodtrovmmcpn%2brsnebs%3d&amp\;docid=1_1882b07b5eb5643d2bdaa63426324ef0e&amp\;wdformid=%7b9bd54af1%2dee16%2d4e07%2d8d62%2d6e9b76e47512%7d&amp\;action=formsubmit&amp\;cid=9adf3e74-8cc1-4e36-b545-c9165fcafde7"; endswith; nocase; http.host; content:"netorg6600800-my.sharepoint.com"; classtype:attempted-recon; sid:200050602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eml"; endswith; nocase; http.host; content:"netvision-it.com"; classtype:attempted-recon; sid:200050603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eml/"; endswith; nocase; http.host; content:"netvision-it.com"; classtype:attempted-recon; sid:200050604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/images/data/redred.html"; endswith; nocase; http.host; content:"nihadtrading.com"; classtype:attempted-recon; sid:200050605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/n/frdtal0a81zt/b/36467383949sharedoc/o/microsoftonline.com"; endswith; nocase; http.host; content:"objectstorage.eu-frankfurt-1.oraclecloud.com"; classtype:attempted-recon; sid:200050606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/n/axb8nnxphkla/b/bucket-20220828-2154/o/indexseradon.html"; endswith; nocase; http.host; content:"objectstorage.us-phoenix-1.oraclecloud.com"; classtype:attempted-recon; sid:200050607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"oiazeiuiazolme.blogspot.com"; classtype:attempted-recon; sid:200050608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/download?cid=936f66742226eaf0&resid=936f66742226eaf0%21105&authkey=aitnwnmvuumu2oo"; endswith; nocase; http.host; content:"onedrive.live.com"; classtype:attempted-recon; sid:200050609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view.aspx?resid=cd71337cfb2b3ba9!1313&amp\;ithint=onenote&amp\;wdo=2&amp\;authkey=!ajwhinbbsa8ui98"; endswith; nocase; http.host; content:"onedrive.live.com"; classtype:attempted-recon; sid:200050610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a7zxb1g"; endswith; nocase; http.host; content:"onl.bz"; classtype:attempted-recon; sid:200050611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hydh4kr"; endswith; nocase; http.host; content:"onl.bz"; classtype:attempted-recon; sid:200050612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wm2dp2c"; endswith; nocase; http.host; content:"onl.bz"; classtype:attempted-recon; sid:200050613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"online-helpchase.blogspot.com"; classtype:attempted-recon; sid:200050614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/app/forms/view/zalxyved/a9adea36-d163-4d46-a3de-0e990d86e78e"; endswith; nocase; http.host; content:"online.visual-paradigm.com"; classtype:attempted-recon; sid:200050615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ions/index.php?email=redacted@abuse.ionos.com"; endswith; nocase; http.host; content:"onlinecasinospark.com"; classtype:attempted-recon; sid:200050616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"onlinehelpchase.blogspot.com"; classtype:attempted-recon; sid:200050617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&amp\;pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&amp\;frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&amp\;username=abuse.ionos.com&amp\;ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&amp\;unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux"; endswith; nocase; http.host; content:"otm.mycustomerconnect.com"; classtype:attempted-recon; sid:200050618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1682449218/156e09d0ea8e294db3474e54a2df1dc9/download.htm"; endswith; nocase; http.host; content:"padlet-uploads.storage.googleapis.com"; classtype:attempted-recon; sid:200050619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ripleychile/formulario/formulario_opt_out/opt_out?spmailingid=46529866&amp\;spuserid=mtm1mjmzntkxntc5mqs2&amp\;spjobid=mjiwmti5njg1mqs2&amp\;spreportid=mjiwmti5njg1mqs2"; endswith; nocase; http.host; content:"pages03.net"; classtype:attempted-recon; sid:200050620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"paozeia.blogspot.com"; classtype:attempted-recon; sid:200050621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2021/02/blog-post.html"; endswith; nocase; http.host; content:"paypal-inc-userupdatenuber7925570844.blogspot.com"; classtype:attempted-recon; sid:200050622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/orn.html"; endswith; nocase; http.host; content:"perspectivart.com"; classtype:attempted-recon; sid:200050623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/.documents/check-info/adobe%20signed/adobe/"; endswith; nocase; http.host; content:"pflexport.com"; classtype:attempted-recon; sid:200050624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/includes/api-irs.html"; endswith; nocase; http.host; content:"pichaapp.africa"; classtype:attempted-recon; sid:200050625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/juegos-ninos/habilidad"; endswith; nocase; http.host; content:"pocoyo.com"; classtype:attempted-recon; sid:200050626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fia8mx"; endswith; nocase; http.host; content:"ppt.cc"; classtype:attempted-recon; sid:200050627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fva4wx"; endswith; nocase; http.host; content:"ppt.cc"; classtype:attempted-recon; sid:200050628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fvakzx"; endswith; nocase; http.host; content:"ppt.cc"; classtype:attempted-recon; sid:200050629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fvllvx"; endswith; nocase; http.host; content:"ppt.cc"; classtype:attempted-recon; sid:200050630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d0uv8808qzu0hxnpoqtl"; endswith; nocase; http.host; content:"preferences.convertkit-mail.com"; classtype:attempted-recon; sid:200050631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cpsess3669307974/horde/imp/dynamic.php?page=mailbox#"; endswith; nocase; http.host; content:"premium57.web-hosting.com:2096"; classtype:attempted-recon; sid:200050632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/home/?pboow084mu"; endswith; nocase; http.host; content:"presence-theultimategift.com"; classtype:attempted-recon; sid:200050633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ab/app/seleccione_medio_de_codigo_loading.php"; endswith; nocase; http.host; content:"primeratemerchant.com"; classtype:attempted-recon; sid:200050634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=1"; endswith; nocase; http.host; content:"proceedencryptions.blogspot.com"; classtype:attempted-recon; sid:200050635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/v1?u=https%3a%2f%2fconnect.companyswisscard-ch.com%2feservice%2f%3fkey%3dbwlrzs5zdgvpbmvyqdrwzxrzlmno&c=11pvwl1g24&r=4ypi1jst5zgkcj3vd2wihg&k=7s1&s=zsqoc1bkurwk0wmdwuz3to1vjj60cx8due0wrexybse"; endswith; nocase; http.host; content:"protection.retarus.com"; classtype:attempted-recon; sid:200050636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/emailfwd/show.php?usernum=350311855&amp\;formid=3879"; endswith; nocase; http.host; content:"pub5.bravenet.com"; classtype:attempted-recon; sid:200050637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2rc41txe"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bcfuja3v/?ht"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bcfuja3v/?https://www.google.com/"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ewqwwwsl"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hi1opzhz"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/in1b4ru"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/izircqqd"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l52bxfy9"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ofcclfoq"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/r6wxsyai"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/stwj0uvm"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwxh38rr"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ytmc2hww"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/zv8d_zyc"; endswith; nocase; http.host; content:"pxlme.me"; classtype:attempted-recon; sid:200050651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hixeto"; endswith; nocase; http.host; content:"qr.net"; classtype:attempted-recon; sid:200050652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bczdkg?userid=ad1e2wno"; endswith; nocase; http.host; content:"qrco.de"; classtype:attempted-recon; sid:200050653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bd5q48"; endswith; nocase; http.host; content:"qrco.de"; classtype:attempted-recon; sid:200050654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bdfevh"; endswith; nocase; http.host; content:"qrco.de"; classtype:attempted-recon; sid:200050655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bdfngf"; endswith; nocase; http.host; content:"qrco.de"; classtype:attempted-recon; sid:200050656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jeh2aebbsh97"; endswith; nocase; http.host; content:"quip.com"; classtype:attempted-recon; sid:200050657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qv7malu8n7cz/you-have-some-messages-pending"; endswith; nocase; http.host; content:"quip.com"; classtype:attempted-recon; sid:200050658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ddglku.top"; classtype:attempted-recon; sid:200050659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.ikmqvu.top"; classtype:attempted-recon; sid:200050660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekoatcsrnocn.rakaseeoaseroour.xmvywu.top"; classtype:attempted-recon; sid:200050661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekoatnocn.rakaseeoour.ddglku.top"; classtype:attempted-recon; sid:200050662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekoatnocn.rakaseeoour.ikmqvu.top"; classtype:attempted-recon; sid:200050663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekotncsron.rakaseoouasero.ddglku.top"; classtype:attempted-recon; sid:200050664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekotncsron.rakaseoouasero.ikmqvu.top"; classtype:attempted-recon; sid:200050665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekotncsron.rakaseoouasero.xmvywu.top"; classtype:attempted-recon; sid:200050666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekotnon.rakaseoou.ddglku.top"; classtype:attempted-recon; sid:200050667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekotnon.rakaseoou.ikmqvu.top"; classtype:attempted-recon; sid:200050668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekotnon.rakaseoou.to5fb9.icu"; classtype:attempted-recon; sid:200050669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raekotnon.rakaseoou.xmvywu.top"; classtype:attempted-recon; sid:200050670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ddglku.top"; classtype:attempted-recon; sid:200050671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakasaecsroocu.raekoetnaseroonr.ikmqvu.top"; classtype:attempted-recon; sid:200050672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakasaecsroocu.raekoetnaseroonr.xmvywu.top"; classtype:attempted-recon; sid:200050673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakasaeoocu.raekoetnonr.ddglku.top"; classtype:attempted-recon; sid:200050674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakasaeoocu.raekoetnonr.ikmqvu.top"; classtype:attempted-recon; sid:200050675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakasaeoocu.raekoetnonr.xmvywu.top"; classtype:attempted-recon; sid:200050676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakaseocsrou.raekotnonasero.ddglku.top"; classtype:attempted-recon; sid:200050677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakaseocsrou.raekotnonasero.ikmqvu.top"; classtype:attempted-recon; sid:200050678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakaseocsrou.raekotnonasero.xmvywu.top"; classtype:attempted-recon; sid:200050679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakaseoou.raekotnon.ddglku.top"; classtype:attempted-recon; sid:200050680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakaseoou.raekotnon.ikmqvu.top"; classtype:attempted-recon; sid:200050681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rakaseoou.raekotnon.xmvywu.top"; classtype:attempted-recon; sid:200050682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ddglku.top"; classtype:attempted-recon; sid:200050683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raoseakcsrorcou.rakoeasaserouern.ikmqvu.top"; classtype:attempted-recon; sid:200050684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raoseakcsrorcou.rakoeasaserouern.xmvywu.top"; classtype:attempted-recon; sid:200050685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raoseakorcou.rakoeasuern.ddglku.top"; classtype:attempted-recon; sid:200050686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raoseakorcou.rakoeasuern.ikmqvu.top"; classtype:attempted-recon; sid:200050687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raoseakorcou.rakoeasuern.xmvywu.top"; classtype:attempted-recon; sid:200050688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raosekocsrrou.rakoasuenasero.ddglku.top"; classtype:attempted-recon; sid:200050689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raosekocsrrou.rakoasuenasero.ikmqvu.top"; classtype:attempted-recon; sid:200050690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raosekocsrrou.rakoasuenasero.xmvywu.top"; classtype:attempted-recon; sid:200050691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raosekorou.rakoasuen.ddglku.top"; classtype:attempted-recon; sid:200050692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raosekorou.rakoasuen.ikmqvu.top"; classtype:attempted-recon; sid:200050693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raosekorou.rakoasuen.xmvywu.top"; classtype:attempted-recon; sid:200050694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ddglku.top"; classtype:attempted-recon; sid:200050695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.ikmqvu.top"; classtype:attempted-recon; sid:200050696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekoacsrtcnocn.rakaseaseroeeeooaur.xmvywu.top"; classtype:attempted-recon; sid:200050697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ddglku.top"; classtype:attempted-recon; sid:200050698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekoatcnocn.rakaseeeeooaur.ikmqvu.top"; classtype:attempted-recon; sid:200050699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekoatcnocn.rakaseeeeooaur.xmvywu.top"; classtype:attempted-recon; sid:200050700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ddglku.top"; classtype:attempted-recon; sid:200050701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekotcsrncon.rakaseooaseroueea.ikmqvu.top"; classtype:attempted-recon; sid:200050702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekotcsrncon.rakaseooaseroueea.xmvywu.top"; classtype:attempted-recon; sid:200050703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekotncon.rakaseooueea.ddglku.top"; classtype:attempted-recon; sid:200050704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekotncon.rakaseooueea.ikmqvu.top"; classtype:attempted-recon; sid:200050705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasekotncon.rakaseooueea.xmvywu.top"; classtype:attempted-recon; sid:200050706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ddglku.top"; classtype:attempted-recon; sid:200050707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.ikmqvu.top"; classtype:attempted-recon; sid:200050708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasacsrecoocu.raekoeaseroteenoanr.xmvywu.top"; classtype:attempted-recon; sid:200050709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasaecoocu.raekoeteenoanr.ddglku.top"; classtype:attempted-recon; sid:200050710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasaecoocu.raekoeteenoanr.ikmqvu.top"; classtype:attempted-recon; sid:200050711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasaecoocu.raekoeteenoanr.xmvywu.top"; classtype:attempted-recon; sid:200050712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasecsrocou.raekotnoaseroneea.ddglku.top"; classtype:attempted-recon; sid:200050713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasecsrocou.raekotnoaseroneea.ikmqvu.top"; classtype:attempted-recon; sid:200050714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskasecsrocou.raekotnoaseroneea.xmvywu.top"; classtype:attempted-recon; sid:200050715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskaseocou.raekotnoneea.ddglku.top"; classtype:attempted-recon; sid:200050716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskaseocou.raekotnoneea.ikmqvu.top"; classtype:attempted-recon; sid:200050717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"raskaseocou.raekotnoneea.xmvywu.top"; classtype:attempted-recon; sid:200050718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ddglku.top"; classtype:attempted-recon; sid:200050719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.ikmqvu.top"; classtype:attempted-recon; sid:200050720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasoseacsrkcorcou.rakoeaseroaeesuaern.xmvywu.top"; classtype:attempted-recon; sid:200050721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ddglku.top"; classtype:attempted-recon; sid:200050722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasoseakcorcou.rakoeaeesuaern.ikmqvu.top"; classtype:attempted-recon; sid:200050723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasoseakcorcou.rakoeaeesuaern.xmvywu.top"; classtype:attempted-recon; sid:200050724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ddglku.top"; classtype:attempted-recon; sid:200050725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.ikmqvu.top"; classtype:attempted-recon; sid:200050726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasosekcsrocrou.rakoasuaseroeeena.xmvywu.top"; classtype:attempted-recon; sid:200050727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasosekocrou.rakoasueeena.ddglku.top"; classtype:attempted-recon; sid:200050728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasosekocrou.rakoasueeena.ikmqvu.top"; classtype:attempted-recon; sid:200050729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"rasosekocrou.rakoasueeena.xmvywu.top"; classtype:attempted-recon; sid:200050730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9mxost?evgdh"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200050731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fiexaf"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200050732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hqfrat?gcflga"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200050733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nnvqmb"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200050734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qbz7yk"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200050735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/t5in63?pwjd"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200050736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/zovnzp"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200050737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dwi5d?/pages/services/2022"; endswith; nocase; http.host; content:"rcl.ink"; classtype:attempted-recon; sid:200050738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mw80e?./help-accountcenter-service.gtempurl"; endswith; nocase; http.host; content:"rcl.ink"; classtype:attempted-recon; sid:200050739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pztsj?./accountcenter-service"; endswith; nocase; http.host; content:"rcl.ink"; classtype:attempted-recon; sid:200050740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/medical?pc_url=https://health.usnews.com/doctors/li-lei-1012630&securl=ghy1rdnmwlqytqu2rfrhtf27kllqk76w&type=wap&wap_url=https://mail.ionos.com/"; endswith; nocase; http.host; content:"readmodel.m.sogou.com"; classtype:attempted-recon; sid:200050741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"reamaam.blogspot.com"; classtype:attempted-recon; sid:200050742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/g8npsq6"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200050743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/o1lz8r3/?email=registrar@nameshield.net"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200050744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/home.php"; endswith; nocase; http.host; content:"rectifywebwallet.com"; classtype:attempted-recon; sid:200050745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"redatofadesafe.blogspot.com"; classtype:attempted-recon; sid:200050746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/111/"; endswith; nocase; http.host; content:"reflexologyegypt.com"; classtype:attempted-recon; sid:200050747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"reikreitel.blogspot.com"; classtype:attempted-recon; sid:200050748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3zkzz3t"; endswith; nocase; http.host; content:"rem.ax"; classtype:attempted-recon; sid:200050749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mailservice?url=https://ci4.googleuser=%20conte%20nt.com/proxy/qrclxpwgysi1rf2vddyxuf1xk3fdjdd--avtzkbfsw-51gwhfk2qjkj2=%20qpw%203yxkyvveihj_m4yd1wfepj1jyj-fr9ltz3pgqwlzo9hgjtntqw3tmxaujonfw0iyt-a=s0-=%20d-e%201-ft&proxy=yes&key=c7d1173f601f75093c848d58166fbed4"; endswith; nocase; http.host; content:"resize.yandex.net"; classtype:attempted-recon; sid:200050750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6e9zk5"; endswith; nocase; http.host; content:"reurl.cc"; classtype:attempted-recon; sid:200050751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/g2emzn?coinbase?shiny"; endswith; nocase; http.host; content:"reurl.cc"; classtype:attempted-recon; sid:200050752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xeknoz?confirmation"; endswith; nocase; http.host; content:"reurl.cc"; classtype:attempted-recon; sid:200050753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xgmxr1"; endswith; nocase; http.host; content:"reurl.cc"; classtype:attempted-recon; sid:200050754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2d0jazx1eky5/click-here-to-verify-your-email"; endswith; nocase; http.host; content:"rezunz.quip.com"; classtype:attempted-recon; sid:200050755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nats.sern/5/rnnp.php"; endswith; nocase; http.host; content:"rgcgov.edu.bd"; classtype:attempted-recon; sid:200050756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2021/02/blog-post.html"; endswith; nocase; http.host; content:"riderctposten.blogspot.com"; classtype:attempted-recon; sid:200050757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/widgets/ea8a/postch.php"; endswith; nocase; http.host; content:"robinettearchitect.com"; classtype:attempted-recon; sid:200050758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-includes/widgets/ea8a/redirect.php?id=7c18c315d71119489192f48f2b84ad73"; endswith; nocase; http.host; content:"robinettearchitect.com"; classtype:attempted-recon; sid:200050759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2p8ftv9d"; endswith; nocase; http.host; content:"rotf.lol"; classtype:attempted-recon; sid:200050760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/-1akj3"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/-1akkm"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/-1anmf"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1auht"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1aupp"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1aw5z"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1c3ep"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1c93f"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1ceyc"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1chmq"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1ck7d"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1cno4"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1cqpr"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1cxse"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1d1ij"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1df5a"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1dtyl"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1du7b"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1e1sy"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1fapf"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/accessobperbanca"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/correoss2"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sid-sparkasse-de"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sparkasse_id"; endswith; nocase; http.host; content:"s.id"; classtype:attempted-recon; sid:200050784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ndltqxfz"; endswith; nocase; http.host; content:"s.pointerpro.com"; classtype:attempted-recon; sid:200050785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/appforest_uf/f1659657545763x218727606757116440/vc.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/appforest_uf/f1661579854461x333665918085419600/index%20new.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/appforest_uf/f1662376851759x722339179033594600/ix.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/appforest_uf/f1662380478060x513998377438234600/ix.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/appforest_uf/f1662567373229x779238078226475000/fx.html#x@x.com"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/appforest_uf/f1662614585247x113432212858644020/0987654323405o6789065uytr5678iuyt.html#a@b.com"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/progressivebank-uat/index.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/s3-service.update.delivery.adress.awsdjtygtfdaghfajgskzgnbeca3/1awfawegas.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/safiepace/refn26.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/www.securemicrosoftonenote/hm/$rhzg5iz.html"; endswith; nocase; http.host; content:"s3.amazonaws.com"; classtype:attempted-recon; sid:200050795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/www.microsoftonenotes.com/hm/$rhzg5iz.html"; endswith; nocase; http.host; content:"s3.eu-west-1.amazonaws.com"; classtype:attempted-recon; sid:200050796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/10iy50adn0z2a6u/10iy50adn0z2a6u.html"; endswith; nocase; http.host; content:"s3.eu-west-2.amazonaws.com"; classtype:attempted-recon; sid:200050797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l0/https://lnkd.in/dxnhhybc/1/01000181eecab6cf-769da54d-7b69-4125-84f0-dc49abe930cd-000000/t_-tkxz7q3rbxjaufqrdl3ugqcy=277"; endswith; nocase; http.host; content:"s4r9mj97.r.us-east-1.awstrack.me"; classtype:attempted-recon; sid:200050798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"saicsacsien.a.edtsiu.top"; classtype:attempted-recon; sid:200050799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"saicsoiasioen.o.tncjmu.top"; classtype:attempted-recon; sid:200050800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"sasaeiicecseecrson.iseaiorcseoeosninveri.ipcvku.top"; classtype:attempted-recon; sid:200050801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/redirect?url=https%3a%2f%2fvinted-pl-lzlxo.crosscuts.shop%2fmoney%2f88543140&amp\;client=clck&amp\;sign=8cc6caa796d1baa99a71f59c7a5cedce"; endswith; nocase; http.host; content:"sba.yandex.net"; classtype:attempted-recon; sid:200050802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/macros/s/akfycbxldfmsdlmc1xmyfvmhpijk0qxsnxurlh95jzz3qcvmodhollh-cgwk3ql47_ntzyajzw/exec"; endswith; nocase; http.host; content:"script.google.com"; classtype:attempted-recon; sid:200050803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"sdzakfahz.blogspot.com"; classtype:attempted-recon; sid:200050804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/scream/shout/"; endswith; nocase; http.host; content:"seaandsent.com"; classtype:attempted-recon; sid:200050805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seaceeesacceirccrsoorna.seieascaacirsoocinaoeosnmer.fajubu.top"; classtype:attempted-recon; sid:200050806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seaceieeaccsirecrcsoroan.sieesaaacircoesinioaoeosnmer.fajubu.top"; classtype:attempted-recon; sid:200050807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.gelxdu.top"; classtype:attempted-recon; sid:200050808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seaceiesacceirccrsoorna.seieascaacirsoeoinaoeosnmer.lzpytu.top"; classtype:attempted-recon; sid:200050809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seaceiesaceeirccrsoorna.seieascascioeoonaoeosnmer.fajubu.top"; classtype:attempted-recon; sid:200050810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seacesccaecrirsoona.seeascacrsoaocaoeosnmer.zdhku.top"; classtype:attempted-recon; sid:200050811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seaceseeacccirscronor.aseaiecssaacirooniaoeosnmer.gelxdu.top"; classtype:attempted-recon; sid:200050812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seacieccaserircsooan.seesaacrcoaesniaoeosnmer.fajubu.top"; classtype:attempted-recon; sid:200050813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seacisceaecrirsoona.seeascscoeoaaoeosnmer.gelxdu.top"; classtype:attempted-recon; sid:200050814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seacseccasorirn.osaeacesseocnaoeosnmer.gelxdu.top"; classtype:attempted-recon; sid:200050815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.fajubu.top"; classtype:attempted-recon; sid:200050816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.gelxdu.top"; classtype:attempted-recon; sid:200050817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.lzpytu.top"; classtype:attempted-recon; sid:200050818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascececsaocnrir.soearacseosniaoeoosnmerrnesc.zdhku.top"; classtype:attempted-recon; sid:200050819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.fajubu.top"; classtype:attempted-recon; sid:200050820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.gelxdu.top"; classtype:attempted-recon; sid:200050821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.lzpytu.top"; classtype:attempted-recon; sid:200050822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseccaeccrirsoonar.seeascacrsooaocaoreosnnmeersc.zdhku.top"; classtype:attempted-recon; sid:200050823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.fajubu.top"; classtype:attempted-recon; sid:200050824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.gelxdu.top"; classtype:attempted-recon; sid:200050825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.lzpytu.top"; classtype:attempted-recon; sid:200050826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaccsrirono.arseaecsescocooaoeosrnmenresc.zdhku.top"; classtype:attempted-recon; sid:200050827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.fajubu.top"; classtype:attempted-recon; sid:200050828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.gelxdu.top"; classtype:attempted-recon; sid:200050829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.lzpytu.top"; classtype:attempted-recon; sid:200050830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasceseceaeccrirsoonar.seeascscooooaaoeorsnmneresc.zdhku.top"; classtype:attempted-recon; sid:200050831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.fajubu.top"; classtype:attempted-recon; sid:200050832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.gelxdu.top"; classtype:attempted-recon; sid:200050833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.lzpytu.top"; classtype:attempted-recon; sid:200050834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieeccascerircsooarn.seesaacrcooaesniraoenosnemesrc.zdhku.top"; classtype:attempted-recon; sid:200050835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.fajubu.top"; classtype:attempted-recon; sid:200050836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.gelxdu.top"; classtype:attempted-recon; sid:200050837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.lzpytu.top"; classtype:attempted-recon; sid:200050838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascieecsaecerircsooarn.seesaccoeooasoaoreosnnmeersc.zdhku.top"; classtype:attempted-recon; sid:200050839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.fajubu.top"; classtype:attempted-recon; sid:200050840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.gelxdu.top"; classtype:attempted-recon; sid:200050841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.lzpytu.top"; classtype:attempted-recon; sid:200050842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseccaeccrirsoonar.seeascacrsooaeoaoreosnnmeersc.zdhku.top"; classtype:attempted-recon; sid:200050843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.fajubu.top"; classtype:attempted-recon; sid:200050844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.gelxdu.top"; classtype:attempted-recon; sid:200050845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.lzpytu.top"; classtype:attempted-recon; sid:200050846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seasciseceaeccrirsoonar.seeascscoeooaaoeorsnmneresc.zdhku.top"; classtype:attempted-recon; sid:200050847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.fajubu.top"; classtype:attempted-recon; sid:200050848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.gelxdu.top"; classtype:attempted-recon; sid:200050849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.lzpytu.top"; classtype:attempted-recon; sid:200050850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccaccsrirono.arseaecssacroooaaoeorsnmneresc.zdhku.top"; classtype:attempted-recon; sid:200050851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.fajubu.top"; classtype:attempted-recon; sid:200050852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.gelxdu.top"; classtype:attempted-recon; sid:200050853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccaecsrirono.arseaecssoconaooeosnrmernesc.zdhku.top"; classtype:attempted-recon; sid:200050854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.fajubu.top"; classtype:attempted-recon; sid:200050855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.lzpytu.top"; classtype:attempted-recon; sid:200050856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccascorirn.osareacesseocnaooeosnmrernesc.zdhku.top"; classtype:attempted-recon; sid:200050857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.gelxdu.top"; classtype:attempted-recon; sid:200050858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"seascseeccascorirn.osareacessoccnaooeosnmrernesc.lzpytu.top"; classtype:attempted-recon; sid:200050859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/signin?t=eyjhbgcioijiuzi1nij9.eyj0cmfja2luz190b2tlbii6imfmmjuzmdq2ltriy2qtngvjny1hmzgzlwe0zty4ndbhzdeyocisimnlbgwioijodhrwczovl3fnymz3b3c2mgyuzxhly3v0zs1hcgkudxmtd2vzdc0ylmftyxpvbmf3cy5jb20vchjvzc9hcgkvcghpc2hpbmdjyw1wywlnbiisimnhbxbhawdux3rva2vuijoimmuzm2rhzgmtztvios00ngqwlwizytetzdu4ndllntbjodg4iiwidgvzdf90b2tlbii6zmfsc2usimlhdci6mty2mja1nzqymywiaxnzijoiahr0chm6ly9hchaucghpc2h0ahjlyxquy29tiiwizxhwijoxnjy5odmzndizfq.g493qvqwgnvn4xo3yvzgzjypkum0okldobwruejxjyc"; endswith; nocase; http.host; content:"secure-bank-alerts.com"; classtype:attempted-recon; sid:200050860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/p/postenno_9.html"; endswith; nocase; http.host; content:"seonewsservic.blogspot.com"; classtype:attempted-recon; sid:200050861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/we%20logz%20sure/"; endswith; nocase; http.host; content:"serviceuspaym-client.com"; classtype:attempted-recon; sid:200050862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/incoming/incoming_fax_nhbmpvc2utms5vcmfjbgvjbg91zc5jb20vbi9hehrvaxp3bxcyzxivyi9idwnrzxqtmjaymtexmjktmtixmy9vl3nlcnzlcjiuahrt/fill.html"; endswith; nocase; http.host; content:"sfo3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/management-portal/1-continuetologin/secured.html"; endswith; nocase; http.host; content:"sfo3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/management-portal/nee-continuetologin/secured.html#*@*"; endswith; nocase; http.host; content:"sfo3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sungmai7d6gsbni8179w9dkal7357/&!$)(&!$!$))!)0/&!$)&!$())(!.html#redacted@abuse.ionos.com"; endswith; nocase; http.host; content:"sfo3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/teend9blck0nx1v8a88qu016a40x/!!!!)!($!)$!!@/&!$)!@&!&.html"; endswith; nocase; http.host; content:"sfo3.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:b:/g/personal/jean-claude-fernandes_sgdb91_com/exk2a_c6xsxouopoew83oxib65oghw_co2bz33les1rdxw"; endswith; nocase; http.host; content:"sgdb91700-my.sharepoint.com"; classtype:attempted-recon; sid:200050868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/0nlined0cufile0365/indexx.html"; endswith; nocase; http.host; content:"sgp1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/burkeslaw.net/law.htm"; endswith; nocase; http.host; content:"sgp1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d1a08e6f-0b5f-4336-b771-bd0dd7f5d577d1a08e6f-0b5f-4336-b771-bd0/index-01.html"; endswith; nocase; http.host; content:"sgp1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/j7trucking467/3sndftr.html"; endswith; nocase; http.host; content:"sgp1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/m1cr05oft.0n1i3efile/indexx.html"; endswith; nocase; http.host; content:"sgp1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/m1cr05oft.0n1i3efile/indexx.html#test@example.com"; endswith; nocase; http.host; content:"sgp1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200050874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/11c1i3ucrsjaeqnyxinop6ad5rxo"; endswith; nocase; http.host; content:"share.hsforms.com"; classtype:attempted-recon; sid:200050875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1fni_ent2sao6wqv0vzdn7g8nl9d"; endswith; nocase; http.host; content:"share.hsforms.com"; classtype:attempted-recon; sid:200050876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1onniqroftvoytwpvbgznvgd5749"; endswith; nocase; http.host; content:"share.hsforms.com"; classtype:attempted-recon; sid:200050877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1q6hj0hs8qeiyr1t5ntqimgd8cyx"; endswith; nocase; http.host; content:"share.hsforms.com"; classtype:attempted-recon; sid:200050878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1whluifnasr6s4ov9skogswd5n96"; endswith; nocase; http.host; content:"share.hsforms.com"; classtype:attempted-recon; sid:200050879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1zwug5hvmsuik9mhaflsx3gd9wnt"; endswith; nocase; http.host; content:"share.hsforms.com"; classtype:attempted-recon; sid:200050880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/basic.php?k=d63621ef3dc01735479befc13f97ec7fdb68991d"; endswith; nocase; http.host; content:"shared-document.com"; classtype:attempted-recon; sid:200050881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/product/h5zibdt"; endswith; nocase; http.host; content:"shoppy.gg"; classtype:attempted-recon; sid:200050882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dhtvx"; endswith; nocase; http.host; content:"shorturl.at"; classtype:attempted-recon; sid:200050883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nqgu1"; endswith; nocase; http.host; content:"shorturl.at"; classtype:attempted-recon; sid:200050884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ful6dt"; endswith; nocase; http.host; content:"shrtco.de"; classtype:attempted-recon; sid:200050885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tw3yr2"; endswith; nocase; http.host; content:"shrtco.de"; classtype:attempted-recon; sid:200050886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aaccxmgpgbdoucof3nnhjztf0cff__qvmhfluleivgnfcg"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aacs36q7dy9sehmocisvzelxhtl-boual8q1vifyciv-dq"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/caadrpuetnldgdnuoeb8ipiqul0fya5jaa3rilswauraca"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cadgaaxmhb7khuhj9pqz5rjrpjvblumqwifacimbglzara/"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/daa7yauasdsfgrjqgdh84afdmcgdxcw0tqbbxecxsmkbyw"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/daajhzbn9wbfefwwaq7iyt-b2nh3uqpgnxkvqlwihzljka?key=731d8be5be368ed31f7ee944878a947f&redirect=https://www.amazon.com"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eabibfvu2cs824kdijdrs-n_zwu-ye4drkasdgdocktsta"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/faacmtl5x4ksawtbuzbwkhso1cvpb8wacvmde6cseamdsg"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gabmmvxckrvhezh0u1isygbm6lyyy0e9vs1825dcbi-zwq"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nabo48lq3y5efwoyti9jsn8vo9ma8ipm9j4uo7j2w98vba/"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nag79i3vy22uvtkdah_c2l1ktefoxqqao2kpcojpymkyca/login.html?ejynp=2dcaoxdewkapujukl9v2cpr6c7&ckacjbyhht=acmdwmwm5gcvjdog8l&fik=xwrdgar17zzwllflb&hsikngecjd=zbjsaxps1kgldsaq8hyvx31his9le&hgzcxai=wm5hhjun6tuabz2reiciywgenz&enjrlhbu=cxy4vyca6q9itq7uh&kegplpkb=3iwkmhrpmp1jurcyk&vbqcg=qc1tlzo9lbw8epqkpx86ne"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vaayqhcjskxbeu4bvfljtto23b9x5xoeaqfnj9td7f_94g"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/zaakmmh0p8rkxaump4vtvatoq3uepk1fqagxzdh8kee_pw"; endswith; nocase; http.host; content:"siasky.net"; classtype:attempted-recon; sid:200050899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/publish/xhrdvc"; endswith; nocase; http.host; content:"simp.ly"; classtype:attempted-recon; sid:200050900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d/c8p32jnftqeza01h/c/4041353/1"; endswith; nocase; http.host; content:"simplero.com"; classtype:attempted-recon; sid:200050901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d/i1el-kmca6qzitay/c/4039144/0"; endswith; nocase; http.host; content:"simplero.com"; classtype:attempted-recon; sid:200050902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d/p9-e9ghmfr-ygtja/c/4036032/1"; endswith; nocase; http.host; content:"simplero.com"; classtype:attempted-recon; sid:200050903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a/sy4norton.com/setup/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/amricalturs.net/download4/microsoft-office-365"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/amricalturs.net/ks3/microsoft-office-365"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/metamask-ios.com/metamaskchrromeextension/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/metamask-ios.com/metamasklogin/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/n12-netempresarial.com/empresa-nerd-n12/in%c3%adcio"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/newservices.website/orange-mobiles/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/newservices.website/service-reglement/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/newservices.website/service-reglement/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/site/e9d24c72/23524457"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/site/habbotuttogratis/assignments"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/site/libretyreserve"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/site/libretyreserve/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/site/protectedinmprovmnt44/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/site/safetycheck427064200647221/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/site/verifycheckpointpaqes/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/traconf-it.com/flashyfile/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/019businessusersbt782btsignin/secure-update-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/02amr/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/04-am/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/08ie-securepage-facebook"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/09securebusinessusersonly-/secure-bt-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/0iey-securepage-facebook"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/0range-bank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/12noreplybtuserconnect365offic/secure-bt-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/1mailxverificatio/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/2-orangebank-salva/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/3-orangebank-vetch/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/302dir/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/3254798fr78/uigiugi"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/4-orangebank-toto/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/443edxsjkl8/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/565f34/microsoft-office-365"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/65h7t65ygtdw5f4/bt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/65q-securepage-facebook"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/7wr/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/91186co/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/98w72securebusinessbt-01/secure-update-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/a3y-securepage-facebook"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/abonnevocalweb/accueil?authuser=5"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/abuse-privacy/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/access-office-aud-msg-us/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/access-office-docxpdf-call-net/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/access-salesorder/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/access-voice-mail-pay-us/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/accs-office-ml/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/accs-p-o-us/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/accsoffice-usa/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/activationagrisecuriplus/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/adrianoferriani/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/alert-app-pages/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/amldk/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/amporangefr/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/amsohappy/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/app-mobile-uuid/recovery"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/appli-ob-securite/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/appli-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/appli-obank-serv/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/appli-scur-obankps/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/applkactu/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/apps-authentification-forte-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/apps-mbl2/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/apps-obank-apli/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/apps-secure-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/apps-securite-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/aqwsas"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/asdfghjklhgfdsdfgh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/atendimento-online-emissao/in%c3%adcio"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/atendimentomarnobre/p%c3%a1gina-inicial"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/att-home/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/att-mail-update/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/att-managements/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/att-net-/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attemailfox7/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attemler7/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attfeatures/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attlattlattlatt/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attmailcustomerupdate/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attmaillogservise/attmail"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attndattndatt/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attnet-104921/att"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attnetli/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attnetlogsignmail/att-net"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attnetlogsservce/att-net"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attonline00/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attserv111cust/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attttstttegegrsksw/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attudnie/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attupdateobo/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attweb22/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attweblysiteupgrade/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attyahoomail7/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/attyahooohroffice231/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/authen-secure-obank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/authentification-apps-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/authentification-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200050999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/authentification-orangebank-eu/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/authentifications-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/awspage"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/b6ljxyar/information-page-report"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/background-in"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bacopremolista/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/baltimoreassessoria"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bambe/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/banquepostalebanqueetassurance/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bbroadband110/home?authuser=4"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bbtbroadband/home?authuser=9"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bcp-mille/home-page"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bctw/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/benachrichtigung-sparkasse/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/biorange/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bletoemisao/in%c3%adcio"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/broadbandplc/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bt-2022-user/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bt-cloud-voice-review-voice/bt-voice-cloud"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bt-clould-preview000112/voice010101010bt-cloud?authuser=8"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bt-pdf-receipt-payment/www-bt-pdf?authuser=8"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bt-users/secure-business-bt-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bt-voice1010010/bt-voicemesaage10120201002?authuser=8"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btaert/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbillreview/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbraodbandteam/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbriadbandteam/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbroadbandlin/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbroadbandplc/home?authuser=7"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbroadbandplc1/home?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbroadbandteam/home?authuser=5"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbroadbandweb/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbroadli/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbtbtbtbtbtcomm/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btbusinessx/bt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btcloudpaymentinvoice202000/httpsbtcloudvm-voice-new?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btcloudvoice-mv0001/home?authuser=3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btconnectbusiness/btconnect"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btconnectmailserver/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btconnectsecurebusinesbtcom/bt-connect"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btcustomerservice/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btee0/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btemailwebmailer/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btintern/bt-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btinternet42day/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btinternetco/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btmailerupdatee/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btmv-voice-notice011/btvoicemessage?authuser=8"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btnvm-urgentnotice/btvmnew-note?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btserver10/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btservicebill/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btsuporteamsup/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttbriadbandteam/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttbusinesssss/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttelecom/home?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttelecomm-/home?authuser=5"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttelecomm0/home?authuser=2"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttelecommication/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttelecommservice/home?authuser=5"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/bttelecommunication-plc/home?authuser=2"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btuiytretyudfgjh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btwebmailww/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btwebsuppor/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btweeb/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btworkingteam/home?authuser=5"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btworkking/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btworldwide/home?authuser=4"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/businesbtnewbroadband-hub/update-bt-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/business-btbtb-office365/secure-bt-business-com?authuse%20r=3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/business-btbtb-office365/secure-bt-business-com?authuser=3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/businessbtxpress/update-bt-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/buxtonbreweryofficial/official"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/capitaloneloginus/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ccjkc/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/certiauthavril/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/cgnvzmx/att"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/chamekesa/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/chamekesa/accueil?authuser=3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/chamfare/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/charlisto/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/clickpagenewlogin2021"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/clxyxsnh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/coinsbuysellswapcryptocurrency/?fbclid=iwar2isl9xfxxgcxtftml2hmcl_dglhshlkfkpdotycyqu-qjqqfdqm9whtfm"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/comfimobiekdofl/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/community-pages-app/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/community-relief-program/crf-dispatch-illustration"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/community-relief-program/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/condado-duo-luis-pagan-/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/confirmation-orangabank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/confirmationacces"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/confirmationacces/verify-pages"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/connectionperdue/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/connectolo/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/connectsvqq"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/control-service/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/controlpanel-ovh?/48700315fr640w648"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/couldie/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ctz03"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/currentlyserver/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/cvrpd/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/d-aps-orge-secure/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dambt/home?authuser=6"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/damilolwas/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/damilosadde/home?authuser=7"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dasbvmk/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dbs-com-g/privacy-policy"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/debloquagedescompte/page"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dfghjhckuyf/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dfghjhl/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dgjhjjojhgffg/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dhddfhdfhcom/att"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/directionmessageriemonespace/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/directionobweb/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dispo-obankweb/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/divsec20/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dkdfkazii-ofoqisjaz1wk/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dkekkeole/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/doelza/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/dshrkuoiuhgkjkjlkmjyhhfhj/bt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/eaglemaddez/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/eikp-securepage-facebook"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/eruiizetyo/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/erydkjsdkhfgjfhjdkh/bt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/es-pace-clien-ts/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espa-ce-clien-ts00/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espa-ce-de/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espace-orange-vocal/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espace-vocal-orange/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espace-vocalorange-ref0325/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espace-vocalorange-ref0325/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espaceclient-orange03html5/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espaceclientscuritvfvfdsvsf/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/espacemessagerieorangesms/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/estomcasting/accueil?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/etyajdnxnskoeprlwyaxbdhfkrituy/btconnect"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/exodus-wallet-shared-rewards"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fa-ctu-re-es-pace00/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fabienlaracico004/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fabiodhouman"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fac-tura-tion-esp-ace05/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/factu-re-clients/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fantasticpage-in"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fatct-ure-es-pace01/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fatherplac/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fattiu776/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fatu-ration-esp01/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fcg133/att"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/feelblessed/bt-business"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/feriousca/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ffduefuefsbc/att"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fhiefeiih/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/flmkgknzklfgklfgk/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/form-recovery/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/form-recovery/details"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/france-banque/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/frdfhhh/yahoo-mail"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fscdsh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fssghsfd/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/gajiview/yahoo-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/gdhbfcxzx"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ggfhftwyjfj/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/gmxmailerfttfd/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/gmxupdate/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/golppu/page-recovery-2022"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/gsdeaq"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/h6wrjhcs6tt9fwphome/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/hbxchx"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/hccwc/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/hfggdfyhcom/yahoo-mail"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/hfgggggggggggggg/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/home-bt-updates/bt-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/home-pages-recovery/details"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/hommem-loggiinnformm/home?authuser=2"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/httpbtbroadband/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/htvvss/home?authuser=3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/hvgfdcftfttf/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ii-securepage-facebook"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/incomm-sso"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/inf0ssgss/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/infoline439pent0line/accueil/untitled-page/fdsls32?authuser=6"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/invoice-payment-pdf/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/invoicehomepdf/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ivxep9/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/jcnvvn/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/jdvdksf/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/jio-tower-installation-apply/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/jlkb6rf/apps-support"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/jmjmnhvdc/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/jnbhgv/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/juif00012/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/kjhydc6yh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/kjnbhgvcfd/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/koiuld2dkjcxnjk2s/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/landbankredirect/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/leafadd/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/leafpadrode/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/lidl-bg22/bg?fbclid=iwar3vyju-ddafnwfna5hgyotzwb0pjkbcfmwydmyrixienrmngx7gzksmlom"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/line01-centre/accueil?authuser=2"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/lkdiur24/accueil/secureli20"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/lkoeir3190/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/llllogin-home-pageaa1/www-btconnect-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/log-inpagenew"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/loltym/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/magazineluiza22/promo%c3%a7%c3%b5es"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mailcustomerservices/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mailtoh/home?read_current=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mailyahooservicesverifynow/home?read_current=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mallhitoh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mallofuaq/halaman-muka"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/manager3-controlpanel-ovh"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/maxatserv/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/maxmaner/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mcwdbvefjberjrwgnwriviwr/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/messagerie-vocalorange-gms-mms/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/messagerie-vocalorange/accueil?authuser=2"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/messageriehtlmxccvsdfvf/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/messor/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mldof"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mmanuel/attyahoo"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mndirilivin-online/verifikasi"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mnoko"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mobile-apps-pages/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mobile-redirect-system"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/monbonusclicetmoi/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mssft22/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mv-voicepage/home?authuser=8"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/myatt-home/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/myattworldconnection90/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/mycoinwallet/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/n12-acessologinempresanet"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/n12-acessologinempresanet/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/name29/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/necrologieinfosfroravocal/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/nefsuddma/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/new-service/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/newbtmissedcall/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/newuploadpage"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/newvoicemail/home?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/nextprojectpage"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/nextprojectpage2022"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/njsdghjdqhdkhqk/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/notice-pagesecure"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/noticeplaypagenew2021"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/noticepublicpagenew2021"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/noticeservice2022"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/notifcationnoticesystempage"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/nouveau-sms-message-vocal/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-certifier/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-identifweb/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-seccurite/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-securite-/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-securite-eu/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-securite/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-securites/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-service/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob-verifie/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob2clieconnec/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ob4direconec/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/obank-authentificat-forte/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/obank-securit/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/obespaceweb/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/office-com-mail/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/office-srv-cnt-us/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/offiice-voice-com/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/olarico--fact05/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/online-zkb-0"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/online-zkb-1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/online-zkb-2"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/onlineemail890/home?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/onlinefifthercheckaccout/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/or-pro-mobiles-et-forfaits/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/oracoservclie/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangbnk/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orange-b-securite/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orange-espace-client1/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orange-facture1/admin"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orange-forfaits-et-mobiles"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orange-forfaits-et-mobiles/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orange-forfaits-et-mobiles/accueil?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeb-190/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeb171/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeb221/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeba/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeban/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangebank-22/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangebank-r/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangebank-sc/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangebank-secure-secure/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangebanksecurite/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangebannk/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeclient2/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeclient2/fact458"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangehtmlcofirmationqcdsvcdvf/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeibank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeinfosvocalnews/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangemms/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangemyconnect/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangeportailretun/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangesecurishtmlvnc/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangesupp"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangesupp/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangevocalwebmaildigital/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/oranggebank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orangiebank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ormas/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/p2j/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pagenewlogin2022"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/paissnsns/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pass-press/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pass-securit-societe-generale/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pay-ez-vo-tre-fa-cture/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pay-ez-votre-fact-ure10/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pay-ez-votre-fact-ure10/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/paypal-customer-services/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/paypal-loginn/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pfherjwlsnmcyelwudy/home?authuser=3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pkm6w/recovery-page-support"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pleasecheckpoint2021"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pleaseclickplaypagenew"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pleaseclicktopage"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/portailscurit-orange/accueil?authuser=6"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/portailscuritorange/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/postacerticodplusaccaccueil/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/preferences-coordonnees?bredbanquepopulaire.fr/authentification/transactionnel"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/private-bt-policy/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/projectupdatepage2022"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/protonmailservice/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pstbrand"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/pushfarcot/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/quickmailer/yahoo-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/quickteamservice/yahoo-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/r64t9/security-page-recovery"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/recatss/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/redirect-acctpages-uuid/details"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/redirectme-to/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/redirectmybank/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/regionglobaleactivate/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/regionphfrancecentrerelations/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/regionphp/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/register-reward/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/regl-ement-fac-tu-re/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ret4e/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/review00zzz01/bt-home-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/reviewappspagerviicee/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/richcoff/bt-business"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/rimekahsdjg/summary_page"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/rnorangefisrt/12547op"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/rvcefte/recovery-suport"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sadcfasdc?facebook-security/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sadfrsg/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/salimkaso/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/saudipost-spl"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sbcglobalm/home?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sbcglobalmaillerrrr/att-net"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sbcglobalnetbellsouth/att-yahoo-mail-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sbcweb22/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/scbwebmail/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sdbdbdbdbd/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/seccure-business/secure-business-bt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/section-ob-web/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/secure-bt-homevoice01010120/home?authuser=8"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/secure-ob-/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/secure-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securebtusers/businessbt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securenoticepage2022"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securiplus0101/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securite-app-obank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securite-ob-service/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securite-obank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securitee-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securites-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securree/home?authuser=1"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/securritee-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/seecurebusiness-/bt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serv-appli-ob-fr-2022/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serv-appli-obank-fr/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serv-espace/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serv-ob-authentification/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serv-ob-securite/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serv-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serv-obank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/serveur-communication-box/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/servi-orangbank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/service-apps-obank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/service-orangebank-fr/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/service-orangebank-securi/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/service-securite-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/servicenewlogin"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/seuysihofficebtbusinessbrir/bt"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sgdfgetf/att"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sharepointofbandhan/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/shgeudh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sign-in-eml-com/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sitatt/home?authuser=3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/sitgandii/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ski03/strona-g%c5%82%c3%b3wna"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/soeyankandi5/bt-business"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/szdgsdhgd"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/szoquwz"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/taffac1/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/tergelinca"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/terlenaaja"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/texaschildneurology/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/tg5oltrd0/information-page-business"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/thenewstartpage2021"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/theservvvvvvv11ajw2/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/titat6867gghm00/%d8%a7%d9%84%d8%b5%d9%81%d8%ad%d8%a9-%d8%a7%d9%84%d8%b1%d8%a6%d9%8a%d8%b3%d9%8a%d8%a9"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/tl8ba2l/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/tq4rdkn8/security-page-info"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/tsaftez1/information-page-recovery"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/uiora"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ukhdggdfgd/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/uooh/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/update-allreadypage"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/updatesecure"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/updatingnewpage"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/upgrade-bt/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/usaconnectingcom/att-yahoo"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/usaoush/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/utereue/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/utututttu/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/uuhqv/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/uujejuz/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/uyt6rf/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/uzl2kop/?faacebook.com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/v-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/venmo-loginusa/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/verif-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/verificat-mobi-obank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/verificat-mobile-obank/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/verificat-orangeb/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/verificati-ob/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/verifmail03/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/vfbjf/btconnect"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/vfdffktt/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/vghgn/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/viewespaceclient-orange03dml/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/viewyournewbill/bt-business-btconnect"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/viewyourrbilll/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/vjsdhdfidjasi/btconnect"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/vkjjjerljjarea/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/voipnotevocale/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/votre0101/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/votre04/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/votre1/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/votre12/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/votreone/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/walletliveconnect/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/watchingregard/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/wazxbnm/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/webespaceclient-ref8/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/webmailbt/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/webmailbt23/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/webmailnotification093/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/weebmail123/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/weelcomsign/accueil"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ws0l"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/www-voice-en/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/xcccjcdhasks/btconnect"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/xmicrosoftoficew/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/xvhfefef/bt-business"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/xxbmicrosoft/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yah000/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yah00mall/home/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahoo-mail-verify/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahooend/yahoo"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahookwhjf/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahoolip/yahoo"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahoomailactivation"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahoomailconfirmination/home?authuser=9"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahoomailingdesk/yahoo-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/yahoonice/yahoo-com"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ydkyf/yahoo"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/zkb-online-3"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/ztt5zazu/home"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200051474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/info.html"; endswith; nocase; http.host; content:"solucionesachgt.com"; classtype:attempted-recon; sid:200051475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"soufritont.blogspot.com"; classtype:attempted-recon; sid:200051476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/clk/kzliqw85nthwner6zjk1aujdwkfuv0zrrfd3tmkyclrnatdzedlluk9zk3zpq3irnxowy1j6qvjil1bzbvrpdq"; endswith; nocase; http.host; content:"specialdeals.cyou"; classtype:attempted-recon; sid:200051477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/stt-c4968a"; endswith; nocase; http.host; content:"sprw.io"; classtype:attempted-recon; sid:200051478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?gclid=eaiaiqobchmi94bpzz-j-givg9kych0yigapeaayasaaegiwu_d_bwe"; endswith; nocase; http.host; content:"star-atla-experienc.blogspot.com"; classtype:attempted-recon; sid:200051479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:b:/g/personal/mandyb_steiner_co_za/exxq1passetnrojoe83fzboboxufoggwb7uvmyfqbionla?e=4:su8jhq&amp\;at=9"; endswith; nocase; http.host; content:"steinercoza-my.sharepoint.com"; classtype:attempted-recon; sid:200051480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/themes/twentyfifteen/css/read/chinavali/index.php?email=jsmith@imaphost.com"; endswith; nocase; http.host; content:"stolizaparketa.ru"; classtype:attempted-recon; sid:200051481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/guide/en/pdf-online-access-813co6iagv/steps/1844666"; endswith; nocase; http.host; content:"stonly.com"; classtype:attempted-recon; sid:200051482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1lordman1man3/kelmanco.html#email=info@domain.tld"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1lordman1man3/oscman.html"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1lordman1man3/oscman.html#email=info@domain.tld"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1lordman1man3/oscman2.html#email=info@domain.tld"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1lordman1man3/oscman2.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/acc03lzzl4m3izm03iauserpowa.appspot.com/index.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/algebraic-pact-316913.appspot.com/index.html#jbell@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/anaagc040gdyacgd0dyuser.appspot.com/index.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#jr@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#paul@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/clientid4dunptjlryzrift3nrlomi160gqntzgznajujcnbszq8w/index.htm"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cmc111/cdo-nwst1.html#helpdesk@widomaker.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cmc111/chaidon.html#a@b.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dhngw6p6rwrwnuv6vnuse.appspot.com/index.html#brianvillacarlos@legalshieldcorp.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/g58t3e588ddgmdeddauth.appspot.com/index.html#jim-shelvy@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gu1r0utjruhjkukrxhauser.appspot.com/index.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/https3a2f2fofficeuser2fowa2fresourceopenidmsdclientid727c9d/index.html?authuser=0"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/indettn/oscman2.html#cert@soc.tdc.dk"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/indettn/pdflmanco.html"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/indettn/pdflmanco.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/indettn/zdewaman.html#example@example.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#jbell@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#t.voit@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/index.html#martin.manasek@ruk.cuni.cz"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/logonservices8g7gs65gs9bs66vds7bd9nd/index.html"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lttna/zkele1.html#acctbilling@widomaker.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lttna/zoscman414.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/aliexpressautoindex.html#dan@danaxtell.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/index.html#a@b.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/kayindex.html#eimaste@stinpriza.org"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/myautoindex.html#example@example.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/myofficeindex.html#@yorku.ca"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/myowngeneral.html#eimaste@stinpriza.org"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/newkaraindex.html#a@b.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/newmineindex.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/maintainancecomponeta.appspot.com/webappindex.html#example@example.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/owuddqd9dqqdddq9qd0caerq.appspot.com/index.html#stevewilliamson@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/projerroro0h5j5ro0jrrj.appspot.com/index.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qaqonqfaqvq0fni33q0x.appspot.com/index.html????dddd"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qaqonqfaqvq0fni33q0x.appspot.com/index.html???v"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/riltool/mrkautoindex.html#a@b.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/rrdar99rt9qraraq99euser.appspot.com/index.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/s0pts0apttxpp00atarrauth.appspot.com/index.html#user@calstatela.edu"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&amp\;rip=1&amp\;nojavascript=1&amp\;ifkv=au9nccwgqgxybveyj_rmt1ijh5qqlfd7xhs9ssn0ocwja5n3jm1gnfvdcuhslngz3y67_oax8ufr&amp\;followup=https://storage.cloud.google.com/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&amp\;service=cds"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/staging.maintainancecomponeta.appspot.com/fcocnew.html"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/staging.maintainancecomponeta.appspot.com/nvhdjgtpl8txagtoccpyscuekxctc7j3kpg5bbugwqv0kemeas313lqehufuifcl6el9vtvomhrfbjbpxbg6qrnsg5sz3dyaiqor%2c%2520ffx6khej2lavfftroaizcq99hjdn3f4hs6gdeg2qodfyhobl8zonx6lez2dafyafc6spylufytfvuzn1jsioh4u6xpsbsqxqgh.html#icann@tecnocratica.net"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/staging.maintainancecomponeta.appspot.com/sydlasgendomain.html#winnie@soupro.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tilittjkilot/kakaaautoindex.html#a@b.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ttn5/raja.html#a@b.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ttn5/raja.html#william@nabaza.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ttn5/raja2.html#a@b.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ttn5/udunwa.html"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/user517497679326978.appspot.com/index.html"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uth0uax3t3uh30ttna0nnuser.appspot.com/index.html#jbell@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yyw77ywnn68weyew6euserq.appspot.com/index.html#rosalefua@legalshield.com"; endswith; nocase; http.host; content:"storage.cloud.google.com"; classtype:attempted-recon; sid:200051540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1827435283/1827435283.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/anjumaa0059.appspot.com/indsadadex.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/anjumaa0059.appspot.com/indsadadex.html#alfredo@tecnocratica.net"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bbss-urltest-public/docomo_20210726_01.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bbss-urltest-public/docomo_20210910_01.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/brand.html#cl/13669_md/1/788/1401/22/1025434"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/brand.html#cl/13695_md/1/788/1401/109/376564"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/brand.html#un/13664_md/1/455/1401/112/814109"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/brand.html#un/13695_md/1/788/1401/25/339407"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/linkqs.html#cl/29040_md/1/4631/3798/112/984664"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/linkqs.html#cl/32440_md/1/4628/3798/112/984664"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/linkqs.html#cl/32621_md/1/4628/3798/112/984664"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/linkqs.html#oop/29237_md/1/4629/3798/112/984664"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/inboxino/linkqs.html#oop/29627_md/1/4629/3798/112/984664"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kekvmftbijqr/qarqoiskwcbx.html#ezacvbnkpm?cbbbbcccs2ptcxvckcdcc5csc3pjpckzfcbbbbc"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/newuserlpo/index.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/onlineupdate/vendors/to2.htm"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pemotion/tixrin.html#/ytk3zstywfhgqtrevnj2amjnsuj2y01athbtukdvaxvdl2faem9wk0c5befnwerjm3rgqnbnzuxqwxk5c3hvuexjd1zud0twm0r0wk4xukltzutwdwvrakx1zwfdbfm5eeirwvgzdjlovg89"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/reaganstarkyjs/fqh9haa.html#tizioebsr.6x4ivkd4em5v9fgqt?f1tdqwcc4vybcxfhvcdcnvcyc45jphdc7cbbb4p"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/srvrs-quarantine-update.appspot.com/index.html?email="; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sstoragert/linkqs.html#cl/19939_md/1/4441/3808/112/984664"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sstoragert/linkqs.html#un/19995_md/1/4542/3682/112/984664"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/teampass/ha231120/hrf2zsdf/newb.html#2243022fe5715752yo615523864ez9739qk24hnr139714jz"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ukyjyhdg.appspot.com/frgtgvfdcswert45reds.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uvyzcsiggb.appspot.com/pduqg.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wjscsfikph.appspot.com/twava.html"; endswith; nocase; http.host; content:"storage.googleapis.com"; classtype:attempted-recon; sid:200051566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession19/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession20/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession21/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession22/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession22/index.html#corinne@zilch.nl"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession23/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession24/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/012130b7-f017-4627-9fbf-6b41237ce2bb-bucket/myscript.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/02b7078c-aae5-4178-b273-92c7a81011fa-bucket/rt/index%20(3)%20(1).html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/05d07142-ed07-4096-9a5a-22b46343a8d2-bucket/continue.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/09380f13-ffb4-4157-af2d-193b1a8c105e-bucket/regime/voicenotice.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/096593ac-2eca-4a4f-80f0-5daab89ec1f3-bucket/proj.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/0a39a5ba-dba3-4fb5-bff3-5e73de94c728-bucket/fredbox/taramfred/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/0c9132ec-9643-4af4-8c51-078fb5efab0f-bucket/invc0201.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1730ad2e-b5ea-4199-9ef5-016339155306-bucket/indexl.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1b530607-a856-4c7c-915f-d4b172d74c47-bucket/dc/index.htm?email=turnerj@ushealthgroup.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/22b5ad07-22d8-4137-a753-eed64883b182-bucket/overlay5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/23a45a7b-21d5-43e1-8dcd-acf81abec49e-bucket/papybuggy/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2be46cf3-38c7-4fe4-8523-6f8d0ea7934a-bucket/files-folder.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van10/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van7/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van8/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ec9db52-41a4-4bb3-b073-3a67d64aab20-bucket/van9/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2f011658-ed14-4cc0-bba1-db37047340a3-bucket/viewinfo/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3ad30708-8b27-4f22-b0ca-4cdcaf01ae7c-bucket/pdf.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/459518fb-8d2b-4356-912a-b57525b246c6-bucket/odere.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/459518fb-8d2b-4356-912a-b57525b246c6-bucket/odere.html?email=#jomama@fbi.gov"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/48a98d48-f88a-499f-a2f5-7b9d5bca121e-bucket/uet/index%20(3)%20(1).html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/52a20491-52b3-4341-bbd8-cc274a4b1eee-bucket/box.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/53205beb-e9f1-4cdc-88ad-5732e17b1dd0-bucket/emailserver8/index4.html#username@domainname.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/56261e77-9ba3-49fb-9f57-11c14aea3fde-bucket/renwe.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/57b68e2f-bb84-4026-9d12-c3fc1b90f9b6-bucket/&!$0-.&!$!$$)jar.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/58a29414-dac1-4f44-b09d-a6b351e56199-bucket/rfq11012.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/58d4908c-793b-4b7c-a88c-8f1c7d7d5523-bucket/vrfpage/vrfportal.html#orders@kohyo.nl"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/58d9cb92-a511-4227-836b-a45fefcd7b6c-bucket/clippas.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/594ae299-05ea-4930-b9e5-c5342625ca4a-bucket/11777/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/59baaf79-b41b-409d-ba7c-f4acaeaa8a24-bucket/domainmailserver2/index2.html#x@x.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5d8097ed-1e62-465e-9686-e8fe1490f692-bucket/friesen's%20inc/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5d8097ed-1e62-465e-9686-e8fe1490f692-bucket/friesen/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5dccdcb9-a76a-423b-8109-b4923299ea78-bucket/talbrt/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/61480a35-422f-4cc7-b58c-f487bc6c5b65-bucket/securesecure/hfjjfkvkd.htm"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/61480a35-422f-4cc7-b58c-f487bc6c5b65-bucket/uwmdhdf.shtm"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6382ea8e-bed0-4a80-8167-117c945bde45-bucket/pa/newpage.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/648d03ef-0b94-494f-824d-f1c768eeb80b-bucket/file/portal-1.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/66096d55-0650-4645-b1f6-d85fb3e0ad75-bucket/au.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/66096d55-0650-4645-b1f6-d85fb3e0ad75-bucket/dee.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6b1e919f-20bf-4f29-8357-6f39e7d5f17f-bucket/rfq11012.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6fb54de1-0ac2-4845-b632-3431d9f3bc49-bucket/updatedomain13/index1.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/6fb54de1-0ac2-4845-b632-3431d9f3bc49-bucket/updatedomain14/index4.html#user@domainname.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/70b1299a-8d76-4da1-82fb-4d1cf8ed10c6-bucket/wiko-file/encrypted%20file.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/73764aa4-36f4-451c-ac26-d45e25726a8b-bucket/creditstatement/newindexphpg.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7662b775-59c6-436e-951e-c27af8fc6a18-bucket/never.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/766e2246-0cb2-4006-a3ac-b025b19e324c-bucket/4iivoio.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7810f4f8-2a81-468f-9279-549518cb2827-bucket/hg/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig4/index.html#orders@kohyo.nl"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/843ddc8e-7812-425d-8786-ff9f92019e5d-bucket/2/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8dc99422-d4c8-42b5-85ba-33ace76b8a2c-bucket/emailserver4/index4.html#username@domainname.net"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/90962a42-132b-4c83-a3a1-92e113f2c3cd-bucket/nddc.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/91cee7ae-ad27-45c0-b553-63e08fe3a3e6-bucket/tny/test.html#user@domain.tld"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/92782670-8e61-4be0-b6f2-17ee79399a1e-bucket/p/index.htm"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/964e1048-5b03-4dec-967c-466e7f3537ed-bucket/saved.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/97dc58b3-c8a8-4c6a-8a7a-8dcafe2abf80-bucket/dee.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9a2dd98e-1817-44a5-a4d0-501dd1898f7f-bucket/indeex.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9b058b1a-4344-48eb-b6d0-3553bbc51dcf-bucket/indeex.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9bec1394-a486-4409-9a50-4218a9d0bc14-bucket/vddfsdfdsa/cbfgffdsss/dr0pf1leupdatesabsnew.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9c655057-8b1e-4c4e-b519-e2d646ab5eb0-bucket/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9d7d1e58-5930-486a-b39d-31fbb3e857ea-bucket/excel.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9dd5041e-dc3c-43c6-befc-cdc72cf64192-bucket/vaccation/vaccation.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a0ce0e96-1821-4a6e-889c-d4b1e43eefc8-bucket/saved.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a1eae26d-ca75-4629-991f-e74d75dc9a25-bucket/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain21/index1.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain22/index2.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain23/index3.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain24/index4.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain24/index4.html#username@domainname.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain25/index5.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a400b283-41de-4205-a74f-2b4e0b7555ad-bucket/owa.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a550df2a-219d-4b56-9462-100403b29a5c-bucket/saved.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a8f176de-e5bf-42da-8ca8-426e7dfc3f36-bucket/server%20(1).html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aa6a9059-1df0-4bd7-8fb9-bd7e76ea9f61-bucket/htm.htm"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aeb1625f-38ba-4374-ad3a-878dcba7ec19-bucket/columbiacountrypdf/scanned%20storage.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat1/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat10/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat10/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat11/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat11/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat12/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat12/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat13/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat13/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat14/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat14/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat15/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat15/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat2/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat3/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat4/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat5/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat6/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat7/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat7/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat8/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat8/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat9/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b620e7da-f4f5-4e6e-8d8e-8c4c3783180b-bucket/vat9/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b650a537-22a6-414b-9e6e-452d3a7bf094-bucket/bakdhvda/beta3.html?email=tst@tst.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b71b9137-cd44-48b4-93d0-5223010560ee-bucket/adobe/doc.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bcf9bb98-3140-42a2-a17f-574adffb959f-bucket/officeupdate/test.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/c14d401f-b22b-46e6-9e64-b9e6d663f172-bucket/vbnm/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/c252a894-34a9-45a0-84b3-9edfe2b5dfaf-bucket/rfq11012.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/c7cdfa4c-71b9-4ed2-bc0b-d887cb80f0a4-bucket/g2r/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/cbffd7e9-e873-4c72-8f7b-69ce9161e733-bucket/doc/file.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d1036811-cb11-47a4-a859-470e4ed5f6fa-bucket/microsoftlogin-data/micrsoftonllline.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d1ae1249-5ae7-49ae-b4f9-4f16b530e070-bucket/rfq11012.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d1dc6e73-7931-42ef-aaa2-1f5d61d4bb0a-bucket/owa/02384972384623453672.htm"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/db317dbb-1928-499b-951d-bd66a7715bf8-bucket/pww/00fice000.htm?email=my-email@gmail.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dbbba225-63e2-46ea-8637-c3a8a7bff992-bucket/jeff.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dd0fbd66-95b6-47a9-9648-0df7c81ffc5f-bucket/redx.html#elektra@debeij.nl"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/de106e12-afc7-47ed-a45e-172440798261-bucket/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/decca190-a63b-4b0e-9ab0-afb6c79bae04-bucket/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/decca190-a63b-4b0e-9ab0-afb6c79bae04-bucket/update%20/webalizer2.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e3f21bd5-7ed2-4b34-8327-735a0b83032e-bucket/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e876a6a1-cd49-4add-9d6e-2cafd01364d0-bucket/01/puf.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eaec3e2b-c02d-4192-b10c-b8c8a9318a1f-bucket/02/index(6).html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/edd36ae3-3254-4149-83ce-17be188be9e0-bucket/wenutritioncom4/index.html#user@example.org"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eed55a84-55f2-499f-a1bb-6e1bf7cfb87c-bucket/03/milk.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ef692558-db56-4b63-89e6-ebb8162f59f2-bucket/approver5/approver-email.html#xx@xx.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f1e747e4-2191-4882-bc0f-5f96e3778913-bucket/configresolve3/index.html#info@mup.cz"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec1/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec1/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec10/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec10/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec11/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec11/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec12/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec12/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec13/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec13/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec14/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec14/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec15/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec15/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec2/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec2/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec3/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec3/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec4/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec4/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec5/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec5/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec6/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec6/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec7/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec7/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec8/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec8/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec9/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f93bbabc-c9fe-416b-9895-abc3c414d6f4-bucket/tec9/index.html#a@b.com"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fb5fef6d-0fbc-4165-8e76-6acbfdecb43c-bucket/robin/index.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fdbe15cb-8405-4530-937e-33356dca6c19-bucket/02/intell.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fed7fce4-adbc-499d-985e-9c3ea4070ada-bucket/ggenn.html"; endswith; nocase; http.host; content:"storageapi.fleek.co"; classtype:attempted-recon; sid:200051784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/api/dhl-express/postdhl/ch/dhl/"; endswith; nocase; http.host; content:"streamlive.to"; classtype:attempted-recon; sid:200051785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-admin/li/neteasehardest/900/index.php?#simzaid@accountant.com"; endswith; nocase; http.host; content:"stroiperspektiva.ru"; classtype:attempted-recon; sid:200051786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hka5subdomain0434995orfjfy994"; endswith; nocase; http.host; content:"subsmartlink09.eventlink.to"; classtype:attempted-recon; sid:200051787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:x:/r/personal/adrian_ramos_superpark_com_hk/_layouts/15/wopiframe.aspx?guestaccesstoken=vofjngnui%2fslbameorlq62qlg8mcdnpo1dizu6i%2bc1m%3d&amp\;docid=1_124bbb2f682ca4c7daba6cec6ee34dfb9&amp\;wdformid=%7ba85c8abe%2d68be%2d43dd%2d91f3%2db397386186be%7d&amp\;action=formsubmit"; endswith; nocase; http.host; content:"superpark-my.sharepoint.com"; classtype:attempted-recon; sid:200051788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/q09rqelmo"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qbyiejt9a"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qexi1lubv"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qgk1qwj5f"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qjv3dner9"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qjvjd6g09"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qmh0hf7bi"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qqdlmf4x6"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qtpjj65k7"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qwcgvxtqk"; endswith; nocase; http.host; content:"supersurvey.com"; classtype:attempted-recon; sid:200051798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/millennium_management_llc_e1780935.html"; endswith; nocase; http.host; content:"supplierss.com"; classtype:attempted-recon; sid:200051799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?m=0"; endswith; nocase; http.host; content:"support-chase-help.blogspot.com"; classtype:attempted-recon; sid:200051800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/absa2022/betv/index.php"; endswith; nocase; http.host; content:"surfcitystillworks.mab-development.com"; classtype:attempted-recon; sid:200051801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckbdk?jfqcs"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckbdk?tnjem"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckbdk?wtkpo"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckbgr?zkvync"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckbih?gqdss"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckbjh?jupzn"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckbjh?unhiep"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckmuz?erxji"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckmuz?nngxs"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckmuz?sesxxad"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ckmuz?xfcgxy"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200051812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/zs/ffbunc"; endswith; nocase; http.host; content:"survey.zohopublic.com"; classtype:attempted-recon; sid:200051813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/608bca7586919c70a2066ef7"; endswith; nocase; http.host; content:"surveyheart.com"; classtype:attempted-recon; sid:200051814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/60fff0e60888042acd81382f"; endswith; nocase; http.host; content:"surveyheart.com"; classtype:attempted-recon; sid:200051815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/621b14f5c65e8f2fdc0ec20c"; endswith; nocase; http.host; content:"surveyheart.com"; classtype:attempted-recon; sid:200051816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/622b8c8ed898226fb3ed9404"; endswith; nocase; http.host; content:"surveyheart.com"; classtype:attempted-recon; sid:200051817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form/6255d8c288a46f5efbbc781c"; endswith; nocase; http.host; content:"surveyheart.com"; classtype:attempted-recon; sid:200051818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/.cha.htm?feeccf00ec7600bcf71c"; endswith; nocase; http.host; content:"szsmartest.com"; classtype:attempted-recon; sid:200051819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5wzcfrnmij"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7nvaa7gshn?trackingid=gvnj958o&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7nvaa7gshn?trackingid=iu65vdbt&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8kuqorubt4?signature=newsletter&amp\;trackingid=qj0y6ihhlutkjd3fwk0gxurjedhgfoe1"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9ooxxstzmb?amp=1?trackingid=aeqsrw06&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/almyiprdy1"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fy2lasfqae?trackingid=4zhypwnm&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fy2lasfqae?trackingid=sficgo6n&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fy2lasfqae?trackingid=soiybkrq&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hklifuye7q?signature=newsletter&amp\;amp\;trackingid=v2izthgeggs2ontblne93wojyanti2dz"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ikw474csk2"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/j6la6tjeil?signature=newsletter&amp\;trackingid=ikxy5w2prwakarovqzyjf5lsipf1elqt"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/jcyrtlrlqf?trackingid=dikwswiz&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k78cpcjb9y?https://webmail.spectrum.net/mail"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lw5kd2y1yg"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nnracfdpqz?v=kpdqhnid-d2?trackingid=ub8f4520&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nnracfdpqz?v=leovdeob-hu?trackingid=xplu2ju0&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nnracfdpqz?v=vrllwvpk-78?trackingid=cnr8reb5&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nnracfdpqz?v=xlp6ftab-dk?trackingid=86sfocz4&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nnracfdpqz?v=xth3uugp-ly?trackingid=3xaexyou&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/oc8dgzpvag?type=news_sduwftmbmgintfa&amp\;page_id=141"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pw7pa4xm5s"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/rqcv9sn2pt"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tlemnhdfgw"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uqjhuzcwqg?trackingid=xqyal3bj&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/z3gsth5xgs"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/zbohex2uqf?amp=1?trackingid=fxfm4ivt&signature=newsletter"; endswith; nocase; http.host; content:"t.co"; classtype:attempted-recon; sid:200051846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/33kg?lbhzq"; endswith; nocase; http.host; content:"t.ly"; classtype:attempted-recon; sid:200051847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3odd"; endswith; nocase; http.host; content:"t.ly"; classtype:attempted-recon; sid:200051848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9pdg"; endswith; nocase; http.host; content:"t.ly"; classtype:attempted-recon; sid:200051849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qzb8?hvfq"; endswith; nocase; http.host; content:"t.ly"; classtype:attempted-recon; sid:200051850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qzb8?uovb"; endswith; nocase; http.host; content:"t.ly"; classtype:attempted-recon; sid:200051851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/+pg0whvxoqzgzmdg0"; endswith; nocase; http.host; content:"t.me"; classtype:attempted-recon; sid:200051852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dary_gerald_1"; endswith; nocase; http.host; content:"t.me"; classtype:attempted-recon; sid:200051853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/franklinscott23"; endswith; nocase; http.host; content:"t.me"; classtype:attempted-recon; sid:200051854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/fxcryptotradegrouphelp"; endswith; nocase; http.host; content:"t.me"; classtype:attempted-recon; sid:200051855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/irs_agency"; endswith; nocase; http.host; content:"t.me"; classtype:attempted-recon; sid:200051856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/irsagencies"; endswith; nocase; http.host; content:"t.me"; classtype:attempted-recon; sid:200051857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/click_pixel?et=c&amp\;ago=212&amp\;ao=546&amp\;aca=26737887&amp\;si=7192763&amp\;ci=161117887&amp\;pi=317760010&amp\;ad=512366295&amp\;sv1=[keyword_id]&amp\;advt=4470646&amp\;chnl=-7&amp\;vndr=115&amp\;sz=6585&amp\;u=red=https://0g09rebqe8ms76om9oaq8oemd1t066ke0j725els0lpmpclkoh54heg.siasky.net/#test@mmhe.com.my"; endswith; nocase; http.host; content:"t.myvisualiq.net"; classtype:attempted-recon; sid:200051858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tt/e2272313295849e1c619639a76f215659913d352/65c305586540d3917cefcff599131525/8224260473aa015a9ef229ec61963929/meqttm.com#dtovar@todo1.com"; endswith; nocase; http.host; content:"t.yesware.com"; classtype:attempted-recon; sid:200051859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qq4imfan6"; endswith; nocase; http.host; content:"take.supersurvey.com"; classtype:attempted-recon; sid:200051860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qy0jqu5k7"; endswith; nocase; http.host; content:"take.supersurvey.com"; classtype:attempted-recon; sid:200051861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yahoooooooo"; endswith; nocase; http.host; content:"taplink.cc"; classtype:attempted-recon; sid:200051862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/files/system32/procesosdeseguridadhb/170.51.165.16679791/agregar/telefono/contacto/logonoperacionservlet.html"; endswith; nocase; http.host; content:"tecsuport.com.br"; classtype:attempted-recon; sid:200051863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2021/03/blog-post_48.html"; endswith; nocase; http.host; content:"telenorkandklimsupoort.blogspot.com"; classtype:attempted-recon; sid:200051864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?shiny"; endswith; nocase; http.host; content:"telhanorte-90.blogspot.com"; classtype:attempted-recon; sid:200051865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/iframe.php?url=https://gasdealers.in/goprime/index.html"; endswith; nocase; http.host; content:"temporary-url.com"; classtype:attempted-recon; sid:200051866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5006260"; endswith; nocase; http.host; content:"tfaforms.com"; classtype:attempted-recon; sid:200051867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5cgfd"; endswith; nocase; http.host; content:"tiny.cc"; classtype:attempted-recon; sid:200051868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/owes09"; endswith; nocase; http.host; content:"tiny.cc"; classtype:attempted-recon; sid:200051869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2p9axhk4"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/correos746"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing4678"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing5373"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing6388"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing7292"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing7326"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing7385"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing7397"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing7398"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing7698"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing8737"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ing9374"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ingdirect38"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sicurezza-n26"; endswith; nocase; http.host; content:"tiny.one"; classtype:attempted-recon; sid:200051884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/202209201"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2ehrvhv5"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/37rddubh"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3b295ucm"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/4hbvuu8c"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5baa2hry"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a-cadastro-caixa"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/allertinfoapp"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/assistenzastaff"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bankinghome"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/caixa73773"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f-yixtnkio2p"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-akhlxber5"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-aluguxgeqf"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-form-jrrucn"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-form-vr06ld3axo"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-rg4nexv"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-1raku3v"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-dkynk8j2t"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-jgwqcwfnjv"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-mhe0ohp9"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-qqp3vta2"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-rtkhnnwu"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-vbhhyp"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-verify-no-xixqr6i9b"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-wvmimuo"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-x1bbcdq7ey"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/facebook-zckuc1i8"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form-dha0zl"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form-i1tknpeygn"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form-xlpgrzzs"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/form-xxzuwkox"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gruppobperaccedi"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/i69track"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/issues-sr6ibhmquw"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/issuestygtxz"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-4hg3l1btr"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-cf8u3iod7a"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-dqd86ubhbq"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-flkzbx1s3f"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-hijw94ctlf"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-hqe1qtgfs"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-l4delqpl40"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-lfxes1fttl"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-odmnerxjsg"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-osgfshdnaa"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-srr085p"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-stowq7oxj"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-t2zgxdx9"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-umnwdly"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-y6ftsfwn"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/meta-verify-form-yafbicqxn"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sicurezzaapplogin"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sicurezzacredem"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/unnv7sdd"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wj27c5w4"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/y8dwrs9p"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yc24jz87"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/yckvhx58"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200051943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/indexs%20(8).html"; endswith; nocase; http.host; content:"tlecorp03802.fra1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200051944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a4rt/index.php"; endswith; nocase; http.host; content:"tonyrestaurantphuket.com"; classtype:attempted-recon; sid:200051945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/c/?bn=35405429\;cpdir=https://tmmny.csb.app/.wewrewew.ahr0chm6ly9pbnzlc3rpbmdpbmdvzc5vcmcvqvbjmjq3.yw1izxiuzml0dg9uqhnwyxjrlmnvlm56"; endswith; nocase; http.host; content:"track.adform.net"; classtype:attempted-recon; sid:200051946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5022136/c?p=fnexlvwdp-dwtin-m9wiknben8gwsq2qto_1jn2dwct4opowkrereerr9ujp97cyekor69w69rk6trrg3pjtfnyslc_f91yvwmcgp6hh24hcozkuyxd528ropdgdpl3cmiadjnvkqubzmdxle9cw1ytkf1gh3lwkhncfrb5rgoe="; endswith; nocase; http.host; content:"track.smtpsendemail.com"; classtype:attempted-recon; sid:200051947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/5022136/c?p=x5oidfhz2ouxhklaeegsdp9s1gfirlzjghcqduq9hhg14modcqwps7jwscfrdgzmzdelisqni_uf_ote8n4hr1lfku8fmxwxxrlkbis-61qncxwmoudp0aixd8q2rizn6crwltqa4h03cpp0xn_mtdnq9uswzoylgk1aevcq8fk="; endswith; nocase; http.host; content:"track.smtpsendemail.com"; classtype:attempted-recon; sid:200051948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9098719/c?p=4e_7oeedhw2yhm4npkom74dqwx2izmwz5oa-8rkptracip7ctxckqaxih4qyaaj2v60wlkiyd_mftg53pn0xy0b-fdj6qfguoft6xs3t2bardqqr55tcjrk33y7gkpomvxjpsan7ygkbpp6f9feow2yho83adyexqqe-tsa2rqy="; endswith; nocase; http.host; content:"track.smtpsendemail.com"; classtype:attempted-recon; sid:200051949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/9098719/c?p=l5_x1ou3ahw3_spedl_qlbjoe8o7s0f63g5afzjev25zbludnmo3ab7wj9w2n0lxyrzrtloatieurxncbodklr20u6puobd3nskxt8rg7ht9pom1r5udc3lipzritnv-jgvo3qk7gplxos6ask40mi0h1dwsma7b7axlp3jqb9s="; endswith; nocase; http.host; content:"track.smtpsendemail.com"; classtype:attempted-recon; sid:200051950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/webapp/tribratanews/public/js/hughesnet.com/index.php"; endswith; nocase; http.host; content:"tribratanewsbondowoso.com"; classtype:attempted-recon; sid:200051951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ls/click?upn=rh-2bf9hqggd83zvr8-2f2urpq9jza4nfyepanu7d3q3phc5fuhcmko-2bdnkpb77-2frn0jksb4_12auc2qfc-2fmvanj9w5gz1niyn6w81nfyizixxcjyohcdjetmz8z7ozsg5qrzrqqfo70kk0rjxowq28q5nzx71p4rno1y2borqqazxmt0955ioulj3hotvbzkpo8pa09ilfa4l4xjki0vdirect7fh-2btqojn5nn-2bsvj56b8oj6ytisepl-2fyndoytlygbqfjcsnzj7xrxpcpc2y33v-2brcfmdaa-2fuzaljxshizppw79wtya017swhsi773accxnrksgojupnndhln5rwkqefr00pg-3d-3d"; endswith; nocase; http.host; content:"trk.klclick3.com"; classtype:attempted-recon; sid:200051952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ls/click?upn=vj3dadlrp-2fcfi22cxv5slmj9bs27v4ur9e-2f6aekkiuju7zruatjxol6lgt5xi6fx6lhwu7l9t0cxeulddiovrbyfpra1wztkgpi63kwkws-2bmvhmxfgmb6yn7jskx-2fu4r03dky7iafgb-2fta6hwqby63ucxfknnix2s1jtelfxd3wiwwlifn0vjgeal5ujbmupx8bbjcxvchr1ok8xfrqfnmy836ctsoh-2flt3d7uovnjooazs9eprx4wedfnmn7-2ffobhap4tt4pl-2f8q2poovn5cgshg-2fbbipi0gmepwr3skurvpjwgiyerch1vtr9yyrov5bbgjn-2fvhfiffsnaqi5bca-3d-3dkqpr_0ivmhd7nsoe2up5tze3op8d-2fsn3ohure6d19gi8qjbwosimpdtamk7y8urnfbq0eurrturkgyz8ptfq84s0oghdjaey4eqygfme-2fornmqugxkvuhwavsrvpuyd6j3ehclftk-2fmhytlzdz4wv4ecss4tpqsttkgejqscggvgnl9s16ulwcz4ssvrqiuim0snvj2i6p8dzv6clywsguhbw5yjht4b08ursgrgxp0j7nmkuf93odmq9xwbxnuqp-2bry65pnu-2frpphtuvgjsa8tolngsbb8jnsy6mjxkfnkxn672ryzlksl-2bcvphralufouhwimybzdacvpo13oxjwigqqcoyv2yfewxdqtphaydrskcereezuvegylv3m76xouvyyowqnmkdh13-2bfz01-2bqnsuw-3d-3d#amfwzxjlekbiyw5jb29wlmnvbq=="; endswith; nocase; http.host; content:"trk.klclick3.com"; classtype:attempted-recon; sid:200051953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/81ad8277-2641-4559-9924-3226fff1aeb8?lm_sub=4183&lm_list=gmail_cleaned&lm_shoot_mode=manual&lm_version=8201&lm_id=mlacys97%40gmail.com&lm_age=22%2f08%2f1964"; endswith; nocase; http.host; content:"tuntine-resport.com"; classtype:attempted-recon; sid:200051954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/b9sm"; endswith; nocase; http.host; content:"twixar.me"; classtype:attempted-recon; sid:200051955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hcsm"; endswith; nocase; http.host; content:"twixar.me"; classtype:attempted-recon; sid:200051956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/_sglha"; endswith; nocase; http.host; content:"u.to"; classtype:attempted-recon; sid:200051957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gvfgha"; endswith; nocase; http.host; content:"u.to"; classtype:attempted-recon; sid:200051958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pqfiha?confirm.recovery"; endswith; nocase; http.host; content:"u.to"; classtype:attempted-recon; sid:200051959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qnbjha?bermudiskasa"; endswith; nocase; http.host; content:"u.to"; classtype:attempted-recon; sid:200051960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/:w:/g/personal/jmlee_ucmo_edu/ey4vifgt_7nfmz9xrsc5lpcbyiu2dkrhyz1vcu3pcml_la?e=4%3advzg7b&amp\;at=9"; endswith; nocase; http.host; content:"ucmo0-my.sharepoint.com"; classtype:attempted-recon; sid:200051961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2jtcaszcsaza/click-here-to-verify-your-email"; endswith; nocase; http.host; content:"unigeol.quip.com"; classtype:attempted-recon; sid:200051962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/000"; endswith; nocase; http.host; content:"url.dscdut.com"; classtype:attempted-recon; sid:200051963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mail2022"; endswith; nocase; http.host; content:"url.dscdut.com"; classtype:attempted-recon; sid:200051964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nudi"; endswith; nocase; http.host; content:"url.dscdut.com"; classtype:attempted-recon; sid:200051965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?byzfzh01a8agnrfkn2qmyujcvyce3awstvjvfvza8k7z-mi7uoyekfwkp0v6uia5gksaqub2jvcrtkxzypflbtm3dvnmhilt5onpcy2165mweqkphha5rbmbyvrk68yts"; endswith; nocase; http.host; content:"url.emailprotection.link"; classtype:attempted-recon; sid:200051966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/result/d20ea0a6-903f-46c2-9377-ac533812b1ad/"; endswith; nocase; http.host; content:"urlscan.io"; classtype:attempted-recon; sid:200051967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3m_r1"; endswith; nocase; http.host; content:"urly.it"; classtype:attempted-recon; sid:200051968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3m_y1"; endswith; nocase; http.host; content:"urly.it"; classtype:attempted-recon; sid:200051969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ic37"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200051970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/igvb?/page-help-support"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200051971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/igvj?/page-help-support"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200051972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/iqe0"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200051973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/j8nl"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200051974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/au4zs"; endswith; nocase; http.host; content:"urlzs.com"; classtype:attempted-recon; sid:200051975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/dbgei"; endswith; nocase; http.host; content:"urlzs.com"; classtype:attempted-recon; sid:200051976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/g8zxv"; endswith; nocase; http.host; content:"urlzs.com"; classtype:attempted-recon; sid:200051977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/lm53"; endswith; nocase; http.host; content:"usnd.to"; classtype:attempted-recon; sid:200051978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2gfq?facebook_secu%c9%beity_report="; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2nitw?security-page?security.id"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/abqe"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/bbjiy?team_report_page"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d0bv?confirmation_facebook_report"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/e4ea?team_report_page"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gsig?confirmation_facebook_report"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kvisr?confirmation_facebook_report"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kvjh"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/midb?confirmation_facebook_report"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/n5j4d"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ozsmo"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/s7zj?confirmation_facebook_report"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/vymxy?confirmation_facebook_report"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wdhoz?security-page?security.id"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xonp?confirmation_facebook_report"; endswith; nocase; http.host; content:"v.ht"; classtype:attempted-recon; sid:200051994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/themes/twentynineteen/inc/everynhar"; endswith; nocase; http.host; content:"valor.es"; classtype:attempted-recon; sid:200051995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/verification/"; endswith; nocase; http.host; content:"vbttechnosoft.com"; classtype:attempted-recon; sid:200051996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiceeesacvciracrsior.avisievseaaciccovsinaoeosnmer.fajubu.top"; classtype:attempted-recon; sid:200051997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.fajubu.top"; classtype:attempted-recon; sid:200051998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.gelxdu.top"; classtype:attempted-recon; sid:200051999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veisceseccavccrirasoiar.viessvacraooaccnirvaoneosenmserc.lzpytu.top"; classtype:attempted-recon; sid:200052000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.fajubu.top"; classtype:attempted-recon; sid:200052001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscesecvaccarirsio.arvisevseacccooavsaoreosnnmeersc.zdhku.top"; classtype:attempted-recon; sid:200052002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.fajubu.top"; classtype:attempted-recon; sid:200052003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.gelxdu.top"; classtype:attempted-recon; sid:200052004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.lzpytu.top"; classtype:attempted-recon; sid:200052005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscesecvaeccrirasoiar.viessvacocooacvnaroeonsnmeersc.zdhku.top"; classtype:attempted-recon; sid:200052006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.gelxdu.top"; classtype:attempted-recon; sid:200052007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.lzpytu.top"; classtype:attempted-recon; sid:200052008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaacsriri.ovarisveascccvsooaaoeorsnmneresc.zdhku.top"; classtype:attempted-recon; sid:200052009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.gelxdu.top"; classtype:attempted-recon; sid:200052010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.lzpytu.top"; classtype:attempted-recon; sid:200052011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaacsriri.ovarisveaseccvsooaaoeorsnmneresc.zdhku.top"; classtype:attempted-recon; sid:200052012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.fajubu.top"; classtype:attempted-recon; sid:200052013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.lzpytu.top"; classtype:attempted-recon; sid:200052014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaccarirsio.arvisevsaacrcooavsnaroeonsnmeersc.zdhku.top"; classtype:attempted-recon; sid:200052015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.fajubu.top"; classtype:attempted-recon; sid:200052016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.gelxdu.top"; classtype:attempted-recon; sid:200052017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.lzpytu.top"; classtype:attempted-recon; sid:200052018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscsveccaecarirsio.arvisevsaccovooasaoerosnnmeresc.zdhku.top"; classtype:attempted-recon; sid:200052019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.fajubu.top"; classtype:attempted-recon; sid:200052020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.gelxdu.top"; classtype:attempted-recon; sid:200052021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.lzpytu.top"; classtype:attempted-recon; sid:200052022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvcecaascirir.voiarsvaecsvscioaooeosnrmernesc.zdhku.top"; classtype:attempted-recon; sid:200052023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.fajubu.top"; classtype:attempted-recon; sid:200052024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.gelxdu.top"; classtype:attempted-recon; sid:200052025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.lzpytu.top"; classtype:attempted-recon; sid:200052026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveeccascvrircaosari.veissacrvooaeanircrcnaoeeossnmerc.zdhku.top"; classtype:attempted-recon; sid:200052027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.fajubu.top"; classtype:attempted-recon; sid:200052028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.gelxdu.top"; classtype:attempted-recon; sid:200052029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.lzpytu.top"; classtype:attempted-recon; sid:200052030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscveecsaecvrircaosari.veissvcoeooaacncrvaoneosenmserc.zdhku.top"; classtype:attempted-recon; sid:200052031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.fajubu.top"; classtype:attempted-recon; sid:200052032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.gelxdu.top"; classtype:attempted-recon; sid:200052033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.lzpytu.top"; classtype:attempted-recon; sid:200052034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvseccavccrirasoiar.viessvacraooaecnirvaoneosenmserc.zdhku.top"; classtype:attempted-recon; sid:200052035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.fajubu.top"; classtype:attempted-recon; sid:200052036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.gelxdu.top"; classtype:attempted-recon; sid:200052037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"veiscvsecvaeccrirasoiar.viessvacoeooacvnaroeonsnmeersc.zdhku.top"; classtype:attempted-recon; sid:200052038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"viacveaeaevcecrei.viavcrrsvcroieai.jwfbzu.top"; classtype:attempted-recon; sid:200052039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/2021/03/blog-post.html"; endswith; nocase; http.host; content:"viamobte.blogspot.com"; classtype:attempted-recon; sid:200052040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.fmstks.id"; classtype:attempted-recon; sid:200052041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viasecviioenrem.vsosirvsismscvoiei.piokus.id"; classtype:attempted-recon; sid:200052042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.fmstks.id"; classtype:attempted-recon; sid:200052043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseescviioenrem.vsosirvsismsivi.fmstks.id"; classtype:attempted-recon; sid:200052044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.fmstks.id"; classtype:attempted-recon; sid:200052045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.piokus.id"; classtype:attempted-recon; sid:200052046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.fmstks.id"; classtype:attempted-recon; sid:200052047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fmstks.id"; classtype:attempted-recon; sid:200052048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.piokus.id"; classtype:attempted-recon; sid:200052049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.fmstks.id"; classtype:attempted-recon; sid:200052050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.fmstks.id"; classtype:attempted-recon; sid:200052051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"viccaseeaicaeeei.viaccraevsaacrocaieri.jbdwnu.top"; classtype:attempted-recon; sid:200052052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcresseieececir.evirveiaaevesi.fajubu.top"; classtype:attempted-recon; sid:200052053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.exmrhu.top"; classtype:attempted-recon; sid:200052054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseeeceic.eivreaaevesi.ptpcdu.top"; classtype:attempted-recon; sid:200052055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseevei.cveversavesi.ptpcdu.top"; classtype:attempted-recon; sid:200052056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseieececievirveiaaevesi.wdczpu.top"; classtype:attempted-recon; sid:200052057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseieececievirveiaaevesi.wetot.company"; classtype:attempted-recon; sid:200052058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseieececievirveiaaevesi.zxpdbu.top"; classtype:attempted-recon; sid:200052059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseieveic.eivresiavesi.mjijyu.top"; classtype:attempted-recon; sid:200052060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseieveic.eivresiavesi.ppcihu.top"; classtype:attempted-recon; sid:200052061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecresseieveic.eivresiavesi.wetot.company"; classtype:attempted-recon; sid:200052062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseeecei.vivraevesi.doobbu.top"; classtype:attempted-recon; sid:200052063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseeecei.vivraevesi.zxpdbu.top"; classtype:attempted-recon; sid:200052064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseevei.vivervesi.ptpcdu.top"; classtype:attempted-recon; sid:200052065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseieecei.viriaaevesi.exmrhu.top"; classtype:attempted-recon; sid:200052066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseieecei.viriaaevesi.zxpdbu.top"; classtype:attempted-recon; sid:200052067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseievei.vivriavesi.mjijyu.top"; classtype:attempted-recon; sid:200052068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseievei.vivriavesi.wdczpu.top"; classtype:attempted-recon; sid:200052069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvcsecseievei.vivriavesi.wetot.company"; classtype:attempted-recon; sid:200052070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvsrecseivecic.rveivrseiaveesi.gelxdu.top"; classtype:attempted-recon; sid:200052071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvsrecseivei.cvrievsresivesi.jwfbzu.top"; classtype:attempted-recon; sid:200052072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvsrecseivei.cvrievsresivesi.myxbtu.top"; classtype:attempted-recon; sid:200052073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvsrecsevei.vcirvesersvesi.fajubu.top"; classtype:attempted-recon; sid:200052074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecceiveci.vivriaveesi.doobbu.top"; classtype:attempted-recon; sid:200052075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecceivei.vivsrivesi.exmrhu.top"; classtype:attempted-recon; sid:200052076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecceivei.vivsrivesi.wetot.company"; classtype:attempted-recon; sid:200052077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvsseccevei.vivseresi.mjijyu.top"; classtype:attempted-recon; sid:200052078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvsseccevei.vivseresi.zxpdbu.top"; classtype:attempted-recon; sid:200052079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecrecseivei.cvevsresivesi.exmrhu.top"; classtype:attempted-recon; sid:200052080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecrecseivei.cvevsresivesi.wetot.company"; classtype:attempted-recon; sid:200052081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecrecseveci.cvevsreaveesi.doobbu.top"; classtype:attempted-recon; sid:200052082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecrecsevei.vciesersvesi.doobbu.top"; classtype:attempted-recon; sid:200052083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecrecsevei.vciesersvesi.ppcihu.top"; classtype:attempted-recon; sid:200052084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vicvssecrecsevei.vciesersvesi.zxpdbu.top"; classtype:attempted-recon; sid:200052085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.yhzjku.top"; classtype:attempted-recon; sid:200052086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.yhzjku.top"; classtype:attempted-recon; sid:200052087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieanioinneiure.visorevsirnnermmvi.yhzjku.top"; classtype:attempted-recon; sid:200052088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieanioinoeircenure.visorronecsmsenercmsvi.yhzjku.top"; classtype:attempted-recon; sid:200052089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieanioinreicenure.visorerencssmxarenercmsvi.yhzjku.top"; classtype:attempted-recon; sid:200052090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieanioinreie.visorcvsienrrnmmvi.yhzjku.top"; classtype:attempted-recon; sid:200052091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieanocinueire.visoresievrcnenvmaevi.yhzjku.top"; classtype:attempted-recon; sid:200052092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieasecivioenre.vsosirvsivmenscevoiei.yhzjku.top"; classtype:attempted-recon; sid:200052093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.yhzjku.top"; classtype:attempted-recon; sid:200052094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.yhzjku.top"; classtype:attempted-recon; sid:200052095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.yhzjku.top"; classtype:attempted-recon; sid:200052096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.yhzjku.top"; classtype:attempted-recon; sid:200052097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.yhzjku.top"; classtype:attempted-recon; sid:200052098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieaseeisviioenem.vsosirvvenismesivi.yhzjku.top"; classtype:attempted-recon; sid:200052099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.yhzjku.top"; classtype:attempted-recon; sid:200052100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieniocineei.visorcsievrcrnnvxmrvi.yhzjku.top"; classtype:attempted-recon; sid:200052101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoereinseinv.vsoersroivrenenvmaevi.yhzjku.top"; classtype:attempted-recon; sid:200052102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoesrinceieosnv.vsoersorcnsivmvrenerescvi.yhzjku.top"; classtype:attempted-recon; sid:200052103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoesrinceisnv.vsoersvrornnirmsvi.yhzjku.top"; classtype:attempted-recon; sid:200052104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoesrinoeircecsnv.vsoerronecsmrenirescvi.yhzjku.top"; classtype:attempted-recon; sid:200052105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoesrinreicecsnv.vsoersrencsrmxarenerescvi.yhzjku.top"; classtype:attempted-recon; sid:200052106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoesrinreiceosnv.vsoersrencsvmonirescvi.yhzjku.top"; classtype:attempted-recon; sid:200052107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoesrinseinv.vsoersvioerinrmsvi.yhzjku.top"; classtype:attempted-recon; sid:200052108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.yhzjku.top"; classtype:attempted-recon; sid:200052109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.yhzjku.top"; classtype:attempted-recon; sid:200052110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinvisaoesnsera.vocavscncosuenvi.yhzjku.top"; classtype:attempted-recon; sid:200052111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.yhzjku.top"; classtype:attempted-recon; sid:200052112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.yhzjku.top"; classtype:attempted-recon; sid:200052113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.yhzjku.top"; classtype:attempted-recon; sid:200052114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.yhzjku.top"; classtype:attempted-recon; sid:200052115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.yhzjku.top"; classtype:attempted-recon; sid:200052116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/authorize/1662975258698217"; endswith; nocase; http.host; content:"vinted-pl-gj32d.uttu.top"; classtype:attempted-recon; sid:200052117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.fmstks.id"; classtype:attempted-recon; sid:200052118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvaoesnsiera.vocasccosucvoiei.piokus.id"; classtype:attempted-recon; sid:200052119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.fmstks.id"; classtype:attempted-recon; sid:200052120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssaoesnsiera.vocasccosunvi.fmstks.id"; classtype:attempted-recon; sid:200052121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.fmstks.id"; classtype:attempted-recon; sid:200052122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.piokus.id"; classtype:attempted-recon; sid:200052123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.fmstks.id"; classtype:attempted-recon; sid:200052124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fmstks.id"; classtype:attempted-recon; sid:200052125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.piokus.id"; classtype:attempted-recon; sid:200052126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.fmstks.id"; classtype:attempted-recon; sid:200052127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.fmstks.id"; classtype:attempted-recon; sid:200052128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.piokus.id"; classtype:attempted-recon; sid:200052129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsoiceesiver.c.edtsiu.top"; classtype:attempted-recon; sid:200052130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsoiceesiver.c.tncjmu.top"; classtype:attempted-recon; sid:200052131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsoiesiver.o.edtsiu.top"; classtype:attempted-recon; sid:200052132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsoiesiver.o.tncjmu.top"; classtype:attempted-recon; sid:200052133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsvoiceeesiver.cea.edtsiu.top"; classtype:attempted-recon; sid:200052134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsvoiceeesiver.cea.tncjmu.top"; classtype:attempted-recon; sid:200052135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsvoieesiver.oea.edtsiu.top"; classtype:attempted-recon; sid:200052136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visacsvoieesiver.oea.tncjmu.top"; classtype:attempted-recon; sid:200052137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevcscoeissiver.c.edtsiu.top"; classtype:attempted-recon; sid:200052138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevcscoeissiver.c.tncjmu.top"; classtype:attempted-recon; sid:200052139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevcsoissiver.o.edtsiu.top"; classtype:attempted-recon; sid:200052140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevcsoissiver.o.tncjmu.top"; classtype:attempted-recon; sid:200052141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevescseiver.c.edtsiu.top"; classtype:attempted-recon; sid:200052142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevescseiver.c.tncjmu.top"; classtype:attempted-recon; sid:200052143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevessiver.a.edtsiu.top"; classtype:attempted-recon; sid:200052144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevessiver.a.tncjmu.top"; classtype:attempted-recon; sid:200052145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvcsceoeissiver.cea.edtsiu.top"; classtype:attempted-recon; sid:200052146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvcsceoeissiver.cea.tncjmu.top"; classtype:attempted-recon; sid:200052147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvcsoeissiver.oea.edtsiu.top"; classtype:attempted-recon; sid:200052148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvcsoeissiver.oea.tncjmu.top"; classtype:attempted-recon; sid:200052149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvesceseiver.cea.edtsiu.top"; classtype:attempted-recon; sid:200052150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvesceseiver.cea.tncjmu.top"; classtype:attempted-recon; sid:200052151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvesseiver.aea.edtsiu.top"; classtype:attempted-recon; sid:200052152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visaevvesseiver.aea.tncjmu.top"; classtype:attempted-recon; sid:200052153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavesicveer.c.edtsiu.top"; classtype:attempted-recon; sid:200052154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavesicveer.c.tncjmu.top"; classtype:attempted-recon; sid:200052155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavesiver.a.edtsiu.top"; classtype:attempted-recon; sid:200052156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavesiver.a.tncjmu.top"; classtype:attempted-recon; sid:200052157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavevsiceveer.cea.edtsiu.top"; classtype:attempted-recon; sid:200052158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavevsiceveer.cea.tncjmu.top"; classtype:attempted-recon; sid:200052159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavevsiveer.aea.edtsiu.top"; classtype:attempted-recon; sid:200052160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"visavevsiveer.aea.tncjmu.top"; classtype:attempted-recon; sid:200052161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visecai.vscsaeiso.mzztru.top"; classtype:attempted-recon; sid:200052162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viseioscai.vscsaieeicso.uqmzwu.top"; classtype:attempted-recon; sid:200052163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viseoscai.vscsaeeicso.uqmzwu.top"; classtype:attempted-recon; sid:200052164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ddglku.top"; classtype:attempted-recon; sid:200052165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.ikmqvu.top"; classtype:attempted-recon; sid:200052166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevaccvncvsa.viveseevcavrenvci.xmvywu.top"; classtype:attempted-recon; sid:200052167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.ddglku.top"; classtype:attempted-recon; sid:200052168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevacsrccvncvsa.viveaseroseevcavrenvci.xmvywu.top"; classtype:attempted-recon; sid:200052169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ddglku.top"; classtype:attempted-recon; sid:200052170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.ikmqvu.top"; classtype:attempted-recon; sid:200052171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevccsrvcnvsa.vivsvcaseroveeenavci.xmvywu.top"; classtype:attempted-recon; sid:200052172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ddglku.top"; classtype:attempted-recon; sid:200052173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvevcvcnvsa.vivsvcveeenavci.ikmqvu.top"; classtype:attempted-recon; sid:200052174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ddglku.top"; classtype:attempted-recon; sid:200052175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.ikmqvu.top"; classtype:attempted-recon; sid:200052176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssacsrvccacsevi.vieaseroveeevacrvnvsa.xmvywu.top"; classtype:attempted-recon; sid:200052177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ddglku.top"; classtype:attempted-recon; sid:200052178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.ikmqvu.top"; classtype:attempted-recon; sid:200052179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssavccacsevi.vieveeevacrvnvsa.xmvywu.top"; classtype:attempted-recon; sid:200052180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssvccasevi.vivevceevnavsa.ddglku.top"; classtype:attempted-recon; sid:200052181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssvccasevi.vivevceevnavsa.ikmqvu.top"; classtype:attempted-recon; sid:200052182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssvccasevi.vivevceevnavsa.xmvywu.top"; classtype:attempted-recon; sid:200052183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ddglku.top"; classtype:attempted-recon; sid:200052184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.ikmqvu.top"; classtype:attempted-recon; sid:200052185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvssvcsrccasevi.vivevaseroceevnavsa.xmvywu.top"; classtype:attempted-recon; sid:200052186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ddglku.top"; classtype:attempted-recon; sid:200052187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.idenyq.top"; classtype:attempted-recon; sid:200052188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.ikmqvu.top"; classtype:attempted-recon; sid:200052189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvaccvecnvci.vieveecaaarsenvs.xmvywu.top"; classtype:attempted-recon; sid:200052190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ddglku.top"; classtype:attempted-recon; sid:200052191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.idenyq.top"; classtype:attempted-recon; sid:200052192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.ikmqvu.top"; classtype:attempted-recon; sid:200052193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvacsrccvecnvci.vieaseroveecaaarsenvs.xmvywu.top"; classtype:attempted-recon; sid:200052194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ddglku.top"; classtype:attempted-recon; sid:200052195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.idenyq.top"; classtype:attempted-recon; sid:200052196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.ikmqvu.top"; classtype:attempted-recon; sid:200052197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvccsrvcenvci.vivcaaseroaeeseanvs.xmvywu.top"; classtype:attempted-recon; sid:200052198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.ddglku.top"; classtype:attempted-recon; sid:200052199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.idenyq.top"; classtype:attempted-recon; sid:200052200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"visvsvcvcenvci.vivcaaeeseanvs.xmvywu.top"; classtype:attempted-recon; sid:200052201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivaiesvccearsio.avisevsaccovosinorri.fehvvu.top"; classtype:attempted-recon; sid:200052202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcavaesevai.sa.fnfkau.top"; classtype:attempted-recon; sid:200052203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcavaesevai.sa.pkvtcu.top"; classtype:attempted-recon; sid:200052204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcavaesevai.sa.ranzlu.top"; classtype:attempted-recon; sid:200052205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcaveaecsevai.saaa.fnfkau.top"; classtype:attempted-recon; sid:200052206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcaveaecsevai.saaa.pkvtcu.top"; classtype:attempted-recon; sid:200052207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcaveaecsevai.saaa.ranzlu.top"; classtype:attempted-recon; sid:200052208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcaveescvai.saa.fnfkau.top"; classtype:attempted-recon; sid:200052209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcaveescvai.saa.pkvtcu.top"; classtype:attempted-recon; sid:200052210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcaveescvai.saa.ranzlu.top"; classtype:attempted-recon; sid:200052211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcavesvai.s.fnfkau.top"; classtype:attempted-recon; sid:200052212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcavesvai.s.pkvtcu.top"; classtype:attempted-recon; sid:200052213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcavesvai.s.ranzlu.top"; classtype:attempted-recon; sid:200052214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivccaees.visveaaaser.wznrhu.top"; classtype:attempted-recon; sid:200052215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaevacreasecvai.saoaa.fnfkau.top"; classtype:attempted-recon; sid:200052216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaevacreasecvai.saoaa.pkvtcu.top"; classtype:attempted-recon; sid:200052217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaevacreasecvai.saoaa.ranzlu.top"; classtype:attempted-recon; sid:200052218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaevecrsavaci.soaa.fnfkau.top"; classtype:attempted-recon; sid:200052219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaevecrsavaci.soaa.pkvtcu.top"; classtype:attempted-recon; sid:200052220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaevecrsavaci.soaa.ranzlu.top"; classtype:attempted-recon; sid:200052221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceavareasecvai.sao.fnfkau.top"; classtype:attempted-recon; sid:200052222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceavareasecvai.sao.pkvtcu.top"; classtype:attempted-recon; sid:200052223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceavareasecvai.sao.ranzlu.top"; classtype:attempted-recon; sid:200052224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaversavaci.so.fnfkau.top"; classtype:attempted-recon; sid:200052225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaversavaci.so.pkvtcu.top"; classtype:attempted-recon; sid:200052226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivceaversavaci.so.ranzlu.top"; classtype:attempted-recon; sid:200052227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcsreiseecei.cvrieveiaaevesi.gelxdu.top"; classtype:attempted-recon; sid:200052228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcsreisevei.vcirveesiavesi.jwfbzu.top"; classtype:attempted-recon; sid:200052229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcsreisevei.vcirveesiavesi.retdou.top"; classtype:attempted-recon; sid:200052230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcsseceecei.viveaaesi.myxbtu.top"; classtype:attempted-recon; sid:200052231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecievei.vivesiesi.myxbtu.top"; classtype:attempted-recon; sid:200052232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreesecei.vcieeaaevesi.exmrhu.top"; classtype:attempted-recon; sid:200052233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreesecei.vcieeaaevesi.zxpdbu.top"; classtype:attempted-recon; sid:200052234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreesvei.vicvesavesi.exmrhu.top"; classtype:attempted-recon; sid:200052235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreesvei.vicvesavesi.mjijyu.top"; classtype:attempted-recon; sid:200052236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreesvei.vicvesavesi.zxpdbu.top"; classtype:attempted-recon; sid:200052237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreiseecei.cveveiaaevesi.doobbu.top"; classtype:attempted-recon; sid:200052238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreisevei.vcieesiavesi.exmrhu.top"; classtype:attempted-recon; sid:200052239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreisevei.vcieesiavesi.ptpcdu.top"; classtype:attempted-recon; sid:200052240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivcssecreisevei.vcieesiavesi.wetot.company"; classtype:attempted-recon; sid:200052241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveevaarvasecvsi.eao.fnfkau.top"; classtype:attempted-recon; sid:200052242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveevaarvasecvsi.eao.pkvtcu.top"; classtype:attempted-recon; sid:200052243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveevaarvasecvsi.eao.ranzlu.top"; classtype:attempted-recon; sid:200052244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveevavrsavsci.eo.fnfkau.top"; classtype:attempted-recon; sid:200052245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveevavrsavsci.eo.pkvtcu.top"; classtype:attempted-recon; sid:200052246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveevavrsavsci.eo.ranzlu.top"; classtype:attempted-recon; sid:200052247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveeveaacrvasecvsi.eaoaa.fnfkau.top"; classtype:attempted-recon; sid:200052248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveeveaacrvasecvsi.eaoaa.pkvtcu.top"; classtype:attempted-recon; sid:200052249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveeveaacrvasecvsi.eaoaa.ranzlu.top"; classtype:attempted-recon; sid:200052250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveeveavcrsavsci.eoaa.fnfkau.top"; classtype:attempted-recon; sid:200052251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveeveavcrsavsci.eoaa.pkvtcu.top"; classtype:attempted-recon; sid:200052252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"viveeveavcrsavsci.eoaa.ranzlu.top"; classtype:attempted-recon; sid:200052253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaavsevsi.ea.fnfkau.top"; classtype:attempted-recon; sid:200052254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaavsevsi.ea.pkvtcu.top"; classtype:attempted-recon; sid:200052255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaavsevsi.ea.ranzlu.top"; classtype:attempted-recon; sid:200052256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ddglku.top"; classtype:attempted-recon; sid:200052257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.ikmqvu.top"; classtype:attempted-recon; sid:200052258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaccsrvncvsa.vivesvaserocvrenvci.xmvywu.top"; classtype:attempted-recon; sid:200052259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevacvncvsa.vivesvcvrenvci.ikmqvu.top"; classtype:attempted-recon; sid:200052260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevacvncvsa.vivesvcvrenvci.xmvywu.top"; classtype:attempted-recon; sid:200052261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaeavcsevsi.eaaa.fnfkau.top"; classtype:attempted-recon; sid:200052262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaeavcsevsi.eaaa.pkvtcu.top"; classtype:attempted-recon; sid:200052263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaeavcsevsi.eaaa.ranzlu.top"; classtype:attempted-recon; sid:200052264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaevscvsi.eaa.fnfkau.top"; classtype:attempted-recon; sid:200052265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaevscvsi.eaa.pkvtcu.top"; classtype:attempted-recon; sid:200052266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevaevscvsi.eaa.ranzlu.top"; classtype:attempted-recon; sid:200052267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevavsvsi.e.fnfkau.top"; classtype:attempted-recon; sid:200052268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevavsvsi.e.pkvtcu.top"; classtype:attempted-recon; sid:200052269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevavsvsi.e.ranzlu.top"; classtype:attempted-recon; sid:200052270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ddglku.top"; classtype:attempted-recon; sid:200052271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.ikmqvu.top"; classtype:attempted-recon; sid:200052272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevcvcsrnvsa.vivsvcveaseronvci.xmvywu.top"; classtype:attempted-recon; sid:200052273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevcvnvsa.vivsvcvenvci.ikmqvu.top"; classtype:attempted-recon; sid:200052274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivevcvnvsa.vivsvcvenvci.xmvywu.top"; classtype:attempted-recon; sid:200052275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivosaaseei.vicervcosier.jwfbzu.top"; classtype:attempted-recon; sid:200052276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacsocieesesia.c.edtsiu.top"; classtype:attempted-recon; sid:200052277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacsocieesesia.c.tncjmu.top"; classtype:attempted-recon; sid:200052278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacsoiesesia.o.edtsiu.top"; classtype:attempted-recon; sid:200052279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacsoiesesia.o.tncjmu.top"; classtype:attempted-recon; sid:200052280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacvsoceieesesia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacvsoceieesesia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacvsoieesesia.oea.edtsiu.top"; classtype:attempted-recon; sid:200052283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsacvsoieesesia.oea.tncjmu.top"; classtype:attempted-recon; sid:200052284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavesceesia.c.edtsiu.top"; classtype:attempted-recon; sid:200052285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavesceesia.c.tncjmu.top"; classtype:attempted-recon; sid:200052286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavesesia.a.edtsiu.top"; classtype:attempted-recon; sid:200052287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavesesia.a.tncjmu.top"; classtype:attempted-recon; sid:200052288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavvesceeesia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavvesceeesia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavveseesia.aea.edtsiu.top"; classtype:attempted-recon; sid:200052291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivsavveseesia.aea.tncjmu.top"; classtype:attempted-recon; sid:200052292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscreisveci.vcirveseiaveesi.jwfbzu.top"; classtype:attempted-recon; sid:200052293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscreisveci.vcirveseiaveesi.retdou.top"; classtype:attempted-recon; sid:200052294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscsecreisveci.vcieseiaveesi.exmrhu.top"; classtype:attempted-recon; sid:200052295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscsecreisveci.vcieseiaveesi.mjijyu.top"; classtype:attempted-recon; sid:200052296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscsecreisveci.vcieseiaveesi.wdczpu.top"; classtype:attempted-recon; sid:200052297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscsecreisvei.vicveesivesi.ppcihu.top"; classtype:attempted-recon; sid:200052298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscsecreisvei.vicveesivesi.wetot.company"; classtype:attempted-recon; sid:200052299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscsecrevseci.vicveeaveesi.zxpdbu.top"; classtype:attempted-recon; sid:200052300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivscsecrevsei.vivcsesvesi.exmrhu.top"; classtype:attempted-recon; sid:200052301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavccseoissesia.c.edtsiu.top"; classtype:attempted-recon; sid:200052302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavccseoissesia.c.tncjmu.top"; classtype:attempted-recon; sid:200052303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavcsoissesia.o.edtsiu.top"; classtype:attempted-recon; sid:200052304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavcsoissesia.o.tncjmu.top"; classtype:attempted-recon; sid:200052305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavecsesesia.c.edtsiu.top"; classtype:attempted-recon; sid:200052306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavecsesesia.c.tncjmu.top"; classtype:attempted-recon; sid:200052307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavessesia.a.edtsiu.top"; classtype:attempted-recon; sid:200052308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavessesia.a.tncjmu.top"; classtype:attempted-recon; sid:200052309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvcceseoissesia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvcceseoissesia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvcseoissesia.oea.edtsiu.top"; classtype:attempted-recon; sid:200052312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvcseoissesia.oea.tncjmu.top"; classtype:attempted-recon; sid:200052313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvecesesesia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvecesesesia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvesesesia.aea.edtsiu.top"; classtype:attempted-recon; sid:200052316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vivseavvesesesia.aea.tncjmu.top"; classtype:attempted-recon; sid:200052317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevcarvaaecsei.aao.fnfkau.top"; classtype:attempted-recon; sid:200052318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevcarvaaecsei.aao.pkvtcu.top"; classtype:attempted-recon; sid:200052319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevcarvaaecsei.aao.ranzlu.top"; classtype:attempted-recon; sid:200052320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevcvraaseci.ao.fnfkau.top"; classtype:attempted-recon; sid:200052321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevcvraaseci.ao.pkvtcu.top"; classtype:attempted-recon; sid:200052322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevcvraaseci.ao.ranzlu.top"; classtype:attempted-recon; sid:200052323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevecacrvaaecsei.aaoaa.fnfkau.top"; classtype:attempted-recon; sid:200052324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevecacrvaaecsei.aaoaa.pkvtcu.top"; classtype:attempted-recon; sid:200052325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevecacrvaaecsei.aaoaa.ranzlu.top"; classtype:attempted-recon; sid:200052326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevecvcraaseci.aoaa.fnfkau.top"; classtype:attempted-recon; sid:200052327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevecvcraaseci.aoaa.pkvtcu.top"; classtype:attempted-recon; sid:200052328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsevecvcraaseci.aoaa.ranzlu.top"; classtype:attempted-recon; sid:200052329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsiecaiecsn.viscaieaeeivsei.strvlu.top"; classtype:attempted-recon; sid:200052330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ddglku.top"; classtype:attempted-recon; sid:200052331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssavcacsevi.vievevcrvnvsa.ikmqvu.top"; classtype:attempted-recon; sid:200052332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssavcacsevi.vievevcrvnvsa.xmvywu.top"; classtype:attempted-recon; sid:200052333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ddglku.top"; classtype:attempted-recon; sid:200052334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.ikmqvu.top"; classtype:attempted-recon; sid:200052335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssavcsrcacsevi.vieveaserovcrvnvsa.xmvywu.top"; classtype:attempted-recon; sid:200052336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssvcasevi.vivevcvnvsa.ikmqvu.top"; classtype:attempted-recon; sid:200052337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssvcasevi.vivevcvnvsa.xmvywu.top"; classtype:attempted-recon; sid:200052338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ddglku.top"; classtype:attempted-recon; sid:200052339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.ikmqvu.top"; classtype:attempted-recon; sid:200052340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivssvccsrasevi.vivevcvaseronvsa.xmvywu.top"; classtype:attempted-recon; sid:200052341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ddglku.top"; classtype:attempted-recon; sid:200052342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.idenyq.top"; classtype:attempted-recon; sid:200052343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.ikmqvu.top"; classtype:attempted-recon; sid:200052344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvaccsrvecnvci.vievcaseroaarsenvs.xmvywu.top"; classtype:attempted-recon; sid:200052345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ddglku.top"; classtype:attempted-recon; sid:200052346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvacvecnvci.vievcaarsenvs.idenyq.top"; classtype:attempted-recon; sid:200052347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvacvecnvci.vievcaarsenvs.ikmqvu.top"; classtype:attempted-recon; sid:200052348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvacvecnvci.vievcaarsenvs.xmvywu.top"; classtype:attempted-recon; sid:200052349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcavaesei.aa.fnfkau.top"; classtype:attempted-recon; sid:200052350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcavaesei.aa.pkvtcu.top"; classtype:attempted-recon; sid:200052351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcavaesei.aa.ranzlu.top"; classtype:attempted-recon; sid:200052352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvceavcaesei.aaaa.fnfkau.top"; classtype:attempted-recon; sid:200052353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvceavcaesei.aaaa.pkvtcu.top"; classtype:attempted-recon; sid:200052354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvceavcaesei.aaaa.ranzlu.top"; classtype:attempted-recon; sid:200052355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcevacsei.aaa.fnfkau.top"; classtype:attempted-recon; sid:200052356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcevacsei.aaa.pkvtcu.top"; classtype:attempted-recon; sid:200052357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcevacsei.aaa.ranzlu.top"; classtype:attempted-recon; sid:200052358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvasei.a.fnfkau.top"; classtype:attempted-recon; sid:200052359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvasei.a.pkvtcu.top"; classtype:attempted-recon; sid:200052360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvasei.a.ranzlu.top"; classtype:attempted-recon; sid:200052361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ddglku.top"; classtype:attempted-recon; sid:200052362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.ikmqvu.top"; classtype:attempted-recon; sid:200052363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvcsrenvci.vivcaasaseroenvs.xmvywu.top"; classtype:attempted-recon; sid:200052364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvenvci.vivcaasenvs.ddglku.top"; classtype:attempted-recon; sid:200052365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvenvci.vivcaasenvs.idenyq.top"; classtype:attempted-recon; sid:200052366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvenvci.vivcaasenvs.ikmqvu.top"; classtype:attempted-recon; sid:200052367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvcvenvci.vivcaasenvs.xmvywu.top"; classtype:attempted-recon; sid:200052368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uwbrvz8quj/page1.php"; endswith; nocase; http.host; content:"vivsvecisecsn.viscaseecvsvei.strvlu.top"; classtype:attempted-recon; sid:200052369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?cc_key=&amp\;post=%7brandom_number_5%7d_1&amp\;to=http://18.118.206.123/index.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=3efeh"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=dvexh"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=fhqja"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=zzbtj"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=ccugr"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2f35.229.41.22?key=n4jki,email=email@icloud.com&post=11231_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2fhumanity06.com%2fwp-content%2fthemes%2fapi.html"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2firsgov-refundprogram.online%2f%3fverify"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http%3a%2f%2frois-zkxzx.run.goorm.io/safe-browser/"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://168.61.163.101/index.html?key=oppca,email=irs.government@icloud.com&amp\;post=63156_1&amp\;cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.1.185.241/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.109.41.124?key=a0j3o,email=kminella@icloud.com&post=13847_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.109.41.124?key=mk9z6,email=lupekerber@yahoo.com&post=82701_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.110.189.189?key=e86i8,email=email@icloud.com&post=52917_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.110.189.189?key=ujas3,email=email@icloud.com&post=95993_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.110.73.46?key=rpgvc,email=email@icloud.com&post=35214_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=email@icloud.com&post=67925_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=kminella@icloud.com&post=67925_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.121.2.22/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.203.161.161?key=bekja,email=kimberlidismuke13@icloud.com&post=98876_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.203.161.161?key=dlqg7,email=email@icloud.com&post=88353_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.203.161.161?key=ffiqb,email=email@icloud.com&post=65185_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.203.161.161?key=tqayb,emai=email@icloud.com&post=01286_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.203.161.161?key=wuhq2,email=mariareyes7826@icloud.com&post=15402_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.213.164.95?key=jdlwh"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.213.46.217?key=bgckvctutk"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.213.49.9/?key=voqj5,email=durincat8@icloud.com&post=19202_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.222.3.107?key=rtudqaeeba"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.222.3.107?key=skfefvlukk"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.222.35.247?key=ibmwvwnklu,email=n9kasqyl@icloud.com&amp\;post=98260790_1&amp\;cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.222.35.247?key=iguhqpukhn"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.229.141.100/index.html?key=oppca,email=irs.government@icloud.com&amp\;post=63156_1&amp\;cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.230.50.243?key=uyffw,email=email@sbcglobal.net&post=87074_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.239.152.26/index.html?key=oppca,email=irs.government@icloud.com&post=63156_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.39.209.90?key=hcirs,email=email@icloud.com&post=94243_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.40.64.158?key=0uqyr,email=email@yahoo.com&post=94707_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.40.64.158?key=sbjxm,email=email@yahoo.com&post=31496_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.68.105.113?key=gojjs,email=email@icloud.com&post=65211_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.68.105.113?key=hiumv,email=golder.cm@icloud.com&post=58507_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.68.105.113?key=ihwbn,email=email@icloud.com&post=01341_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.68.105.113?key=qba0d,email=email@icloud.com&post=85453_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.70.19.11?key=ejkco,email=dlighted@icloud.com&post=16970_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.70.19.11?key=nn7jd,email=email@icloud.com&post=71936_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.70.19.11?key=pcah4,email=email@icloud.com&post=58184_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.74.246.12?key=1g3zv,email=email@icloud.com&post=71118_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.74.246.12?key=7opkq,email=dylanmarilyn@icloud.com&post=19298_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.74.246.12?key=bs0x8,email=email@icloud.com&post=97474_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.74.246.12?key=dtruh,email=email@icloud.com&post=48614_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.74.246.12?key=m4rhr,email=email@icloud.com&post=09923_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.77.66.21?key=nc14b,email=ebynum84@icloud.com&post=99099_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.91.205.251?key=dlykh,email=samantha.adams76@icloud.com&post=04213_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.91.205.251?key=eaw8f,email==email@icloud.com&post=12213_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://20.91.205.251?key=pj3yz,email=email@icloud.com&post=67421_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://40.117.61.134/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://40.77.6.54?key=oppca"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://40.82.145.107?key=nr1yf,email=nccollis@icloud.com&post=15853_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://40.87.142.94?key=mgpnmfsjjt"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://51.12.50.209?key=vkmgm,email=samyafinley@icloud.com&post=27530_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://52.14.205.198?key=qu11c"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://52.179.20.96?key=8s5yy,email=jhnpaul@icloud.com&post=99298_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=http://52.179.20.96?key=pjway,email=tkey8@icloud.com&post=45230_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fartesvladshiola.com%2f.well-known%2fpki-validation%2fsondu%2fkomuter&post=696668869_33&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fbsa-liepaja.lv%2fimages%2fdocuments%2fmake%2fson&post=696668869_25&cc_key=/?idasjdaisd"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fcarinsurancequotetoday.com%2fwp-includes%2fsodium_compat%2fnamespaced%2fcor&post=696668869_16&cc_key=/?axnbyspd-brjusp18076006"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fcarinsurancequotetoday.com%2fwp-includes%2fsodium_compat%2fnamespaced%2fcor&post=696668869_16&cc_key=/?efhooiun-brjusp89207915"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fedelwiral.info%2fwp-includes%2fsodium_compat%2fnamespaced%2fcore%2fcurve25519%2fgose&post=696668869_17&cc_key=/?xjxiixmi-suirs70143986"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2femtowersgroup.com%2fwp-admin%2fimages%2fgrak%2fsus&post=696668869_19&cc_key=/?uccxgwww-kampo32395997"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/hwrgpnzn/tmkmvvztsvg"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/odmibxru/tsiqjhleqcj"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2frdx-federal.com%2f&post=710109641_2"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2frdx-irsfederal.com%2findex.html&post=710109641_5"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2ftempt.lk%2fhosr&post=696668869_21&cc_key=/?hbijqrvf-mom71222564"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https%3a%2f%2fwolffun.net%2fwp-includes%2fwidgets%2fxloa%2fclose%2f&post=696668869_14&cc_key=/?xoxlosml-usa34359382"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://amrutimba.com/css/api.php?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://bodycare.co.za/addtlz/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://dashtipour.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://efecsos.com/wp-content/acay-baru.php?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://efecsos.com/wp-content/acayganteng88.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://efecsos.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://forextradingtruth.com/wp-includes/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://gociate.com/wp-admin/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://gociate.com/wp-content/acayganz.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://greyhillconsulting.com/assets/css/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://hayvanatbahcesi.net/wp-admin/includes/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://jindalbuildcon.com/wp-includes/assets/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://leviathandesign.com.au/assets/img/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://leviathandesign.com.au/assets/include/apiacy.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://maxvaloan.com/wp-includes/js/api-gantengcuy.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://naturesbuffet.co.in/api-lrsbaru.html?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://newsaya.com/wp-includes/css/apiwixxx.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://pyxcapital.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=b2tiu,email=email@email.com&post=13135_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=jhtuf,email=email@email.com&post=05998_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=jhtuf,email=maxwellseard@icloud.com&post=05998_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=p2znu,email=carlosg918@icloud.com&post=87241_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=p2znu,email=email@email.com&post=87241_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=qrcv6,email=email@email.com&post=91315_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=uocle,email=email@email.com&post=58150_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-irsusagov.com?key=xnxyp,email=email@email.com&post=84575_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=nfhjn,email=email@email.com&post=47493_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=zza21,email=email@email.com&post=39704_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://senvang.com.au/wp-includes/css/apikeren.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://serv.jembudirenkgk.com/sple/sadjhfjhcuic?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://srv.remaikerea.com/apa/wisedanlah?key=dvnd3,email=apohlmann@icloud.com&post=60667_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://themagone.com/wp-admin/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://twitter.com?w5htjopplcko0cun0kky&cc_key=?trackingid=o9xc3cyu&signature=newsletter"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://wpcdecor.com/wp-includes/acy-ling.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.altawthiqalamthal.com/wp-admin/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.ciudadanoseguro.cl/wp-admin/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.ciudadanoseguro.cl/wp-content/themes/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.globeffect.com/wp-content/themes/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.marmum.ae/css/?key=yihv"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.mathelin-teinture-tissus.com/assets/include/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.newlifenursery.com/assets/rdt.html?key=lwhi1"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.pawcz.cn/wp-includes/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.pawcz.cn/wp-includes/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.thaitheparos.com/assets/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://www.ulicapolska.pl/public/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/away.php?to=https://yavuzhanotel.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key"; endswith; nocase; http.host; content:"vk.com"; classtype:attempted-recon; sid:200052489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsaaiaaececori.vsavcarveoia.hjjpju.top"; classtype:attempted-recon; sid:200052490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsacaaeeeicecevi.viaaescaarsvcrorai.retdou.top"; classtype:attempted-recon; sid:200052491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsacaseeeicecevi.viaccaearsavcrcorrai.jbdwnu.top"; classtype:attempted-recon; sid:200052492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsacaseeeicscori.vsaaevcaarsvcrriai.jwfbzu.top"; classtype:attempted-recon; sid:200052493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsaiaaceori.vsvcaveoi.retdou.top"; classtype:attempted-recon; sid:200052494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsaieevcsaservi.visavacvcsrr.jwfbzu.top"; classtype:attempted-recon; sid:200052495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vscaoseaaaeeri.vsaccavaeooair.retdou.top"; classtype:attempted-recon; sid:200052496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vscaoseaaaseri.vsaccavaeorair.hjjpju.top"; classtype:attempted-recon; sid:200052497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsccaoseeaacaseri.vsaccavsaerorairi.retdou.top"; classtype:attempted-recon; sid:200052498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsccaseeaicaseri.vsaccaeavsaaercrairi.jbdwnu.top"; classtype:attempted-recon; sid:200052499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsioscaeevi.viccavcoorr.nmmuu.top"; classtype:attempted-recon; sid:200052500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsoicseavcia.c.edtsiu.top"; classtype:attempted-recon; sid:200052501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsoicseavcia.c.tncjmu.top"; classtype:attempted-recon; sid:200052502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsoisavcia.o.edtsiu.top"; classtype:attempted-recon; sid:200052503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsoisavcia.o.tncjmu.top"; classtype:attempted-recon; sid:200052504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsvoiceseavcia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsvoiceseavcia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsvoiseavcia.oea.edtsiu.top"; classtype:attempted-recon; sid:200052507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvecsvoiseavcia.oea.tncjmu.top"; classtype:attempted-recon; sid:200052508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevcscoeiasvcia.c.edtsiu.top"; classtype:attempted-recon; sid:200052509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevcscoeiasvcia.c.tncjmu.top"; classtype:attempted-recon; sid:200052510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevcsoiasvcia.o.edtsiu.top"; classtype:attempted-recon; sid:200052511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevcsoiasvcia.o.tncjmu.top"; classtype:attempted-recon; sid:200052512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevsacsevcia.c.edtsiu.top"; classtype:attempted-recon; sid:200052513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevsacsevcia.c.tncjmu.top"; classtype:attempted-recon; sid:200052514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevsasvcia.a.edtsiu.top"; classtype:attempted-recon; sid:200052515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevsasvcia.a.tncjmu.top"; classtype:attempted-recon; sid:200052516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvcsceoeiasvcia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvcsceoeiasvcia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvcsoeiasvcia.oea.edtsiu.top"; classtype:attempted-recon; sid:200052519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvcsoeiasvcia.oea.tncjmu.top"; classtype:attempted-recon; sid:200052520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvsacesevcia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvsacesevcia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvsasevcia.aea.edtsiu.top"; classtype:attempted-recon; sid:200052523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsveevvsasevcia.aea.tncjmu.top"; classtype:attempted-recon; sid:200052524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsavcceia.c.edtsiu.top"; classtype:attempted-recon; sid:200052525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsavcceia.c.tncjmu.top"; classtype:attempted-recon; sid:200052526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsavcia.a.edtsiu.top"; classtype:attempted-recon; sid:200052527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsavcia.a.tncjmu.top"; classtype:attempted-recon; sid:200052528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsvavceceia.cea.edtsiu.top"; classtype:attempted-recon; sid:200052529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsvavceceia.cea.tncjmu.top"; classtype:attempted-recon; sid:200052530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsvavceia.aea.edtsiu.top"; classtype:attempted-recon; sid:200052531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/k7oimyjheu/page1.php"; endswith; nocase; http.host; content:"vsvevsvavceia.aea.tncjmu.top"; classtype:attempted-recon; sid:200052532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8jdu/sb6/index.php?_&amp\;_"; endswith; nocase; http.host; content:"wallieget.com"; classtype:attempted-recon; sid:200052533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8jdu/sb6/index.php?_&amp\;_&amp\;_"; endswith; nocase; http.host; content:"wallieget.com"; classtype:attempted-recon; sid:200052534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/o2/a/f5s4y/0"; endswith; nocase; http.host; content:"warriorplus.com"; classtype:attempted-recon; sid:200052535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/explorer"; endswith; nocase; http.host; content:"webdeficonnect.com"; classtype:attempted-recon; sid:200052536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d"; endswith; nocase; http.host; content:"webuyworkshopequipment.com"; classtype:attempted-recon; sid:200052537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d/"; endswith; nocase; http.host; content:"webuyworkshopequipment.com"; classtype:attempted-recon; sid:200052538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/company/banco-original"; endswith; nocase; http.host; content:"weps.org"; classtype:attempted-recon; sid:200052539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@bt_home"; endswith; nocase; http.host; content:"withkoji.com"; classtype:attempted-recon; sid:200052540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@bt_internet"; endswith; nocase; http.host; content:"withkoji.com"; classtype:attempted-recon; sid:200052541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@bt_service_alert."; endswith; nocase; http.host; content:"withkoji.com"; classtype:attempted-recon; sid:200052542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@bt_teem"; endswith; nocase; http.host; content:"withkoji.com"; classtype:attempted-recon; sid:200052543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@bt_update"; endswith; nocase; http.host; content:"withkoji.com"; classtype:attempted-recon; sid:200052544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@bt_upgrade"; endswith; nocase; http.host; content:"withkoji.com"; classtype:attempted-recon; sid:200052545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@btinternet"; endswith; nocase; http.host; content:"withkoji.com"; classtype:attempted-recon; sid:200052546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/@yahoo2022"; endswith; nocase; http.host; content:"wlo.link"; classtype:attempted-recon; sid:200052547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/testing02"; endswith; nocase; http.host; content:"wow.link"; classtype:attempted-recon; sid:200052548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/aenzov.html"; endswith; nocase; http.host; content:"xerclinexz.co.vu"; classtype:attempted-recon; sid:200052549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/#redacted@abuse.ionos.com"; endswith; nocase; http.host; content:"ykaokckqtvympxax-dot-mb0d-idth0-us-emb0.ue.r.appspot.com"; classtype:attempted-recon; sid:200052550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/#test@test.com"; endswith; nocase; http.host; content:"zi0034034323.web.app"; classtype:attempted-recon; sid:200052551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/index.html#a@b.com"; endswith; nocase; http.host; content:"zimbra03999323.fra1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200052552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/forms/?serviceurl=/qudustemitope455/form/signinyourbtaccountcorrectly/share"; endswith; nocase; http.host; content:"zoho.com"; classtype:attempted-recon; sid:200052553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/efrrqedv9fec#michael@.yorku.ca"; endswith; nocase; http.host; content:"zpr.io"; classtype:attempted-recon; sid:200052554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gn8bkuunkc6m"; endswith; nocase; http.host; content:"zpr.io"; classtype:attempted-recon; sid:200052555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kms8u47zlxwk"; endswith; nocase; http.host; content:"zpr.io"; classtype:attempted-recon; sid:200052556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mxvzwlcdizyq"; endswith; nocase; http.host; content:"zpr.io"; classtype:attempted-recon; sid:200052557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nckeqquhrpuf"; endswith; nocase; http.host; content:"zpr.io"; classtype:attempted-recon; sid:200052558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/uyydv5mqujps"; endswith; nocase; http.host; content:"zpr.io"; classtype:attempted-recon; sid:200052559; rev:1;)